last executing test programs: 14.539312506s ago: executing program 0 (id=6231): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4915}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0xc000002) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000600)=0x17f) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400b400c580a8f1973c07e374a59ebc235779b1195e00b9100066ab11"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x100, 0x4, {}, {0x5, 0x1, 0x40, 0xd4, 0x40, 0x1, "e680ac51"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x4, 0x100, {&(0x7f0000000300)}, 0xf4}, {0x10001, 0x3, {&(0x7f0000000340)}, 0x1ff}]}, 0x3}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba00084002", 0x1fffc) 13.689118132s ago: executing program 3 (id=6236): socket$inet6(0xa, 0x6, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffff65f, @remote}, {0xa, 0x4e22, 0x800, @mcast2}, 0x0, {[0x7f, 0x8000, 0x5, 0xfffffffc]}}, 0x5c) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x44, 0x8, 0x5, 0x49, 0x3, 0xbdb], 0x4000, 0x1c4213}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.15271605s ago: executing program 3 (id=6238): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000b80)={'dummy0\x00'}) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000600)=0x17f) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400b400c580a8f1973c07e374a59ebc235779b1195e00b9100066ab11"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x100, 0x4, {}, {0x5, 0x1, 0x40, 0xd4, 0x40, 0x1, "e680ac51"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x4, 0x100, {&(0x7f0000000300)}, 0xf4}, {0x10001, 0x3, {&(0x7f0000000340)}, 0x1ff}]}, 0x3}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba00084002", 0x1fffc) 11.420363774s ago: executing program 0 (id=6245): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4915}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0xc000002) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba00084002", 0x1fffc) 10.355749484s ago: executing program 1 (id=6248): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="16164f9d3a0aa7674ab62667ab0979d25eb923975c878a92efe097265cf1e4c743b4c4c33b500eae9f8448663325e37f303babac17c41aaca8937e13fcd0e7dc35093c382d8100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r10, &(0x7f0000004d40)=[{0x0, 0x0, &(0x7f0000003ac0), 0x0, &(0x7f0000003b40)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x54, 0x117, 0x2, 0x42, "e9c58122f55407dcfbd15a7fdfafdab8a0590da462d374579ad5a87990e8bbac33e144aa9edf553cfac327439690b276a962b5e0cc6796b83020980525aa6c70b3e1"}], 0x74, 0x14}, {0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004c00)="6829047a58286e3d8d59f2686907197ade3645b704e1a5ece04b7d9e10022f3b0b692aed23771fb3c646f396903d1e20d14a653de98ec68a2baa79b524f44353762bb77ac75a0ff0840dcbe2ceedd3c1e281e16fa0b1da640ed47290aeccb5a0cf90f426ae7453ff77293765d196669e5a0fedeb1f9be92be5bcaff01c3910a4fe5844d1137d068c9aac55ab072859e04caf1c7a5421843edf9eefe7fd498c43790f3aea44f9c8d992ca249edeacbd03c90b97204463e3f2229740f5a64f3ac23ceb29a2dda31211d199f793c9696627", 0xd0}], 0x1, 0x0, 0x0, 0x894}], 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 10.04195286s ago: executing program 2 (id=6249): openat$sndseq(0xffffff9c, 0x0, 0x2200) socket(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001140)=r4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340), 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00']}, 0x21) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000001980)=0x1) 9.949594995s ago: executing program 3 (id=6250): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300d4000000000000000000000000000000f444963ddae1c381b92386c86df0ba4fbf9eabf4421a46a9dc5444898512d423481f6e0fa4017fb5f3b582782b7ab031eeeebfbdbedc3e40a8c44430bb8f38c4ac004d93c50c390e44467f484f1d1c0461eec034cee9faa66fb1fa9d5c9fe6f3f2e2852b0390a766d2b32ffe5de4c333a795a5d4f1ba7530977876bc5e03890b5eadf01db1c4b945af4913df0b15074f7092c5caa20ef6337ac6f897ab8669a7414f00f5a72342febbfaf6b34b00aba5b0f32abed345f1f048819f84089106f8585978d1441b1c9acc1303badb15d52cabbdc6d2fcd79960dedba09cf92c3f167c91dd7397dc8138be8d31e644e47a80ecc52ecc5ad2266db38fb4004ef86409647d67efa51d962fda55c237da259ff3daa5c13a7089d4321fb951e4d7fd1f116e71fc762cf846880ee25d20b1b052314621730acb29dcd16beaef89bf1d0f64070000000000000056c63c6b15a2dfd0b88ac323b9a7ce9e90386cd726e11373e242096343e82292", @ANYRES32=r3, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4915}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0xc000002) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000600)=0x17f) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400b400c580a8f1973c07e374a59ebc235779b1195e00b9100066ab11"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x100, 0x4, {}, {0x5, 0x1, 0x40, 0xd4, 0x40, 0x1, "e680ac51"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x4, 0x100, {&(0x7f0000000300)}, 0xf4}, {0x10001, 0x3, {&(0x7f0000000340)}, 0x1ff}]}, 0x3}) socket$inet_smc(0x2b, 0x1, 0x0) 8.339118637s ago: executing program 0 (id=6251): unshare(0x28000600) socket$inet6(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000480)='[+\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3) write$binfmt_script(r0, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xd931d3864d39dcd1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x14, 0x29, 0x32, {0x8, 0x0, 0x2, 0xfc}}}], 0x14}, 0x1400c0c0) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8.141135597s ago: executing program 4 (id=6252): openat$sndseq(0xffffff9c, 0x0, 0x2200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001140)=r4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340), 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00']}, 0x21) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000001980)=0x1) 7.861793446s ago: executing program 2 (id=6253): socket$inet6(0xa, 0x6, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffff65f, @remote}, {0xa, 0x4e22, 0x800, @mcast2}, 0x0, {[0x7f, 0x8000, 0x5, 0xfffffffc]}}, 0x5c) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x44, 0x8, 0x5, 0x49, 0x3, 0xbdb], 0x4000, 0x1c4213}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.268820011s ago: executing program 1 (id=6254): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR', 0x3}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) openat$dir(0xffffff9c, 0x0, 0x600040, 0x120) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 7.020068972s ago: executing program 2 (id=6255): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300d4000000000000000000000000000000f444963ddae1c381b92386c86df0ba4fbf9eabf4421a46a9dc5444898512d423481f6e0fa4017fb5f3b582782b7ab031eeeebfbdbedc3e40a8c44430bb8f38c4ac004d93c50c390e44467f484f1d1c0461eec034cee9faa66fb1fa9d5c9fe6f3f2e2852b0390a766d2b32ffe5de4c333a795a5d4f1ba7530977876bc5e03890b5eadf01db1c4b945af4913df0b15074f7092c5caa20ef6337ac6f897ab8669a7414f00f5a72342febbfaf6b34b00aba5b0f32abed345f1f048819f84089106f8585978d1441b1c9acc1303badb15d52cabbdc6d2fcd79960dedba09cf92c3f167c91dd7397dc8138be8d31e644e47a80ecc52ecc5ad2266db38fb4004ef86409647d67efa51d962fda55c237da259ff3daa5c13a7089d4321fb951e4d7fd1f116e71fc762cf846880ee25d20b1b052314621730acb29dcd16beaef89bf1d0f64070000000000000056c63c6b15a2dfd0b88ac323b9a7ce9e90386cd726e11373e242096343e82292", @ANYRES32=r3, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4915}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0xc000002) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000600)=0x17f) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400b400c580a8f1973c07e374a59ebc235779b1195e00b9100066ab11"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x100, 0x4, {}, {0x5, 0x1, 0x40, 0xd4, 0x40, 0x1, "e680ac51"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x4, 0x100, {&(0x7f0000000300)}, 0xf4}, {0x10001, 0x3, {&(0x7f0000000340)}, 0x1ff}]}, 0x3}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba00084002", 0x1fffc) 6.730454564s ago: executing program 0 (id=6257): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r3 = userfaultfd(0x80001) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='security.apparmor\x00', 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.627292157s ago: executing program 3 (id=6258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) close(0x3) 5.966495319s ago: executing program 1 (id=6259): syz_open_dev$video(&(0x7f0000000200), 0xfffffffb, 0x549800) pipe2$9p(&(0x7f0000000000), 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4a42, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYRESOCT=r5, @ANYBLOB="6db4401effcf07ed52b7ca506d4006787f4bbae89dbaf1e73316eeade4a769f207ec94555ee1d07903a2b2fc092276bcbf95c0d39a390c4be991f01d08ccde69f19f6ae9cd4b1a603f44305495f344939c46c7f8fa819d8ce46ae6c7f356d99944f3549d5d9a0f9b2a5e94b6526beecfaccc5cedc11fd60e91efdabe8caeb8c30dd1053a9dcf80082a1a89c595ecdaf43f3dc2fc3f7f89d6e09e384b8c514b31dd01293f5ce228686f056e5b48f5b56f33206a815e9a5522d5018f2972dee8635eba9f2089ff6c01cd4279ffe22f4adab20fa9898225211ae6da8da9084f73a93b9db27ef9da9b4eda3d986a3350927cfb2e07", @ANYRES8=r2, @ANYBLOB="b334af1b87bcac8fc51c152a8f262eab1c8d25d4c20c0a601a7905d2985f", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRESHEX=r1], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x80, r8, 0x0, 0x7}, 0x38) sendfile(r7, r7, 0x0, 0x1002000ff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x2, 0x2}, &(0x7f0000000200)=0x88) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.744498556s ago: executing program 4 (id=6260): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x840) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x8, 0xa6aa}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x29, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000001340)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@iv={0x18}], 0x18}], 0x3, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r5, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000000)='0') recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000140)={0x1, 0xffffffff, 0x8, 0x61, 0x10, 0x1000}) 5.109350023s ago: executing program 0 (id=6261): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000b80)={'dummy0\x00'}) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000600)=0x17f) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400b400c580a8f1973c07e374a59ebc235779b1195e00b9100066ab11"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x100, 0x4, {}, {0x5, 0x1, 0x40, 0xd4, 0x40, 0x1, "e680ac51"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x4, 0x100, {&(0x7f0000000300)}, 0xf4}, {0x10001, 0x3, {&(0x7f0000000340)}, 0x1ff}]}, 0x3}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba00084002", 0x1fffc) 4.927261469s ago: executing program 1 (id=6262): socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x200, 0x4100000, 0x4, 0x4, 0x53, 0x5, 0x0, 0x0, 0x80, 0x84}}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x200, &(0x7f0000000440)={@align, {0x0, 0x8, 0x8, 0xc}}, 0xffc00000, &(0x7f0000000480), &(0x7f00000004c0)}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x9d) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r0, &(0x7f0000002300)=ANY=[], 0xfc8) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) 4.51932327s ago: executing program 4 (id=6263): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES8=r1], 0x0) eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x800) getrandom(&(0x7f00000005c0)=""/282, 0x11a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80387, 0x0) 4.149529731s ago: executing program 1 (id=6264): openat$sndseq(0xffffff9c, 0x0, 0x2200) socket(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001140)=r4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340), 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00']}, 0x21) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000001980)=0x1) 3.68567314s ago: executing program 4 (id=6265): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 3.672704317s ago: executing program 2 (id=6266): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 3.017702159s ago: executing program 4 (id=6267): socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, 0x0, 0xac4473593bc732bf, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = fanotify_init(0x200, 0x0) read(r1, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000700), 0x90040, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6a, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r2, 0x0, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) 2.107044149s ago: executing program 1 (id=6268): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300d4000000000000000000000000000000f444963ddae1c381b92386c86df0ba4fbf9eabf4421a46a9dc5444898512d423481f6e0fa4017fb5f3b582782b7ab031eeeebfbdbedc3e40a8c44430bb8f38c4ac004d93c50c390e44467f484f1d1c0461eec034cee9faa66fb1fa9d5c9fe6f3f2e2852b0390a766d2b32ffe5de4c333a795a5d4f1ba7530977876bc5e03890b5eadf01db1c4b945af4913df0b15074f7092c5caa20ef6337ac6f897ab8669a7414f00f5a72342febbfaf6b34b00aba5b0f32abed345f1f048819f84089106f8585978d1441b1c9acc1303badb15d52cabbdc6d2fcd79960dedba09cf92c3f167c91dd7397dc8138be8d31e644e47a80ecc52ecc5ad2266db38fb4004ef86409647d67efa51d962fda55c237da259ff3daa5c13a7089d4321fb951e4d7fd1f116e71fc762cf846880ee25d20b1b052314621730acb29dcd16beaef89bf1d0f64070000000000000056c63c6b15a2dfd0b88ac323b9a7ce9e90386cd726e11373e242096343e82292", @ANYRES32=r3, @ANYBLOB="08002600b4090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x44}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4915}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0xc000002) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000600)=0x17f) syz_usb_control_io(r5, &(0x7f00000001c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400b400c580a8f1973c07e374a59ebc235779b1195e00b9100066ab11"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) modify_ldt$write2(0x11, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x4, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x100, 0x4, {}, {0x5, 0x1, 0x40, 0xd4, 0x40, 0x1, "e680ac51"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x4, 0x100, {&(0x7f0000000300)}, 0xf4}, {0x10001, 0x3, {&(0x7f0000000340)}, 0x1ff}]}, 0x3}) socket$inet_smc(0x2b, 0x1, 0x0) 1.884241273s ago: executing program 0 (id=6269): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x8, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x15, r2, 0x800006, 0x200000) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ee1, 0x4) socket$inet(0x2, 0x1, 0x2) 1.658333304s ago: executing program 3 (id=6270): openat$sndseq(0xffffff9c, 0x0, 0x2200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001140)=r4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001540)={0x300002c00, &(0x7f0000001340), 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000001940)=@hat={'changehat ', 0x3, 0x5e, ['!