last executing test programs: 22m45.567216012s ago: executing program 3 (id=113): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$dsp(r0, &(0x7f00000002c0)=""/140, 0x8c) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x400c804) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = fsopen(0x0, 0x1) fsmount(r6, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0) r7 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f00000027c0)={&(0x7f0000001300)=@deltfilter={0x1480, 0x2d, 0xa4affc0b56fbe691, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x2, 0x2}, {0x8, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x1454, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x70}, @TCA_U32_SEL={0x2e4, 0x5, {0x7, 0x0, 0xc, 0xfffe, 0x5, 0x6, 0x7, 0xd, [{0x8, 0xb, 0x6, 0x3}, {0x70, 0xd, 0x5, 0xc}, {0x1, 0x3, 0xbc700000, 0x6b8a}, {0x2, 0x1, 0x8, 0x81}, {0x6, 0x7, 0x6, 0x2b}, {0x0, 0x6, 0x7fff, 0xbc6}, {0x3, 0x44c, 0x3, 0x4}, {0x3, 0x1ff, 0xe14, 0x5}, {0x4311, 0x9, 0xffff304f, 0xe}, {0x8, 0x0, 0x1, 0xffff}, {0x89, 0x2, 0x81}, {0x5, 0x5e9, 0x4, 0xffff}, {0x2, 0x6, 0x4, 0x100}, {0x3, 0xf, 0x2, 0xf}, {0x0, 0xe4, 0x1, 0x5}, {0x197a, 0xfff, 0x5}, {0xff, 0x2, 0x9, 0x6}, {0x2, 0x3, 0x9, 0xffffffff}, {0x12, 0x800, 0x9, 0x6}, {0x4, 0x7cb, 0x7, 0x2eb5}, {0x9, 0xfffff001, 0x80, 0xfffffff7}, {0x6, 0x9, 0x1, 0x5}, {0x0, 0x1000, 0xe73, 0x8}, {0x5, 0x4dd, 0x2}, {0x2, 0x6, 0x8, 0xa0000000}, {0x1, 0x8, 0x0, 0x3}, {0x2, 0x2, 0xa5e3, 0xffffffff}, {0x5, 0x4, 0x3, 0xa}, {0x0, 0xb, 0x7, 0x8}, {0x9, 0x8, 0x2, 0x6}, {0x1, 0x9, 0x101, 0x132e}, {0x9, 0x35d, 0x6, 0x101}, {0x4, 0x7, 0xff, 0x5}, {0x984, 0xc, 0x9, 0x2}, {0x10002000, 0x7fe7d155, 0x5, 0x1f85}, {0x6, 0xffff0001, 0xffff, 0x6}, {0x4d2adeb9, 0xfffffff9, 0x4, 0x4}, {0xde, 0x5, 0x3, 0xfffff228}, {0x5, 0x6, 0x1000, 0x5}, {0x7fffffff, 0xfffff6ab, 0x6, 0x50362d22}, {0x4, 0x7, 0x5, 0xd}, {0x14, 0x2, 0xf, 0xffff0000}, {0xe, 0xb6, 0xdf, 0xffffffff}, {0x7ff, 0xff, 0x4, 0x9}, {0x0, 0x5, 0x6, 0xfffffff9}]}}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_MARK={0x10, 0xa, {0x4, 0x31a}}, @TCA_U32_ACT={0x113c, 0x7, [@m_gact={0x1c4, 0xd, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x239a, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x23d3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x1, 0x4, 0x7f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7fffffff, 0x5, 0x9, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1233, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3bd, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xffffffff, 0x20000000, 0x6e2, 0x7fff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x133d, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x19b7, 0xffffffffffffffff}}]}, {0xee, 