last executing test programs: 21m29.825828226s ago: executing program 4 (id=3538): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 21m29.628454334s ago: executing program 4 (id=3540): r0 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc0485510, &(0x7f0000000000)={0xfffffff6, 0x4, [0x2]}) 21m28.9926678s ago: executing program 4 (id=3544): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r2, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000007c0)=0x57, 0x4) recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4, 0x2}, 0x10) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_setup(0x1fcb, &(0x7f0000000080)={0x0, 0x8f50, 0x0, 0xfffffffe}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2, 0x1, 0x9, 0x0, 0x7, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d4, 0x2, 0x8, 0xd0, 0x3, 0xe0000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x73}, @sadb_x_nat_t_type={0x1, 0x14, 0xe9}]}, 0x38}}, 0x2400c040) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x4000)=nil, 0x4000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) 21m28.563637502s ago: executing program 4 (id=3545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000f1000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003240001"], 0x140}}, 0x0) 21m28.267754325s ago: executing program 4 (id=3546): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$l2tp6(0xa, 0x2, 0x73) socket(0x80000000000000a, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$netlink(0x10, 0x3, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB], 0x20) 21m27.943788562s ago: executing program 4 (id=3547): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac054b02000000022400010000300009040000010300010009210000000133383af8f4b56f22450009055d4f12b72ebcb9b900000000351e4bf8e0595185a0f19d1777cb81a87e93ba7737be7410beb3d9205bf6292acb76886c5d9e38db8e34e33297c94cc7b8d6234b37aff0d1"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000145000000450ef9d9855d539b05fb0f4526c992368edc697a47e365f91576f85e877a54394e"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f0000000000)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x18) 21m12.799807431s ago: executing program 32 (id=3547): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac054b02000000022400010000300009040000010300010009210000000133383af8f4b56f22450009055d4f12b72ebcb9b900000000351e4bf8e0595185a0f19d1777cb81a87e93ba7737be7410beb3d9205bf6292acb76886c5d9e38db8e34e33297c94cc7b8d6234b37aff0d1"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000145000000450ef9d9855d539b05fb0f4526c992368edc697a47e365f91576f85e877a54394e"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f0000000000)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x18) 11.97618334s ago: executing program 0 (id=8373): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @multicast1, 0x1c, 0x14}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r3, 0x80000}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x84, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@multicast2, 0x4e20, 0x2, 0xa, 0x80032d58, 0x12d5c}}, 0x44) write$cgroup_int(r6, &(0x7f0000000040)=0x40000000000008ff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x22, 0x4, 0x3, 0x7, 0x88, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x6, [{@private=0xa010100, 0xbcc}]}, @ssrr={0x89, 0x13, 0x8, [@rand_addr=0x64010100, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ssrr={0x89, 0x17, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @empty]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x8, [0x8]}, @end, @ssrr={0x89, 0x1f, 0xf6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @empty, @local]}, @generic={0x44, 0x3, "1b"}, @timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x8, [{@private=0xa010101, 0x5}]}]}}}}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netpci0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x5, 0x3ff, 0xe, 0x6, 0x7, 0x1, 0x6, 0xd38}}) openat$vcsa(0xffffff9c, &(0x7f0000000380), 0x200, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x46, &(0x7f0000000080)=0xe3eb, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000a00000000000036222b2354", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.453521724s ago: executing program 0 (id=8375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x100, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000300), 0x6, 0x149103) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x80000001, 0x5, 0x4, 0x11400, 0x5, {}, {0x5, 0xc, 0x20, 0xa, 0x7, 0xff, "d766cd66"}, 0x2fe9, 0x3, {&(0x7f0000000280)=[{0x3, 0x2, {0x6}, 0x80000000}, {0x2, 0xc, {0x8}, 0x4753}]}, 0x85}) r4 = gettid() sched_getattr(r4, &(0x7f0000000840)={0x38}, 0x38, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$nci(r5, &(0x7f0000000880)=""/4096, 0x1000) r6 = socket(0x18, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba247886a9291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e3364871ee77ba64ae799a29d42c4365f8b9928eb15a7523f43020d9803060c8221d4d8f691ac14187fa7fe929eada4e16ac2eaef502c9912c59bc1f461aa032057030e4f8fa907f80b40638c022cf66b16ca7a05c35cc075ba7c93d6556c3e736a16f24f4561115962be30c4d6a248df33862d98e3b802f20ecd8348dce1149f0d11a55345a8c6410759ab7b3da2a0813df6b07385acd40a9600aa4da6eb2cc38c522bb135da7ee2c0522a4c83c97380d83c919a34fbe774744da402cff16093328e1309bbfbe881a1e9e1221a51dbef9372f0078843e95887c91fe62efc46d25fc84109f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4c040) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8, &(0x7f0000000540)=ANY=[]) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000000000001}}, 0x30) socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x200000000, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42}) 10.825393641s ago: executing program 1 (id=8377): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = openat$uhid(0xffffff9c, &(0x7f00000016c0), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000001700)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xac, 0x2, 0x7, 0x6, 0xbc, 0x9, "643f6e988d555b75abc59f7dfcd1dd78ee6f52a532541d361ee6d846c47af27d80f6930f5bc1fc133c996c117cf0292239107661545d3c4102b18c6b73cfcd8eca672e48c38b3812261ad742e6de9fb0c4ca712aacff7b8b1cff6af068aca7b3febd9a02f6049216ddca80693d1564ed18931f386ee4e9613a7f82dcbc4411972ecd9d0f86f9e9c483d879d83d1edfe30ab655f7a6fc0dc6f49391c6089558c4326afa04bd6d129850f4e2ea"}}, 0x1c4) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000640)="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", 0x5ed}], 0x2}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000000c0)={0x3, 0x4}) 10.571733367s ago: executing program 2 (id=8379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b1f20340fe0803003bd7010203010902f1ebf47665c8ef8ad4e1e11bef73efc6d7ff9c4405391a637ee329aa326d9c1c9bb676eb73f820d83929ac4a8a835540083e183da84760190ddbb1a582eddccb7c704e64a91afe0a75a58a465b05992924128293dc7236c0564b2841858e6046d1e8baea47b774bbbb3a763a739baed94af7555375c2e5ee5f0852c0bace834bd42dfd5942e2669e6581b06e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') unshare(0x22020600) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.15653079s ago: executing program 1 (id=8381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b1f20340fe0803003bd7010203010902f1ebf47665c8ef8ad4e1e11bef73efc6d7ff9c4405391a637ee329aa326d9c1c9bb676eb73f820d83929ac4a8a835540083e183da84760190ddbb1a582eddccb7c704e64a91afe0a75a58a465b05992924128293dc7236c0564b2841858e6046d1e8baea47b774bbbb3a763a739baed94af7555375c2e5ee5f0852c0bace834bd42dfd5942e2669e6581b06e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') unshare(0x22020600) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.958459997s ago: executing program 0 (id=8382): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000340)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "aaacaff6"}, @local=@item_012={0x1, 0x2, 0x8, "9e"}, @local=@item_012={0x2, 0x2, 0x1, 'b^'}, @global=@item_4={0x3, 0x1, 0x7, "42ea36cb"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x18, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x1, 0xd7, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48ce61a21edf402a"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) 8.234324618s ago: executing program 5 (id=8384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x44}}, 0x20008000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000006c0)={0x2, &(0x7f0000000500)=[{0x9, 0xa, 0xc, 0x8}, {0x6, 0x2, 0x3, 0x7}]}, 0x8) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x86}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x95}]}, 0x2c}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) lsetxattr$security_evm(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)=@v1={0x2, "443aa6678093f5aed7"}, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r6, 0x0, 0x0, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="599cd37b5a2b99c3ea9bb4dbd71cffcbbc44f81caacbf923dcc1f7446fddfb6b5429c8b3587cd6cbf290421345e7b63de122edf2ffbddff00c5cdeb62deb"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000005540)={0x1, 0x0, [{0xd, 0xffffffff, 0x8, 0x54, 0x10000}]}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046}) syz_emit_ethernet(0xd7, &(0x7f00000007c0)={@broadcast, @local, @void, {@generic={0x600, "a0ca6bcd06104ffa44ab2bd41ec0e6f6fe9b153f92e4d875e22b0636d5cd6bd736534fc91c1d1d12aa15e46278979dea564d05abb05ede80701fcc028a9689cff9e0f736bf825f4655cd8c21422206e8f451e8251a306ce6bc95736caca760399130c2de73f2bef86b96bfd789d17e45d6b49831cf1f0a3d8fa00f990f3a7315a83c50b0800a694b2ed6774f7a1f2e920fcca90ba243d3be8f5f89255718779e868275ee7f488aa533547ef819329d0dadcf782a29c55a5d9bdb211533cabd6b34cfcdc9595a825479"}}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000024c0)={0x62c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.[}P\x96\\\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x79fd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',G[]:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%+$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "f461426df57d32fd750a4b31ae1f07c2eb926fda38800f902ae72272467eca1842ce67b0e0ab8d16ad46"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "651e777efd705d6280d28000aba58f658b53d87756e3f8715f666c72a0769aca699020b8e7e307294d689a3c0c4f2aac51618b57a20cb605931028d6d47de5efe19d63d5c328f86d0e14394ce2c02e8dda5bf16947600e7e3a98dfe264cf66c20ebb8065411fbc71c98fdcb010635d29b533e88865418cc5fdb0c7a5d3a37292da220d4f73ab54b9e1a9d4860a850ab4b0f0c0fc7aad0e69335dd62811c41db4c12448cf4ac35fa7ec82ddb7943ec50813c12bccd51350cb840f95de0e7819c1ac790ce65fa6c13eafdb767397a6e11024da92d68d4b3f"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',&[\xba\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '}&%{^^-%,\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ':&#]\'@-:-\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2a5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbd81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x250, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "645172aeec5284f043a6e89b0de6aa42cbc80b3b3f61c2033bb37997ea0d4f2637ab43fcf5ca926e25b972beacc1eee1a6a43ca9a354640accf74b7fee61d50071c3b9d9ae9ce641e420defa52a0a2e2aa0070771314c5630e29fef7a63a8f1c26871c7bc4d06164c2de2d509e679dfbeac3c6a51ab9552ebaf37c027edf38bfdcc89f4565ef37de07ddeedac678812c7edc2978382d08180fb4b19d058b0b9e32f8d6acc4df57c0d2d2f61d34e3035c7acfb826ec4dc345"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x958}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-)\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x41, 0x2, '\x00\xc0\xbdh]\xfbw\x12\xef\t\x15\xf7\x18\xe6\xd8r\xe6\xd7\xc8\x8c\xf7\x06\xf7\x92[\x02Z\xd7\x8e\x13H(\x15\xd9\x12},\x0f\x0f\x1e\x93\xf0p\xbe\xf4\xe1E\xe6O?\x00\xda2X\xa60x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6], 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000000100000000000000000000007d0000000500080004000000"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe7, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002e80)=@delchain={0x14d4, 0x65, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xf}, {0x5, 0x6}, {0xb, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_cgroup={{0xb}, {0x1480, 0x2, [@TCA_CGROUP_ACT={0x2e8, 0x1, [@m_simple={0x158, 0x15, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x8, 0x2, 0x7, 0x100}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x0, 0x8, 0x2, 0xcdf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xa, 0x1, 0x2, 0x7}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8, 0x7, 0x1200000, 0x7}}]}, {0xb9, 0x6, "740e26333eb5b55ad0f601edff9d3cdf41e2da88ca0d9e55bf5a6ed8fd6c4ecd77a68fe7b2ddda3ef0ae19bb6aa9171b2c8cdf902adabe4a9405ee5f61df3bc514e700900060a96d6473589d8831eae3e61511396397b0723ab80a82b7feaf25b99e63a65e6b77bdaac4d4914bb801581f5558c7d7a4d8885af0409499a8e931735f2f0e179282396b3917c7a1147532d019ef467cea46aa5dad053f40d50f603e212ebac95ad1da36dd39974310c5ea4689024d89"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x90, 0x0, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1a80, 0xe, 0x3, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x37, 0x6, "ff61de1c5c8a1b1238ec3b27824777a4c4d74e1b6b6c74e5f94669b5188fc506005c805892e6e843c61cb4a3e20b196c0aeb0f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xfc, 0xe, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2f1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xebc}]}, {0xbf, 0x6, "707ad4c9c8349cac126030866145e68b74d164e65bfd03e37473049ff12b3ddf292a6c1a4f72ead3235851c7902ed16a2b972d92265cf3c64cf5a727c776a61c943adf2d3bb88740b5c4f3157b2747a50572427ea36465293e14b403edbc078120091c2309dea032e7a8d15af41729a52371dfbc6ab8ab817a909e1cf43aab51fe805220a7f5ae5bff0a1077568f7a83a17cb6af5dd116f98c1a16b1bae73600c6bf0ad46f1543febbb225e448ff69031394e3149df58ad7ed44fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_CGROUP_ACT={0x1074, 0x1, [@m_mirred={0x1070, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xafd8, 0xf, 0x5, 0x7}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x3, 0x7, 0x7, 0x400}, 0x1}}]}, {0x1004, 0x6, "04c2a332ebafd0f084e3a43b389f52d632a8866253fa3ff95da121b1f7d2ee5a5c42a027878a29d5d1fbc40deb2c8f1586bdb22666efa59c6decbc85274b04f0372bdcfbc0746439c20b1875636e5b7060ca8fd38d02dca473de7a96f9f7865d5960c386ffec9f9f21074bc3d63407a996cfb46497448bc3053e74d5e5d6233d8e0dadf7c20169eba6a6262e2a0695281450c52e39e53d668a5a20d72b729aef5fddc31f4dc00aba31d0028302b12cdb5100ee36f4ce3461a6433b818f6dc7ae39986c59268967043ec2f44a3282f4dfe4eb9376b8ff5e6efd6898cc61bc23020e17fefcdef4b6d8832bc62b708f8369aa4e577cc7778f05d5a5bbc5ef496ad76c5e91feb372966e4de1af6cfbe66ef752ea4e17044f952bed87c619ae3d3e43026f87af8cbf158e6c4774450949997e882eaccbbeb51d5032c5c210029353578c2dda4660451ce155f42d724a1a6180187fd0e16d03f3089d283457891872492d684cb0dda925e6831310623eca517a748306e7f8dea80a58cd88c5537551fbe34221b2e4ea6532b9b39a74e0f64e79cd09914f7379b1c6bdbd9fb24941b74f0f4a518bee44baad7bcd59db895157e3eec8e1d7b430d4a8afbca8efc7003f91d36a973def636f50ab4ec868a0e1ae202932fa8fa6b5a4f2173500beb7d84fcdff4e4d2a98b21c44a9da4da2b1388c3bbf2e083eae05409e973f11c2b569d569ebd657163eadb05b79ed57f85b56c857d6d2c6f5dd92b9b8d40aaf4663422b0691fc678afe106c860aa38959b3dadf42dc8b18df9662f0046f2aeb49c281f0b8d58ea4ef7eafd3f00b2961738e6c99ab2d1a667814075e62e4ae90e45bdf276542bcb1bc913df377ec42636df6dbeea4f2b3ca9faa1ca38287a5c407342d24aebc14ab8d7121b47a061cda74f1e38bd7b9966887a18a87d21f7539c1c0e5e785a5aa0452c3d7b274d2d5320321a5b117199f1ede8dcae82d8bf56352d30faeb144b24fe0c353d0f6affa807f24ceaad66188ce2f817a26758f1f23ae3fc31f3c2ed629bd900fa14b993e632ac54c00641dc57d8610d619a79fc9b278144b27ec18834d55feb8bf716f99c21473e145276ada0d4ce5730f569eb46fe766220502f0422ced7e4596f87ac954e2c8582110f225721f895d7f6aefa26fea15d6ddee59da88f7d34d3a733035555bd845eb9b072d0a6c660eb5a895c7ef50bcf943050abe1819ebab75ab43941a8bcbcad67a4f90d4b60c2669e0feb35b11aa341ff0147963565fc0ab0fcafbebce51ceabaddc69e06a428f72e740c82ddd07453b170593ddc9cdbe6cdcc74de884dc2165ff04768c7255b6e0509c072dbb1b93efdf7f654ffb88b3b06b419c58a21c248a23354a9947bf6c5d28c337c0d3f476ca8d18823bb319e7acdf282a9404a48d3ced45c0269d3642d65f0839f0ad6b7c9b10af6e506bcaca839474f8a53bc96b2e16b5f95a0186d3616f2e17898a14b37319910117fdaf55c3baa5671d0fc914432e35ead1d2a22337ad2d7a880bba1825215e40500bd2a6a228453c442023a2119d1c611837fd13ebd2b341f80ac5aeafd7725f43481917692f96ecbf4aa6855019d8d0b4f6aba4634ab5f3db7ecef6d06876b71ad2c778ad7384880c0fec8a76fb7c2c59fab94fc41b3ab545ad504286813b80585e1a167f7d10a13cbc49a0f168316b0bf1d02b20518b573143630486a8bcb6321db0482ecc92ff7523970938e1924a04fa182c36371106a38ccf41d34737e0d80b6974e663459dabb1b7804d8323810adc3ea1bacc5562eb54e98c12e2974a12ea75e9b6a9353b3c12531d94b5afcd4dde36b3f80f89d84a784b781c72c904da1e5556c91069ae96ad58be89d5a160309977d6ca53dac8155cd3e85072055fa762e2446fd1eb91a54d58bb7c43e7dcc660e2eb4d41f2f7b4596c4a8e29206ab717f0bd855a6c76556cec0ad519b17fab28bc296e08e405d3256dab88405b04be323b419cde130ad6a4d6f007c38ee9d6a43046e39c16f37322e5ca78d0d604242c47f3c3f45090111ef23bdd8eaf46ecbe6dcfbe1445fff1f8b58ca6fb274a84f79c46d764e5a6e3fd0d3a7ed638906c3e4419292d7fee112057b6fa4c5bf6a164bac43c0133fcd4f55a7beeafb0174a1a9bdb5b272c727bb3f7f2975317004bd79baa7e81193de7c7754f8b175824bc67a1553953b062f657a642fc141afec9d691e61f39abe17b679dd69b51bd634c9a8ab37f8c4729828b23234ca157dc144a8024b6f37d6ecdbaea0fd696322bfcdda4b8a3770adc3e11c9f4cb2bb23747912b657fc23997337ec59b6143237b6c3eea512cb372f5016a1f6023661bc97c5b7e7fe3136f01159c39b0d9bd2a2cd6605673efc9599b1591bcfb116603def4a94ad26f28d95b1496c4f7679531ee3c214033c67736489ad6cca1124fedf28f06d6d7ff5401044a977e05a67eccdb40309b00918d58c124b2f3dea3f48d536333b7f18dadb68bfdfdaaceb27679b4f15ab37edf76b679a92537e1fd2a30087664301a596cc8692fc454e85bc9be23f21c03bbfc09d94b804accfcf748ce8a416cb0cf21cb5226858e61de248f5e1ff8e102c81e30404f6e4ba8701dd332956fb50e7117c42af3db390b71a7702361b952ec3af00c5568c2b646fdf16ee0451572c75b62d9b246ef912f5da97bf9ff167d452475099b84107ef7e20d2b48fd99c294b361966108a35929a835c4c74c63f43248d3bddc845ee8858a22de1cd18fb9a5c544db5bfee96e4c393ff842ca3fd6959813611f8db481e1532088ffe9052cdfc68e32ee8cb487e0a1bbc4cf991b4b2f44dfe35ad42ab743064502838a0e7c7138dea5972e65faa2fba131de64f7937a9a8ea4a129aee2c7239f887b9ee1384d77732f06c7979b60146fac701dc7e434ef2f9e6cb962e451fae48213431a8f62da20e1afbd488e854ad330d83ac88586d9fda1ba6346dd455b2b7f86ff83b2a63fc9522c1544c9c6971fcdea7cb00a916a984337a5a7d32ca3c4be716e3954fd6abc0a493c303805d2154a929dadb7c800ae133ba99e95d42c71c479c3d6a864645e20eb16ebad559234cb8f95972375143fa9bfe494c77c75498da1db96e318e93b502ca93f49f85b20550a19af3371493d4fb89910b2621865f130895c6b3c145b4df9530c791c439743036c27f07d0b7a0028eff6d3e80408d68d4bf59acb13584ee56f7164681dc3702f59eb64ef61023740acbf21f6b361a410d20e4265e9c267ffb6c073da2fb8d177b7bf226b14efa978a19e643d73635d9fff239dbb334330a3b651e0e9f779b15d5473b68ff36878a2d46f3c6c283f60833b6e80771487b32cb761f1acf7d2a4337759373185b57fcbd53a7baac4c14fd561e1e125ebd660ac6669fbbc876c83e1638a3d10f9749656ca87fc35fd1ae3d4d40a5d86e9cc0039c038ff73f8bcd0e471a5d87082949e705a61931e72656660fe4ba6958cd86a9d9b1da03924e56cef5a2d831e09f591b9ef608646eac9019a208b768ed422f095a72b3f100b935ef14607a190b11ef6d109d2035c2a6ee0419d2ebca3dea1dc09cb491f7c1ec9cf23f04027e29ed134d34357f6ee8bfce042be129029333c5d362a1a0c5b35aca36f4fa9a3da794be2f5b437a1c7fab7b8ba7de49ee9f946de362d297e05f83732f6bb4b53e29b169e05ce6d94e62ff9fc3b6bd0e4ee6d98ffa608cf11380d5a1dc57bcfe81a06b828dcdb9a29144b804e4215b0a7afa5b5bc4763719a8f1a71316d9d4515d0558a42190e4abaf6a00a80c6fbf3ec1830db24539f590d47082df31e9d599136848b86647f9e7d5a9e7842cf68244b1839d5c1b3b423282a3d3f50e31009dc102dd0100f446e4943fee256db29ae2beddb133fceea2865585b345c9f47d753773ce75d9a343c006b82d00d22c7ef6b06eed20a0cbdb7279690f5fd75d8c1a3d0e38761c09d92c694c6ab6aaabad458101deefdde128c4f520fe006f9f2f184da6783f5f746dc7d24c027dd2dcbbbe5b835c64535012e53e55e3ebb24e26d61aa63fa6ecd2c0111830ecfc57eeb5516663beafc0d7632d5b2aaa0295527d0c046f1a5d9ac6629c6c599b26af0d3bd34d2dd6db8de9c4e7458cd1cf70602371cbb9e4f2d5de5c7ae0ef3771131903b014914862ef86aef34b26f5167d539b182e080a87ef8c3dcc5368669b02f8c1dd1a5be37b73dc6714a742d43acb928a056d0cdb9a197ed30ceedec8d15b1c4f22fc8e78d7d76793f2bd1b081c3ba6566bf2561716a0a56e75d63733e0930a9a55e3d433d201ed233aff92752b47ec7a05fee9b8c42646e50d599fcf656fcc07e5630a94d24fdde3eccea7a329ac4d83df36106afa8ec3e99d3391b117b2784688058fc57189c2386ed89b81f1824356d4b97d62c984f07058a7d533f8058529e113f4c40033a174c7d2f4cddf2b6be1338b5386fbd40646d2161ae8ae2e768b8faf4834fdb03c77385fb713d21ba997698ad1ebf626d153e156f0f85d775eaa12016027c855b8764cda745266ecc7de41d9d60b28bfc66ffd664ac6b8dd3a61ea0f0797f4f86c7d414d290a42e2cfe7538d75ee61393d8f08596f57b86c16acf4ffb858a01050888c0e95e1efab2f7dac2845229a78cc13435cbdb3147bfad527eef0186c50963632e6590675da68a3adce2c8c9a2a0bc4f8e4e716a211da312b899c45c40f787977b13d84cda67059d8f8400b95d696c2781caccd10dc473042bcf75457d9215a4f12e6d78b0c3ffd8e0bc405af14cd823f16f59c541df13a173396ae03955062e9c1a7351b4581af56ef4c7ae00a1cddde043dbb688ad8b172355a4354ed0ccb4bf3142b584d4d9ed926177784721e0449845224e6bec767f2ece7464f5649b692374adcba9b9e34b4c8410704ab15d98e7dc770ba45a22934b59875cbf022f3cb28104d5c1b4a466649295532bb6b08d99ae85fb9402e93348164517c5b0e14c4852b2ed8188f9868bee4ab3e8e7ccb796b3616f4f8beef923d60a8122127bf6e7a51d430680713032fe97807e88e6289ab5cf4196e9c45be09a198007681107c4bb921e244abdf9e2855265f32d27558467a1eefe9e59346576117d2fd7a997f9324b908b732a322a8d40df4fd3797207656d76a85a685d1623f96078c480881c19c20d44087f72900ec6ad44a8a6dcc89811c94e75d771251742ecabdedf99c75b76767b61ea7e782a044c228c69a0eddb43bddd093d59468eb88f146aa8cecd50643b73a059c11605fa0cb3fd6a26e677b32d24fc58f48b98c413ab61fedac834ba6ac1636d5a4983c9459c2470519d600be7bd2a6d9e5ae7e27157f32935890beba6b62d7981e067d6a784daeef7bb58d88a626c2a1a9c8d6bd00e6f4b9a5fdcdacf3ccd6f0b968488967d8912515a9310ab17ac9f1220ac7de707465cfbfb2a59fd6d945ffd333f802d13df58979db93718df8e1a0cf46810546afcb6e73fe2859ca1f6791bb9b8a0b909f10bde63d463935039c5a8212b1306e9b337a8d897ccca1d32944440deec9b0135130ed78e84e42be71a370b546b06a4cc3f21efa0e4eb30531267f526d19f5617066063942c843aef65154ded7082df37305bce5b53f380dce11d1586e8aadced8e9a3d2616a51a8641cdfb81e53362ba2b064159c868863ef1c6e85346c4b4783edf1ea3ea42174c7a91b0edb9171569d82f83df1690bb9617ffffd16029933737c17bac5a56932caca74f55cbcb0c2043126b6923814345b7769eacfeb6816b083376d6e77e29"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_ACT={0x120, 