*{\x00']}, 0x21) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000001980)=0x1) 836.781036ms ago: executing program 4 (id=6271): syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x22) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioperm(0x1003, 0x1, 0x81) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, &(0x7f0000000180)={0x1, &(0x7f00000004c0)=[{0x3, '\x00', @buffer={"9000e33eb56acc71ff6fd6122ab2b3fad2fb7252a7de9aaf5bafc7fc8989b715", 0x20}, 0x7ffc}]}) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) 708.845181ms ago: executing program 2 (id=6272): syz_open_dev$video(&(0x7f0000000200), 0xfffffffb, 0x549800) pipe2$9p(&(0x7f0000000000), 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4a42, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYRESOCT=r5, @ANYBLOB="6db4401effcf07ed52b7ca506d4006787f4bbae89dbaf1e73316eeade4a769f207ec94555ee1d07903a2b2fc092276bcbf95c0d39a390c4be991f01d08ccde69f19f6ae9cd4b1a603f44305495f344939c46c7f8fa819d8ce46ae6c7f356d99944f3549d5d9a0f9b2a5e94b6526beecfaccc5cedc11fd60e91efdabe8caeb8c30dd1053a9dcf80082a1a89c595ecdaf43f3dc2fc3f7f89d6e09e384b8c514b31dd01293f5ce228686f056e5b48f5b56f33206a815e9a5522d5018f2972dee8635eba9f2089ff6c01cd4279ffe22f4adab20fa9898225211ae6da8da9084f73a93b9db27ef9da9b4eda3d986a3350927cfb2e07", @ANYRES8=r2, @ANYBLOB="b334af1b87bcac8fc51c152a8f262eab1c8d25d4c20c0a601a7905d2985f", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRESHEX=r1], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x80, r8, 0x0, 0x7}, 0x38) sendfile(r7, r7, 0x0, 0x1002000ff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x2, 0x2}, &(0x7f0000000200)=0x88) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 215.952039ms ago: executing program 3 (id=6273): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x3c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000007c0)={{r1}, "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"}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x31, 0x36, 0x1d, 0x40, 0x7ca, 0xa867, 0xf2a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1, 0x60, 0x7, "", [{{0x9, 0x4, 0xb3, 0x8, 0x0, 0x72, 0x2e, 0x31, 0x3}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=6274): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003000000401e044230400001020301090269000301003003080b000201092008090400000001012000092401020006090003090401000001022000090401010101022000090501092000080500082401010604040009040200000102200009040201010102200009058209ff0303e6400825014f516ae04ab5a998034888b5"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) read$sequencer(r0, &(0x7f00000001c0)=""/213, 0xd5) r1 = syz_ublk_setup_io_uring(0x206366, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x3, 0x1e5, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xded, 0x3, 0x1, 0x9}, 0x8) getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000048000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c000003801400010076657468315f746f5f626f6e640000001400"], 0xe8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100001040000200000000000000000008a29a03c30e282a95084461d8897d4d3f0c8097b7e45d4521ab34cb57d9772e70c8864116ffcf936bd30f49f12e49432d4e2e6647a18c67250", @ANYRES32=0x0, @ANYBLOB="000300000000000020001280080001006774700014000280050005000100000008000300ffff000008000a00", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x40) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) statfs(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000300)={0x0, {0x2, 0x6}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1400, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x1, 0xf46, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, 0x0) kernel console output (not intermixed with test programs): ew high-speed USB device number 66 using dummy_hcd [ 1373.276316][T24241] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5195'. [ 1373.307048][T19298] usb 3-1: Using ep0 maxpacket: 32 [ 1373.318462][T19298] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1373.333908][T19298] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1373.353403][T19298] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1373.383148][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1373.407292][T19298] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1373.432199][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.462540][T19298] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1373.513680][T19298] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1373.582127][T19298] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1373.598679][T19298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.623284][T19298] usb 3-1: config 0 descriptor?? [ 1373.893350][T19298] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1374.044124][T24245] fuse: Unknown parameter 'group_id00000000000000000000' [ 1374.166353][T19298] usb 3-1: USB disconnect, device number 66 [ 1374.214837][T19298] usblp0: removed [ 1374.924982][ T30] audit: type=1400 audit(1782900205.719:894): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24251 comm="syz.3.5199" [ 1375.697293][T23361] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 1375.879894][T23361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1375.914339][T23361] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1375.954808][T23361] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1375.982405][T23361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.993694][T24283] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5211'. [ 1376.009380][T24285] fuse: Unknown parameter 'group_id00000000000000000000' [ 1376.028103][T23361] usb 3-1: config 0 descriptor?? [ 1376.697958][T24290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.731708][T24290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.450310][T18894] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1377.618538][T18894] usb 4-1: Using ep0 maxpacket: 32 [ 1377.642311][T18894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1377.678638][T18894] usb 4-1: config 0 has no interfaces? [ 1377.698117][T18894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1377.709982][T18894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.734493][T18894] usb 4-1: Product: syz [ 1377.750854][T18894] usb 4-1: Manufacturer: syz [ 1377.763734][T18894] usb 4-1: SerialNumber: syz [ 1377.793881][T18894] usb 4-1: config 0 descriptor?? [ 1378.047641][T24294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.092988][T24294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.138732][T19298] usb 4-1: USB disconnect, device number 92 [ 1378.514436][T23361] usbhid 3-1:0.0: can't add hid device: -71 [ 1378.546176][T24308] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5219'. [ 1378.565755][T23361] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1378.594298][T23361] usb 3-1: USB disconnect, device number 67 [ 1378.617461][T19298] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1378.651948][ T30] audit: type=1400 audit(1782900209.439:895): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24304 comm="syz.4.5219" [ 1378.829011][T19298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.842431][T19298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1378.858834][T19298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.870270][T19298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.886132][T19298] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 0.00 [ 1378.899350][T19298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.921598][T19298] usb 4-1: config 0 descriptor?? [ 1378.955808][T19298] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 1379.155597][T19298] usbhid 4-1:0.0: can't add hid device: -71 [ 1379.170089][T19298] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1379.211120][T19298] usb 4-1: USB disconnect, device number 93 [ 1379.221980][T24319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.251403][T24319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.659076][T19298] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1379.828820][T19298] usb 3-1: Using ep0 maxpacket: 8 [ 1379.842099][T19298] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1379.860884][T19298] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1379.875959][T19298] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1379.895077][T19298] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1379.911709][T19298] usb 3-1: Manufacturer: syz [ 1379.923237][T19298] usb 3-1: SerialNumber: syz [ 1380.183793][T19298] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1380.198009][T18894] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1380.213457][T19298] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1380.225498][T19298] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1380.234326][T19298] usb 3-1: media controller created [ 1380.291490][T19298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1380.352751][T19298] zl10353_read_register: readreg error (reg=127, ret==0) [ 1380.363407][T18894] usb 4-1: Using ep0 maxpacket: 8 [ 1380.381555][T18894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1380.408858][T18894] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1380.438025][T18894] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1380.464495][T18894] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1380.486801][T19298] usb 3-1: USB disconnect, device number 68 [ 1380.492922][T18894] usb 4-1: Manufacturer: syz [ 1380.511155][T18894] usb 4-1: SerialNumber: syz [ 1380.582021][T24335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.599587][T24335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.797889][T18894] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1380.822954][T18894] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1380.849506][T18894] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1380.868342][T18894] usb 4-1: media controller created [ 1380.892579][T24339] netlink: 'syz.4.5231': attribute type 33 has an invalid length. [ 1380.901022][T18894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1380.914856][T18894] zl10353_read_register: readreg error (reg=127, ret==0) [ 1380.928356][T24339] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5231'. [ 1380.971097][T18894] usb 4-1: USB disconnect, device number 94 [ 1381.587512][T24355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.604607][T24355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.217198][T18894] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 1382.284876][T24379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.298510][T19298] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1382.318109][T24379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.336649][T24381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.347434][T24381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.389280][T18894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1382.400728][T18894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1382.413875][T18894] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1382.423242][T18894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.434299][T18894] usb 3-1: config 0 descriptor?? [ 1382.466971][T19298] usb 4-1: Using ep0 maxpacket: 32 [ 1382.475155][T19298] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1382.484463][T19298] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1382.493452][T19298] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1382.502871][T19298] usb 4-1: config 1 has no interface number 0 [ 1382.509197][T19298] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1382.520346][T19298] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1382.533506][T19298] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1382.542777][T19298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.560826][T19298] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1382.770535][T19298] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1383.229475][T19298] usb 4-1: USB disconnect, device number 95 [ 1383.239417][T19298] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1384.167019][T19298] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1384.316930][T19298] usb 4-1: Using ep0 maxpacket: 32 [ 1384.324305][T19298] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1384.334064][T19298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.346557][T19298] usb 4-1: config 0 descriptor?? [ 1384.560950][T19298] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1384.571167][T19298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1384.584543][T19298] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1384.592156][T19298] usb 4-1: media controller created [ 1384.611983][T19298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1384.707263][T24405] openvswitch: netlink: VXLAN extension message has 4096 unknown bytes. [ 1384.765354][T19298] az6027: usb out operation failed. (-71) [ 1384.778251][T19298] az6027: usb out operation failed. (-71) [ 1384.792616][T19298] stb0899_attach: Driver disabled by Kconfig [ 1384.800331][T19298] az6027: no front-end attached [ 1384.800331][T19298] [ 1384.810949][T19298] az6027: usb out operation failed. (-71) [ 1384.823819][T19298] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1384.835245][T19298] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 1384.851651][T19298] dvb-usb: schedule remote query interval to 400 msecs. [ 1384.858947][T19298] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1384.880271][T19298] usb 4-1: USB disconnect, device number 96 [ 1385.067305][T19298] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1385.092075][T18894] usbhid 3-1:0.0: can't add hid device: -71 [ 1385.110945][T18894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1385.162827][T18894] usb 3-1: USB disconnect, device number 69 [ 1385.192706][T24414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.209258][T24414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.409425][T24421] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1385.761343][ T30] audit: type=1400 audit(1782900216.559:896): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24422 comm="syz.1.5270" [ 1385.908655][T24436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.963426][T24436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.755256][T24451] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1386.902011][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1386.932726][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1386.951524][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1386.978133][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1386.998430][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1387.016067][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1387.041707][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1387.063105][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1387.095096][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1387.133896][T24453] netlink: 'syz.3.5279': attribute type 3 has an invalid length. [ 1387.305377][T24457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.320902][T24459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5282'. [ 1387.322219][T24457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.346705][T24459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1387.356308][T24459] IPv6: NLM_F_CREATE should be set when creating new route [ 1387.389048][T24459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5282'. [ 1387.417187][T24459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1387.571193][T19298] hid_parser_main: 10 callbacks suppressed [ 1387.571216][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.585089][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.592845][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.601335][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.609077][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.616615][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.624258][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.632666][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.640259][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.647864][T19298] hid-generic 0006:0004:0009.004B: unknown main item tag 0x0 [ 1387.664730][T19298] hid-generic 0006:0004:0009.004B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1387.757298][T18894] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1387.780393][T24465] fido_id[24465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1387.927050][T18894] usb 4-1: Using ep0 maxpacket: 16 [ 1387.935874][T18894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1387.955983][T18894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1387.973232][T18894] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1387.983610][T18894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.995689][T18894] usb 4-1: Product: syz [ 1388.003172][T18894] usb 4-1: Manufacturer: syz [ 1388.010424][T18894] usb 4-1: SerialNumber: syz [ 1388.019724][T18894] usb 4-1: config 0 descriptor?? [ 1388.248440][T18894] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input72 [ 1388.567111][T18894] rc_core: IR keymap rc-imon-pad not found [ 1388.575345][T18894] Registered IR keymap rc-empty [ 1388.583271][T18894] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1388.594005][T18894] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1388.658610][T18894] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1388.699730][T18894] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input73 [ 1388.777164][T18894] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:97> initialized [ 1389.060313][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1389.061366][ T5757] usb 4-1: USB disconnect, device number 97 [ 1389.480913][T24488] input: syz1 as /devices/virtual/input/input74 [ 1390.366359][T24517] syzkaller0: left promiscuous mode [ 1390.387491][T24517] syzkaller0: left allmulticast mode [ 1390.404368][T24521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.418826][T24521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.625461][T24535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5310'. [ 1390.651616][T24533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.668667][T24533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.053348][T24546] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5312'. [ 1391.073646][T24547] team_slave_1: Caught tx_queue_len zero misconfig [ 1391.446973][T19298] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 1391.609762][T19298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1391.623091][T19298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1391.639426][T19298] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1391.649216][T19298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.663270][T19298] usb 4-1: config 0 descriptor?? [ 1392.221409][T24559] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1392.277061][ T5757] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1392.457246][ T5757] usb 3-1: Using ep0 maxpacket: 8 [ 1392.477274][ T5757] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1392.487979][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.496451][ T5757] usb 3-1: Product: syz [ 1392.503908][ T5757] usb 3-1: Manufacturer: syz [ 1392.510568][ T5757] usb 3-1: SerialNumber: syz [ 1392.524035][ T5757] usb 3-1: config 0 descriptor?? [ 1392.558543][ T5757] gspca_main: se401-2.14.0 probing 047d:5003 [ 1392.597494][T24569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5323'. [ 1392.970556][ T5757] gspca_se401: ExtraFeatures: 48 [ 1392.983525][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1392.994830][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.002886][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.009971][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.019239][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.029655][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.037533][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.044701][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.052626][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.062534][ T5757] gspca_se401: Frame size: 0x0 1/16th janggu [ 1393.193909][ T5757] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 1393.241210][ T5757] usb 3-1: USB disconnect, device number 70 [ 1393.514635][T24585] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1393.562051][ T30] audit: type=1400 audit(1782900224.359:897): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24578 comm="syz.1.5327" [ 1393.805134][T24590] fuse: Unknown parameter 'group_id00000000000000000000' [ 1394.300770][T19298] usbhid 4-1:0.0: can't add hid device: -71 [ 1394.316189][T19298] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1394.365008][T19298] usb 4-1: USB disconnect, device number 98 [ 1395.760603][T24631] fuse: Unknown parameter 'group_id00000000000000000000' [ 1395.877006][T19298] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1396.039796][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1396.054771][T19298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1396.096669][T19298] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1396.117598][T19298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.135191][T19298] usb 3-1: config 0 descriptor?? [ 1396.352719][T24643] input: syz1 as /devices/virtual/input/input76 [ 1396.609756][T24653] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5351'. [ 1397.534320][T24668] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5357'. [ 1397.570826][ T30] audit: type=1400 audit(1782900228.359:898): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24665 comm="syz.0.5357" [ 1398.933459][T19298] usbhid 3-1:0.0: can't add hid device: -71 [ 1398.969885][T19298] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1399.037388][T19298] usb 3-1: USB disconnect, device number 71 [ 1399.177425][T18894] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1399.347034][T18894] usb 4-1: Using ep0 maxpacket: 16 [ 1399.369340][T18894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.399767][T19298] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1399.408586][T18894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1399.434932][T18894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1399.484123][T18894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1399.508859][T18894] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.539514][T18894] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1399.556483][T18894] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1399.569087][T18894] usb 4-1: Manufacturer: syz [ 1399.607805][T18894] usb 4-1: config 0 descriptor?? [ 1399.612982][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1399.627565][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1399.643043][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1399.654413][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1399.674368][T19298] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1399.694065][T19298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.709662][T19298] usb 3-1: Product: syz [ 1399.719954][T19298] usb 3-1: Manufacturer: syz [ 1399.730963][T19298] usb 3-1: SerialNumber: syz [ 1399.753177][T19298] usb 3-1: config 0 descriptor?? [ 1400.000918][T19298] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1400.037255][T18894] rc_core: IR keymap rc-hauppauge not found [ 1400.054916][T18894] Registered IR keymap rc-empty [ 1400.073902][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.102047][T24693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.113339][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.133088][T24693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.161790][T18894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1400.205797][T18894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 1400.242046][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.253488][T24682] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 1400.267265][T19298] usb 3-1: USB disconnect, device number 72 [ 1400.277844][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.317706][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.339104][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.368975][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.397127][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.428809][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.457121][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.478012][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.508961][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.550003][T18894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1400.584093][T18894] mceusb 4-1:0.0: Registered with mce emulator interface version 90 [ 1400.600875][T18894] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1400.618436][T18894] usb 4-1: USB disconnect, device number 99 [ 1400.783826][T24709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.794452][T24709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.962444][T24717] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5374'. [ 1400.989531][ T30] audit: type=1400 audit(1782900231.789:899): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24710 comm="syz.1.5374" [ 1401.576743][T24730] macvtap1: entered allmulticast mode [ 1401.590139][T24730] bond0: entered allmulticast mode [ 1401.603909][T24730] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1401.624916][T24730] bridge0: port 2(macvtap1) entered blocking state [ 1401.647095][T24730] bridge0: port 2(macvtap1) entered disabled state [ 1401.692176][T24730] bond0: left allmulticast mode [ 1401.897611][T24733] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 1401.897611][T24733] program syz.0.5382 not setting count and/or reply_len properly [ 1402.527141][T19298] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1402.714495][T19298] usb 4-1: Using ep0 maxpacket: 8 [ 1402.733947][T19298] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1402.751490][T19298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.769047][T19298] usb 4-1: Product: syz [ 1402.779186][T19298] usb 4-1: Manufacturer: syz [ 1402.789689][T19298] usb 4-1: SerialNumber: syz [ 1402.800888][T19298] usb 4-1: config 0 descriptor?? [ 1402.823641][T19298] gspca_main: se401-2.14.0 probing 047d:5003 [ 1402.931620][T24756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.943584][T24756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.221944][T19298] gspca_se401: ExtraFeatures: 48 [ 1403.227148][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.233185][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.240149][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.246406][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.252680][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.258947][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.265112][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.271163][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.277605][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.283644][T19298] gspca_se401: Frame size: 0x0 1/16th janggu [ 1403.426482][T19298] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 1403.450908][T19298] usb 4-1: USB disconnect, device number 100 [ 1403.647568][T24759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.667920][T24759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.306968][T19298] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1404.325339][T24783] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5403'. [ 1404.355679][ T30] audit: type=1400 audit(1782900235.149:900): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24776 comm="syz.4.5403" [ 1404.528951][T19298] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.541016][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1404.552555][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1404.564573][T19298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.588461][T19298] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.601951][T19298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.611827][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5409'. [ 1404.633979][T19298] usb 3-1: config 0 descriptor?? [ 1404.729943][T18894] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 1404.802858][T24794] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1404.824868][T24794] tipc: Resetting bearer [ 1404.852215][T24794] tipc: Disabling bearer [ 1404.890058][T18894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1404.928793][T18894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1404.975361][T18894] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1404.992266][T18894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.032572][T18894] usb 4-1: config 0 descriptor?? [ 1405.059519][T19298] hid_parser_main: 7 callbacks suppressed [ 1405.059542][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.089618][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.135049][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.159282][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.177624][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.196493][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.305314][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.360886][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.386999][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.402538][T19298] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1405.444804][T19298] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1405.518986][T19298] usb 3-1: USB disconnect, device number 73 [ 1405.706341][T24801] fido_id[24801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1406.214496][T24815] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5415'. [ 1407.114020][T24839] fuse: Unknown parameter 'group_id00000000000000000000' [ 1407.571668][T24846] syzkaller0: left promiscuous mode [ 1407.611446][T24846] syzkaller0: left allmulticast mode [ 1407.650193][T18894] usbhid 4-1:0.0: can't add hid device: -71 [ 1407.675192][T18894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1407.763603][T18894] usb 4-1: USB disconnect, device number 101 [ 1408.115108][T24855] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5433'. [ 1408.124384][T24856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.151714][T24856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.325402][T24860] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1408.556394][T24873] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5437'. [ 1408.569476][ T30] audit: type=1400 audit(1782900239.359:901): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24863 comm="syz.4.5437" [ 1408.618156][T18894] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1408.779356][T18894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.791797][T18894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.810819][T18894] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1408.826847][T18894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.848903][T18894] usb 3-1: config 0 descriptor?? [ 1409.324976][T18894] cm6533_jd 0003:0D8C:0022.004D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1409.657666][ T5757] usb 3-1: USB disconnect, device number 74 [ 1409.758331][T24887] fuse: Unknown parameter 'group_id00000000000000000000' [ 1410.268499][T24898] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5448'. [ 1410.316100][ T30] audit: type=1400 audit(1782900241.109:902): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24893 comm="syz.3.5448" [ 1410.536982][T19298] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1410.687265][T19298] usb 3-1: Using ep0 maxpacket: 32 [ 1410.703036][T19298] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1410.719535][T19298] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1410.729351][T19298] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1410.742337][T19298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.766042][T19298] usb 3-1: config 0 descriptor?? [ 1411.606170][T19298] corsair-cpro 0003:1B1C:0C10.004E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1411.634494][T24912] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5454'. [ 1411.761609][T19298] corsair-cpro 0003:1B1C:0C10.004E: probe with driver corsair-cpro failed with error -61 [ 1411.974068][T19298] usb 3-1: USB disconnect, device number 75 [ 1412.122370][T24921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.141848][T24921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.439366][T24929] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5458'. [ 1412.512607][ T30] audit: type=1400 audit(1782900243.289:903): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24924 comm="syz.1.5458" [ 1412.874730][T24935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.949910][T24935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.754655][T24954] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1415.087125][T18894] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1415.256978][T18894] usb 4-1: Using ep0 maxpacket: 8 [ 1415.283401][T18894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1415.308729][T18894] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1415.323516][T18894] usb 4-1: string descriptor 0 read error: -22 [ 