0x6, "7c17095b5e5dedb89ec4f6fa03e1af608a3daa19d7697aa3a825805deab101107efbbb260b5d267eef5a65c50d4dd57d6145316c7f4f26be58f0278fbf6d9fa2befb8b190647aaefca6b5de5fc50f1aecb0738451c88befae4fab15cf7ca33bbac40f78c4853cf8840e97b7fcc81947392d497ab0ce314a0d8824c5aded470f6048057b017cb7b2db96d4854ed8d2de3caff39301be69c27576b442f4c85e618d1ef559c61226325dfd77ba6082da4de6841ede9b878ccc2ef9f91c264b610543785c66de35e1d49e191da921122d851a65bb076908a68fc4b00b65b932d0c4959fcdf5a29ea4ab355c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x184, 0x8, 0x0, 0x0, {{0xa}, {0xc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x9a, 0x6, "890111027bfbb27324d9068e16643aaab3426d5f76205070e9b11c80e4af4e163d8eaffdc9d4db435c1390c0710d0eb360929800b4e1a4acd1471a01ca3b5ff826871a5cd37c131a5a675aca325a685312b6c6ca33cca70c963ebdedd9b294fa17f9786e7400f8ce5f783173bcd5fd2669bcba005d78ecf92bf127b0fc3169589c09592119fe29f178c658a7c650a4d075b757c8c856"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xc0, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/nullb0\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x13, 0x3, '/dev/sequencer\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff119, 0x400000, 0x5, 0x944, 0xb104}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x3, 0xffffffffffffffff, 0x9, 0xdfb}}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xced3, 0x5, 0x3, 0x101, 0x1000}}]}, {0x13, 0x6, "f9b5904515e5af2b78ee228c05990a"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_police={0xd30, 0x0, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x8, 0x3, 0x7, {0x5, 0x2, 0x5, 0x0, 0x8, 0x8}, {0x3, 0x0, 0xd8f, 0x400, 0x6, 0xffff}, 0x200, 0x8, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x10001, 0x3, 0x4, 0x7fff, 0x200, 0xfa9c, 0x8001, 0x7df9, 0x69, 0x1, 0x7, 0x0, 0x8000, 0x76, 0x7, 0x6, 0x7fffffff, 0x80, 0x2, 0x2, 0x1, 0x25, 0xffff, 0x4, 0x6c, 0x6, 0x5, 0xffffffff, 0x2, 0x0, 0x2, 0xc, 0x3, 0xd, 0x3, 0x9, 0x8, 0xfe94, 0x2, 0x7, 0x3, 0x0, 0x2, 0xb79, 0x8, 0x0, 0x1000, 0x101, 0x8001, 0x8, 0x7, 0x3, 0x237d, 0x6, 0xfffff801, 0x101, 0x0, 0x5, 0xfffffff5, 0x7, 0x3ff, 0x6, 0x80, 0x2, 0xffff2306, 0x6, 0x4, 0x0, 0x4b9, 0xf, 0x9886, 0x7, 0x0, 0x1, 0x6, 0x7, 0x8, 0x0, 0x2fdc, 0x2, 0x7, 0x1, 0x3, 0x9, 0x3, 0x2, 0xf90, 0x2, 0x0, 0x7, 0xa, 0x4, 0x7, 0x9, 0xb, 0x101, 0x10001, 0xb, 0xfffffff9, 0x400, 0x1f, 0x8, 0x6, 0x3, 0x2, 0x7bdc23a7, 0x3ff, 0x7, 0x3, 0x6, 0x6, 0x6, 0x9, 0x2, 0xc, 0xff73, 0xe, 0x5, 0x6, 0xa9, 0x6e, 0xb, 0xfc000000, 0x9, 0x0, 0xa7a, 0x6, 0x8, 0x10, 0xffff8000, 0xf2, 0xe8000000, 0x40, 0x0, 0x8, 0x8, 0x9, 0x1, 0x1, 0x94, 0xfffffff7, 0x8, 0x82bc, 0xfff, 0x0, 0xfffffff7, 0x80000001, 0x4, 0x984, 0x80000001, 0x101, 0x4, 0x3, 0x7, 0xffffb182, 0x5, 0x3, 0x6, 0x6901, 0x81, 0x2e, 0xfffffff9, 0x4, 0x2, 0x1, 0xa, 0x6, 0x4, 0x1, 0x4, 0x8, 0x401, 0x4, 0x5, 0x6, 0x1, 0x80000001, 0x9, 0xd46, 0x9, 0x0, 0x10001, 0xfffffffc, 0x8, 0x7d87, 0xf, 0x0, 0x3, 0x8, 0xedf8, 0x7, 0xf, 0x1, 0xffffffff, 0x5, 0xfffffd68, 0x1, 0x5, 0x7, 0x2, 0x3, 0x6, 0xc8be, 0x5, 0xef58, 0x7, 0x0, 0x1ff, 0x1, 0x3, 0x8, 0x2, 0x3, 0xd, 0x2, 0x7, 0x7, 0x8, 0x8, 0x1, 0x401, 0x4, 0x39, 0xd1f, 0xc1, 0x9, 0x8, 0x8557, 0x8001, 0x8, 0x9, 0x81, 