0x1, [@m_nat={0x11c, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9e7, 0x7, 0xffffffffffffffff, 0x3, 0x6c2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x3, 0xc, 0xe}, @loopback, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d2, 0x5, 0x20000000, 0xc, 0x4}, @broadcast, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0x6, 0xffffffffffffffff, 0x3}, @loopback, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xdf, 0x3, 0x14, 0x3}, @empty, @loopback, 0xff, 0x1}}]}, {0x2c, 0x6, "569cc6ed5e029527dd1b79d8a80fe920db20ccece7fac2da0925ccf3b033660f2a6787d21329756f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x14d4}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.693667877s ago: executing program 2 (id=8387): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc3, 0x32, 0x27, 0x40, 0xe41, 0x534d, 0xbeb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x7e, 0xa, 0x6e}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000905006c34108dba4744024c732291ff90d392cacf79d94f090057184a06d6cca3447350020aa0adb6279b09cec400"/60], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) r1 = gettid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff8}, @ib={0x1b, 0x0, 0x7, {"089a8234728e9ec600000800"}, 0x0, 0x0, 0x6}}}, 0x118) tkill(r1, 0x16) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="a9342f3a4f6f9e072f54fc55158045", @ANYRES16=r0, @ANYBLOB="8936264dee12fb5b5ad0f0018d6af81d7f951b3006cc86d8f1bae7e26bb0b1ac74ce2049f89c4cd2087c48d22ca0dfeab0660e18559065aa0e17", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) shutdown(r4, 0x1) socket(0x10, 0x3, 0x5000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x822042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x9d44, 0x7, 0xfffffffffffffffe, 0x1, 0x400}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) syz_usb_connect(0x6, 0xfffffffffffffc98, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="4370bad3b9f08204ce5b5ab67481e036d255f65b3e77cdb979779a0d78c67828", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)}, {0x0}, {&(0x7f0000000540)="aeb549e84a12617b9f13e93c4f669343f597f11024d061a104aee0e4b8704453d7ea21720466ec54d642e79d5909d6a0f7b83430a12a3146eabb1f63139c90d4495ddcf44d1059f179c980efd850ba32aab8ad3aea49e52c8f6905192438c4ca7eb13314cd632af768f6", 0x6a}, {&(0x7f00000006c0)="8982e58c8e9063dbfe347ae26baa91ba6fed9305b165e33ebe1fa8aef8985ee950af5080b65629939aebaca01f49559d781675ca6c8350bda7a291d3b6a5fa", 0x3f}], 0x4, &(0x7f0000000300)}}], 0x2, 0x4000000) socket$inet_smc(0x2b, 0x1, 0x0) 6.383676188s ago: executing program 5 (id=8388): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb9}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x2a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40002, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0xc, &(0x7f00000000c0)={0x0, 0xc, 0x6c, {0x6c, 0x21, "438a672f1236e9748ad6922f1fce216a9e1a59b871a05e7e844fec9aa65879e33ec17c10852bdbf1bcae678d38652abfaf8a6df2647a18da7bf8243e971c73a13576be63587b69f13c4b1b865995e0c5adb65fcdd5188c65753f13eab531a80d35ee72907b67c749ebf9"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="00035c0000005c0362086ea5b57fb019d572c0fd52f6cfe95d9abcdd12addfb565aa6afa3e4a0e7f1bd9c5ff431ebd925c47486baaa0c1d6103c130316037d0430af89641b31d58a035095e27d9e64159ffa0817cd6fa1d954264f062bdfff78d2a0274384391cb41ca20b"]}, &(0x7f0000000480)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="003135000000683dd62af8db5a804a85f67d3f90e372da1bffbafbaf7ccf84aa9c49256ee3e2458b4dde823ef0ba660500d9b13256740869e4d4f1"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0xa1, {0x9f, "79d3f096568540f2e3e31f39a5043b2e6d597b759c31aa363165ca29627cbe7ea1facde51bb0c5e4fbd1c39ae3491b8b4cc01ffdba84fc56adda1db920908bce8cce3c60eecfc04ef113f06fa2473fe1c296d0aa44b49b2656bc1ec38fa0b41741c153610db9a3e99f179b8bd60c38b88760637424624b29e9194972fdb6602ae091d3de5d7e49f6916a5dd19738a05b7bcfac1f64996feee0acb157b6e157"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x5d}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x3}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000580)=""/163, 0x32, 0xa3, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0xffffffff}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a000100000000e4ffffff000a"], 0x24}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x893, 0x800, 0xfffffffc}) listen(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.374704215s ago: executing program 0 (id=8389): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb9}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x2a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40002, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0xc, &(0x7f00000000c0)={0x0, 0xc, 0x6c, {0x6c, 0x21, "438a672f1236e9748ad6922f1fce216a9e1a59b871a05e7e844fec9aa65879e33ec17c10852bdbf1bcae678d38652abfaf8a6df2647a18da7bf8243e971c73a13576be63587b69f13c4b1b865995e0c5adb65fcdd5188c65753f13eab531a80d35ee72907b67c749ebf9"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="00035c0000005c0362086ea5b57fb019d572c0fd52f6cfe95d9abcdd12addfb565aa6afa3e4a0e7f1bd9c5ff431ebd925c47486baaa0c1d6103c130316037d0430af89641b31d58a035095e27d9e64159ffa0817cd6fa1d954264f062bdfff78d2a0274384391cb41ca20b"]}, &(0x7f0000000480)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="003135000000683dd62af8db5a804a85f67d3f90e372da1bffbafbaf7ccf84aa9c49256ee3e2458b4dde823ef0ba660500d9b13256740869e4d4f1"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0xa1, {0x9f, "79d3f096568540f2e3e31f39a5043b2e6d597b759c31aa363165ca29627cbe7ea1facde51bb0c5e4fbd1c39ae3491b8b4cc01ffdba84fc56adda1db920908bce8cce3c60eecfc04ef113f06fa2473fe1c296d0aa44b49b2656bc1ec38fa0b41741c153610db9a3e99f179b8bd60c38b88760637424624b29e9194972fdb6602ae091d3de5d7e49f6916a5dd19738a05b7bcfac1f64996feee0acb157b6e157"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x5d}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x3}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000580)=""/163, 0x32, 0xa3, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0xffffffff}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a000100000000e4ffffff000a"], 0x24}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x893, 0x800, 0xfffffffc}) listen(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.934341693s ago: executing program 1 (id=8390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r0, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x7, 0x800, @l2={'eth', 0x3a, 'vcan0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4002}, 0x40) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 5.798454262s ago: executing program 1 (id=8391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x480}}}}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x5c}}, 0x0) (fail_nth: 19) 5.501181885s ago: executing program 1 (id=8392): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000340)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "aaacaff6"}, @local=@item_012={0x1, 0x2, 0x8, "9e"}, @local=@item_012={0x2, 0x2, 0x1, 'b^'}, @global=@item_4={0x3, 0x1, 0x7, "42ea36cb"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x18, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x1, 0xd7, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48ce61a21edf402a"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) 4.776500372s ago: executing program 3 (id=8393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x100, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000300), 0x6, 0x149103) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x80000001, 0x5, 0x4, 0x11400, 0x5, {}, {0x5, 0xc, 0x20, 0xa, 0x7, 0xff, "d766cd66"}, 0x2fe9, 0x3, {&(0x7f0000000280)=[{0x3, 0x2, {0x6}, 0x80000000}, {0x2, 0xc, {0x8}, 0x4753}]}, 0x85}) r4 = gettid() sched_getattr(r4, &(0x7f0000000840)={0x38}, 0x38, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$nci(r5, &(0x7f0000000880)=""/4096, 0x1000) r6 = socket(0x18, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4c040) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x8, &(0x7f0000000540)=ANY=[]) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000000000001}}, 0x30) socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x200000000, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42}) 3.75942322s ago: executing program 3 (id=8394): r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x8400) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) futex(&(0x7f0000000340)=0x5, 0x3, 0x1, &(0x7f0000000380), &(0x7f00000003c0), 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r4}}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0131090000000000000012800e00010024f401801400050000000200000000000000000000000001080004000000000004001200"/64], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x2, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.541860554s ago: executing program 2 (id=8395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x12, 0x3, "f593c5e4346939f7b156b403869d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24004800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.241313987s ago: executing program 2 (id=8396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x181701, 0x0) sync() ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = memfd_create(&(0x7f0000000000)='^*\x00', 0x2) sendfile64(r4, r4, &(0x7f0000001100)=0x8000, 0x44) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x120000) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000ee96b583ab"], 0x1c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) recvmmsg(r5, &(0x7f0000001bc0)=[{{0x0, 0x700, 0x0}}], 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001c00)={0x0, 0x3, 0x1, [0x8000, 0xfffffffffffffffc, 0x4, 0x5a9, 0x5], [0x9, 0x0, 0x7fffffff, 0x5, 0x9, 0x8, 0x7fffffffffffffff, 0x6, 0x95, 0x7fffffffffffffff, 0x10000000000, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x4, 0x100000001, 0x3, 0x7, 0x7, 0x6, 0x6, 0x0, 0x7fffffffffffffff, 0x6, 0xaa, 0x6, 0x8000000000000000, 0x0, 0xffffffffffffffa3, 0x6, 0x200, 0x7fff, 0x9, 0x1, 0x0, 0x8, 0x2b, 0x658, 0x2, 0x8, 0x0, 0x7, 0x0, 0x100000001, 0x8000000000000000, 0x1c000000000, 0x6, 0x7e9ef2f3, 0x6d, 0x6, 0x9, 0x6, 0x5, 0x8c, 0x6, 0x80000000, 0xfffffffffffffffa, 0x4, 0x6, 0x0, 0xb, 0x80000000, 0x0, 0x96af, 0x7, 0x902, 0x0, 0x2, 0x1e, 0xfc08, 0x3, 0xee, 0x4, 0x1084, 0x8, 0x90d, 0x3, 0x0, 0x5, 0x7fffffff, 0x7, 0x50f32258, 0x0, 0x9d2, 0x2b, 0xff, 0x4, 0x9, 0x8, 0x7, 0x1, 0x1, 0x410000000000, 0xc74, 0x5, 0x0, 0x2, 0x15de, 0x4, 0x0, 0x34a, 0x8, 0x0, 0x40, 0xe7a0, 0x100, 0x7, 0x80, 0xfffffffffffffffc, 0x3, 0x8, 0xfffffffffffffffe, 0x6, 0xffffffffffffff6d, 0x4, 0xfffffffffffffff7, 0xffffffffffffff7f, 0xffffffff, 0xc, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000780)={{r3}, r7, 0x2, @unused=[0x3ff, 0x7, 0x4, 0x800], @devid=r8}) r9 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000001780)=""/245, 0xf5}, {&(0x7f0000001880)=""/194, 0xc2}, {&(0x7f0000002c00)=""/187, 0xbb}], 0x2, 0x81, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(0xffffffffffffffff, 0x0, 0x64) close_range(r0, 0xffffffffffffffff, 0x0) 3.172333053s ago: executing program 0 (id=8397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b1f20340fe0803003bd7010203010902f1ebf47665c8ef8ad4e1e11bef73efc6d7ff9c4405391a637ee329aa326d9c1c9bb676eb73f820d83929ac4a8a835540083e183da84760190ddbb1a582eddccb7c704e64a91afe0a75a58a465b05992924128293dc7236c0564b2841858e6046d1e8baea47b774bbbb3a763a739baed94af7555375c2e5ee5f0852c0bace834bd42dfd5942e2669e6581b06e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') unshare(0x22020600) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.724020436s ago: executing program 5 (id=8398): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec7601"]) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r8}}, 0x48) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r8, 0x2}}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r0, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x20048810) 2.125029996s ago: executing program 5 (id=8399): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000340)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "aaacaff6"}, @local=@item_012={0x1, 0x2, 0x8, "9e"}, @local=@item_012={0x2, 0x2, 0x1, 'b^'}, @global=@item_4={0x3, 0x1, 0x7, "42ea36cb"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x18, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x1, 0xd7, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48ce61a21edf402a"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) 1.734952125s ago: executing program 3 (id=8400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.253041906s ago: executing program 3 (id=8401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfc02) 963.294937ms ago: executing program 1 (id=8402): r0 = socket$inet(0xa, 0xa, 0xb) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)="e76bb8ccb6cd8249c73ee42e386c48fc4932fd2224ba4ab02a8728b4bed9f375037e2d6d004ba01f5e0e471e145f8c37ff95cdb3278c92d8d3bdfad3b76c0ee0aa31a4ebfa5e4b9fbdf6c716b4b9b4820f92313f88af0c2fab9f3e361f2463a597f909545c532a46903c15d2f8ebfdd404aafad2fb19640d7f5df6da84079e905bb3865b9f2364c8046bb8723c7b41b32a101ad289ff450830a3", 0x9a}, {&(0x7f00000002c0)="985163b9eef7abcd8aad7fb30d35", 0xe}], 0x3, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000084530000b86fc3beaa0cc53bd44e58fcf310903987151636f214d953a729f98abf029ff7a7f2874cb4b2d692cc65435c379e500e9f95e87714337bdb8a7f0a811b64711368cc3b04af958995b1dffc40c41718", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbc) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0xe2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x5, 0x8}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x12, 0x0, 0xfb, 0xbf, 0x6}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x5, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x2, 0xf00, 0x9}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x422}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "c33c1a68913fa1775f78020e1dcdb681042c4366ad28348470aeaa9bf5494e4cd035d9d29200f6925cfcdcec5ef743e146d51c58e822364a0b947b832e4e3572e387d175d21c46d896d361687505ec485535a950"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}]}) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x80, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x4, 0x10, 0xf6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5717d914"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x401, 0x2d}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x1a, 0xb, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfe, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7f, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf8, 0x8, 0x5}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x60, 0xc7, 0x2, 0x20, 0x19}, 0xd7, &(0x7f0000000a40)={0x5, 0xf, 0xd7, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xba, 0x10, 0x3, "68d37eda416777d37d6d557b13c6412ea36a39f206622245d4587ba187e420e0a283fbcc401ac9324d125c4d83d7aa2596d3fca00df79eb89c5f4cdb133a9ff4acb13d674705da5af57cc95cf06d3045c2c03492ac277c458663382f47bb2d4bc95536e7d6a5f3bb24f6c24032e103960fd0dd8e06fa72b470571e91870c167c63b238bc9e77314fc7dddc8f9a43935e35a13a79697249813f58555bbb5b7a703797f13c245c918378aef3e5b1630a5f81d448fe575428"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0xa, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x2, 0x2, 0xf}]}, 0x4, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x413}}, {0xa9, &(0x7f0000000b80)=@string={0xa9, 0x3, "813a12aca18a4078f134a9906efb16f2669d3b2a05190f1e2f1e1571bf661db27bbe12763bed81d6b40bc0b6ea64758028a8dbabbb7577fb668018030c14992a8cb74ba2d5c7e8dab993689c19df99db35b9659f25535d191d8c15560db1a92ff7852088b80e6e2a35ce3c857718d062c257cec456e8f033e4fc5b226fbeceeeb518bc0da43a9f0acce2ed7b8d50c86ef7a56e3f0d7f372edebe24693db2c0fbc50c8c9a770f58"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x813}}]}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x814) syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xd, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x6, "726742cf3c09"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x7f, "080000180000"}, @mixer_unit={0x9, 0x24, 0x4, 0x12, 0xa, "0fe319bd"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0x31, "a116c3fa"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x6, 0x2, "a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x40, 0x8, {0x7, 0x25, 0x1, 0x1, 0xa1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x80, 0x7, {0x7, 0x25, 0x1, 0x80, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xd, 0x2d, 0x5, 0x10, 0x5}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x76, &(0x7f00000005c0)=@string={0x76, 0x3, "909afc3fbff503c441f03caa26a7a56f94534e42b3b45234a4ed8646e6654a23a2b175e98a6884264c60e30489afcf82603deb719425c6c1e022545abe734d8d00ec2e08f9d2375b8403e8d47b072443bec74f2b2248613098f1815ad09372e9a778af66dae3bd73ffc58e6f811b1b728cc3e2a4"}}, {0xf8, &(0x7f0000000800)=@string={0xf8, 0x3, "3993cb60d8d403706663d284b3536bdc836f985cdf92fb1da428601457cfcbc64f0d48e39cfc8d4e050022c717d17be7b3dbc1672a8def35eee644e91ff8ec7448b6f16bb93c160588867a7f691458e2b341e56fd54220aedc098e2188cc67f6f1886e03b79e630c4f863e4f312091f35fcf8e1a789efe7ca653a8421d6c7338717427298bb315bd6441389506eb7c9d11798c3b4759d112057a18e3d64ddd0214616ade0fe78abac30813967f21f051fb4cf6e39bed34c777e705bad81bea71a89256c268df0f534ed3e9885fd250a64bb044d30a48929f452642feb0fabede6b7a19b953c71fa128ac0654c69a95d5776bb3d8e943"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x816}}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket$inet(0xa, 0xa, 0xb) (async) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)="e76bb8ccb6cd8249c73ee42e386c48fc4932fd2224ba4ab02a8728b4bed9f375037e2d6d004ba01f5e0e471e145f8c37ff95cdb3278c92d8d3bdfad3b76c0ee0aa31a4ebfa5e4b9fbdf6c716b4b9b4820f92313f88af0c2fab9f3e361f2463a597f909545c532a46903c15d2f8ebfdd404aafad2fb19640d7f5df6da84079e905bb3865b9f2364c8046bb8723c7b41b32a101ad289ff450830a3", 0x9a}, {&(0x7f00000002c0)="985163b9eef7abcd8aad7fb30d35", 0xe}], 0x3, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000084530000b86fc3beaa0cc53bd44e58fcf310903987151636f214d953a729f98abf029ff7a7f2874cb4b2d692cc65435c379e500e9f95e87714337bdb8a7f0a811b64711368cc3b04af958995b1dffc40c41718", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) (async) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbc) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0xe2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x5, 0x8}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x12, 0x0, 0xfb, 0xbf, 0x6}, 0x22, &(0x7f0000000080)={0x5, 0xf, 0x22, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x5, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x2, 0xf00, 0x9}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x422}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "c33c1a68913fa1775f78020e1dcdb681042c4366ad28348470aeaa9bf5494e4cd035d9d29200f6925cfcdcec5ef743e146d51c58e822364a0b947b832e4e3572e387d175d21c46d896d361687505ec485535a950"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}]}) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCXONC(r5, 0x540a, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x80, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x4, 0x10, 0xf6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5717d914"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x401, 0x2d}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x1a, 0xb, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfe, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7f, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf8, 0x8, 0x5}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x60, 0xc7, 