1415.331887][T18894] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1415.341585][T18894] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1415.361992][T24989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.397771][T18894] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1415.430393][T18894] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1415.455367][T24989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.460250][T18894] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1415.473283][T18894] usb 4-1: media controller created [ 1415.502852][T18894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1415.590182][T18894] zl10353_read_register: readreg error (reg=127, ret==0) [ 1415.680900][T18894] usb 4-1: USB disconnect, device number 102 [ 1416.324188][T25008] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5488'. [ 1416.367900][ T30] audit: type=1400 audit(1782900247.169:904): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25000 comm="syz.1.5488" [ 1416.868522][T25024] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5495'. [ 1416.913046][ T30] audit: type=1400 audit(1782900247.709:905): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25017 comm="syz.0.5495" [ 1416.947212][T25024] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1417.786951][T18894] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 1417.832406][T25042] syzkaller1: entered promiscuous mode [ 1417.850478][T25042] syzkaller1: entered allmulticast mode [ 1417.929255][ T5757] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1417.970308][T18894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1418.001467][T18894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1418.057387][T18894] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1418.078857][T18894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.097252][ T5757] usb 3-1: Using ep0 maxpacket: 8 [ 1418.120778][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1418.130882][T18894] usb 4-1: config 0 descriptor?? [ 1418.162300][ T5757] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1418.193270][ T5757] usb 3-1: string descriptor 0 read error: -22 [ 1418.212076][ T5757] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1418.231905][ T5757] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1418.281915][ T5757] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1418.315237][ T5757] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1418.330565][ T5757] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1418.344341][ T5757] usb 3-1: media controller created [ 1418.409736][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1418.525848][ T5757] zl10353_read_register: readreg error (reg=127, ret==0) [ 1418.702181][ T5757] usb 3-1: USB disconnect, device number 76 [ 1419.150864][T25059] fuse: Unknown parameter 'group_id00000000000000000000' [ 1419.496596][T25072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.529817][T25072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.201956][T25087] validate_nla: 44 callbacks suppressed [ 1420.202005][T25087] netlink: 'syz.2.5518': attribute type 8 has an invalid length. [ 1420.219540][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5518'. [ 1420.314040][T25089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.344271][T25089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.660644][T18894] usbhid 4-1:0.0: can't add hid device: -71 [ 1420.691149][T18894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1420.711738][T18894] usb 4-1: USB disconnect, device number 103 [ 1420.953758][T25103] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1421.696791][T25118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.720698][T25118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.957184][T18894] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 1422.982553][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1422.994152][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1423.134077][T18894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1423.148584][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.154966][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.177246][T18894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1423.214841][T18894] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1423.242299][T18894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.257768][T18894] usb 3-1: config 0 descriptor?? [ 1424.984587][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1425.036982][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1425.380752][T19298] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1425.561004][T19298] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1425.570568][T19298] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1425.583018][T19298] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1425.592441][T19298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.600653][T19298] usb 4-1: Product: syz [ 1425.605008][T19298] usb 4-1: Manufacturer: syz [ 1425.609835][T19298] usb 4-1: SerialNumber: syz [ 1425.626181][T19298] usb 4-1: config 0 descriptor?? [ 1425.734687][T18894] usbhid 3-1:0.0: can't add hid device: -71 [ 1425.743023][T18894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1425.768845][T18894] usb 3-1: USB disconnect, device number 77 [ 1426.255304][T19298] mos7840 4-1:0.0: required endpoints missing [ 1426.265122][T19298] usb 4-1: USB disconnect, device number 104 [ 1426.494011][T25219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.528068][T25219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.626671][T25224] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1426.662707][ T30] audit: type=1400 audit(1782900257.459:906): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25217 comm="syz.4.5570" [ 1427.218337][T25229] could not allocate digest TFM handle blake2b-512-generic [ 1427.293652][T25238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.310502][T25238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.367054][T19298] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 1427.550033][T19298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1427.576692][T19298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1427.607072][T19298] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1427.626440][T19298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.657535][T19298] usb 4-1: config 0 descriptor?? [ 1427.727042][T18894] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1427.906577][T18894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1427.921561][T18894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1427.939701][T18894] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1427.950310][T18894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.959600][T25245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5579'. [ 1427.995192][T18894] usb 3-1: config 0 descriptor?? [ 1428.762118][T25257] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5582'. [ 1430.210944][T19298] usbhid 4-1:0.0: can't add hid device: -71 [ 1430.230751][T19298] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1430.299913][T19298] usb 4-1: USB disconnect, device number 105 [ 1430.523684][T18894] usbhid 3-1:0.0: can't add hid device: -71 [ 1430.548199][T18894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1430.596546][T18894] usb 3-1: USB disconnect, device number 78 [ 1430.705478][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5592'. [ 1430.743189][T25283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5593'. [ 1430.754093][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5591'. [ 1430.763398][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5591'. [ 1430.773912][T25277] netlink: 'syz.3.5590': attribute type 2 has an invalid length. [ 1430.892579][T25286] fuse: Unknown parameter 'group_id00000000000000000000' [ 1431.042587][T25294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.072955][T25296] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5596'. [ 1431.116585][T25297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.116999][T25294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.159970][T25297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.593541][T25318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.605141][T25318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.889546][T25321] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5604'. [ 1433.361254][ T5757] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1433.381632][T25327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.396915][T25327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.520878][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1433.534135][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1433.551516][ T5757] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1433.562720][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.582537][ T5757] usb 3-1: config 0 descriptor?? [ 1434.402771][T25333] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5608'. [ 1434.479415][T25335] fuse: Unknown parameter 'group_id00000000000000000000' [ 1435.472886][ T30] audit: type=1400 audit(1782900266.269:907): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25341 comm="syz.3.5611" [ 1435.659108][T25347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.682374][T25347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.180139][ T5757] usbhid 3-1:0.0: can't add hid device: -71 [ 1436.204677][ T5757] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1436.235799][ T5757] usb 3-1: USB disconnect, device number 79 [ 1436.373283][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5614'. [ 1436.777686][T25368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.830510][T25368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.987339][T25373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.996316][T25373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.108429][T19298] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1437.279727][T19298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1437.291260][T19298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1437.304765][T19298] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1437.313912][T19298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.325022][T19298] usb 3-1: config 0 descriptor?? [ 1437.495783][T25382] fuse: Unknown parameter 'group_id00000000000000000000' [ 1437.629336][T25384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1437.696342][T25384] syzkaller1: entered promiscuous mode [ 1437.708780][T25384] syzkaller1: entered allmulticast mode [ 1437.938476][T25390] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1437.989085][ T30] audit: type=1400 audit(1782900268.789:908): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25387 comm="syz.0.5625" [ 1438.197147][T25394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.224710][T25394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.709753][T23361] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 1438.889463][T23361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1438.923683][T23361] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1438.965430][T23361] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1438.995051][T23361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.036005][T23361] usb 4-1: config 0 descriptor?? [ 1439.929399][T19298] usbhid 3-1:0.0: can't add hid device: -71 [ 1439.948555][T19298] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1440.030521][T19298] usb 3-1: USB disconnect, device number 80 [ 1440.398526][T25414] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1440.519352][ T30] audit: type=1400 audit(1782900271.319:909): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25410 comm="syz.4.5631" [ 1441.540837][T23361] usbhid 4-1:0.0: can't add hid device: -71 [ 1441.547191][T23361] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1441.567077][T23361] usb 4-1: USB disconnect, device number 106 [ 1442.218810][ T5757] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 1442.295102][T25429] fuse: Unknown parameter 'group_id00000000000000000000' [ 1442.390841][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1442.418969][ T5757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1442.460547][ T5757] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1442.477050][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.487508][T25438] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5639'. [ 1442.510101][ T5757] usb 4-1: config 0 descriptor?? [ 1442.825118][T25441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.845214][T25441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.977198][T23361] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 1444.149182][T23361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1444.160680][T23361] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1444.174006][T23361] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1444.185584][T23361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.195853][T23361] usb 3-1: config 0 descriptor?? [ 1444.883133][T25462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.899914][T25462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.026335][ T5757] usbhid 4-1:0.0: can't add hid device: -71 [ 1445.036647][ T5757] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1445.061626][ T5757] usb 4-1: USB disconnect, device number 107 [ 1445.314095][T25469] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1445.325588][ T30] audit: type=1400 audit(1782900276.119:910): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25466 comm="syz.3.5649" [ 1445.664123][T25472] fuse: Unknown parameter 'group_id00000000000000000000' [ 1446.751496][T25485] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5653'. [ 1446.820779][T23361] usbhid 3-1:0.0: can't add hid device: -71 [ 1446.854140][T23361] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1446.882757][T25489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.908406][T23361] usb 3-1: USB disconnect, device number 81 [ 1446.934829][T25489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.984404][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5654'. [ 1447.753853][T25503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.779292][T25503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.859761][T25507] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1447.924513][T25507] syzkaller1: entered promiscuous mode [ 1447.932968][T25507] syzkaller1: entered allmulticast mode [ 1447.983725][T25512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.024995][T25512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.034665][T23361] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 1448.200830][T23361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1448.224662][T23361] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1448.255323][T23361] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1448.279364][T23361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.302038][T23361] usb 4-1: config 0 descriptor?? [ 1448.417104][ T5757] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1448.581607][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1448.595199][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1448.614699][ T5757] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1448.626301][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.642890][ T5757] usb 3-1: config 0 descriptor?? [ 1450.773243][T23361] usbhid 4-1:0.0: can't add hid device: -71 [ 1450.788286][T23361] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1450.812840][T23361] usb 4-1: USB disconnect, device number 108 [ 1451.101129][T25531] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1451.165273][ T30] audit: type=1400 audit(1782900281.959:911): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25528 comm="syz.3.5669" [ 1451.251332][ T5757] usbhid 3-1:0.0: can't add hid device: -71 [ 1451.277897][ T5757] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1451.310897][ T5757] usb 3-1: USB disconnect, device number 82 [ 1451.405768][T25538] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5671'. [ 1452.550534][T25549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.585811][T25549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.719766][T25556] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1453.205472][T25561] netlink: 