0x8, 0x10001, 0x7, 0x578, 0xcf, 0xae0, 0xfffffffa, 0x0, 0x1, 0x3, 0x8001, 0x6, 0x570d, 0xcd, 0x5, 0xa, 0x3, 0xd, 0xdf, 0x3, 0x8, 0xfff, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x80000001, 0xfffffffa, 0x8, 0x5, 0x38000000, 0x4, 0xf9, 0x81, 0x4d, 0x400, 0x8, 0x8000, 0x5, 0x2, 0x0, 0x2, 0x1, 0x4, 0xfffffffd, 0x9c2f, 0x5, 0xb3, 0x1, 0x9, 0x7, 0x100, 0xdfb, 0xb3, 0x3, 0x3, 0x1, 0x10001, 0x8, 0x2e, 0x86, 0x9, 0xfffffffb, 0x3, 0x8, 0x0, 0xfffeffff, 0x4, 0x81, 0x8, 0x0, 0x9, 0x7ff, 0x3, 0x9, 0x4, 0x2, 0x7, 0x40, 0x800, 0x0, 0xb4, 0xf4e, 0x2, 0xdb1d, 0x6, 0x7, 0x3, 0x40, 0x0, 0x3, 0x1ff, 0x80, 0x2d8, 0xa2, 0x8, 0x5e3, 0x6, 0xc42, 0x1, 0x3092, 0x9d, 0x7f, 0x8, 0xc, 0x400, 0x1, 0x2, 0xff, 0xffff, 0x8, 0x5, 0x1, 0x1, 0x10, 0x2, 0x9, 0x7, 0x4, 0x4, 0x2, 0x7, 0xffffffff, 0x4, 0x2, 0x76f2, 0x8001, 0xfb, 0x5c, 0xff, 0x9, 0x9, 0x8, 0xf782, 0x7, 0x401, 0x8001, 0x7fff, 0xffff, 0x7, 0x100, 0x4, 0x3, 0x1, 0xfffffffa, 0x1, 0x6ea, 0x4, 0xd, 0x5, 0x5ea, 0x10000, 0x8000, 0x0, 0x5, 0x2, 0x460, 0x4, 0x6, 0x8f, 0x40, 0xf2cf, 0x6, 0x8, 0x6, 0x0, 0xc, 0x6, 0xfffffff9, 0x4f91, 0x7, 0x0, 0x6, 0x8, 0x1774, 0x7fff, 0xa, 0x3, 0x6, 0x8, 0x6ca6e490, 0x8, 0x7f, 0x2, 0x1, 0xa, 0xfffffffe, 0xd, 0x2, 0x6, 0x8736, 0x9, 0x3, 0x101, 0x7fff, 0x6, 0x2, 0x7, 0x80000000, 0x0, 0x2, 0x9, 0x2, 0x5, 0x7, 0x5, 0x0, 0xf772, 0x6, 0x1e, 0x0, 0x1000, 0x100, 0xa17e, 0x7fff, 0x6, 0x18, 0x1, 0xffffff25, 0x4, 0x8, 0x80000000, 0xcda, 0x1, 0x4, 0x400, 0x1, 0x7, 0x7, 0x5, 0x8, 0x10, 0x4, 0x8, 0x2, 0xf, 0x7fff, 0x85, 0x18e4afb0, 0x1, 0x81, 0x3, 0x5, 0x1, 0x6, 0x3, 0x8000, 0x6, 0x1ff, 0xd, 0x8001, 0x2, 0x80000001, 0x3, 0xfffffff8, 0x4, 0x4, 0x4, 0x5, 0x2, 0x81, 0xfffffe00, 0x1, 0x6, 0xf0, 0x2, 0x4, 0x5, 0x1, 0x6, 0xfffffffc, 0x8, 0x101, 0x2, 0xfffffff3, 0x4, 0x1, 0x7, 0x1ff, 0x4, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x8001, 0x5, {0xf7, 0x0, 0xfff6, 0x8, 0x9, 0x6}, {0x5, 0x0, 0x9, 0x2, 0x4, 0x6}, 0xf76ea500, 0x0, 0x7dae4696}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1009}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x7, 0xfffff077, 0x2, 0xb7, 0xb, 0x9912, 0x1000, 0x80000000, 0x1, 0x800, 0xc, 0x0, 0xffff2001, 0x1, 0x7, 0x80, 0x81, 0xfffffffa, 0x7, 0x5ad580, 0x80000001, 0x1ff, 0x6b, 0x9, 0x10, 0x3, 0xec, 0x7, 0x3, 0x8e2, 0x5, 0x1, 0x401, 0x200, 0x5, 0x5a04, 0x9, 0x9, 0x8000, 0x6, 0x1, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x9, 0x8, 0x9, 0xf44, 0x2, 0x8, 0x3ff, 0x80000000, 0x8, 0x2, 0x80000001, 0x2670, 0x8, 0x9, 0x344c, 0x2, 0x10, 0x99f2, 0x1, 0xffc, 0xa6, 0xffffff97, 0x21, 0x10, 0x8, 0x2, 0x4, 0x4, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x1, 0x3, 0x3, 0x2, 0x9, 0x8, 0x7, 0x8, 0xd, 0x101, 0x6, 0x8, 0x7, 0x42d9, 0x18000000, 0x9, 0x9, 0xfffffffa, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x0, 0x7, 0x95, 0x5, 0x5, 0x4, 0x3b1, 0xdb0f, 0x4, 0x2, 0xfff, 0xb, 0x2, 0xd, 0x10000, 0x0, 0x8d, 0x6, 0x4, 0x401, 0x0, 0x0, 0x3cf, 0x2, 0x81, 0x7fffffff, 0x7df9, 0x1000000, 0x4, 