0x2, 0x20, 0x19}, 0xd7, &(0x7f0000000a40)={0x5, 0xf, 0xd7, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xba, 0x10, 0x3, "68d37eda416777d37d6d557b13c6412ea36a39f206622245d4587ba187e420e0a283fbcc401ac9324d125c4d83d7aa2596d3fca00df79eb89c5f4cdb133a9ff4acb13d674705da5af57cc95cf06d3045c2c03492ac277c458663382f47bb2d4bc95536e7d6a5f3bb24f6c24032e103960fd0dd8e06fa72b470571e91870c167c63b238bc9e77314fc7dddc8f9a43935e35a13a79697249813f58555bbb5b7a703797f13c245c918378aef3e5b1630a5f81d448fe575428"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0xa, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x2, 0x2, 0xf}]}, 0x4, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x413}}, {0xa9, &(0x7f0000000b80)=@string={0xa9, 0x3, "813a12aca18a4078f134a9906efb16f2669d3b2a05190f1e2f1e1571bf661db27bbe12763bed81d6b40bc0b6ea64758028a8dbabbb7577fb668018030c14992a8cb74ba2d5c7e8dab993689c19df99db35b9659f25535d191d8c15560db1a92ff7852088b80e6e2a35ce3c857718d062c257cec456e8f033e4fc5b226fbeceeeb518bc0da43a9f0acce2ed7b8d50c86ef7a56e3f0d7f372edebe24693db2c0fbc50c8c9a770f58"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x813}}]}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x814) (async) syz_usb_connect$uac1(0x5, 0xa5, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xd, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x6, "726742cf3c09"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x7f, "080000180000"}, @mixer_unit={0x9, 0x24, 0x4, 0x12, 0xa, "0fe319bd"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0x31, "a116c3fa"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x6, 0x2, "a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x40, 0x8, {0x7, 0x25, 0x1, 0x1, 0xa1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x80, 0x7, {0x7, 0x25, 0x1, 0x80, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xd, 0x2d, 0x5, 0x10, 0x5}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}, {0x76, &(0x7f00000005c0)=@string={0x76, 0x3, "909afc3fbff503c441f03caa26a7a56f94534e42b3b45234a4ed8646e6654a23a2b175e98a6884264c60e30489afcf82603deb719425c6c1e022545abe734d8d00ec2e08f9d2375b8403e8d47b072443bec74f2b2248613098f1815ad09372e9a778af66dae3bd73ffc58e6f811b1b728cc3e2a4"}}, {0xf8, &(0x7f0000000800)=@string={0xf8, 0x3, "3993cb60d8d403706663d284b3536bdc836f985cdf92fb1da428601457cfcbc64f0d48e39cfc8d4e050022c717d17be7b3dbc1672a8def35eee644e91ff8ec7448b6f16bb93c160588867a7f691458e2b341e56fd54220aedc098e2188cc67f6f1886e03b79e630c4f863e4f312091f35fcf8e1a789efe7ca653a8421d6c7338717427298bb315bd6441389506eb7c9d11798c3b4759d112057a18e3d64ddd0214616ade0fe78abac30813967f21f051fb4cf6e39bed34c777e705bad81bea71a89256c268df0f534ed3e9885fd250a64bb044d30a48929f452642feb0fabede6b7a19b953c71fa128ac0654c69a95d5776bb3d8e943"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x816}}]}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) 791.418313ms ago: executing program 2 (id=8403): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}}}}]}, 0x38}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x4, 0x8, 0x1, 'queue1\x00', 0x7}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x5}, 0x1, 0x1, 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x0, 0x1}, {}, @control={0x1, 0x8, 0x6a08}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x1, 0x8003}, 0xff}) 648.540866ms ago: executing program 2 (id=8404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x100, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000300), 0x6, 0x149103) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x80000001, 0x5, 0x4, 0x11400, 0x5, {}, {0x5, 0xc, 0x20, 0xa, 0x7, 0xff, "d766cd66"}, 0x2fe9, 0x3, {&(0x7f0000000280)=[{0x3, 0x2, {0x6}, 0x80000000}, {0x2, 0xc, {0x8}, 0x4753}]}, 0x85}) r4 = gettid() sched_getattr(r4, &(0x7f0000000840)={0x38}, 0x38, 0x0) r5 = openat$nci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$nci(r5, &(0x7f0000000880)=""/4096, 0x1000) r6 = socket(0x18, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4c040) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x8, &(0x7f0000000540)=ANY=[]) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000000000001}}, 0x30) socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x200000000, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42}) 351.754571ms ago: executing program 3 (id=8405): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @multicast1, 0x1c, 0x14}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r3, 0x80000}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x84, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@multicast2, 0x4e20, 0x2, 0xa, 0x80032d58, 0x12d5c}}, 0x44) write$cgroup_int(r6, &(0x7f0000000040)=0x40000000000008ff, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x22, 0x4, 0x3, 0x7, 0x88, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x6, [{@private=0xa010100, 0xbcc}]}, @ssrr={0x89, 0x13, 0x8, [@rand_addr=0x64010100, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ssrr={0x89, 0x17, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @empty]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x8, [0x8]}, @end, @ssrr={0x89, 0x1f, 0xf6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @empty, @local]}, @generic={0x44, 0x3, "1b"}, @timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x8, [{@private=0xa010101, 0x5}]}]}}}}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netpci0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x5, 0x3ff, 0xe, 0x6, 0x7, 0x1, 0x6, 0xd38}}) openat$vcsa(0xffffff9c, &(0x7f0000000380), 0x200, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x46, &(0x7f0000000080)=0xe3eb, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000a00000000000036222b2354", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 81.712345ms ago: executing program 0 (id=8406): r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc0200"/101], 0x88}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b100003", 0x2d}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x2000400) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x138}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) 0s ago: executing program 5 (id=8407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b1f20340fe0803003bd7010203010902f1ebf47665c8ef8ad4e1e11bef73efc6d7ff9c4405391a637ee329aa326d9c1c9bb676eb73f820d83929ac4a8a835540083e183da84760190ddbb1a582eddccb7c704e64a91afe0a75a58a465b05992924128293dc7236c0564b2841858e6046d1e8baea47b774bbbb3a763a739baed94af7555375c2e5ee5f0852c0bace834bd42dfd5942e2669e6581b06e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') unshare(0x22020600) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) kernel console output (not intermixed with test programs): /0x160 [ 2210.856953][ T1462] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2210.856975][ T1462] ? security_socket_recvmsg+0x7e/0x2e0 [ 2210.857005][ T1462] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2210.857031][ T1462] sock_recvmsg+0x229/0x270 [ 2210.857058][ T1462] ____sys_recvmsg+0x1c9/0x460 [ 2210.857097][ T1462] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2210.857124][ T1462] ? get_compat_msghdr+0x37e/0x4a0 [ 2210.857175][ T1462] ? __lock_acquire+0xaac/0xd20 [ 2210.857212][ T1462] ___sys_recvmsg+0x1b5/0x510 [ 2210.857247][ T1462] ? __pfx____sys_recvmsg+0x10/0x10 [ 2210.857303][ T1462] ? __fget_files+0x3a0/0x420 [ 2210.857342][ T1462] do_recvmmsg+0x36a/0x760 [ 2210.857381][ T1462] ? __pfx_do_recvmmsg+0x10/0x10 [ 2210.857424][ T1462] ? __pfx_vfs_write+0x10/0x10 [ 2210.857465][ T1462] __sys_recvmmsg+0x19d/0x280 [ 2210.857496][ T1462] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2210.857522][ T1462] ? ksys_write+0x1f0/0x250 [ 2210.857556][ T1462] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2210.857588][ T1462] __do_fast_syscall_32+0xb4/0x110 [ 2210.857616][ T1462] ? lockdep_hardirqs_on+0x9c/0x150 [ 2210.857646][ T1462] do_fast_syscall_32+0x34/0x80 [ 2210.857673][ T1462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2210.857699][ T1462] RIP: 0023:0xf7f97539 [ 2210.857716][ T1462] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2210.857732][ T1462] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2210.857754][ T1462] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001bc0 [ 2210.857768][ T1462] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 2210.857780][ T1462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2210.857792][ T1462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2210.857803][ T1462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2210.857832][ T1462] [ 2211.380083][ T5828] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2211.724102][ T5828] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2211.743631][ T5828] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2211.753657][ T5828] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2211.766900][ T5828] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2211.831536][ T5828] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2211.848147][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.868291][ T5828] usb 2-1: Product: syz [ 2211.883421][ T5828] usb 2-1: Manufacturer: syz [ 2211.908536][ T5828] usb 2-1: SerialNumber: syz [ 2214.126597][T13733] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2214.203259][ T5828] usb 2-1: USB disconnect, device number 88 [ 2214.282603][T13733] usb 6-1: config 0 has an invalid interface number: 40 but max is 0 [ 2214.294737][T13733] usb 6-1: config 0 has no interface number 0 [ 2214.307683][T13733] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2214.317537][T13733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.331799][T13733] usb 6-1: Product: syz [ 2214.338025][T13733] usb 6-1: Manufacturer: syz [ 2214.344008][T13733] usb 6-1: SerialNumber: syz [ 2214.360591][T13733] usb 6-1: config 0 descriptor?? [ 2214.762073][ T5828] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2214.817334][ T1505] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2215.001039][ T5828] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2215.015876][ T5828] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2215.059579][ T5828] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2215.079525][ T1511] FAULT_INJECTION: forcing a failure. [ 2215.079525][ T1511] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.095471][ T1511] CPU: 0 UID: 0 PID: 1511 Comm: syz.0.8084 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2215.095496][ T1511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2215.095509][ T1511] Call Trace: [ 2215.095517][ T1511] [ 2215.095525][ T1511] dump_stack_lvl+0x189/0x250 [ 2215.095568][ T1511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2215.095599][ T1511] ? __pfx__printk+0x10/0x10 [ 2215.095625][ T1511] ? ref_tracker_alloc+0x318/0x460 [ 2215.095651][ T1511] should_fail_ex+0x414/0x560 [ 2215.095676][ T1511] should_failslab+0xa8/0x100 [ 2215.095704][ T1511] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2215.095727][ T1511] ? skb_clone+0x212/0x3a0 [ 2215.095757][ T1511] skb_clone+0x212/0x3a0 [ 2215.095787][ T1511] __netlink_deliver_tap+0x404/0x850 [ 2215.095822][ T1511] ? netlink_deliver_tap+0x2e/0x1b0 [ 2215.095847][ T1511] netlink_deliver_tap+0x19c/0x1b0 [ 2215.095871][ T1511] netlink_unicast+0x72f/0x8d0 [ 2215.095903][ T1511] netlink_sendmsg+0x805/0xb30 [ 2215.095935][ T1511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2215.095960][ T1511] ? __import_iovec+0x5d4/0x7f0 [ 2215.095984][ T1511] ? aa_sock_msg_perm+0x94/0x160 [ 2215.096014][ T1511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2215.096036][ T1511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2215.096059][ T1511] __sock_sendmsg+0x219/0x270 [ 2215.096083][ T1511] ____sys_sendmsg+0x505/0x830 [ 2215.096115][ T1511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2215.096158][ T1511] ___sys_sendmsg+0x21f/0x2a0 [ 2215.096186][ T1511] ? __pfx____sys_sendmsg+0x10/0x10 [ 2215.096248][ T1511] ? __fget_files+0x2a/0x420 [ 2215.096273][ T1511] ? __fget_files+0x3a0/0x420 [ 2215.096307][ T1511] __sys_sendmsg+0x164/0x220 [ 2215.096336][ T1511] ? __pfx___sys_sendmsg+0x10/0x10 [ 2215.096377][ T1511] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2215.096403][ T1511] ? lockdep_hardirqs_on+0x9c/0x150 [ 2215.096424][ T1511] __do_fast_syscall_32+0xb4/0x110 [ 2215.096447][ T1511] ? lockdep_hardirqs_on+0x9c/0x150 [ 2215.096474][ T1511] do_fast_syscall_32+0x34/0x80 [ 2215.096500][ T1511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2215.096520][ T1511] RIP: 0023:0xf7fe5539 [ 2215.096533][ T1511] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2215.096554][ T1511] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2215.096573][ T1511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2215.096586][ T1511] RDX: 0000000004040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 2215.096597][ T1511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2215.096608][ T1511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2215.096618][ T1511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2215.096646][ T1511] [ 2215.096791][ T1511] netlink: 292 bytes leftover after parsing attributes in process `syz.0.8084'. [ 2215.097475][ T5828] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2215.451374][ T5828] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2215.460660][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.468756][ T5828] usb 2-1: Product: syz [ 2215.794966][ T5828] usb 2-1: Manufacturer: syz [ 2215.805436][ T5828] usb 2-1: SerialNumber: syz [ 2216.873957][ T1534] pim6reg: entered allmulticast mode [ 2217.011048][T13733] snd_usb_variax 6-1:0.40: Line 6 Variax Workbench found [ 2217.025227][T13733] usb 6-1: selecting invalid altsetting 1 [ 2217.086800][T13733] snd_usb_variax 6-1:0.40: set_interface failed [ 2217.127216][T13733] snd_usb_variax 6-1:0.40: Line 6 Variax Workbench now disconnected [ 2217.162942][T13733] snd_usb_variax 6-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2217.358862][T13733] usb 6-1: USB disconnect, device number 68 [ 2217.438452][ T1541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8088'. [ 2217.449150][ T1541] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8088'. [ 2217.473457][ T1541] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8088'. [ 2218.178292][ T5828] usb 2-1: USB disconnect, device number 89 [ 2220.159768][ T1567] netlink: 'syz.5.8094': attribute type 5 has an invalid length. [ 2220.177511][ T1565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2220.546434][ T1573] syzkaller1: entered promiscuous mode [ 2220.630172][ T1573] syzkaller1: entered allmulticast mode [ 2221.410115][T14308] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2222.006442][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.014272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.105130][T14308] usb 4-1: config index 0 descriptor too short (expected 60401, got 77) [ 2222.114836][T14308] usb 4-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2222.220388][T14308] usb 4-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2222.414612][T14308] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2222.569407][T14308] usb 4-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2222.581862][T14308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.638088][T14308] usb 4-1: Product: syz [ 2222.652525][T14308] usb 4-1: Manufacturer: syz [ 2222.665773][T14308] usb 4-1: SerialNumber: syz [ 2222.790063][ T5828] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2222.982297][ T5828] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 2222.991956][ T5828] usb 2-1: config 0 has no interface number 0 [ 2223.020232][ T5828] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2223.047372][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.083460][ T5828] usb 2-1: Product: syz [ 2223.174588][ T5828] usb 2-1: Manufacturer: syz [ 2223.194310][ T5828] usb 2-1: SerialNumber: syz [ 2223.528360][ T5828] usb 2-1: config 0 descriptor?? [ 2224.301511][T13733] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2224.479131][T13733] usb 6-1: config index 0 descriptor too short (expected 60401, got 77) [ 2224.500312][T13733] usb 6-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2224.596991][T13733] usb 6-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2224.616996][T13733] usb 6-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2224.637910][T13733] usb 6-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2224.658471][T13733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.710247][T13733] usb 6-1: Product: syz [ 2224.718180][T13733] usb 6-1: Manufacturer: syz [ 2224.734500][T13733] usb 6-1: SerialNumber: syz [ 2224.740351][T19862] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2224.904963][T19862] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2224.919558][T19862] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2224.938724][T19862] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2224.975035][T19862] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2225.311965][T19862] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2225.315293][T14308] usb 4-1: USB disconnect, device number 10 [ 2225.378825][T19862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.510076][T19862] usb 3-1: Product: syz [ 2225.540343][T19862] usb 3-1: Manufacturer: syz [ 2225.557529][T19862] usb 3-1: SerialNumber: syz [ 2225.571767][ T5828] snd_usb_variax 2-1:0.40: Line 6 Variax Workbench found [ 2225.675003][ T5828] usb 2-1: selecting invalid altsetting 1 [ 2225.692208][ T5828] snd_usb_variax 2-1:0.40: set_interface failed [ 2225.723851][ T5828] snd_usb_variax 2-1:0.40: Line 6 Variax Workbench now disconnected [ 2225.733127][ T5828] snd_usb_variax 2-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2225.763158][ T5828] usb 2-1: USB disconnect, device number 90 [ 2226.234562][T14308] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2226.695492][T14308] usb 4-1: config index 0 descriptor too short (expected 60401, got 77) [ 2226.778018][T14308] usb 4-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2226.807437][T14308] usb 4-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2226.857756][T14308] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2227.140736][T13733] usb 6-1: USB disconnect, device number 69 [ 2227.210265][T14308] usb 4-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2227.327643][T14308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.348082][T14308] usb 4-1: Product: syz [ 2227.359063][T14308] usb 4-1: Manufacturer: syz [ 2227.376831][T14308] usb 4-1: SerialNumber: syz [ 2227.720350][ T24] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2227.880184][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 2227.888154][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2227.899029][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2227.990312][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2228.036038][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.084409][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2228.136982][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.217865][T19862] usb 3-1: USB disconnect, device number 74 [ 2228.404744][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 2228.410401][ T24] usbtmc 6-1:16.0: can't read capabilities [ 2228.626539][ T1623] netlink: 'syz.5.8106': attribute type 1 has an invalid length. [ 2228.639647][ T1623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2229.292698][T14308] usb 4-1: USB disconnect, device number 11 [ 2229.860305][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2230.030469][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 2230.054249][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2230.080409][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2230.091541][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2230.102258][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2230.127497][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2230.137114][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.503644][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 2230.509155][ T24] usbtmc 4-1:16.0: can't read capabilities [ 2230.564112][T19862] usb 6-1: USB disconnect, device number 70 [ 2231.040073][T19862] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2231.222117][T19862] usb 6-1: config 0 has an invalid interface number: 40 but max is 0 [ 2231.241502][T19862] usb 6-1: config 0 has no interface number 0 [ 2231.262941][T19862] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2231.277473][T19862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.294959][T19862] usb 6-1: Product: syz [ 2231.302670][T19862] usb 6-1: Manufacturer: syz [ 2231.307374][T19862] usb 6-1: SerialNumber: syz [ 2231.317594][T19862] usb 6-1: config 0 descriptor?? [ 2231.579864][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8118'. [ 2232.441414][ T5955] usb 