'syz.4.5679': attribute type 1 has an invalid length. [ 1453.378887][T25561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1453.744867][T25569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.764982][T25569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.974255][T25573] fuse: Unknown parameter 'group_id00000000000000000000' [ 1454.977017][T23361] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1455.147248][T23361] usb 3-1: Using ep0 maxpacket: 8 [ 1455.155142][T23361] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1455.171660][T23361] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1455.187230][T23361] usb 3-1: string descriptor 0 read error: -22 [ 1455.198605][T23361] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1455.208421][T23361] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1455.239737][T23361] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1455.255596][T23361] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1455.275220][T23361] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1455.284884][T23361] usb 3-1: media controller created [ 1455.324582][T23361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1455.823085][T25600] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1455.836618][ T30] audit: type=1400 audit(1782900286.629:912): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25595 comm="syz.1.5690" [ 1456.181619][T25607] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1456.281756][ T30] audit: type=1400 audit(1782900287.079:913): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25603 comm="syz.0.5693" [ 1456.316760][T25607] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1456.418352][T23361] zl10353_read_register: readreg error (reg=127, ret==0) [ 1456.420538][T25584] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 1456.555655][T23361] usb 3-1: USB disconnect, device number 83 [ 1456.922012][ T5757] hid_parser_main: 10 callbacks suppressed [ 1456.922028][ T5757] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1456.971189][ T5757] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1456.999718][T19298] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1457.177023][T19298] usb 4-1: Using ep0 maxpacket: 16 [ 1457.204757][T19298] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1457.250350][T19298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1457.287076][T25620] fuse: Unknown parameter 'group_id00000000000000000000' [ 1457.310563][T19298] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1457.335396][T19298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.367313][T19298] usb 4-1: Product: syz [ 1457.382285][T19298] usb 4-1: Manufacturer: syz [ 1457.412726][T19298] usb 4-1: SerialNumber: syz [ 1457.440444][T19298] usb 4-1: config 0 descriptor?? [ 1457.483527][T19298] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1457.520007][T19298] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1457.798501][T25625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.852301][T25625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.918463][T25623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5696'. [ 1457.991552][T25617] veth7: entered promiscuous mode [ 1458.017753][T25617] veth7: entered allmulticast mode [ 1458.074166][T19298] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1458.102436][T19298] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1458.400255][T25632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.411130][T25632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.587151][ T5757] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1458.748824][T19298] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1458.759037][T19298] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1458.762433][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1458.779634][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1458.794883][ T5757] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1458.805480][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.824767][ T5757] usb 3-1: config 0 descriptor?? [ 1458.880678][T25640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.891979][T25640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.946966][T19298] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1458.955881][T19298] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1459.130605][T19298] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1459.138634][T19298] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1459.145559][T19298] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1459.157604][T19298] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1459.175825][T19298] usb 4-1: USB disconnect, device number 109 [ 1460.401577][T25656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.413220][T25656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.071810][T25662] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1461.083726][ T30] audit: type=1400 audit(1782900291.879:914): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25659 comm="syz.3.5709" [ 1461.388048][ T5757] usbhid 3-1:0.0: can't add hid device: -71 [ 1461.416559][ T5757] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1461.441498][ T5757] usb 3-1: USB disconnect, device number 84 [ 1461.518825][T25665] fuse: Unknown parameter 'group_id00000000000000000000' [ 1462.343477][T25684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.366741][T25684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.503702][T25692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.515862][T25692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.557824][T19298] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1462.727953][T19298] usb 4-1: Using ep0 maxpacket: 32 [ 1462.740584][T19298] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1462.750594][T19298] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1462.760462][T19298] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1462.769706][T19298] usb 4-1: config 14 has no interface number 0 [ 1462.776398][T19298] usb 4-1: config 14 has no interface number 1 [ 1462.783371][T19298] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1462.794319][T19298] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1462.808419][T19298] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1462.827356][T19298] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1462.842485][T19298] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1462.855641][T19298] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.874088][T19298] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1462.881449][T19298] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1462.892933][T19298] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1462.902933][T19298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.911234][T19298] usb 4-1: Product: syz [ 1462.915585][T19298] usb 4-1: Manufacturer: syz [ 1462.923864][T19298] usb 4-1: SerialNumber: syz [ 1463.007996][T25696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.019780][T25696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.379449][T19298] legousbtower 4-1:14.57: interrupt endpoints not found [ 1463.737027][T23361] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1463.790169][T19298] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1463.801725][T19298] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1463.887283][T23361] usb 3-1: Using ep0 maxpacket: 8 [ 1463.894865][T23361] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1463.904144][T23361] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1463.915044][T23361] usb 3-1: string descriptor 0 read error: -22 [ 1463.921677][T23361] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1463.931052][T23361] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1463.947954][T23361] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1463.961536][T23361] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1463.973180][T23361] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1463.980908][T23361] usb 3-1: media controller created [ 1464.014455][T23361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1464.654667][T19298] usb 4-1: USB disconnect, device number 110 [ 1464.673256][T19298] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1465.057839][T25700] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 1465.064133][T23361] zl10353_read_register: readreg error (reg=127, ret==0) [ 1465.100208][T23361] usb 3-1: USB disconnect, device number 85 [ 1465.716281][T25714] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1465.767662][ T30] audit: type=1400 audit(1782900296.559:915): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25710 comm="syz.0.5725" [ 1466.217552][T25726] fuse: Unknown parameter 'group_id00000000000000000000' [ 1466.349214][T19304] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1466.520605][T19304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1466.539246][T19304] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1466.592914][T19304] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1466.620178][T19304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.668379][T19304] usb 3-1: config 0 descriptor?? [ 1467.671657][T25748] netlink: 'syz.1.5734': attribute type 4 has an invalid length. [ 1467.950013][T25751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.977466][T25751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.227045][ T5757] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 1468.379903][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1468.392262][ T5757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1468.406419][ T5757] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1468.417490][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.429845][ T5757] usb 4-1: config 0 descriptor?? [ 1468.939808][T25759] netlink: 'syz.4.5738': attribute type 4 has an invalid length. [ 1469.004343][T25761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.026728][T25761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.120518][T19304] usbhid 3-1:0.0: can't add hid device: -71 [ 1469.143592][T19304] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1469.175514][T19304] usb 3-1: USB disconnect, device number 86 [ 1469.783341][T25772] fuse: Unknown parameter 'group_id00000000000000000000' [ 1470.414285][T25782] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1472.458717][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.485046][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.597246][T23361] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1472.770250][T23361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1472.789188][T23361] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1472.813823][T23361] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1472.838591][T23361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.878849][T23361] usb 3-1: config 0 descriptor?? [ 1473.194219][T25815] fuse: Unknown parameter 'group_id00000000000000000000' [ 1473.395365][T25819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.424606][T25819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.858531][ T5757] usbhid 4-1:0.0: can't add hid device: -32 [ 1473.869875][ T5757] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1474.447560][T25831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.488002][T25831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.653639][T25841] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5762'. [ 1474.697581][ T30] audit: type=1400 audit(1782900305.499:916): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25834 comm="syz.4.5762" [ 1475.324431][T25852] fuse: Unknown parameter 'group_id00000000000000000000' [ 1475.767292][T25850] syzkaller0: entered promiscuous mode [ 1475.793663][T25850] syzkaller0: entered allmulticast mode [ 1476.492686][T25861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.514067][T25861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.709300][T25867] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5771'. [ 1476.723435][T25866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.827643][T25866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.124115][T25873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.138985][T25873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.025096][T25879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.035727][T25879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.367537][T23361] usbhid 3-1:0.0: can't add hid device: -32 [ 1478.394773][T23361] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1480.171943][T25886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.191709][T25886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.979291][T25901] netlink: 'syz.1.5781': attribute type 2 has an invalid length. [ 1483.021299][T25903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.047557][T25903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.064839][T25901] : entered promiscuous mode [ 1483.280756][T25912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.292580][T25912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.316668][T25912] netlink: 'syz.1.5785': attribute type 10 has an invalid length. [ 1483.472984][T25917] syzkaller0: entered promiscuous mode [ 1483.489433][T25917] syzkaller0: entered allmulticast mode [ 1483.736999][T25919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1483.945191][T25926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.955616][T25923] fuse: Unknown parameter 'group_id00000000000000000000' [ 1483.964940][T25926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.194492][T25930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.207624][T25930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.363419][T25933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.372337][T25933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.578819][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.585260][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.865054][T25942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.876683][T25942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.437435][T25944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.448798][T25944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.048985][T25947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.063916][T25947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.161042][T25960] fuse: Unknown parameter 'group_id00000000000000000000' [ 1487.301974][T25963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.328964][T25963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.498788][T25966] syzkaller0: left promiscuous mode [ 1487.506322][T25966] syzkaller0: left allmulticast mode [ 1487.639452][T25968] syzkaller0: entered promiscuous mode [ 1487.653676][T25968] syzkaller0: entered allmulticast mode [ 1487.883455][T25975] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5807'. [ 1487.901220][ T30] audit: type=1400 audit(1782900318.699:917): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25970 comm="syz.1.5807" [ 1488.029092][T25978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.054846][T25978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.245966][T25985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.263419][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.263529][T25985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.273194][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.960842][T25989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.974396][T25992] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1489.987984][ T30] audit: type=1400 audit(1782900320.789:918): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25988 comm="syz.0.5822" [ 1489.989641][T25989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.075731][ T30] audit: type=1326 audit(1782900320.869:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.4.5812" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f750ec