0xd, 0x5, 0xfff, 0x2000, 0xb1fd, 0x7, 0x9, 0x10, 0x5, 0x3, 0x9, 0x51, 0xa, 0x1, 0x5, 0x1, 0x8, 0x7, 0xe, 0x81, 0x4, 0x5, 0x6, 0x7, 0x0, 0x7, 0x5, 0x7, 0x5, 0x4, 0x3, 0x608a9e9b, 0x8, 0x3, 0x0, 0x5, 0x7fff, 0x8000, 0x2, 0x4b42, 0x7e, 0x0, 0x6, 0x0, 0x3, 0x3, 0x2, 0x6, 0xf, 0x3, 0x4, 0x0, 0x6, 0x7ff, 0x8, 0x2, 0x0, 0xfffffffd, 0x1, 0x5, 0x6, 0x4, 0x80, 0x9, 0x1, 0x4, 0x0, 0x6, 0x9, 0x9, 0x5, 0x5000, 0xf, 0x3b8, 0xffffffff, 0x3, 0x1, 0x3, 0x0, 0x5, 0x7, 0xed00000, 0x1, 0x101, 0x40, 0x5, 0x7f, 0x6, 0xfffffff7, 0x9, 0x400, 0xd7, 0x6, 0x7f, 0x4, 0x8, 0x28, 0x2d4f, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x6, 0xffff, 0x6805, 0x4, 0x80000001, 0x5, 0x5, 0x2, 0x5, 0x1, 0x6, 0x2, 0x200, 0x8001, 0x2, 0x5, 0x10001, 0x401, 0x1b13]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x52, 0x6, "8a6ae6179aa3610481b24696f7d830d33715bc0347fe79764530a66f636ecf6fadad9d5b33f3c7c8e6e64db3ad84cdfa6cc910ce3eb9d6b51144ed6b390a1d7ee1b23163ea1271abbc7bbca5bc8b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa1}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x1480}}, 0x8040040) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video4linux(0x0, 0x7ff, 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0cc5640, &(0x7f0000000280)={0xc, @sdr={0x41414270, 0x6}}) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x9ef, @mcast2, 0x7fffffff}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 22m44.729785039s ago: executing program 3 (id=115): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff83d}}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xc1, 0xc8, 0xbc, 0x40, 0xeb1a, 0xe310, 0x34b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x9, 0x8, 0x20, 0x6, "", [{{0x9, 0x4, 0xb5, 0x2c, 0x2, 0xff, 0x1, 0x1, 0x78, [], [{{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x7, 0x9, 0x3, [@generic={0x7, 0x5, "bd8eb688e3"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x9, 0x81, 0xe}}]}}]}}]}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000001020300000000000000000002000000240001"], 0x38}, 0x1, 0x0, 0x0, 0x200488b0}, 0x40c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create(0xfffffffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0xb0000001}) socket(0x2000000000000021, 0x2, 0x2) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0xb, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @broadcast, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x8, 0xc, {0x5, 0x4, 0x3, 0x2, 0x4, 0x68, 0x6475, 0x4, 0x88, 0x7, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r9, 0x1, 0x4070bd26, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 22m41.410928035s ago: executing program 3 (id=134): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x800) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f00000005c0), 0x6e, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x9c}, 