4-1: USB disconnect, device number 12 [ 2233.833760][T19862] snd_usb_variax 6-1:0.40: Line 6 Variax Workbench found [ 2233.870081][T19862] usb 6-1: selecting invalid altsetting 1 [ 2233.875877][T19862] snd_usb_variax 6-1:0.40: set_interface failed [ 2234.009887][ T1684] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2234.026754][T19862] snd_usb_variax 6-1:0.40: Line 6 Variax Workbench now disconnected [ 2234.059936][T19862] snd_usb_variax 6-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2234.130466][T19862] usb 6-1: USB disconnect, device number 71 [ 2234.518945][ T5955] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2234.950222][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 2234.957537][ T5955] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2234.968108][ T5955] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2234.995742][ T5955] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2235.006146][ T5955] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2235.105698][ T5955] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2235.187954][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.414795][ T5955] usb 3-1: GET_CAPABILITIES returned 0 [ 2235.632357][ T1687] netlink: 'syz.2.8125': attribute type 1 has an invalid length. [ 2235.657643][ T1687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2235.896014][ T5955] usbtmc 3-1:16.0: can't read capabilities [ 2236.621031][ T1708] FAULT_INJECTION: forcing a failure. [ 2236.621031][ T1708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2236.970976][ T1708] CPU: 1 UID: 0 PID: 1708 Comm: syz.3.8129 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2236.971000][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2236.971009][ T1708] Call Trace: [ 2236.971016][ T1708] [ 2236.971023][ T1708] dump_stack_lvl+0x189/0x250 [ 2236.971052][ T1708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2236.971073][ T1708] ? __pfx__printk+0x10/0x10 [ 2236.971090][ T1708] ? fs_reclaim_acquire+0x7d/0x100 [ 2236.971119][ T1708] should_fail_ex+0x414/0x560 [ 2236.971144][ T1708] prepare_alloc_pages+0x213/0x610 [ 2236.971173][ T1708] __alloc_frozen_pages_noprof+0x123/0x370 [ 2236.971190][ T1708] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2236.971208][ T1708] ? __pfx__copy_from_iter+0x10/0x10 [ 2236.971228][ T1708] ? policy_nodemask+0x27c/0x720 [ 2236.971247][ T1708] ? aa_file_perm+0x11f/0xed0 [ 2236.971269][ T1708] alloc_pages_mpol+0x232/0x4a0 [ 2236.971293][ T1708] alloc_pages_noprof+0xa9/0x190 [ 2236.971314][ T1708] anon_pipe_write+0xb85/0x1360 [ 2236.971352][ T1708] ? __pfx_anon_pipe_write+0x10/0x10 [ 2236.971381][ T1708] ? common_file_perm+0x199/0x200 [ 2236.971401][ T1708] ? bpf_lsm_file_permission+0x9/0x20 [ 2236.971421][ T1708] ? security_file_permission+0x75/0x290 [ 2236.971442][ T1708] vfs_write+0x548/0xa90 [ 2236.971463][ T1708] ? __pfx_anon_pipe_write+0x10/0x10 [ 2236.971484][ T1708] ? __pfx_vfs_write+0x10/0x10 [ 2236.971509][ T1708] ? __fget_files+0x2a/0x420 [ 2236.971537][ T1708] ksys_write+0x145/0x250 [ 2236.971569][ T1708] ? __pfx_ksys_write+0x10/0x10 [ 2236.971587][ T1708] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2236.971609][ T1708] ? lockdep_hardirqs_on+0x9c/0x150 [ 2236.971628][ T1708] __do_fast_syscall_32+0xb4/0x110 [ 2236.971649][ T1708] ? lockdep_hardirqs_on+0x9c/0x150 [ 2236.971670][ T1708] do_fast_syscall_32+0x34/0x80 [ 2236.971690][ T1708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2236.971707][ T1708] RIP: 0023:0xf7fc7539 [ 2236.971719][ T1708] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2236.971732][ T1708] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2236.971748][ T1708] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 2236.971759][ T1708] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2236.971767][ T1708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2236.971776][ T1708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2236.971785][ T1708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2236.971806][ T1708] [ 2237.412393][ T5828] usb 3-1: USB disconnect, device number 75 [ 2238.111231][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2238.170506][ T5828] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 2238.289279][ T24] usb 4-1: config index 0 descriptor too short (expected 60401, got 77) [ 2238.302116][ T24] usb 4-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2238.316735][ T24] usb 4-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2238.328973][ T24] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2238.352131][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2238.366827][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2238.383129][ T24] usb 4-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2238.397763][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.407352][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2238.418624][ T24] usb 4-1: Product: syz [ 2238.424143][ T24] usb 4-1: Manufacturer: syz [ 2238.428919][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.437319][ T24] usb 4-1: SerialNumber: syz [ 2238.634161][ T1725] input input94: cannot allocate more than FF_MAX_EFFECTS effects [ 2238.647580][ T1725] input input95: cannot allocate more than FF_MAX_EFFECTS effects [ 2238.826984][ T5828] usb 3-1: GET_CAPABILITIES returned 0 [ 2238.854491][ T5828] usbtmc 3-1:16.0: can't read capabilities [ 2239.772472][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2239.772489][ T30] audit: type=1800 audit(1747856657.528:3099): pid=1717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8131" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2240.110377][ T1737] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2240.222104][ T1740] netlink: 'syz.1.8137': attribute type 10 has an invalid length. [ 2240.355820][ T1740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2240.553093][ T1740] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2241.571033][ T24] usb 4-1: USB disconnect, device number 13 [ 2241.812666][ T1763] loop8: detected capacity change from 0 to 8 [ 2242.241451][ T5955] usb 3-1: USB disconnect, device number 76 [ 2242.399536][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8143'. [ 2242.488908][ T1770] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2244.103628][ T1791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2244.536671][ T1795] FAULT_INJECTION: forcing a failure. [ 2244.536671][ T1795] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.549807][ T1795] CPU: 1 UID: 0 PID: 1795 Comm: syz.3.8151 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2244.549824][ T1795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2244.549833][ T1795] Call Trace: [ 2244.549839][ T1795] [ 2244.549845][ T1795] dump_stack_lvl+0x189/0x250 [ 2244.549869][ T1795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2244.549894][ T1795] ? __pfx__printk+0x10/0x10 [ 2244.549910][ T1795] ? __pfx___might_resched+0x10/0x10 [ 2244.549922][ T1795] ? fs_reclaim_acquire+0x7d/0x100 [ 2244.549945][ T1795] should_fail_ex+0x414/0x560 [ 2244.549974][ T1795] should_failslab+0xa8/0x100 [ 2244.550001][ T1795] __kmalloc_noprof+0xcb/0x4f0 [ 2244.550021][ T1795] ? kfree+0x4d/0x440 [ 2244.550039][ T1795] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2244.550068][ T1795] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2244.550093][ T1795] ? tomoyo_domain+0xda/0x130 [ 2244.550121][ T1795] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2244.550139][ T1795] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2244.550161][ T1795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2244.550217][ T1795] ? __fget_files+0x2a/0x420 [ 2244.550242][ T1795] ? __fget_files+0x3a0/0x420 [ 2244.550258][ T1795] ? __fget_files+0x2a/0x420 [ 2244.550277][ T1795] security_file_ioctl_compat+0xcb/0x2d0 [ 2244.550292][ T1795] __ia32_compat_sys_ioctl+0x128/0x840 [ 2244.550308][ T1795] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2244.550322][ T1795] ? __fget_files+0x3a0/0x420 [ 2244.550343][ T1795] ? fput+0xa0/0xd0 [ 2244.550362][ T1795] ? ksys_write+0x1f0/0x250 [ 2244.550381][ T1795] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2244.550399][ T1795] ? lockdep_hardirqs_on+0x9c/0x150 [ 2244.550416][ T1795] __do_fast_syscall_32+0xb4/0x110 [ 2244.550434][ T1795] ? lockdep_hardirqs_on+0x9c/0x150 [ 2244.550451][ T1795] do_fast_syscall_32+0x34/0x80 [ 2244.550468][ T1795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2244.550484][ T1795] RIP: 0023:0xf7fc7539 [ 2244.550495][ T1795] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2244.550505][ T1795] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2244.550519][ T1795] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae60 [ 2244.550527][ T1795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2244.550535][ T1795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2244.550542][ T1795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2244.550549][ T1795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2244.550567][ T1795] [ 2244.811357][ T1795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2245.280233][T19862] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2245.380106][T27680] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2245.431742][T19862] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 2245.454320][T19862] usb 4-1: config 0 has no interface number 0 [ 2245.505477][T19862] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2245.547572][T19862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.613071][T19862] usb 4-1: Product: syz [ 2245.630187][T19862] usb 4-1: Manufacturer: syz [ 2245.650538][T19862] usb 4-1: SerialNumber: syz [ 2245.775853][T19862] usb 4-1: config 0 descriptor?? [ 2246.032580][T27680] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2246.058545][ T5955] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2246.124994][T27680] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2246.238444][ T5955] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2246.248996][ T5955] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2246.278089][ T5955] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2246.312008][ T5955] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2246.343774][ T5955] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2246.353321][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.363088][ T5955] usb 2-1: Product: syz [ 2246.367367][ T5955] usb 2-1: Manufacturer: syz [ 2246.373942][ T5955] usb 2-1: SerialNumber: syz [ 2246.382103][T27680] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2246.567936][T27680] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2246.750018][T27680] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2246.769673][T27680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.805276][T27680] usb 3-1: Product: syz [ 2246.986940][T27680] usb 3-1: Manufacturer: syz [ 2247.205981][T27680] usb 3-1: SerialNumber: syz [ 2248.031720][T19862] snd_usb_variax 4-1:0.40: Line 6 Variax Workbench found [ 2248.038847][T19862] usb 4-1: selecting invalid altsetting 1 [ 2248.060425][T19862] snd_usb_variax 4-1:0.40: set_interface failed [ 2248.067025][T19862] snd_usb_variax 4-1:0.40: Line 6 Variax Workbench now disconnected [ 2248.237478][T19862] snd_usb_variax 4-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2248.261706][T19862] usb 4-1: USB disconnect, device number 14 [ 2249.144343][ T5955] usb 2-1: USB disconnect, device number 91 [ 2249.378365][T27680] usb 3-1: USB disconnect, device number 77 [ 2249.819218][ T30] audit: type=1400 audit(1747856667.518:3100): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(1747856667.818:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.630945][ T30] audit: type=1326 audit(1747856667.818:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.653666][ T30] audit: type=1326 audit(1747856667.948:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f97558 code=0x7ffc0000 [ 2250.677756][ T30] audit: type=1326 audit(1747856667.948:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.699802][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.727434][ T30] audit: type=1326 audit(1747856667.948:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.749546][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.770078][ T30] audit: type=1326 audit(1747856667.948:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.828369][ T30] audit: type=1326 audit(1747856667.948:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.850421][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.876307][ T30] audit: type=1326 audit(1747856667.948:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.898241][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.913787][ T30] audit: type=1326 audit(1747856667.948:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1830 comm="syz.2.8162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2250.935778][ C1] vkms_vblank_simulate: vblank timer overrun [ 2252.680521][ T5955] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2252.910192][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 2252.926367][ T5955] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 2252.934933][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.977405][ T5955] usb 3-1: config 0 has no interface number 0 [ 2252.995511][ T5955] usb 3-1: config 0 interface 161 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2253.061859][T27680] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2253.149290][ T5955] usb 3-1: config 0 interface 161 has no altsetting 0 [ 2253.167279][ T5955] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=68.fb [ 2253.199023][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.213274][ T5955] usb 3-1: Product: syz [ 2253.224134][ T5955] usb 3-1: Manufacturer: syz [ 2253.232791][ T5955] usb 3-1: SerialNumber: syz [ 2253.290752][ T5955] usb 3-1: config 0 descriptor?? [ 2253.386666][T27680] usb 6-1: config index 0 descriptor too short (expected 60401, got 77) [ 2253.430280][T27680] usb 6-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2253.439282][T27680] usb 6-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2253.522686][ T5955] peak_usb 3-1:0.161 can0: unable to request usb[type=0 value=1] err=-71 [ 2253.566538][ T5955] peak_usb 3-1:0.161: unable to read PCAN-USB X6 firmware info (err -71) [ 2253.573673][T27680] usb 6-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2253.669898][T27680] usb 6-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2253.699729][T27680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.745056][T27680] usb 6-1: Product: syz [ 2253.761473][ T5955] peak_usb 3-1:0.161: probe with driver peak_usb failed with error -71 [ 2253.773233][ T5955] usb 3-1: USB disconnect, device number 78 [ 2253.830346][T27680] usb 6-1: Manufacturer: syz [ 2253.845220][T27680] usb 6-1: SerialNumber: syz [ 2255.170779][ T5828] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2255.337498][ T5828] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2255.352024][ T5828] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2255.394474][ T5828] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2255.439207][ T5828] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2255.483825][ T5828] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2255.525166][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.555434][ T5828] usb 3-1: Product: syz [ 2255.582061][ T5828] usb 3-1: Manufacturer: syz [ 2255.607785][ T5828] usb 3-1: SerialNumber: syz [ 2256.291080][T27680] usb 6-1: USB disconnect, device number 72 [ 2256.680480][T14308] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2257.100058][T14308] usb 4-1: device descriptor read/64, error -71 [ 2257.380745][T14308] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2257.590125][T14308] usb 4-1: device descriptor read/64, error -71 [ 2257.689704][ T5828] usb 3-1: USB disconnect, device number 79 [ 2257.701520][T14308] usb usb4-port1: attempt power cycle [ 2258.210065][T14308] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2258.217740][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2258.217757][ T30] audit: type=1400 audit(1747856675.968:3138): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 2258.292125][T14308] usb 4-1: device descriptor read/8, error -71 [ 2258.526586][ T30] audit: type=1326 audit(1747856676.278:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.569099][ T30] audit: type=1326 audit(1747856676.278:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.630267][ T30] audit: type=1326 audit(1747856676.278:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.670245][T14308] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2258.678931][ T30] audit: type=1326 audit(1747856676.278:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.704691][T14308] usb 4-1: device descriptor read/8, error -71 [ 2258.711084][ T30] audit: type=1326 audit(1747856676.278:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.737411][ T30] audit: type=1326 audit(1747856676.278:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.779360][ T30] audit: type=1326 audit(1747856676.278:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.820795][T14308] usb usb4-port1: unable to enumerate USB device [ 2258.856571][ T30] audit: type=1326 audit(1747856676.278:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2258.907628][ T30] audit: type=1326 audit(1747856676.278:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1892 comm="syz.2.8179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 2259.490725][T19862] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2259.597461][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8181'. [ 2260.057693][T19862] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2260.066339][T19862] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2260.078011][T19862] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2260.096304][T19862] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2260.160790][T19862] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2260.170559][T19862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.180528][T19862] usb 3-1: Product: syz [ 2260.193415][T19862] usb 3-1: Manufacturer: syz [ 2260.247011][T19862] usb 3-1: SerialNumber: syz [ 2262.731510][T19862] usb 3-1: USB disconnect, device number 80 [ 2263.332585][T14308] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2263.398812][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2263.398826][ T30] audit: type=1326 audit(1747856681.148:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2263.452829][ T30] audit: type=1326 audit(1747856681.188:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2263.585650][ T30] audit: type=1326 audit(1747856681.188:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2263.620194][T14308] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2263.628566][T14308] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2263.639986][T14308] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2263.662618][T14308] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2263.678074][ T30] audit: type=1326 audit(1747856681.188:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2263.717422][T14308] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2263.731027][T14308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.767753][ T30] audit: type=1326 audit(1747856681.188:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2263.790412][T13733] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2263.811847][T14308] usb 3-1: Product: syz [ 2263.826136][T14308] usb 3-1: Manufacturer: syz [ 2263.857349][T14308] usb 3-1: SerialNumber: syz [ 2263.975060][T13733] usb 2-1: Using ep0 maxpacket: 32 [ 2263.985724][T13733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.021031][T13733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2264.067054][T13733] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2264.067061][ T30] audit: type=1326 audit(1747856681.188:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2264.067114][ T30] audit: type=1326 audit(1747856681.188:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2264.138479][T13733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.174788][T13733] usb 2-1: config 0 descriptor?? [ 2264.457013][ T30] audit: type=1326 audit(1747856681.188:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2264.492912][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'. [ 2264.553247][ T30] audit: type=1326 audit(1747856681.188:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2264.748133][ T30] audit: type=1326 audit(1747856681.188:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1947 comm="syz.1.8194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2266.130430][T14308] usb 3-1: USB disconnect, device number 81 [ 2267.527653][T13733] usbhid 2-1:0.0: can't add hid device: -71 [ 2267.562800][T13733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2267.635370][T13733] usb 2-1: USB disconnect, device number 92 [ 2268.826510][T13733] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2268.893125][T19862] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2269.090093][T19862] usb 6-1: Using ep0 maxpacket: 8 [ 2269.097345][T13733] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 2269.106233][T13733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.117298][T13733] usb 4-1: config 0 has no interface number 0 [ 2269.123595][T19862] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2269.131996][T13733] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2269.143143][T19862] usb 6-1: config 0 has an invalid interface number: 240 but max is 0 [ 2269.152818][T13733] usb 4-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2269.170155][T19862] usb 6-1: config 0 has no interface number 0 [ 2269.176471][T19862] usb 6-1: config 0 interface 240 has no altsetting 0 [ 2269.183368][T13733] usb 4-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 2269.200217][T13733] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 2269.209546][T13733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.230123][T19862] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ef [ 2269.262335][T13733] usb 4-1: config 0 descriptor?? [ 2269.290049][T19862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.312183][T13733] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 2269.322269][T19862] usb 6-1: Product: syz [ 2269.326472][T19862] usb 6-1: Manufacturer: syz [ 2269.340062][T19862] usb 6-1: SerialNumber: syz [ 2269.371039][T19862] usb 6-1: config 0 descriptor?? [ 2269.510437][ T1984] netlink: 'syz.3.8206': attribute type 3 has an invalid length. [ 2269.620466][ T1996] sctp: [Deprecated]: syz.2.8208 (pid 1996) Use of int in maxseg socket option. [ 2269.620466][ T1996] Use struct sctp_assoc_value instead [ 2270.070130][T14308] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2270.439847][T14308] usb 2-1: config 0 has no interfaces? [ 2270.463858][T14308] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2270.482542][T14308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.493351][T14308] usb 2-1: Product: syz [ 2270.504195][T14308] usb 2-1: Manufacturer: syz [ 2270.514690][T14308] usb 2-1: SerialNumber: syz [ 2270.558868][T14308] usb 2-1: config 0 descriptor?? [ 2271.347631][ T2008] fuse: Bad value for 'fd' [ 2271.358670][ T2008] netlink: 'syz.1.8210': attribute type 12 has an invalid length. [ 2272.952354][ T5828] usb 4-1: USB disconnect, device number 19 [ 2273.254765][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2273.254786][ T30] audit: type=1326 audit(1747856691.008:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2273.420289][T13733] usb 2-1: USB disconnect, device number 93 [ 2273.602390][ T2032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.612227][ T2032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.145466][ T30] audit: type=1326 audit(1747856691.008:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 2274.302634][ T30] audit: type=1326 audit(1747856691.188:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2274.520562][ T30] audit: type=1326 audit(1747856691.188:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2274.550076][ T30] audit: type=1326 audit(1747856691.208:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2274.773407][T19862] usb 6-1: Found UVC 0.00 device syz (8086:0b5b) [ 2274.840715][T19862] usb 6-1: No valid video chain found. [ 2274.861369][ T30] audit: type=1326 audit(1747856691.208:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2274.946107][ T5828] usb 6-1: USB disconnect, device number 73 [ 2274.978771][ T30] audit: type=1326 audit(1747856691.208:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2275.020746][ T30] audit: type=1326 audit(1747856691.208:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2275.572673][ T30] audit: type=1326 audit(1747856691.208:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1994 comm="syz.1.8210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd4558 code=0x7ffc0000 [ 2275.607667][ T30] audit: type=1326 audit(1747856691.208:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2024 comm="syz.5.8215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2277.250414][T13733] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 2277.395565][ T2059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 2277.440545][T13733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2277.516622][T13733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.541261][T13733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 64 [ 2277.570518][T13733] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2277.639874][T13733] usb 6-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 2277.669347][T13733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.731181][T13733] usb 6-1: config 0 descriptor?? [ 2277.755664][ T2054] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2277.948064][ T2066] batadv_slave_1: entered promiscuous mode [ 2278.089574][ T2065] batadv_slave_1: left promiscuous mode [ 2279.417926][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2279.417939][ T30] audit: type=1400 audit(1747856697.158:3275): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usbhid 6-1:0.0: can't add hid device: -71 [ 2280.147015][ T2087] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2280.164243][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8232'. [ 2280.241066][ T2088] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2280.300305][T13733] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2280.320537][T13733] usb 6-1: USB disconnect, device number 74 [ 2280.376308][ T2088] macvtap1: entered promiscuous mode [ 2280.449089][ T2088] macvtap1: entered allmulticast mode [ 2280.550238][ T2088] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2280.568071][ T2085] vlan2: entered allmulticast mode [ 2280.633827][ T2089] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2280.646794][ T30] audit: type=1326 audit(1747856698.398:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2079 comm="syz.3.8230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2280.692668][ T30] audit: type=1326 audit(1747856698.398:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2079 comm="syz.3.8230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2280.721182][ T2094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2280.841643][ T2094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2280.968491][ T2105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8236'. [ 2280.981213][ T2105] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8236'. [ 2281.006957][ T2105] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8236'. [ 2281.132152][ T2111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8238'. [ 2281.199929][ T2114] sctp: [Deprecated]: syz.3.8237 (pid 2114) Use of int in maxseg socket option. [ 2281.199929][ T2114] Use struct sctp_assoc_value instead [ 2281.235224][ T2111] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 2281.391880][ T30] audit: type=1326 audit(1747856699.148:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2281.440031][ T30] audit: type=1326 audit(1747856699.168:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2281.493153][ T30] audit: type=1326 audit(1747856699.168:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2281.582197][ T30] audit: type=1326 audit(1747856699.168:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2281.637655][ T30] audit: type=1326 audit(1747856699.168:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2281.736225][ T30] audit: type=1326 audit(1747856699.168:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2281.766391][ T30] audit: type=1326 audit(1747856699.168:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2116 comm="syz.0.8239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7fe5539 code=0x7ffc0000 [ 2282.582055][ T2127] batadv_slave_1: entered promiscuous mode [ 2282.677993][ T2126] batadv_slave_1: left promiscuous mode [ 2283.173875][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.180484][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.694128][ T2143] FAULT_INJECTION: forcing a failure. [ 2283.694128][ T2143] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.710055][ T2143] CPU: 0 UID: 0 PID: 2143 Comm: syz.3.8246 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2283.710083][ T2143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2283.710097][ T2143] Call Trace: [ 2283.710106][ T2143] [ 2283.710115][ T2143] dump_stack_lvl+0x189/0x250 [ 2283.710154][ T2143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2283.710185][ T2143] ? __pfx__printk+0x10/0x10 [ 2283.710223][ T2143] ? __pfx___might_resched+0x10/0x10 [ 2283.710243][ T2143] ? fs_reclaim_acquire+0x7d/0x100 [ 2283.710278][ T2143] should_fail_ex+0x414/0x560 [ 2283.710323][ T2143] should_failslab+0xa8/0x100 [ 2283.710350][ T2143] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2283.710375][ T2143] ? audit_log_start+0x126/0x870 [ 2283.710398][ T2143] audit_log_start+0x126/0x870 [ 2283.710418][ T2143] ? __pfx_audit_log_start+0x10/0x10 [ 2283.710434][ T2143] ? migrate_enable+0x29c/0x3c0 [ 2283.710450][ T2143] ? kasan_quarantine_put+0xdd/0x220 [ 2283.710466][ T2143] ? __pfx_migrate_enable+0x10/0x10 [ 2283.710484][ T2143] audit_seccomp+0x64/0x190 [ 2283.710503][ T2143] ? clear_bhb_loop+0x60/0xb0 [ 2283.710516][ T2143] ? clear_bhb_loop+0xe/0xb0 [ 2283.710533][ T2143] __seccomp_filter+0x9aa/0x1a40 [ 2283.710559][ T2143] ? ksys_write+0x1cb/0x250 [ 2283.710574][ T2143] ? __pfx___seccomp_filter+0x10/0x10 [ 2283.710595][ T2143] ? __lock_acquire+0xaac/0xd20 [ 2283.710631][ T2143] ? __fget_files+0x3a0/0x420 [ 2283.710648][ T2143] ? __fget_files+0x2a/0x420 [ 2283.710667][ T2143] ? __secure_computing+0xe2/0x2a0 [ 2283.710689][ T2143] syscall_trace_enter+0xaa/0x160 [ 2283.710709][ T2143] __do_fast_syscall_32+0x9b/0x110 [ 2283.710728][ T2143] ? lockdep_hardirqs_on+0x9c/0x150 [ 2283.710747][ T2143] do_fast_syscall_32+0x34/0x80 [ 2283.710765][ T2143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2283.710781][ T2143] RIP: 0023:0xf7fc7539 [ 2283.710793][ T2143] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2283.710804][ T2143] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2283.710819][ T2143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50e6620 [ 2283.710828][ T2143] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 2283.710836][ T2143] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2283.710844][ T2143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2283.710852][ T2143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2283.710871][ T2143] [ 2284.709654][T13733] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2284.722608][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8248'. [ 2284.835663][ T2161] fuse: Unknown parameter 'Ú„ÁRs€BÄôj¬û÷ãKJ%0áñùÓõ²Êçàý»<™g:^›á@õìÎk|^`MBt#£«õh5ä 23sÔß©HÐVdª¥)¢`R™Ú' [ 2284.941765][T13733] usb 4-1: device descriptor read/64, error -71 [ 2284.959789][ T2164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8251'. [ 2285.086836][ T2164] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8251'. [ 2285.163496][ T2164] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8251'. [ 2285.200158][T13733] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2285.340489][T13733] usb 4-1: device descriptor read/64, error -71 [ 2285.483352][T13733] usb usb4-port1: attempt power cycle [ 2285.860349][T13733] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2285.895562][T13733] usb 4-1: device descriptor read/8, error -71 [ 2285.941987][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2285.942033][ T30] audit: type=1400 audit(1747856703.698:3322): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vkms_vblank_simulate: vblank timer overrun [ 2286.247723][T13733] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2286.436323][ T30] audit: type=1326 audit(1747856704.188:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2286.486759][T13733] usb 4-1: device descriptor read/8, error -71 [ 2286.495219][ T30] audit: type=1326 audit(1747856704.188:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2286.600834][T13733] usb usb4-port1: unable to enumerate USB device [ 2286.672147][ T30] audit: type=1326 audit(1747856704.188:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2286.797132][ T30] audit: type=1326 audit(1747856704.188:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2286.828054][ T30] audit: type=1326 audit(1747856704.188:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2286.852734][ T30] audit: type=1326 audit(1747856704.188:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2287.562513][ T30] audit: type=1326 audit(1747856704.188:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2287.600135][T19862] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2287.601651][ T2192] syz.2.8257: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2287.633655][ T2192] CPU: 1 UID: 0 PID: 2192 Comm: syz.2.8257 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2287.633676][ T2192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2287.633686][ T2192] Call Trace: [ 2287.633692][ T2192] [ 2287.633699][ T2192] dump_stack_lvl+0x189/0x250 [ 2287.633728][ T2192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2287.633750][ T2192] ? __pfx__printk+0x10/0x10 [ 2287.633766][ T2192] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2287.633782][ T2192] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2287.633800][ T2192] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2287.633818][ T2192] warn_alloc+0x214/0x310 [ 2287.633841][ T2192] ? __pfx___schedule+0x10/0x10 [ 2287.633861][ T2192] ? __pfx_warn_alloc+0x10/0x10 [ 2287.633883][ T2192] ? kasan_save_track+0x4f/0x80 [ 2287.633899][ T2192] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 2287.633918][ T2192] ? xskq_create+0x56/0x170 [ 2287.633937][ T2192] ? __ia32_sys_setsockopt+0x18b/0x220 [ 2287.633957][ T2192] ? __do_fast_syscall_32+0xb4/0x110 [ 2287.633984][ T2192] ? do_fast_syscall_32+0x34/0x80 [ 2287.634003][ T2192] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2287.634028][ T2192] __vmalloc_node_range_noprof+0x125/0x12c0 [ 2287.634072][ T2192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2287.634097][ T2192] ? __kasan_kmalloc+0x93/0xb0 [ 2287.634119][ T2192] vmalloc_user_noprof+0x74/0x80 [ 2287.634140][ T2192] ? xskq_create+0xbf/0x170 [ 2287.634158][ T2192] xskq_create+0xbf/0x170 [ 2287.634197][ T2192] xsk_init_queue+0xb0/0x110 [ 2287.634217][ T2192] xsk_setsockopt+0x43f/0x710 [ 2287.634238][ T2192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2287.634264][ T2192] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2287.634282][ T2192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2287.634301][ T2192] do_sock_setsockopt+0x257/0x3e0 [ 2287.634324][ T2192] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2287.634343][ T2192] ? __fget_files+0x2a/0x420 [ 2287.634367][ T2192] ? __fget_files+0x3a0/0x420 [ 2287.634387][ T2192] ? __fget_files+0x2a/0x420 [ 2287.634414][ T2192] __ia32_sys_setsockopt+0x18b/0x220 [ 2287.634440][ T2192] __do_fast_syscall_32+0xb4/0x110 [ 2287.634462][ T2192] ? lockdep_hardirqs_on+0x9c/0x150 [ 2287.634484][ T2192] do_fast_syscall_32+0x34/0x80 [ 2287.634506][ T2192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2287.634524][ T2192] RIP: 0023:0xf7f97539 [ 2287.634537][ T2192] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2287.634551][ T2192] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2287.634567][ T2192] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000000011b [ 2287.634578][ T2192] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 2287.634587][ T2192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2287.634596][ T2192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2287.634605][ T2192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2287.634626][ T2192] [ 2287.634633][ T2192] Mem-Info: [ 2287.701602][ T30] audit: type=1326 audit(1747856704.218:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2287.981152][ T2192] active_anon:10993 inactive_anon:0 isolated_anon:0 [ 2287.981152][ T2192] active_file:24794 inactive_file:40915 isolated_file:0 [ 2287.981152][ T2192] unevictable:768 dirty:3379 writeback:0 [ 2287.981152][ T2192] slab_reclaimable:10214 slab_unreclaimable:119761 [ 2287.981152][ T2192] mapped:33951 shmem:1372 pagetables:1049 [ 2287.981152][ T2192] sec_pagetables:0 bounce:0 [ 2287.981152][ T2192] kernel_misc_reclaimable:0 [ 2287.981152][ T2192] free:1272803 free_pcp:1080 free_cma:0 [ 2288.026641][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.107922][ T2192] Node 0 active_anon:43172kB inactive_anon:0kB active_file:99172kB inactive_file:163424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134268kB dirty:13516kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2288.114397][ T30] audit: type=1326 audit(1747856704.218:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2175 comm="syz.5.8253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2288.141489][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.177061][ T2192] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2288.223328][ T2192] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2288.251527][T19862] usb 6-1: config index 0 descriptor too short (expected 60401, got 77) [ 2288.259874][T19862] usb 6-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2288.273106][T19862] usb 6-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2288.297629][T19862] usb 6-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2288.308391][ T2192] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 2288.314299][T19862] usb 6-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2288.314326][T19862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.314345][T19862] usb 6-1: Product: syz [ 2288.314361][T19862] usb 6-1: Manufacturer: syz [ 2288.314375][T19862] usb 6-1: SerialNumber: syz [ 2288.348205][ T2192] Node 0 DMA32 free:1168852kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:42264kB inactive_anon:0kB active_file:99172kB inactive_file:163328kB unevictable:1536kB writepending:13516kB present:3129332kB managed:2564112kB mlocked:0kB bounce:0kB free_pcp:4064kB local_pcp:3224kB free_cma:0kB [ 2288.379554][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.389548][ T2192] lowmem_reserve[]: 0 0 0 0 0 [ 2288.404752][ T2192] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2288.431375][ C1] vkms_vblank_simulate: vblank timer overrun [ 2288.451291][ T2192] lowmem_reserve[]: 0 0 0 0 0 [ 2288.456310][ T2192] Node 1 Normal free:3909368kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:236kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2288.487766][ T2192] lowmem_reserve[]: 0 0 0 0 0 [ 2288.494154][ T2192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2288.507613][ T2192] Node 0 DMA32: 1237*4kB (UE) 726*8kB (UME) 909*16kB (UME) 529*32kB (UME) 332*64kB (UME) 171*128kB (UME) 98*256kB (UME) 275*512kB (UME) 304*1024kB (UM) 8*2048kB (UM) 144*4096kB (UM) = 1168756kB [ 2288.527866][ T2192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2288.544968][ T2192] Node 1 Normal: 256*4kB (UME) 67*8kB (UME) 66*16kB (UME) 240*32kB (UME) 101*64kB (UME) 41*128kB (UME) 15*256kB (UM) 11*512kB (UME) 3*1024kB (UE) 6*2048kB (UME) 943*4096kB (M) = 3909368kB [ 2288.590068][ T2192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2288.612363][ T2192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2288.644526][ T2192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2288.670451][ T2192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2288.686724][ T2192] 67077 total pagecache pages [ 2288.692058][ T2192] 0 pages in swap cache [ 2288.697309][ T2192] Free swap = 124996kB [ 2288.708894][ T2192] Total swap = 124996kB [ 2288.715906][ T2192] 2097051 pages RAM [ 2288.722768][ T2200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8259'. [ 2288.732155][ T2192] 0 pages HighMem/MovableOnly [ 2288.736917][ T2192] 424365 pages reserved [ 2288.743104][ T2200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2288.750761][ T2192] 0 pages cma reserved [ 2288.755226][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2288.929016][ T2200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2288.943359][ T2200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2289.019830][ T2203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8259'. [ 2289.330905][T13733] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2289.542844][T13733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2289.621102][T13733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2289.734140][T13733] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 