code=0x0 [ 1491.052260][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1491.067060][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1491.600776][T26004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.627590][T26004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.410910][T26011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.442945][T26011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.354099][T26036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1496.518719][T26038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.565753][T26038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.081625][T26049] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5824'. [ 1497.145419][ T30] audit: type=1400 audit(1782900327.939:920): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26047 comm="syz.1.5824" [ 1497.465116][T26053] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5825'. [ 1497.537491][T26053] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1497.706552][T26056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.750920][T26056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.046007][T26059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.086500][T26059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.528590][T26064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.550265][T26064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.605467][T26066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.624805][T26066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.045063][T26069] syzkaller0: entered promiscuous mode [ 1499.052027][T26069] syzkaller0: entered allmulticast mode [ 1499.309939][T26076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.321224][T26076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.211528][T26080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.225985][T26080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.592406][T26091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.623192][T26091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.501738][T26103] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5837'. [ 1502.549889][ T30] audit: type=1400 audit(1782900333.339:921): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26098 comm="syz.3.5837" [ 1502.593229][T26102] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5838'. [ 1502.659509][T26102] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1502.677663][T26105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.692853][ T30] audit: type=1400 audit(1782900333.459:922): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26100 comm="syz.0.5838" [ 1502.696712][T26105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.725846][T26119] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 1503.784858][T26115] dummy0: left promiscuous mode [ 1503.842129][T26115] tipc: Resetting bearer [ 1503.850214][T26122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.878158][T26122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.541845][T26115] syzkaller0: left promiscuous mode [ 1504.559565][T26115] syzkaller0: left allmulticast mode [ 1504.793710][T26142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.814572][T26142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.851398][T26119] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1504.868653][T26144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.880793][T26144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.882681][T26121] vlan4: entered allmulticast mode [ 1504.899389][T26121] bond5: entered allmulticast mode [ 1504.920155][T26147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.934100][T26125] bond5: (slave geneve2): making interface the new active one [ 1504.942841][T26147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.952829][T26125] geneve2: entered allmulticast mode [ 1504.965274][T26125] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1504.992305][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.087510][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.104799][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.125747][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.182976][T26155] tipc: Resetting bearer [ 1505.971751][T26165] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5851'. [ 1505.998160][ T30] audit: type=1400 audit(1782900336.799:923): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26163 comm="syz.3.5851" [ 1506.648682][T26170] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5852'. [ 1506.662559][ T30] audit: type=1400 audit(1782900337.459:924): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26167 comm="syz.0.5852" [ 1506.664193][T26170] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1508.245739][T26188] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1508.270268][T26190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.295654][T26190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.314207][ T30] audit: type=1400 audit(1782900339.089:925): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26183 comm="syz.1.5857" [ 1508.528758][T26179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.545251][T26179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.596676][T26198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1508.620486][T26198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1508.672799][T26199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.695267][T26199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.145139][T26204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.214326][T26204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.119737][T26211] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1510.154190][ T30] audit: type=1400 audit(1782900340.949:926): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26209 comm="syz.1.5863" [ 1511.072112][T26216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.089064][T26216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.345639][T26221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.367585][T26221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.674346][T26226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.687981][T26226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.953014][T26229] syzkaller0: entered promiscuous mode [ 1511.958500][T26229] syzkaller0: entered allmulticast mode [ 1512.530735][T26241] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5872'. [ 1512.532468][T26240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.567888][T26242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.578210][T26240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.593874][T26242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.771050][T26245] syzkaller0: entered promiscuous mode [ 1512.777067][T26245] syzkaller0: entered allmulticast mode [ 1513.136922][T26249] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5875'. [ 1513.233631][T26250] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1513.437213][T26253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.466698][T26253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.480650][T26262] fuse: Unknown parameter 'group_id00000000000000000000' [ 1515.235792][T26268] fuse: Unknown parameter 'group_id00000000000000000000' [ 1516.330746][T26278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.377677][T26278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.691892][T26281] syzkaller0: entered promiscuous mode [ 1516.710903][T26281] syzkaller0: entered allmulticast mode [ 1516.949467][T26284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.979155][T26284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.211396][T26286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.225615][T26286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.296363][T26288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 1517.401217][T26288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 1517.459284][T26291] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5886'. [ 1517.625872][T26299] fuse: Unknown parameter 'group_id00000000000000000000' [ 1517.752259][T26303] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5890'. [ 1517.796671][ T30] audit: type=1400 audit(1782900348.589:927): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26295 comm="syz.1.5890" [ 1517.850743][T26303] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1517.999258][T26310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.076559][T26310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.429935][T26317] syzkaller0: entered promiscuous mode [ 1518.448337][T26317] syzkaller0: entered allmulticast mode [ 1518.466783][T26317] tipc: Enabled bearer , priority 0 [ 1518.505187][T26316] tipc: Resetting bearer [ 1518.593160][T26316] tipc: Disabling bearer [ 1519.245354][T26323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.283898][T26323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.507155][T26328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.536066][T26328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.430828][T26338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5901'. [ 1520.442379][T26338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5901'. [ 1521.366173][T26343] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5902'. [ 1521.427799][ T30] audit: type=1400 audit(1782900352.219:928): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26340 comm="syz.3.5902" [ 1522.188599][T26351] fuse: Unknown parameter 'group_id00000000000000000000' [ 1522.292240][T26352] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1522.659502][T26359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.696494][T26359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.096635][T26366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.148919][T26366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.232959][T26369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.248012][T26369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.416488][T26375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.445861][T26375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.708439][T26381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.722757][T26381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.088269][T26387] syzkaller0: entered promiscuous mode [ 1524.108951][T26387] syzkaller0: entered allmulticast mode [ 1524.409243][T26397] fuse: Unknown parameter 'group_id00000000000000000000' [ 1524.423345][T26398] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5920'. [ 1524.449176][ T30] audit: type=1400 audit(1782900355.249:929): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26390 comm="syz.3.5920" [ 1524.505242][T26400] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1526.488593][T26413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.513088][T26413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.731731][T26429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.741381][T26429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.933075][T26435] fuse: Unknown parameter 'group_id00000000000000000000' [ 1527.958569][T26429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.980318][T26429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.211130][T26439] syzkaller0: left promiscuous mode [ 1528.216528][T26439] syzkaller0: left allmulticast mode [ 1528.431069][T26443] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5935'. [ 1528.455646][ T30] audit: type=1400 audit(1782900359.249:930): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26440 comm="syz.4.5935" [ 1528.563864][T26447] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5936'. [ 1528.607399][T26450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.619423][ T30] audit: type=1400 audit(1782900359.419:931): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26444 comm="syz.3.5936" [ 1528.621506][T26447] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1528.648724][T26450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.711060][T26458] syzkaller0: entered promiscuous mode [ 1529.718769][T26458] syzkaller0: entered allmulticast mode [ 1529.926146][T26461] tipc: Enabled bearer , priority 0 [ 1529.986780][T26461] tipc: Resetting bearer [ 1530.341016][T26471] fuse: Unknown parameter 'group_id00000000000000000000' [ 1530.565482][T26473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.622088][T26473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.151903][T26480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.184891][T26480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.199671][T26482] syzkaller0: entered promiscuous mode [ 1531.208918][T26482] syzkaller0: entered allmulticast mode [ 1531.452913][T26488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.464873][T26488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.560065][T26490] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5949'. [ 1531.624308][ T30] audit: type=1400 audit(1782900362.419:932): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26485 comm="syz.0.5949" [ 1532.338711][T26501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.380215][T26501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.603625][T26505] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5955'. [ 1533.503152][T26514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.541501][T26514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.668761][T26516] fuse: Unknown parameter 'group_id00000000000000000000' [ 1533.774801][T26518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.813387][T26518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.481818][T26527] syzkaller0: entered promiscuous mode [ 1534.505248][T26527] syzkaller0: entered allmulticast mode [ 1534.527328][T26526] netlink: 'syz.3.5962': attribute type 1 has an invalid length. [ 1534.713483][T26533] syzkaller0: left promiscuous mode [ 1534.727741][T26533] syzkaller0: left allmulticast mode [ 1534.865471][T26538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.891460][T26538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.063146][T26547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.073415][T26550] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5967'. [ 1535.117611][T26547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.221816][T26554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.243760][T26554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.933583][T26557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.952897][T26557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.139970][T26563] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5973'. [ 1536.153804][ T30] audit: type=1400 audit(1782900366.949:933): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26558 comm="syz.1.5973" [ 1538.124832][T26569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.147856][T26570] fuse: Unknown parameter 'group_id00000000000000000000' [ 1538.147923][T26569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.574992][T26590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.782874][T26590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.946592][T26596] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5983'. [ 1540.611712][T26602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.681434][T26602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.849471][T26602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.893004][T26602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.392645][T26604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.430266][T26604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.561674][T26606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.617414][T26606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.214823][T26621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.244524][T26621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.375511][T26624] fuse: Unknown parameter 'group_id00000000000000000000' [ 