0x160) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = epoll_create(0x104) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_pidfd_open(0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000200)={'\x00', 0x800, 0x4ace62c8, 0x100, 0xa, 0x803}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x2}, {0xe, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f00000001c0)=0x9, 0x4) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x40000000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 22m38.949192907s ago: executing program 3 (id=145): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x443, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66b848f7288366efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x5a}], 0xaaaaaaaaaaaad59, 0x30, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009040)="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", 0x2000, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0xc4, 0x0, 0x22, 0xf7fe, 0x3, 0x10, 0xfffffff7, 0x4000, 0x100, r10, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006c40)="4c49936e74423cc7fff481bba74551e5360fb3c7b469b4411c5c792715ac047db61f4cee2182389fcb4698af027c6e8c14015a2d2184a38d0bc272b3dd2288182a66fb813db539426ae575969af98236e5ea94393030f70dca08c2b85d61178524f26fd70cb2df946fecd83e87eac67a87180b544c1297226b752009daa390c29089f5c359ff185ba4792853e36f4c02674e9a902ed8b82c450abe99a01d74be663d7ec3a32bb6466d5cfd5e7fe2b536dd95f33473e2701b9325ea0180c2fff2625491d27e9f8dc543af13b38bfbc1305ced756c4a07f2210c022502aee74aededc7b4ba5b956206156ae597a93ea92d2b14179d989809c45b498e44b04d426b751349b1a946402f181772e0c82cfdd992fe02c7109b0f14f7ca3829b935f1fcec8ed6bfe4257163c7a04e8d9e8e7cc5d61df331259eebf12f5f68c5f05b0232c070f9c3345b3dd548c247c074f160dd2edf1240ffb081ad521a701e51f3c737a107f0ffc9de2913fd3a24ac6e31756e9c2d9295c6dbdb2f25396b2aed5f7d86a730caefb6faadc882c241e37946b9aff910afc7f9989877988e6da4e3ad03d02c2f0902fd748783ea40d2bf064457ee5ec142614a60418d7955f3d7d8a230722e47b9666e86674187c5d7d79c2d0eefddd7e2508f91e3e8d888bd22d87d32746dc2f47c4c8a0cd2d0bcdc1d9b807bbc853af4374ad4b6c4008f0087c82a1d4b9ce6532beb151b6c1c3a002d77b6cd19eacb053dc52982f48fe0fef1d53ed8ef63124aa85d0c4e1cb3be2fc5020ec7dc9e62358b710f8aa5e06eabeaaedefba058ba1ff965196748a481fff1c3ce75eb61c40b94905a8ce728c3f017cefe8cad26c24e86823c7781a1d4d61863a3d9fe4754cfa4697d20466f77613a5972ae2b8de91cb417ff7aa776bde86ea75cec9188015eec745a88b88bf5751e05025ee416f591ed7c32db035c0d24079d66e4e9bbc0693932f481528badf82f201eca7ce0ce994e142af5b17a51947ac29e1cb88b3a9c057806a8d3b6a8ceb17b2def9f78d39a3c4fa7ec886100dba09224809ac30852225405b752dd8f557d3b103fe2f903fe9862001a2420fdee7f697d61fae08f1ac60e5c31af92063c80f076a8306e7b9e83dc53eec5a4a29389ec976f34dcd97e95af502e5b1ed8c1dead4dfbb4a3521d9120d3159f10c5055429570b26b46f58b7926eddc39133c5af3f063aebfeab75b5dbd08aa5fe9aa4b843cbd81eab288a5e2192506f4cdafd8f4d55a0c68d1d13b3c9dbe0e7e6bd0500c8d5388548811a415302f0aa06de83d8caaa8ead0182c59247b12fd17ad2b5e91066df8dc32835909dfddf2d1ecd2b76fb659e85f0abc