2289.761628][T13733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.807386][T13733] usb 3-1: config 0 descriptor?? [ 2290.032125][T19862] usb 6-1: USB disconnect, device number 75 [ 2290.224170][ T2216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8263'. [ 2290.249426][T13733] logitech-djreceiver 0003:046D:C534.0064: unbalanced delimiter at end of report description [ 2290.274366][T13733] logitech-djreceiver 0003:046D:C534.0064: logi_dj_probe: parse failed [ 2290.286043][ T2217] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8263'. [ 2290.302120][ T2217] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8263'. [ 2290.311727][T13733] logitech-djreceiver 0003:046D:C534.0064: probe with driver logitech-djreceiver failed with error -22 [ 2290.446473][ T2202] netlink: 'syz.2.8260': attribute type 11 has an invalid length. [ 2290.475870][T19862] usb 3-1: USB disconnect, device number 82 [ 2291.271696][T19862] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2291.690196][T19862] usb 2-1: Using ep0 maxpacket: 16 [ 2291.715001][T19862] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 2291.740852][T19862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2291.761474][T19862] usb 2-1: config 0 has no interface number 0 [ 2291.776082][T19862] usb 2-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2291.800172][ T5828] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2291.866414][T19862] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 2291.879418][T19862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.900665][T19862] usb 2-1: Product: syz [ 2291.908230][T19862] usb 2-1: Manufacturer: syz [ 2292.265295][T19862] usb 2-1: SerialNumber: syz [ 2292.272482][ T5828] usb 3-1: config 0 has no interfaces? [ 2292.274902][T19862] usb 2-1: config 0 descriptor?? [ 2292.468408][ T5828] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2292.483445][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.519822][ T5828] usb 3-1: Product: syz [ 2292.528832][ T5828] usb 3-1: Manufacturer: syz [ 2292.542653][ T5828] usb 3-1: SerialNumber: syz [ 2292.543998][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2292.544014][ T30] audit: type=1400 audit(1747856710.298:3355): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: config 0 descriptor?? [ 2292.696383][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2292.709245][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2292.741720][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2292.757203][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2292.780059][T19862] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2292.799910][ T30] audit: type=1326 audit(1747856710.548:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2292.920398][T19862] usb 4-1: device descriptor read/64, error -71 [ 2292.980282][ T30] audit: type=1326 audit(1747856710.548:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.002384][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.086015][T13733] usb 2-1: USB disconnect, device number 94 [ 2293.170027][T19862] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2293.276446][ T30] audit: type=1326 audit(1747856710.548:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.351483][ T30] audit: type=1326 audit(1747856710.548:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.360048][T19862] usb 4-1: device descriptor read/64, error -71 [ 2293.459111][ T30] audit: type=1326 audit(1747856710.548:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.518041][ T30] audit: type=1326 audit(1747856710.548:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.540742][ T30] audit: type=1326 audit(1747856710.548:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.563239][ T30] audit: type=1326 audit(1747856710.548:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2293.566284][T19862] usb usb4-port1: attempt power cycle [ 2293.585206][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.622815][ T2249] fuse: Bad value for 'fd' [ 2293.633266][ T2249] netlink: 'syz.2.8264': attribute type 12 has an invalid length. [ 2293.927739][ T30] audit: type=1326 audit(1747856710.548:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2233 comm="syz.5.8268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2294.128515][T19862] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2294.200522][T19862] usb 4-1: device descriptor read/8, error -71 [ 2294.450131][T19862] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2294.630552][T19862] usb 4-1: device descriptor read/8, error -71 [ 2294.740293][T19862] usb usb4-port1: unable to enumerate USB device [ 2294.918580][ T5828] usb 3-1: USB disconnect, device number 83 [ 2296.146462][ T2273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8279'. [ 2298.029685][T19862] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2298.200152][T19862] usb 4-1: Using ep0 maxpacket: 8 [ 2298.207013][T19862] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.224745][T19862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2298.235239][T19862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.434333][ T2302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8288'. [ 2298.671456][ T2294] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2299.570690][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'. [ 2299.641925][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8291'. [ 2299.663215][ T2319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8291'. [ 2299.684513][ T2319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8291'. [ 2299.704247][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2299.704262][ T30] audit: type=1326 audit(1747856717.448:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.732666][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.742630][ T30] audit: type=1326 audit(1747856717.448:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.769573][ T30] audit: type=1326 audit(1747856717.458:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.805664][ T30] audit: type=1326 audit(1747856717.458:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.876299][ T30] audit: type=1326 audit(1747856717.458:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.900243][ T30] audit: type=1326 audit(1747856717.458:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.925441][ T30] audit: type=1326 audit(1747856717.458:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.949803][ T30] audit: type=1326 audit(1747856717.458:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2299.975851][ T30] audit: type=1326 audit(1747856717.458:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2300.001951][ T30] audit: type=1326 audit(1747856717.458:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2321 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2300.650027][T27680] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2300.772720][ T5828] usb 4-1: USB disconnect, device number 28 [ 2300.996044][T27680] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2301.026228][T27680] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2301.056632][T27680] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2301.216068][T27680] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2301.296670][ T5828] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2301.476609][ T5828] usb 4-1: config index 0 descriptor too short (expected 60401, got 77) [ 2301.496456][ T5828] usb 4-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2301.546274][ T5828] usb 4-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2301.592600][ T5828] usb 4-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2301.637547][T27680] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2301.647286][T27680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.684609][ T5828] usb 4-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2301.713608][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.728255][T27680] usb 3-1: Product: syz [ 2301.833170][T27680] usb 3-1: Manufacturer: syz [ 2301.864483][ T5828] usb 4-1: Product: syz [ 2301.880201][T27680] usb 3-1: SerialNumber: syz [ 2301.904547][ T5828] usb 4-1: Manufacturer: syz [ 2301.925155][ T5828] usb 4-1: SerialNumber: syz [ 2302.409734][ T2346] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2303.632057][ T2362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8300'. [ 2304.275160][T27680] usb 3-1: USB disconnect, device number 84 [ 2304.461111][ T5828] usb 4-1: USB disconnect, device number 29 [ 2304.970280][ T5828] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2305.122739][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8305'. [ 2305.190971][ T5828] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 2305.226693][ T5828] usb 4-1: config 0 has no interface number 0 [ 2305.257703][ T5828] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2305.283692][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.336414][ T5828] usb 4-1: Product: syz [ 2305.344595][ T5828] usb 4-1: Manufacturer: syz [ 2305.349224][ T5828] usb 4-1: SerialNumber: syz [ 2305.376259][ T5828] usb 4-1: config 0 descriptor?? [ 2305.619020][ T2388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8309'. [ 2305.989665][ T2402] fuse: Bad value for 'group_id' [ 2306.001854][ T2402] fuse: Bad value for 'group_id' [ 2306.750132][T14308] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2306.770620][T27680] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2306.930164][T14308] usb 3-1: Using ep0 maxpacket: 8 [ 2306.940171][T14308] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2306.952353][T14308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.965248][T14308] usb 3-1: Product: syz [ 2306.969550][T14308] usb 3-1: Manufacturer: syz [ 2306.977471][T14308] usb 3-1: SerialNumber: syz [ 2306.995463][T14308] usb 3-1: config 0 descriptor?? [ 2307.008344][T27680] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2307.017554][T27680] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2307.030721][T27680] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2307.048022][T27680] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2307.067076][T27680] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2307.077388][T27680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.086135][T27680] usb 2-1: Product: syz [ 2307.091391][T27680] usb 2-1: Manufacturer: syz [ 2307.096308][T27680] usb 2-1: SerialNumber: syz [ 2307.214821][T14308] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2307.697581][ T5828] snd_usb_variax 4-1:0.40: Line 6 Variax Workbench found [ 2307.732964][ T5828] usb 4-1: selecting invalid altsetting 1 [ 2307.766683][ T5828] snd_usb_variax 4-1:0.40: set_interface failed [ 2308.117875][ T5828] snd_usb_variax 4-1:0.40: Line 6 Variax Workbench now disconnected [ 2308.247747][ T5828] snd_usb_variax 4-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2308.341097][ T5828] usb 4-1: USB disconnect, device number 30 [ 2308.443193][T14308] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2309.431390][T27680] usb 2-1: USB disconnect, device number 95 [ 2309.559195][ T5828] usb 3-1: USB disconnect, device number 85 [ 2309.848412][ T2466] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 2310.250180][ T5828] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2310.421582][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 2310.427151][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8323'. [ 2310.434634][ T5828] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 25 [ 2310.449546][ T5828] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2310.460072][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.483121][ T5828] usb 3-1: Product: syz [ 2310.503677][ T5828] usb 3-1: Manufacturer: syz [ 2310.512374][ T5828] usb 3-1: SerialNumber: syz [ 2310.549103][ T5828] usb 3-1: config 0 descriptor?? [ 2310.562343][ T5828] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2310.740428][T27680] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2310.762656][ T5828] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 2310.986928][T27680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2310.998049][T27680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2311.019690][T27680] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2311.032308][T27680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.046840][T27680] usb 4-1: config 0 descriptor?? [ 2311.501709][T27680] samsung 0003:0419:0600.0065: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 2311.713122][T19862] usb 4-1: USB disconnect, device number 31 [ 2311.767467][ T2493] fido_id[2493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 2311.810211][T13733] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2312.004473][T13733] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2312.019268][T13733] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2312.029636][T13733] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2312.056321][T13733] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2312.075515][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8329'. [ 2312.090254][ T2499] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8329'. [ 2312.100063][ T2499] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8329'. [ 2312.110188][T13733] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2312.119434][T13733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.127786][T13733] usb 2-1: Product: syz [ 2312.132102][T13733] usb 2-1: Manufacturer: syz [ 2312.136893][T13733] usb 2-1: SerialNumber: syz [ 2312.634749][ T2513] QAT: failed to copy from user. [ 2313.071138][T19862] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2313.210281][T19862] usb 4-1: device descriptor read/64, error -71 [ 2313.498268][ T5955] usb 3-1: USB disconnect, device number 86 [ 2313.550734][T19862] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2313.639852][ T2527] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2313.706367][T19862] usb 4-1: device descriptor read/64, error -71 [ 2313.830589][T19862] usb usb4-port1: attempt power cycle [ 2314.078005][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8337'. [ 2314.260139][T19862] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2314.302588][T19862] usb 4-1: device descriptor read/8, error -71 [ 2314.570301][T19862] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2314.604685][T19862] usb 4-1: device descriptor read/8, error -71 [ 2314.698045][T13733] usb 2-1: USB disconnect, device number 96 [ 2314.750451][T19862] usb usb4-port1: unable to enumerate USB device [ 2315.061595][ T2547] batman_adv: batadv0: Adding interface: dummy0 [ 2315.067982][ T2547] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2315.093700][T19862] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2315.102260][ T2547] batman_adv: batadv0: Interface activated: dummy0 [ 2315.220120][T13733] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2315.240089][T19862] usb 3-1: Using ep0 maxpacket: 32 [ 2315.247039][T19862] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2315.256695][T19862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.298841][T19862] usb 3-1: config 0 descriptor?? [ 2315.370055][T13733] usb 2-1: Using ep0 maxpacket: 32 [ 2315.387274][T13733] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2315.406561][T13733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.463293][T13733] usb 2-1: config 0 descriptor?? [ 2315.498122][ T2549] pimreg0: tun_chr_ioctl cmd 35108 [ 2315.514431][T19862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2315.533431][T19862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2315.596233][T19862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2315.631823][T19862] usb 3-1: media controller created [ 2315.675759][T13733] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2315.694242][T13733] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2315.717820][ T2535] FAULT_INJECTION: forcing a failure. [ 2315.717820][ T2535] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.721051][T19862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2315.810059][ T2535] CPU: 0 UID: 0 PID: 2535 Comm: syz.2.8339 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2315.810086][ T2535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2315.810098][ T2535] Call Trace: [ 2315.810106][ T2535] [ 2315.810115][ T2535] dump_stack_lvl+0x189/0x250 [ 2315.810151][ T2535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2315.810178][ T2535] ? __pfx__printk+0x10/0x10 [ 2315.810201][ T2535] ? __pfx___might_resched+0x10/0x10 [ 2315.810220][ T2535] ? fs_reclaim_acquire+0x7d/0x100 [ 2315.810253][ T2535] should_fail_ex+0x414/0x560 [ 2315.810298][ T2535] should_failslab+0xa8/0x100 [ 2315.810327][ T2535] __kmalloc_noprof+0xcb/0x4f0 [ 2315.810352][ T2535] ? compat_i2cdev_ioctl+0x317/0x5c0 [ 2315.810385][ T2535] compat_i2cdev_ioctl+0x317/0x5c0 [ 2315.810421][ T2535] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2315.810444][ T2535] ? __fget_files+0x3a0/0x420 [ 2315.810469][ T2535] ? __fget_files+0x2a/0x420 [ 2315.810498][ T2535] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2315.810528][ T2535] __ia32_compat_sys_ioctl+0x551/0x840 [ 2315.810552][ T2535] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2315.810575][ T2535] ? __fget_files+0x3a0/0x420 [ 2315.810607][ T2535] ? fput+0xa0/0xd0 [ 2315.810636][ T2535] ? ksys_write+0x1f0/0x250 [ 2315.810655][ T2535] ? rcu_is_watching+0x15/0xb0 [ 2315.810679][ T2535] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2315.810705][ T2535] ? lockdep_hardirqs_on+0x9c/0x150 [ 2315.810731][ T2535] __do_fast_syscall_32+0xb4/0x110 [ 2315.810765][ T2535] do_fast_syscall_32+0x34/0x80 [ 2315.810791][ T2535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2315.810815][ T2535] RIP: 0023:0xf7f97539 [ 2315.810831][ T2535] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2315.810848][ T2535] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2315.810870][ T2535] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2315.810883][ T2535] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2315.810895][ T2535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2315.810906][ T2535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2315.810917][ T2535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2315.810945][ T2535] [ 2316.122361][T13733] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2316.129551][T13733] usb 2-1: media controller created [ 2316.159353][T13733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2316.177901][T13733] az6027: usb out operation failed. (-71) [ 2316.184260][T13733] az6027: usb out operation failed. (-71) [ 2316.190093][T13733] stb0899_attach: Driver disabled by Kconfig [ 2316.196079][T13733] az6027: no front-end attached [ 2316.196079][T13733] [ 2316.203542][T13733] az6027: usb out operation failed. (-71) [ 2316.209290][T13733] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2316.218178][T13733] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input96 [ 2316.230664][T13733] dvb-usb: schedule remote query interval to 400 msecs. [ 2316.237613][T13733] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2316.248276][T13733] usb 2-1: USB disconnect, device number 97 [ 2316.274892][T19862] az6027: usb out operation failed. (-71) [ 2316.298574][T19862] az6027: usb out operation failed. (-71) [ 2316.314333][T19862] stb0899_attach: Driver disabled by Kconfig [ 2316.322787][T19862] az6027: no front-end attached [ 2316.322787][T19862] [ 2316.330250][T19862] az6027: usb out operation failed. (-71) [ 2316.339782][T19862] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2316.353156][T19862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input97 [ 2316.423348][T19862] dvb-usb: schedule remote query interval to 400 msecs. [ 2316.458427][ T2561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8345'. [ 2316.468838][T19862] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2316.530980][ T2561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8345'. [ 2316.540829][T13733] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2316.558701][ T2561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8345'. [ 2316.568154][T19862] usb 3-1: USB disconnect, device number 87 [ 2316.699790][T19862] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2317.021519][T27680] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2317.082801][ T2582] FAULT_INJECTION: forcing a failure. [ 2317.082801][ T2582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.100112][ T2582] CPU: 1 UID: 0 PID: 2582 Comm: syz.1.8353 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2317.100137][ T2582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2317.100148][ T2582] Call Trace: [ 2317.100157][ T2582] [ 2317.100165][ T2582] dump_stack_lvl+0x189/0x250 [ 2317.100192][ T2582] ? __lock_acquire+0xaac/0xd20 [ 2317.100220][ T2582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2317.100245][ T2582] ? __pfx__printk+0x10/0x10 [ 2317.100308][ T2582] ? __might_fault+0xb0/0x130 [ 2317.100352][ T2582] should_fail_ex+0x414/0x560 [ 2317.100378][ T2582] _copy_from_user+0x2d/0xb0 [ 2317.100404][ T2582] get_compat_msghdr+0xad/0x4a0 [ 2317.100434][ T2582] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2317.100468][ T2582] ___sys_sendmsg+0x193/0x2a0 [ 2317.100496][ T2582] ? __pfx____sys_sendmsg+0x10/0x10 [ 2317.100553][ T2582] ? __fget_files+0x2a/0x420 [ 2317.100576][ T2582] ? __fget_files+0x3a0/0x420 [ 2317.100609][ T2582] __sys_sendmsg+0x164/0x220 [ 2317.100636][ T2582] ? __pfx___sys_sendmsg+0x10/0x10 [ 2317.100674][ T2582] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2317.100699][ T2582] ? lockdep_hardirqs_on+0x9c/0x150 [ 2317.100723][ T2582] __do_fast_syscall_32+0xb4/0x110 [ 2317.100748][ T2582] ? lockdep_hardirqs_on+0x9c/0x150 [ 2317.100774][ T2582] do_fast_syscall_32+0x34/0x80 [ 2317.100798][ T2582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2317.100820][ T2582] RIP: 0023:0xf7fd4539 [ 2317.100836][ T2582] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2317.100851][ T2582] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2317.100871][ T2582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2317.100883][ T2582] RDX: 0000000020044050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.100892][ T2582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.100902][ T2582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2317.100912][ T2582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.100938][ T2582] [ 2317.478052][T27680] usb 6-1: config 0 has an invalid interface number: 40 but max is 0 [ 2317.487236][T27680] usb 6-1: config 0 has no interface number 0 [ 2317.497536][T27680] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2317.510275][T27680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.518288][T27680] usb 6-1: Product: syz [ 2317.522479][T27680] usb 6-1: Manufacturer: syz [ 2317.527070][T27680] usb 6-1: SerialNumber: syz [ 2317.533737][T27680] usb 6-1: config 0 descriptor?? [ 2317.840487][T13733] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2318.145662][T13733] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2318.154451][T13733] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2318.178202][T13733] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2318.229058][T13733] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2318.262850][T13733] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2318.272444][T13733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.280652][T13733] usb 3-1: Product: syz [ 2318.285490][T13733] usb 3-1: Manufacturer: syz [ 2318.291305][T13733] usb 3-1: SerialNumber: syz [ 2318.750123][ T5828] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2319.122501][ T5828] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2319.132131][ T5828] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2319.226428][ T5828] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2319.509636][ T5828] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2319.635734][ T5828] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2319.668164][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.680015][ T5828] usb 2-1: Product: syz [ 2319.684244][ T5828] usb 2-1: Manufacturer: syz [ 2319.694200][ T5828] usb 2-1: SerialNumber: syz [ 2319.850858][T27680] snd_usb_variax 6-1:0.40: Line 6 Variax Workbench found [ 2319.934125][T27680] usb 6-1: selecting invalid altsetting 1 [ 2320.001243][T27680] snd_usb_variax 6-1:0.40: set_interface failed [ 2320.020525][ T2614] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 2320.022785][T27680] snd_usb_variax 6-1:0.40: Line 6 Variax Workbench now disconnected [ 2320.066999][T27680] snd_usb_variax 6-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2320.118618][ T2620] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2320.158809][T27680] usb 6-1: USB disconnect, device number 76 [ 2320.324893][T13733] usb 3-1: USB disconnect, device number 88 [ 2320.552782][ T2624] syz.2.8360(2624): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2320.830793][T27680] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 2320.992165][T27680] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 2321.001449][T27680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.070606][T27680] usb 6-1: config 0 descriptor?? [ 2321.300974][ T2642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8365'. [ 2321.485814][T27680] chicony 0003:04F2:1236.0066: unknown main item tag 0x4 [ 2321.496190][T27680] chicony 0003:04F2:1236.0066: item fetching failed at offset 4/5 [ 2321.507051][T27680] chicony 0003:04F2:1236.0066: Chicony hid parse failed: -22 [ 2321.516100][T27680] chicony 0003:04F2:1236.0066: probe with driver chicony failed with error -22 [ 2321.754596][ T2643] Cannot find set identified by id 3 to match [ 2322.258826][ T5828] usb 2-1: USB disconnect, device number 98 [ 2322.460895][T19862] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2322.590047][T13733] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2322.610075][T19862] usb 4-1: Using ep0 maxpacket: 8 [ 2322.617624][T19862] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2322.628023][T19862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2322.637126][T19862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.691277][ T5828] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2322.740123][T13733] usb 3-1: Using ep0 maxpacket: 8 [ 2322.746679][T13733] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2322.757025][T13733] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2322.770271][T13733] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2322.779321][T13733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.801194][T13733] usbtmc 3-1:16.0: bulk endpoints not found [ 2322.853106][ T5828] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 2322.864805][ T5828] usb 2-1: config 0 has no interface number 0 [ 2322.873376][ T5828] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2322.883271][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.891470][ T5828] usb 2-1: Product: syz [ 2322.897678][ T5828] usb 2-1: Manufacturer: syz [ 2322.902384][ T5828] usb 2-1: SerialNumber: syz [ 2322.909339][ T5828] usb 2-1: config 0 descriptor?? [ 2323.531135][T13733] usb 6-1: USB disconnect, device number 77 [ 2323.596942][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2323.596961][ T30] audit: type=1400 audit(1747856741.348:3422): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 2323.718440][ T30] audit: type=1326 audit(1747856741.468:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.745436][ T30] audit: type=1326 audit(1747856741.498:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.777497][ T30] audit: type=1326 audit(1747856741.498:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.800415][ T30] audit: type=1326 audit(1747856741.498:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.824376][ T30] audit: type=1326 audit(1747856741.498:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.847679][ T30] audit: type=1326 audit(1747856741.498:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.900842][ T30] audit: type=1326 audit(1747856741.498:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.946548][ T30] audit: type=1326 audit(1747856741.498:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2323.982253][ T30] audit: type=1326 audit(1747856741.498:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2660 comm="syz.5.8370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 2324.084196][ T2668] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2324.430227][T13733] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2324.606182][T13733] usb 6-1: config index 0 descriptor too short (expected 60401, got 77) [ 2324.629823][T13733] usb 6-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2324.676240][T13733] usb 6-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2324.726608][T13733] usb 6-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2324.798926][T13733] usb 6-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2324.826774][T13733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.862243][T13733] usb 6-1: Product: syz [ 2324.872316][T13733] usb 6-1: Manufacturer: syz [ 2324.884711][T13733] usb 6-1: SerialNumber: syz [ 2325.218698][T19862] usb 4-1: USB disconnect, device number 36 [ 2325.384523][T27680] usb 3-1: USB disconnect, device number 89 [ 2325.443781][ T5828] snd_usb_variax 2-1:0.40: Line 6 Variax Workbench found [ 2325.475756][ T5828] usb 2-1: selecting invalid altsetting 1 [ 2325.552081][ T5828] snd_usb_variax 2-1:0.40: set_interface failed [ 2325.706113][ T5828] snd_usb_variax 2-1:0.40: Line 6 Variax Workbench now disconnected [ 2325.727597][ T5828] snd_usb_variax 2-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2325.783521][ T5828] usb 2-1: USB disconnect, device number 99 [ 2325.797327][ T2695] bond0: (slave batadv0): Releasing backup interface [ 2326.022102][T27680] hid (null): unknown global tag 0xc [ 2326.024577][ T2695] bridge_slave_0: left allmulticast mode [ 2326.041112][T27680] hid-generic 0002:0007:0006.0067: reserved main item tag 0xd [ 2326.097089][T27680] hid-generic 0002:0007:0006.0067: unexpected long global item [ 2326.138225][ T2695] bridge_slave_0: left promiscuous mode [ 2326.166896][T27680] hid-generic 0002:0007:0006.0067: probe with driver hid-generic failed with error -22 [ 2326.180665][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.211253][ T5955] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2326.284283][ T2695] bridge_slave_1: left allmulticast mode [ 2326.314194][ T2695] bridge_slave_1: left promiscuous mode [ 2326.329702][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.407722][ T2695] bond0: (slave bond_slave_0): Releasing backup interface [ 2326.450172][ T2695] bond0: (slave bond_slave_1): Releasing backup interface [ 2326.521497][ T2695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2326.591208][ T2695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2326.608528][ T5955] usb 3-1: config index 0 descriptor too short (expected 60401, got 77) [ 2326.657559][ T5955] usb 3-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2326.721162][ T2695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2326.736391][ T5955] usb 3-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2326.757104][ T5955] usb 3-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2326.771075][ T2695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2326.864840][ T2695] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2326.933616][ T2695] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2326.948129][ T2695] bridge0: port 4(netdevsim0) entered disabled state [ 2326.978547][ T2706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8380'. [ 2327.004730][ T5955] usb 3-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2327.014168][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.022669][ T5955] usb 3-1: Product: syz [ 2327.027818][ T5955] usb 3-1: Manufacturer: syz [ 2327.039220][ T5955] usb 3-1: SerialNumber: syz [ 2327.576278][T13733] usb 6-1: USB disconnect, device number 78 [ 2327.671837][T27680] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2327.906430][T27680] usb 2-1: config index 0 descriptor too short (expected 60401, got 77) [ 2327.929886][T27680] usb 2-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2327.951134][T27680] usb 2-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2328.050004][T27680] usb 2-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2328.270293][T27680] usb 2-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2328.279356][T27680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.287651][T27680] usb 2-1: Product: syz [ 2328.292057][T27680] usb 2-1: Manufacturer: syz [ 2328.296659][T27680] usb 2-1: SerialNumber: syz [ 2328.546712][ T2725] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2329.526057][ T5955] usb 3-1: USB disconnect, device number 90 [ 2329.548980][ T2734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8386'. [ 2330.000228][ T5955] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2330.180401][ T5955] usb 3-1: config 0 has an invalid interface number: 40 but max is 0 [ 2330.209254][ T5955] usb 3-1: config 0 has no interface number 0 [ 2330.218685][ T5955] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=be.b9 [ 2330.228336][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.236790][ T5955] usb 3-1: Product: syz [ 2330.241335][ T5955] usb 3-1: Manufacturer: syz [ 2330.246051][ T5955] usb 3-1: SerialNumber: syz [ 2330.250228][ T5828] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2330.289861][T27680] usb 2-1: USB disconnect, device number 100 [ 2330.333675][ T5955] usb 3-1: config 0 descriptor?? [ 2330.460300][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 2330.467316][ T5828] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2330.489454][ T5828] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2330.492805][ T2749] FAULT_INJECTION: forcing a failure. [ 2330.492805][ T2749] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.513728][ T2749] CPU: 0 UID: 0 PID: 2749 Comm: syz.1.8391 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2330.513754][ T2749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2330.513767][ T2749] Call Trace: [ 2330.513775][ T2749] [ 2330.513784][ T2749] dump_stack_lvl+0x189/0x250 [ 2330.513825][ T2749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2330.513853][ T2749] ? __pfx__printk+0x10/0x10 [ 2330.513874][ T2749] ? __pfx___might_resched+0x10/0x10 [ 2330.513893][ T2749] ? fs_reclaim_acquire+0x7d/0x100 [ 2330.513926][ T2749] should_fail_ex+0x414/0x560 [ 2330.513951][ T2749] should_failslab+0xa8/0x100 [ 2330.513978][ T2749] __kmalloc_cache_noprof+0x70/0x3d0 [ 2330.514002][ T2749] ? alloc_netdev_mqs+0xc36/0x11e0 [ 2330.514025][ T2749] alloc_netdev_mqs+0xc36/0x11e0 [ 2330.514051][ T2749] rtnl_create_link+0x31f/0xd10 [ 2330.514075][ T2749] veth_newlink+0x291/0xa50 [ 2330.514102][ T2749] ? __pfx_veth_newlink+0x10/0x10 [ 2330.514123][ T2749] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 2330.514138][ T2749] ? rtnl_create_link+0x31f/0xd10 [ 2330.514153][ T2749] ? rtnl_newlink_create+0x258/0xaf0 [ 2330.514176][ T2749] ? rtnl_newlink+0x16d6/0x1c70 [ 2330.514195][ T2749] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 2330.514215][ T2749] ? netlink_rcv_skb+0x21c/0x490 [ 2330.514234][ T2749] ? netlink_unicast+0x758/0x8d0 [ 2330.514251][ T2749] ? netlink_sendmsg+0x805/0xb30 [ 2330.514283][ T2749] ? __sock_sendmsg+0x219/0x270 [ 2330.514301][ T2749] ? __sys_sendmsg+0x164/0x220 [ 2330.514323][ T2749] ? __do_fast_syscall_32+0xb4/0x110 [ 2330.514399][ T2749] ? __asan_memset+0x22/0x50 [ 2330.514417][ T2749] ? dev_addr_mod+0x2ce/0x3d0 [ 2330.514451][ T2749] ? __pfx_veth_newlink+0x10/0x10 [ 2330.514474][ T2749] rtnl_newlink_create+0x308/0xaf0 [ 2330.514503][ T2749] ? __pfx_aa_get_newest_label+0x10/0x10 [ 2330.514527][ T2749] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2330.514548][ T2749] ? rtnl_newlink+0x8db/0x1c70 [ 2330.514571][ T2749] ? __pfx___mutex_lock+0x10/0x10 [ 2330.514601][ T2749] ? full_name_hash+0x89/0xe0 [ 2330.514625][ T2749] ? netdev_name_node_lookup+0x32/0x120 [ 2330.514660][ T2749] rtnl_newlink+0x16d6/0x1c70 [ 2330.514681][ T2749] ? kasan_save_track+0x3e/0x80 [ 2330.514713][ T2749] ? __pfx_rtnl_newlink+0x10/0x10 [ 2330.514809][ T2749] ? aa_get_newest_label+0xf7/0x5d0 [ 2330.514833][ T2749] ? __lock_acquire+0xaac/0xd20 [ 2330.514881][ T2749] ? __pfx_rtnl_newlink+0x10/0x10 [ 2330.514901][ T2749] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2330.514924][ T2749] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2330.514944][ T2749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2330.514969][ T2749] ? ref_tracker_free+0x63a/0x7d0 [ 2330.514988][ T2749] ? __copy_skb_header+0xa7/0x550 [ 2330.515021][ T2749] netlink_rcv_skb+0x21c/0x490 [ 2330.515043][ T2749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2330.515066][ T2749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2330.515106][ T2749] ? netlink_deliver_tap+0x2e/0x1b0 [ 2330.515126][ T2749] ? netlink_deliver_tap+0x2e/0x1b0 [ 2330.515153][ T2749] netlink_unicast+0x758/0x8d0 [ 2330.515182][ T2749] netlink_sendmsg+0x805/0xb30 [ 2330.515213][ T2749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2330.515237][ T2749] ? __import_iovec+0x5d4/0x7f0 [ 2330.515260][ T2749] ? aa_sock_msg_perm+0x94/0x160 [ 2330.515282][ T2749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2330.515302][ T2749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2330.515325][ T2749] __sock_sendmsg+0x219/0x270 [ 2330.515346][ T2749] ____sys_sendmsg+0x505/0x830 [ 2330.515377][ T2749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2330.515418][ T2749] ___sys_sendmsg+0x21f/0x2a0 [ 2330.515444][ T2749] ? __pfx____sys_sendmsg+0x10/0x10 [ 2330.515504][ T2749] ? __fget_files+0x2a/0x420 [ 2330.515527][ T2749] ? __fget_files+0x3a0/0x420 [ 2330.515560][ T2749] __sys_sendmsg+0x164/0x220 [ 2330.515587][ T2749] ? __pfx___sys_sendmsg+0x10/0x10 [ 2330.515626][ T2749] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2330.515649][ T2749] ? lockdep_hardirqs_on+0x9c/0x150 [ 2330.515674][ T2749] __do_fast_syscall_32+0xb4/0x110 [ 2330.515699][ T2749] ? lockdep_hardirqs_on+0x9c/0x150 [ 2330.515725][ T2749] do_fast_syscall_32+0x34/0x80 [ 2330.515750][ T2749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2330.515771][ T2749] RIP: 0023:0xf7fd4539 [ 2330.515786][ T2749] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2330.515807][ T2749] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2330.515826][ T2749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2330.515839][ T2749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2330.515850][ T2749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2330.515860][ T2749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2330.515871][ T2749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2330.515897][ T2749] [ 2330.516676][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.702012][ T5955] snd_usb_variax 3-1:0.40: Line 6 Variax Workbench found [ 2332.718156][ T5955] usb 3-1: selecting invalid altsetting 1 [ 2332.733986][ T5955] snd_usb_variax 3-1:0.40: set_interface failed [ 2332.751800][ T5955] snd_usb_variax 3-1:0.40: Line 6 Variax Workbench now disconnected [ 2332.764631][ T5955] snd_usb_variax 3-1:0.40: probe with driver snd_usb_variax failed with error -22 [ 2332.787115][ T5955] usb 3-1: USB disconnect, device number 91 [ 2332.801378][ T2776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2332.812192][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2332.831267][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2332.874277][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2333.464987][ T5955] usb 6-1: USB disconnect, device number 79 [ 2333.471122][ T5828] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2333.630906][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 2333.648270][ T5828] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2333.665355][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.686073][ T5828] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2333.693351][ T5828] pvrusb2: ********** [ 2333.697442][ T5828] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2333.708903][ T5828] pvrusb2: Important functionality might not be entirely working. [ 2333.719034][ T5828] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2333.731006][ T5828] pvrusb2: ********** [ 2333.910359][ T2341] pvrusb2: Invalid write control endpoint [ 2334.105507][ T2341] pvrusb2: Invalid write control endpoint [ 2334.180348][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2334.189649][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2334.203374][T19862] usb 3-1: USB disconnect, device number 92 [ 2334.244814][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2334.288995][ T2341] pvrusb2: Device being rendered inoperable [ 2334.319416][ T2341] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2334.339789][ T2341] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 2334.371067][ T2341] pvrusb2: Attached sub-driver cx25840 [ 2334.389152][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2334.415458][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2335.670652][T19862] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2335.830624][T19862] usb 2-1: Using ep0 maxpacket: 16 [ 2335.842194][T19862] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2335.941278][T19862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.968404][ T30] kauditd_printk_skb: 503 callbacks suppressed [ 2335.968420][ T30] audit: type=1400 audit(1747856753.718:3935): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: Product: syz [ 2336.070267][T19862] usb 2-1: Manufacturer: syz [ 2336.070282][T19862] usb 2-1: SerialNumber: syz [ 2336.390307][ T2803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2336.404200][ T2803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2336.424953][ C0] [ 2336.427313][ C0] ======================================================== [ 2336.434517][ C0] WARNING: possible irq lock inversion dependency detected [ 2336.441723][ C0] 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 Not tainted [ 2336.448854][ C0] -------------------------------------------------------- [ 2336.456052][ C0] syz.1.8402/2803 just changed the state of lock: [ 2336.462475][ C0] ffff888028f20230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 2336.472230][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 2336.480195][ C0] (tasklist_lock){.