1542.914454][T26628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.940116][T26628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.316390][T26634] tipc: Enabling of bearer rejected, already enabled [ 1543.435492][T26638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5996'. [ 1544.276370][T26650] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5999'. [ 1544.350931][ T30] audit: type=1400 audit(1782900375.149:934): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26647 comm="syz.0.5999" [ 1544.512313][T26654] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6000'. [ 1544.555847][ T30] audit: type=1400 audit(1782900375.349:935): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26651 comm="syz.1.6000" [ 1544.584003][T26654] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1545.053551][T26660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.089303][T26660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.811993][T26662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.848034][T26662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.942260][T26665] fuse: Unknown parameter 'group_id00000000000000000000' [ 1546.034190][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.041865][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.616001][T26676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.646523][T26676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.535597][T26689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.560348][T26689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.774334][T26692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.799770][T26692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.854201][T26692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6011'. [ 1548.576257][T26705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.616407][T26704] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1548.635548][T26705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.654699][T26699] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6012'. [ 1548.691987][ T30] audit: type=1400 audit(1782900379.489:936): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26694 comm="syz.4.6012" [ 1548.785669][T26704] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1549.904977][T26709] syzkaller0: entered promiscuous mode [ 1549.926507][T26709] syzkaller0: entered allmulticast mode [ 1550.333316][ T30] audit: type=1326 audit(1782900381.129:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.399916][ T30] audit: type=1326 audit(1782900381.159:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.479548][T26714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.491383][ T30] audit: type=1326 audit(1782900381.159:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.542089][T26714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.600807][ T30] audit: type=1326 audit(1782900381.159:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.678100][ T30] audit: type=1326 audit(1782900381.159:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.735147][ T30] audit: type=1326 audit(1782900381.159:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.796699][ T30] audit: type=1326 audit(1782900381.159:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.867020][ T30] audit: type=1326 audit(1782900381.159:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.917002][ T30] audit: type=1326 audit(1782900381.159:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1550.984349][ T30] audit: type=1326 audit(1782900381.159:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26711 comm="syz.3.6016" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 1551.230566][T26731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.269901][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6025'. [ 1551.287053][T26731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.307408][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6025'. [ 1551.425846][T26738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.506070][T26738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.516204][T26736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.529850][T26736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.075868][T26736] fuse: Bad value for 'fd' [ 1552.156365][T26760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.185626][T26760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.242509][T26762] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1553.395294][T26769] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1553.568797][T26772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.629218][T26772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.710993][T26791] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.6035'. [ 1555.726625][T26791] openvswitch: netlink: Message has 5 unknown bytes. [ 1555.779611][T26793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.817742][T26793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.196790][T26807] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6041'. [ 1556.216176][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1556.216193][ T30] audit: type=1400 audit(1782900387.009:960): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26802 comm="syz.4.6041" [ 1556.705768][T26811] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6043'. [ 1556.741818][ T30] audit: type=1400 audit(1782900387.539:961): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26810 comm="syz.1.6043" [ 1556.772502][T26811] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1557.601214][T26827] fuse: Unknown parameter 'group_id00000000000000000000' [ 1558.846206][T26846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.938236][T26846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.588781][T26853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.689921][T26853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.164361][T26856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.205347][T26856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.382082][T26864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.417417][T26864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.466355][T26863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.494086][T26863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.029665][T26869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.039932][T26869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.172208][T26872] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1561.184676][ T30] audit: type=1400 audit(1782900391.979:962): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26871 comm="syz.3.6060" [ 1562.060410][T26876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.069458][T26876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.246200][T26881] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1563.526837][T26889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.541491][T26889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.107234][T26896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.119894][T26896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.301632][T26899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1564.335015][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.358756][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.556687][T26909] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6072'. [ 1564.591661][ T30] audit: type=1400 audit(1782900395.389:963): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26905 comm="syz.4.6072" [ 1564.637979][T26911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.657568][T26911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.791616][T26915] program syz.2.6074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1564.810226][T26915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.827498][T26915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.496699][T26919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.506372][T26919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.950106][T26935] tipc: Enabling of bearer rejected, already enabled [ 1567.014619][T26937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1567.094107][T26941] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1567.751578][T26947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.782796][T26947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.083212][T26953] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1568.768644][T26956] batman_adv: batadv0: Adding interface: vxlan0 [ 1568.793563][T26956] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1568.860640][T26956] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 1569.206691][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.233585][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.276554][T26960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.312970][T26960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.802790][T26966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.827401][T26966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.187150][T26968] tipc: Enabled bearer , priority 0 [ 1570.195973][T26968] syzkaller0: entered promiscuous mode [ 1570.202358][T26968] syzkaller0: entered allmulticast mode [ 1570.249350][T26968] tipc: Resetting bearer [ 1570.259187][T26967] tipc: Resetting bearer [ 1570.299190][T26967] tipc: Disabling bearer [ 1570.589237][T26977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6092'. [ 1570.841139][T26979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.855417][T26979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.463978][T26983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.475387][T26983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.316433][T26994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.329932][T26994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.330231][T26992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.353180][T26992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.954961][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1573.196243][T27001] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6099'. [ 1573.212346][ T30] audit: type=1400 audit(1782900404.009:964): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26998 comm="syz.3.6099" [ 1574.666258][T27009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6102'. [ 1574.743832][T27009] syzkaller1: entered promiscuous mode [ 1574.753365][T27009] syzkaller1: entered allmulticast mode [ 1575.270514][T27020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.280639][T27020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.454807][T27024] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6109'. [ 1576.237706][T27034] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1576.314811][ T30] audit: type=1400 audit(1782900407.109:965): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27029 comm="syz.4.6112" [ 1576.360732][T27036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.390438][T27036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.384667][T27042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.394200][T27042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.749265][T27053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.762613][T27053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.796716][T27055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6118'. [ 1578.823134][T27055] syzkaller1: entered promiscuous mode [ 1578.829917][T27055] syzkaller1: entered allmulticast mode [ 1578.975362][T27058] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6121'. [ 1580.799328][T27071] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6125'. [ 1580.863546][ T30] audit: type=1400 audit(1782900411.639:966): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27067 comm="syz.3.6125" [ 1581.003124][T27075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.026149][T27075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.787842][T27083] netlink: 'syz.2.6128': attribute type 1 has an invalid length. [ 1582.025718][T27083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1582.138431][T27086] bond4: (slave geneve2): making interface the new active one [ 1582.162405][T27086] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1582.419393][T27092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.466437][T27092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.588658][T27095] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6139'. [ 1582.627662][T27098] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1582.645805][ T30] audit: type=1400 audit(1782900413.429:967): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27088 comm="syz.0.6139" [ 1582.730325][T27100] syzkaller1: entered promiscuous mode [ 1582.771086][T27100] syzkaller1: entered allmulticast mode [ 1582.848357][T27105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.866582][T27105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.406775][T27121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.454143][T27121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.519713][T27122] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1584.583318][ T30] audit: type=1400 audit(1782900415.379:968): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27116 comm="syz.0.6149" [ 1585.286428][T27132] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6142'. [ 1586.652307][T27148] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6156'. [ 1586.931485][T27150] fuse: Unknown parameter 'group_id00000000000000000000' [ 1586.953730][T27153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.991641][T27153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.109506][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1587.294080][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1588.078865][T27168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.108251][T27168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.238805][T27175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.254108][T27175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.264398][T27176] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1588.287549][ T30] audit: type=1400 audit(1782900419.089:969): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27167 comm="syz.4.6162" [ 1589.140737][T27183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.168346][T27183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.868705][T27192] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6160'. [ 1589.883704][ T30] audit: type=1400 audit(1782900420.679:970): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27189 comm="syz.0.6160" [ 1590.689717][T27195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.699375][T27195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.720888][T27195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.732423][T27195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.743380][T27197] syzkaller0: entered promiscuous mode [ 1590.752743][T27195] program syz.2.6172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1590.761280][T27199] netlink: 'syz.0.6161': attribute type 1 has an invalid length. [ 1590.762610][T27197] syzkaller0: entered allmulticast mode [ 1590.813419][T27199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1591.460898][T27219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.496675][T27219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.544306][T27236] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6174'. [ 1592.579314][ T30] audit: type=1400 audit(1782900423.359:971): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27231 comm="syz.3.6174" [ 1592.686712][T27234] tipc: Enabling of bearer rejected, already enabled [ 1592.911499][ C0] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1594.289672][T27251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 1594.678674][ T30] audit: type=1326 audit(1782900425.479:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.1.6178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd90ec code=0x0 [ 1595.130526][T27264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.187254][T27264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.406234][T27267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.499319][T27267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.513724][T27278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.539348][T27278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.588474][T27282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.625220][T27282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.691098][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1597.793409][T27285] netlink: 'syz.0.6188': attribute type 10 has an invalid length. [ 1597.812010][T27285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1598.826235][T27301] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6191'. [ 1600.714329][T27312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.743143][T27312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.770028][T27311] tipc: Started in network mode [ 1600.785359][T27311] tipc: Node identity 126580c2de82, cluster identity 4711 [ 1600.815771][T27311] tipc: Enabled bearer , priority 0 [ 1600.877908][T27311] tipc: Resetting bearer [ 1601.721410][T27332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.738023][T27332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.888834][T23361] tipc: Node number set to 3437723842 [ 1602.480186][T27334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.500251][T27334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.611397][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1603.632899][T27342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.644888][T27342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.886381][T27351] fuse: Unknown parameter 'group_id00000000000000000000' [ 1604.440338][T27357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.462376][T27357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.602426][T27382] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1606.649211][ T30] audit: type=1400 audit(1782900437.439:973): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27375 comm="syz.1.6224" [ 1606.985526][T27391] tipc: Enabling of bearer rejected, already enabled [ 1607.062782][T27397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.088997][T27397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.153565][T27399] fuse: Unknown parameter 'group_id00000000000000000000' [ 1607.328509][T27397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.384429][T27397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.461641][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.468305][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.786493][T27408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.814792][T27408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.446152][T27425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.458493][T27425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.476171][T27425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.485625][T27425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.502800][T27425] program syz.4.6225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1608.894841][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.908852][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.752348][T27441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.761509][T27441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.102351][T27445] fuse: Unknown parameter 'group_id00000000000000000000' [ 1610.418640][T27449] tipc: Enabled bearer , priority 0 [ 1610.522647][T27453] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6233'. [ 1610.541268][ T30] audit: type=1400 audit(1782900441.339:974): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27450 comm="syz.4.6233" [ 1611.275624][T27466] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6237'. [ 1611.483994][T27468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.521956][T27468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.477467][T27478] syzkaller0: entered promiscuous mode [ 1612.489922][T27478] syzkaller0: entered allmulticast mode [ 1612.522996][T27478] tipc: Enabled bearer , priority 0 [ 1612.548987][T27478] tipc: Resetting bearer [ 1612.560494][T27477] tipc: Resetting bearer [ 1612.600487][T27477] tipc: Disabling bearer [ 1612.833844][T27485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.855055][T27487] fuse: Unknown parameter 'group_id00000000000000000000' [ 1612.863167][T27485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.511573][T27493] fuse: Unknown parameter 'group_id00000000000000000000' [ 1614.245283][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6248'. [ 1614.678012][T27510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.694589][T27510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.820125][T27513] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1616.601615][T27522] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1616.636518][ T30] audit: type=1400 audit(1782900447.429:975): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27519 comm="syz.4.6252" [ 1617.644225][T27536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.694985][T27536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.679379][T27548] fuse: Unknown parameter 'group_id00000000000000000000' [ 1618.845283][T27551] program syz.4.6260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1618.932293][T27551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.001833][T27551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.111117][T27562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.121392][T27562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.593974][T27566] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6264'. [ 1620.795739][T27568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.823103][ T30] audit: type=1400 audit(1782900451.609:976): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27563 comm="syz.1.6264" [ 1620.844419][T27568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.471062][T27579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.491099][T27579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.774200][T27542] Set syz1 is full, maxelem 65536 reached [ 1623.219256][T27588] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1623.857703][T27591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1623.867994][T27591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1623.883905][T27594] fuse: Unknown parameter 'group_id00000000000000000000' [ 1624.494076][T27603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.513731][T27603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.547038][T27600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.559778][T27600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.737242][ T31] INFO: task kworker/0:15:19310 blocked for more than 143 seconds. [ 1624.745933][ T31] Tainted: G L syzkaller #0 [ 1624.753805][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1624.762891][ T31] task:kworker/0:15 state:D stack:21312 pid:19310 tgid:19310 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1624.775425][ T31] Workqueue: usb_hub_wq hub_event [ 1624.780801][ T31] Call Trace: [ 1624.784338][ T31] [ 1624.787628][ T31] __schedule+0x17d9/0x56c0 [ 1624.792741][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1624.798323][ T31] ? __pfx___schedule+0x10/0x10 [ 1624.803273][ T31] ? schedule+0x90/0x2b0 [ 1624.807663][ T31] schedule+0x164/0x2b0 [ 1624.812054][ T31] usb_kill_urb+0x1cf/0x2f0 [ 1624.816703][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1624.822023][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1624.828431][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 1624.833546][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1624.839480][ T31] usb_control_msg+0x234/0x3e0 [ 1624.844831][ T31] hub_port_init+0xb0b/0x28c0 [ 1624.850034][ T31] hub_event+0x24e8/0x4d30 [ 1624.854550][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1624.860518][ T31] ? __pfx_hub_event+0x10/0x10 [ 1624.865550][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1624.871573][ T31] ? rcu_is_watching+0x15/0xb0 [ 1624.876576][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1624.882463][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1624.888287][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1624.894340][ T31] ? assign_work+0x3cf/0x5d0 [ 1624.899157][ T31] worker_thread+0xa47/0xfb0 [ 1624.904009][ T31] kthread+0x388/0x470 [ 1624.908207][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1624.913534][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.918286][ T31] ret_from_fork+0x514/0xb70 [ 1624.923254][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.928590][ T31] ? load_gs_index+0x97/0xc0 [ 1624.933494][ T31] ? __switch_to+0xc89/0x1420 [ 1624.938334][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.943124][ T31] ret_from_fork_asm+0x1a/0x30 [ 1624.948100][ T31] [ 1624.951460][ T31] [ 1624.951460][ T31] Showing all locks held in the system: [ 1624.959348][ T31] 1 lock held by khungtaskd/31: [ 1624.964449][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1624.975964][ T31] 2 locks held by getty/5377: [ 1624.980996][ T31] #0: ffff8880333490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1624.991038][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1625.001531][ T31] 5 locks held by kworker/0:15/19310: [ 1625.007093][ T31] #0: ffff888022edf540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1625.019489][ T31] #1: ffffc9001c167c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1625.031491][ T31] #2: ffff88802b24b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1625.040630][ T31] #3: ffff88802b248568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1625.050671][ T31] #4: ffff88802b1da360 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1625.080534][ T31] 3 locks held by syz.4.6271/27590: [ 1625.085809][ T31] #0: ffffffff8e802120 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x49/0x70 [ 1625.101842][ T31] #1: ffffffff8e82aba8 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1625.113147][ T31] #2: ffff88807daa0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_resume_dev+0x139/0x270 [ 1625.122967][ T31] 1 lock held by syz.3.6273/27599: [ 1625.128156][ T31] #0: ffffffff8e82aba8 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_chain_register+0x50/0xc0 [ 1625.140046][ T31] [ 1625.142425][ T31] ============================================= [ 1625.142425][ T31] [ 1625.151062][ T31] NMI backtrace for cpu 1 [ 1625.151097][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1625.151122][ T31] Tainted: [L]=SOFTLOCKUP [ 1625.151127][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1625.151136][ T31] Call Trace: [ 1625.151144][ T31] [ 1625.151152][ T31] dump_stack_lvl+0xe8/0x150 [ 1625.151181][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1625.151308][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1625.151341][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1625.151381][ T31] sys_info+0x135/0x170 [ 1625.151431][ T31] watchdog+0xfd7/0x1030 [ 1625.151466][ T31] ? watchdog+0x1c7/0x1030 [ 1625.151499][ T31] kthread+0x388/0x470 [ 1625.151521][ T31] ? __pfx_watchdog+0x10/0x10 [ 1625.151545][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.151565][ T31] ret_from_fork+0x514/0xb70 [ 1625.151588][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1625.151609][ T31] ? __switch_to+0xc89/0x1420 [ 1625.151639][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.151660][ T31] ret_from_fork_asm+0x1a/0x30 [ 1625.151697][ T31] [ 1625.151705][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1625.268482][ C0] NMI backtrace for cpu 0 [ 1625.268504][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1625.268529][ C0] Tainted: [L]=SOFTLOCKUP [ 1625.268535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1625.268545][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 1625.268578][ C0] Code: f8 99 79 11 65 8b 0d 19 9a 79 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 17 00 00 00 74 52 8b 8a f8 16 00 00 <83> f9 03 75 47 48 8b 8a 00 17 00 00 44 8b 8a fc 16 00 00 49 c1 e1 [ 1625.268614][ C0] RSP: 0000:ffffc90000007eb8 EFLAGS: 00000046 [ 1625.268741][ C0] RAX: ffffffff81b69747 RBX: ffff8880b8623c80 RCX: 0000000000000000 [ 1625.268754][ C0] RDX: ffffffff8e68ef40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1625.268766][ C0] RBP: ffffc90000007f80 R08: ffffffff8e68ef40 R09: 0000000000000002 [ 1625.268778][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880b8623cc4 [ 1625.268789][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000017a675ac253 [ 1625.268801][ C0] FS: 0000000000000000(0000) GS:ffff888125220000(0000) knlGS:0000000000000000 [ 1625.268816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1625.268828][ C0] CR2: 0000000056ccc21c CR3: 0000000071be0000 CR4: 00000000003526f0 [ 1625.268843][ C0] Call Trace: [ 1625.268851][ C0] [ 1625.268857][ C0] clockevents_program_event+0x137/0x630 [ 1625.268884][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1625.268906][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1625.268926][ C0] ? tick_program_event+0x8f/0x120 [ 1625.268943][ C0] __hrtimer_rearm_deferred+0x26c/0x420 [ 1625.268968][ C0] __irq_exit_rcu+0x14e/0x220 [ 1625.269018][ C0] irq_exit_rcu+0x9/0x30 [ 1625.269040][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1625.269092][ C0] [ 1625.269098][ C0] [ 1625.269105][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1625.269161][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1625.269179][ C0] Code: ac 75 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 b9 14 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1625.269194][ C0] RSP: 0000:ffffffff8e607de0 EFLAGS: 00000246 [ 1625.269208][ C0] RAX: 00000000060eb399 RBX: ffffffff819aa370 RCX: 0000000080000001 [ 1625.269221][ C0] RDX: 0000000000000001 RSI: ffffffff8dfe348e RDI: ffffffff8c2ab780 [ 1625.269234][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1625.269247][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1625.269259][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 1625.269275][ C0] ? do_idle+0x2e0/0x540 [ 1625.269296][ C0] default_idle+0x9/0x20 [ 1625.269315][ C0] default_idle_call+0x72/0xb0 [ 1625.269337][ C0] do_idle+0x2e0/0x540 [ 1625.269354][ C0] ? __pfx_do_idle+0x10/0x10 [ 1625.269374][ C0] cpu_startup_entry+0x43/0x60 [ 1625.269391][ C0] rest_init+0x2de/0x300 [ 1625.269414][ C0] start_kernel+0x392/0x3e0 [ 1625.269628][ C0] x86_64_start_reservations+0x24/0x30 [ 1625.269684][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1625.269707][ C0] common_startup_64+0x13e/0x157 [ 1625.269739][ C0] [ 1625.654730][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1625.661640][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1625.672336][ T31] Tainted: [L]=SOFTLOCKUP [ 1625.676757][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1625.686828][ T31] Call Trace: [ 1625.690122][ T31] [ 1625.693071][ T31] vpanic+0x56c/0xa60 [ 1625.697086][ T31] ? __pfx___schedule+0x10/0x10 [ 1625.701961][ T31] ? __pfx_vpanic+0x10/0x10 [ 1625.706483][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1625.712655][ T31] panic+0xc5/0xd0 [ 1625.716383][ T31] ? __pfx_panic+0x10/0x10 [ 1625.720807][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1625.726269][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1625.731650][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1625.737816][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1625.743983][ T31] watchdog+0x1030/0x1030 [ 1625.748346][ T31] ? watchdog+0x1c7/0x1030 [ 1625.752792][ T31] kthread+0x388/0x470 [ 1625.756865][ T31] ? __pfx_watchdog+0x10/0x10 [ 1625.761552][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.766150][ T31] ret_from_fork+0x514/0xb70 [ 1625.770749][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1625.775860][ T31] ? __switch_to+0xc89/0x1420 [ 1625.780551][ T31] ? __pfx_kthread+0x10/0x10 [ 1625.785151][ T31] ret_from_fork_asm+0x1a/0x30 [ 1625.789930][ T31] [ 1625.793112][ T31] Kernel Offset: disabled [ 1625.797505][ T31] Rebooting in 86400 seconds..