+.+}-{3:3} [ 2336.480219][ C0] [ 2336.480219][ C0] [ 2336.480219][ C0] and interrupts could create inverse lock ordering between them. [ 2336.480219][ C0] [ 2336.499263][ C0] [ 2336.499263][ C0] other info that might help us debug this: [ 2336.507312][ C0] Chain exists of: [ 2336.507312][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2336.507312][ C0] [ 2336.520886][ C0] Possible interrupt unsafe locking scenario: [ 2336.520886][ C0] [ 2336.529198][ C0] CPU0 CPU1 [ 2336.534554][ C0] ---- ---- [ 2336.539907][ C0] lock(tasklist_lock); [ 2336.544172][ C0] local_irq_disable(); [ 2336.550917][ C0] lock(&dev->event_lock#2); [ 2336.558116][ C0] lock(&client->buffer_lock); [ 2336.565479][ C0] [ 2336.568924][ C0] lock(&dev->event_lock#2); [ 2336.573773][ C0] [ 2336.573773][ C0] *** DEADLOCK *** [ 2336.573773][ C0] [ 2336.581903][ C0] 2 locks held by syz.1.8402/2803: [ 2336.587001][ C0] #0: ffff88805c3500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2336.596758][ C0] #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 2336.606348][ C0] [ 2336.606348][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 2336.615722][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 2336.621201][ C0] HARDIRQ-ON-R at: [ 2336.625536][ C0] lock_acquire+0x120/0x360 [ 2336.632388][ C0] _raw_read_lock+0x36/0x50 [ 2336.639232][ C0] __do_wait+0xde/0x740 [ 2336.645725][ C0] do_wait+0x1f8/0x520 [ 2336.652133][ C0] kernel_wait+0xab/0x170 [ 2336.658803][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 2336.667047][ C0] process_scheduled_works+0xadb/0x17a0 [ 2336.674929][ C0] worker_thread+0x8a0/0xda0 [ 2336.681851][ C0] kthread+0x70e/0x8a0 [ 2336.688256][ C0] ret_from_fork+0x4b/0x80 [ 2336.695012][ C0] ret_from_fork_asm+0x1a/0x30 [ 2336.702112][ C0] SOFTIRQ-ON-R at: [ 2336.706434][ C0] lock_acquire+0x120/0x360 [ 2336.713279][ C0] _raw_read_lock+0x36/0x50 [ 2336.720127][ C0] __do_wait+0xde/0x740 [ 2336.726638][ C0] do_wait+0x1f8/0x520 [ 2336.733048][ C0] kernel_wait+0xab/0x170 [ 2336.739716][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 2336.747948][ C0] process_scheduled_works+0xadb/0x17a0 [ 2336.755825][ C0] worker_thread+0x8a0/0xda0 [ 2336.762748][ C0] kthread+0x70e/0x8a0 [ 2336.769163][ C0] ret_from_fork+0x4b/0x80 [ 2336.775912][ C0] ret_from_fork_asm+0x1a/0x30 [ 2336.783029][ C0] INITIAL USE at: [ 2336.787290][ C0] lock_acquire+0x120/0x360 [ 2336.794051][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 2336.801242][ C0] copy_process+0x21d5/0x3b80 [ 2336.808165][ C0] kernel_clone+0x21e/0x870 [ 2336.814918][ C0] user_mode_thread+0xdd/0x140 [ 2336.821931][ C0] rest_init+0x23/0x300 [ 2336.828337][ C0] start_kernel+0x470/0x4f0 [ 2336.835094][ C0] x86_64_start_reservations+0x2a/0x30 [ 2336.842803][ C0] x86_64_start_kernel+0x66/0x70 [ 2336.849987][ C0] common_startup_64+0x13e/0x147 [ 2336.857179][ C0] INITIAL READ USE at: [ 2336.861860][ C0] lock_acquire+0x120/0x360 [ 2336.869047][ C0] _raw_read_lock+0x36/0x50 [ 2336.876238][ C0] __do_wait+0xde/0x740 [ 2336.883097][ C0] do_wait+0x1f8/0x520 [ 2336.889854][ C0] kernel_wait+0xab/0x170 [ 2336.896871][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 2336.905457][ C0] process_scheduled_works+0xadb/0x17a0 [ 2336.913684][ C0] worker_thread+0x8a0/0xda0 [ 2336.920956][ C0] kthread+0x70e/0x8a0 [ 2336.927724][ C0] ret_from_fork+0x4b/0x80 [ 2336.934829][ C0] ret_from_fork_asm+0x1a/0x30 [ 2336.942282][ C0] } [ 2336.945121][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 2336.953248][ C0] ... acquired at: [ 2336.957385][ C0] lock_acquire+0x120/0x360 [ 2336.962056][ C0] _raw_read_lock+0x36/0x50 [ 2336.966726][ C0] send_sigio+0x101/0x370 [ 2336.971226][ C0] dnotify_handle_event+0x169/0x440 [ 2336.976595][ C0] fsnotify+0x1814/0x1a80 [ 2336.981089][ C0] path_openat+0x171e/0x3830 [ 2336.985840][ C0] do_filp_open+0x1fa/0x410 [ 2336.990503][ C0] do_sys_openat2+0x121/0x1c0 [ 2336.995341][ C0] __ia32_compat_sys_openat+0x131/0x160 [ 2337.001052][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.006351][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.011398][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.017895][ C0] [ 2337.020212][ C0] -> (&f_owner->lock){....}-{3:3} { [ 2337.025695][ C0] INITIAL USE at: [ 2337.029859][ C0] lock_acquire+0x120/0x360 [ 2337.036451][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 2337.043467][ C0] __f_setown+0x67/0x370 [ 2337.049787][ C0] generic_setlease+0xd60/0x1240 [ 2337.056797][ C0] fcntl_setlease+0x3a2/0x4c0 [ 2337.063550][ C0] do_fcntl+0x6a0/0x1910 [ 2337.069865][ C0] do_compat_fcntl64+0x484/0x720 [ 2337.076875][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.084075][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.091017][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.099420][ C0] INITIAL READ USE at: [ 2337.103999][ C0] lock_acquire+0x120/0x360 [ 2337.111016][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2337.118813][ C0] send_sigio+0x38/0x370 [ 2337.125562][ C0] dnotify_handle_event+0x169/0x440 [ 2337.133285][ C0] fsnotify+0x1671/0x1a80 [ 2337.140145][ C0] __fsnotify_parent+0x3fe/0x540 [ 2337.147612][ C0] vfs_write+0x7d6/0xa90 [ 2337.154384][ C0] ksys_write+0x145/0x250 [ 2337.161235][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.168863][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.176236][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.185091][ C0] } [ 2337.187847][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2337.196963][ C0] ... acquired at: [ 2337.201034][ C0] lock_acquire+0x120/0x360 [ 2337.205716][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2337.211175][ C0] send_sigio+0x38/0x370 [ 2337.215596][ C0] kill_fasync+0x24d/0x4d0 [ 2337.220202][ C0] sock_wake_async+0x137/0x160 [ 2337.225147][ C0] sk_wake_async+0x184/0x280 [ 2337.229918][ C0] unix_release_sock+0x6d4/0xc60 [ 2337.235046][ C0] unix_release+0x92/0xd0 [ 2337.239554][ C0] sock_close+0xc3/0x240 [ 2337.243975][ C0] __fput+0x44c/0xa70 [ 2337.248129][ C0] task_work_run+0x1d1/0x260 [ 2337.252894][ C0] resume_user_mode_work+0x5e/0x80 [ 2337.258181][ C0] syscall_exit_to_user_mode+0x9a/0x120 [ 2337.263894][ C0] __do_fast_syscall_32+0xc1/0x110 [ 2337.269183][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.274206][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.280702][ C0] [ 2337.283017][ C0] -> (&new->fa_lock){....}-{3:3} { [ 2337.288317][ C0] INITIAL USE at: [ 2337.292385][ C0] lock_acquire+0x120/0x360 [ 2337.298806][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 2337.305654][ C0] fasync_remove_entry+0xf1/0x1c0 [ 2337.312587][ C0] lease_modify+0x1ca/0x3c0 [ 2337.319001][ C0] locks_remove_file+0x4bf/0xea0 [ 2337.325873][ C0] __fput+0x3ab/0xa70 [ 2337.331777][ C0] task_work_run+0x1d1/0x260 [ 2337.338284][ C0] resume_user_mode_work+0x5e/0x80 [ 2337.345324][ C0] syscall_exit_to_user_mode+0x9a/0x120 [ 2337.352795][ C0] __do_fast_syscall_32+0xc1/0x110 [ 2337.359822][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.366588][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.374828][ C0] INITIAL READ USE at: [ 2337.379333][ C0] lock_acquire+0x120/0x360 [ 2337.386189][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2337.393831][ C0] kill_fasync+0x199/0x4d0 [ 2337.400583][ C0] sock_wake_async+0x137/0x160 [ 2337.407684][ C0] sk_wake_async+0x184/0x280 [ 2337.414615][ C0] unix_release_sock+0x6d4/0xc60 [ 2337.421903][ C0] unix_release+0x92/0xd0 [ 2337.428575][ C0] sock_close+0xc3/0x240 [ 2337.435168][ C0] __fput+0x44c/0xa70 [ 2337.441498][ C0] task_work_run+0x1d1/0x260 [ 2337.448435][ C0] resume_user_mode_work+0x5e/0x80 [ 2337.455974][ C0] syscall_exit_to_user_mode+0x9a/0x120 [ 2337.463864][ C0] __do_fast_syscall_32+0xc1/0x110 [ 2337.471314][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.478504][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.487172][ C0] } [ 2337.489839][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2337.498680][ C0] ... acquired at: [ 2337.502646][ C0] lock_acquire+0x120/0x360 [ 2337.507326][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2337.512783][ C0] kill_fasync+0x199/0x4d0 [ 2337.517361][ C0] evdev_pass_values+0x627/0xbd0 [ 2337.522460][ C0] evdev_events+0x1e6/0x340 [ 2337.527128][ C0] input_pass_values+0x285/0x890 [ 2337.532245][ C0] input_event_dispose+0x330/0x6b0 [ 2337.537539][ C0] input_inject_event+0x1fe/0x320 [ 2337.542748][ C0] evdev_write+0x2fc/0x480 [ 2337.547340][ C0] vfs_write+0x27b/0xa90 [ 2337.551745][ C0] ksys_write+0x145/0x250 [ 2337.556238][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.561540][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.566564][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.573061][ C0] [ 2337.575374][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 2337.581201][ C0] INITIAL USE at: [ 2337.585173][ C0] lock_acquire+0x120/0x360 [ 2337.591420][ C0] _raw_spin_lock_irq+0xa2/0xf0 [ 2337.597998][ C0] evdev_read+0x370/0xca0 [ 2337.604054][ C0] vfs_read+0x1fd/0x980 [ 2337.609943][ C0] ksys_read+0x145/0x250 [ 2337.615920][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.622767][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.629354][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.637414][ C0] } [ 2337.639991][ C0] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 2337.648231][ C0] ... acquired at: [ 2337.652113][ C0] lock_acquire+0x120/0x360 [ 2337.656790][ C0] _raw_spin_lock+0x2e/0x40 [ 2337.661460][ C0] evdev_pass_values+0xb9/0xbd0 [ 2337.666472][ C0] evdev_events+0x1e6/0x340 [ 2337.671136][ C0] input_pass_values+0x285/0x890 [ 2337.676247][ C0] input_event_dispose+0x330/0x6b0 [ 2337.681525][ C0] input_inject_event+0x1fe/0x320 [ 2337.686729][ C0] evdev_write+0x2fc/0x480 [ 2337.691312][ C0] vfs_write+0x27b/0xa90 [ 2337.695722][ C0] ksys_write+0x145/0x250 [ 2337.700234][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.705515][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.710530][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.717023][ C0] [ 2337.719337][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2337.724908][ C0] IN-SOFTIRQ-W at: [ 2337.728879][ C0] lock_acquire+0x120/0x360 [ 2337.735028][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2337.741869][ C0] input_inject_event+0xab/0x320 [ 2337.748454][ C0] led_trigger_event+0x138/0x210 [ 2337.755040][ C0] kbd_bh+0x1c6/0x2e0 [ 2337.760674][ C0] tasklet_action_common+0x36c/0x580 [ 2337.767605][ C0] handle_softirqs+0x286/0x870 [ 2337.774011][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2337.780238][ C0] irq_exit_rcu+0x9/0x30 [ 2337.786128][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2337.793405][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2337.801022][ C0] _raw_spin_unlock_irq+0x29/0x50 [ 2337.807702][ C0] n_tty_ioctl_helper+0x27e/0x340 [ 2337.814368][ C0] tty_ioctl+0x9c3/0xde0 [ 2337.820273][ C0] __ia32_compat_sys_ioctl+0x551/0x840 [ 2337.827391][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2337.834148][ C0] do_fast_syscall_32+0x34/0x80 [ 2337.840646][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2337.848620][ C0] INITIAL USE at: [ 2337.852507][ C0] lock_acquire+0x120/0x360 [ 2337.858570][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2337.865324][ C0] input_inject_event+0xab/0x320 [ 2337.871819][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 2337.878854][ C0] led_trigger_set+0x52a/0x950 [ 2337.885179][ C0] led_trigger_set_default+0x215/0x250 [ 2337.892196][ C0] led_classdev_register_ext+0x73d/0x930 [ 2337.899392][ C0] input_leds_connect+0x517/0x790 [ 2337.905983][ C0] input_register_device+0xceb/0x10b0 [ 2337.912911][ C0] atkbd_connect+0x70e/0x9c0 [ 2337.919052][ C0] serio_driver_probe+0x7f/0xa0 [ 2337.925461][ C0] really_probe+0x26a/0x9a0 [ 2337.931524][ C0] __driver_probe_device+0x18c/0x2f0 [ 2337.938370][ C0] driver_probe_device+0x4f/0x430 [ 2337.944954][ C0] __driver_attach+0x452/0x700 [ 2337.951278][ C0] bus_for_each_dev+0x230/0x2b0 [ 2337.957684][ C0] serio_handle_event+0x1a2/0x860 [ 2337.964264][ C0] process_scheduled_works+0xadb/0x17a0 [ 2337.971385][ C0] worker_thread+0x8a0/0xda0 [ 2337.977526][ C0] kthread+0x70e/0x8a0 [ 2337.983152][ C0] ret_from_fork+0x4b/0x80 [ 2337.989123][ C0] ret_from_fork_asm+0x1a/0x30 [ 2337.995444][ C0] } [ 2337.998027][ C0] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2338.007065][ C0] ... acquired at: [ 2338.010858][ C0] mark_lock+0x11b/0x190 [ 2338.015274][ C0] __lock_acquire+0x664/0xd20 [ 2338.020122][ C0] lock_acquire+0x120/0x360 [ 2338.024795][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2338.030178][ C0] input_inject_event+0xab/0x320 [ 2338.035285][ C0] led_trigger_event+0x138/0x210 [ 2338.040393][ C0] kbd_bh+0x1c6/0x2e0 [ 2338.044551][ C0] tasklet_action_common+0x36c/0x580 [ 2338.050009][ C0] handle_softirqs+0x286/0x870 [ 2338.054947][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2338.059699][ C0] irq_exit_rcu+0x9/0x30 [ 2338.064128][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2338.069931][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2338.076103][ C0] _raw_spin_unlock_irq+0x29/0x50 [ 2338.081301][ C0] n_tty_ioctl_helper+0x27e/0x340 [ 2338.086495][ C0] tty_ioctl+0x9c3/0xde0 [ 2338.090926][ C0] __ia32_compat_sys_ioctl+0x551/0x840 [ 2338.096571][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2338.101868][ C0] do_fast_syscall_32+0x34/0x80 [ 2338.106897][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2338.113400][ C0] [ 2338.115717][ C0] [ 2338.115717][ C0] stack backtrace: [ 2338.121611][ C0] CPU: 0 UID: 0 PID: 2803 Comm: syz.1.8402 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 2338.121633][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2338.121645][ C0] Call Trace: [ 2338.121654][ C0] [ 2338.121662][ C0] dump_stack_lvl+0x189/0x250 [ 2338.121690][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2338.121713][ C0] ? __pfx__printk+0x10/0x10 [ 2338.121733][ C0] print_irq_inversion_bug+0x1d2/0x1e0 [ 2338.121752][ C0] mark_lock_irq+0x35f/0x390 [ 2338.121770][ C0] mark_lock+0x11b/0x190 [ 2338.121795][ C0] __lock_acquire+0x664/0xd20 [ 2338.121820][ C0] ? input_inject_event+0xab/0x320 [ 2338.121842][ C0] lock_acquire+0x120/0x360 [ 2338.121864][ C0] ? input_inject_event+0xab/0x320 [ 2338.121889][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2338.121908][ C0] ? input_inject_event+0xab/0x320 [ 2338.121928][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2338.121946][ C0] ? led_trigger_event+0x4b/0x210 [ 2338.121969][ C0] ? led_trigger_event+0x4b/0x210 [ 2338.121993][ C0] input_inject_event+0xab/0x320 [ 2338.122014][ C0] ? led_trigger_event+0x4b/0x210 [ 2338.122037][ C0] led_trigger_event+0x138/0x210 [ 2338.122060][ C0] kbd_bh+0x1c6/0x2e0 [ 2338.122085][ C0] tasklet_action_common+0x36c/0x580 [ 2338.122106][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 2338.122126][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 2338.122147][ C0] ? workqueue_softirq_action+0xd4/0x150 [ 2338.122167][ C0] handle_softirqs+0x286/0x870 [ 2338.122184][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 2338.122201][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2338.122218][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2338.122240][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2338.122255][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2338.122274][ C0] irq_exit_rcu+0x9/0x30 [ 2338.122288][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2338.122308][ C0] [ 2338.122314][ C0] [ 2338.122321][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2338.122344][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 2338.122364][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a 45 45 f6 48 89 df e8 32 dc 45 f6 e8 3d 64 6e f6 fb bf 01 00 00 00 42 e6 37 f6 65 8b 05 cb d4 1c 07 85 c0 74 07 5b c3 cc cc cc cc [ 2338.122378][ C0] RSP: 0018:ffffc9000d13fcb8 EFLAGS: 00000286 [ 2338.122395][ C0] RAX: b836b31004e1cc00 RBX: ffff88805c350450 RCX: b836b31004e1cc00 [ 2338.122408][ C0] RDX: 0000000000000007 RSI: ffffffff8d74e0ce RDI: 0000000000000001 [ 2338.122419][ C0] RBP: 0000000000000000 R08: ffffffff8f7f3377 R09: 1ffffffff1efe66e [ 2338.122430][ C0] R10: dffffc0000000000 R11: fffffbfff1efe66f R12: dffffc0000000000 [ 2338.122443][ C0] R13: 1ffff1100b86a092 R14: ffff88805c350450 R15: ffff88805c350491 [ 2338.122462][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2338.122481][ C0] n_tty_ioctl_helper+0x27e/0x340 [ 2338.122499][ C0] ? __pfx_n_tty_ioctl+0x10/0x10 [ 2338.122521][ C0] tty_ioctl+0x9c3/0xde0 [ 2338.122540][ C0] __ia32_compat_sys_ioctl+0x551/0x840 [ 2338.122560][ C0] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2338.122584][ C0] ? rcu_is_watching+0x15/0xb0 [ 2338.122601][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2338.122624][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2338.122656][ C0] __do_fast_syscall_32+0xb4/0x110 [ 2338.122681][ C0] do_fast_syscall_32+0x34/0x80 [ 2338.122702][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2338.122721][ C0] RIP: 0023:0xf7fd4539 [ 2338.122734][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2338.122748][ C0] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2338.122774][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000540a [ 2338.122784][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2338.122793][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2338.122802][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2338.122811][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2338.122825][ C0] [ 2338.667313][ T2807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2338.676108][ T2807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2338.801636][T19862] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2338.815580][T19862] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 2338.827641][T19862] usb 2-1: USB disconnect, device number 101 [ 2339.111837][ T2556] udevd[2556]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2339.160492][ T5828] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2339.198464][ T30] audit: type=1326 audit(1747856756.948:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2339.830068][ T30] audit: type=1326 audit(1747856756.948:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 2339.853906][ T30] audit: type=1326 audit(1747856757.598:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2339.901886][ T30] audit: type=1326 audit(1747856757.598:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2339.933251][ T5828] usb 6-1: config index 0 descriptor too short (expected 60401, got 77) [ 2339.946010][ T5828] usb 6-1: config 118 has too many interfaces: 244, using maximum allowed: 32 [ 2339.956593][ T2844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.970938][ T5828] usb 6-1: config 118 has an invalid descriptor of length 138, skipping remainder of the config [ 2339.990645][ T30] audit: type=1326 audit(1747856757.598:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2340.013052][ T30] audit: type=1326 audit(1747856757.598:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2340.035070][ T30] audit: type=1326 audit(1747856757.598:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2340.057065][ T30] audit: type=1326 audit(1747856757.598:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2340.079063][ T30] audit: type=1326 audit(1747856757.598:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.8405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 2340.153391][ T5828] usb 6-1: config 118 has 0 interfaces, different from the descriptor's value: 244 [ 2340.199659][ T5828] usb 6-1: New USB device found, idVendor=08fe, idProduct=0003, bcdDevice=d7.3b [ 2340.306771][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.331707][ T5828] usb 6-1: Product: syz [ 2340.336166][ T5828] usb 6-1: Manufacturer: syz [ 2340.340975][ T5828] usb 6-1: SerialNumber: syz [ 2341.648851][ T5828] usb 6-1: USB disconnect, device number 80 [ 2344.611987][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.618300][ T1300] ieee802154 phy1 wpan1: encryption failed: -22