033185c077f8cb0596661958c66a973636029f0591aeae57c82da3f25c4e8552a53ff26cf2b95f88b48f734dce9af289a94d5e81e8516cea4bf4e96f4accacd0a4f96dc89a292af4e5cc192fe9ea43b6549f8a48d947a14d5c6229af0904299f6894c759db97469ded9aeff65860851cc2d14bf3bc64d61c56c071f0cdcf6d056cb20bc23ff17fbf65c5f290a80ee988a6766d797162f104cce7f46a3a70d089b44cdaedbf9fd92603d650d1f25b704e83bde5dc51a85fd8c79f61bbb3b31f6d0e76b70ae042e7ca0009d15313e28c2a984c25380c15592a8b3dec475903f687b805aba4a952c05d046a74095ef710d1655edd49858946be984e89c13064f12aeb8cc157f8101f4e58f19d464e5dabf4f2ab039a276f6eeebb3d90fc11a50c5287b5fa497d0d8d35424dec6d1aec646419ead87de5a210a17914a5619f2df401616c7b0ec7b923ad64225327faf6d34073d44182f154f8bdf6e7a8c0fdf6c3d8a7a73ed5508e60e8f97653f527bcbde9e6f8ff5485461431b59069d9ede5aa38d1bd501479cc72901579088bacfe549f3abd0d70f008e6d78316d9e0b0384ed30ec6881fbb8141d8fb54ce140833728cea9a0fe5d6e003a1351b30e3d8ea15587c48ecc2269bc19877910654f9715af8b803899cbcddcef5a4d4d99c9d5914554c958d8f391865be7d10be9eb2aff981f0dee377edcc8f1b40f4ce22b949ae6c2f126787a97f338242d50c0bbbe2ed970d04b1d85cb5bff8433e4ba9af103ee73190591208934fbefb38911950a9b6b077c7e504e9dae5cab1ece6d73d3308bd9894fdd58592cd6f427f729e4dd1b14d1b414a6de0a48bdb0d1a8c3b86f5b2d671f994c97bbc5a8f2400407f3b953d09eb46bcd0840ed629069d68a033bd1f5319e955e21de4ced8b138ee3874e07f4376204f3865e6b6ce850ed8535849def998a885979a2b0dcca3ac46b3cb03fea362891f51575cde9e4b24f3c72821c2db11b1e3eb7d1d8de13c150199446e06d839c84ca9370cb82858f981c4246686c7bab3d5b98e3c8d24cba765719b86e1cadbba0f0ee23a1d32a6717ae91f8329bdcecbbca317b6f292f1a1d6c07e2988222a14fec9200947fb21a480bfcecb5ffc1dc40fa21b347fb00224816f9c3b4ac72356d8652761cdcafcd77fea2d57216eb6137c9e57aa37fa2535f645ce4e047e1c75ee835edc4165bdcc40b2f34efcacd9ec99328e0ff2d4ccaa60ca9922faa5818583cc28ea9b05ccb50c621437e7c4cfd58029de11342876f2fa838c9821294de2674b942e8647fd569a7d6668f1d0bfe13f06e189841af0e826c35a2b8a42ddda2b76ec82e8f4b45c6d34ba9eeca64a916e7fdfb835c8149f1a2b83d61bb9d411167921915f3371a5feff8eee96d89589dcc665b99ccd9161752ec288f5c174b834d5b26514104ba58825b9da59e09153c9ca90241318876495732c92001447deb193831b6827ae3285afba8382047b16d72564f191cf8c38098a3119c4080f9750cc7fea3a2484dbb12ec8b090975cb0e6017d9d204adbbb76329a26d9224da99b5a5ae6c578fef358af8f7cba339073fd87f2826e943ab9d80c95e0e609a18bb4e5e83df8460318541fdac80a2c45da979c6f6899864e5dde6d0bdae86f8ca4ea7a04c3dbe6155dca37b68555c9ce4bb7fcde519dd8c77ff4e84f17b60d21fa5f1fbb6d6491357d13bdc90d020c3c6293a72347120d0504cb98c9e798c7ecf771f27eb5e13c557d4f4de8933925a329f3346df06a006c5fde63dffe321d08d4b242ad2c7811dc79c4dd7891828e69fa5fcf00b031b7bc82595329b87dcc79a0b511176ec25e3d8b3bcda4ff7d21d63bba2ea110fc943cbfcbca1db16bbbccb7b01e221d19fac91e0c3de0c7d18ecbe540eef90d1f05cbfa5d5ca5aa7b6c416bcfc83b9acfc6cc46a495b5b3d497ee0a4ca3114d79c71ac5b3d6d917aee4488f4d2d814a8d8038bb6996d7e5ecf3cdb12dd02a67ee0a7a9477e04b258f3d831e3fcf0e3d33966dce47fbb42d499e73093332243cbe012c0ba39885bb03623faccf16c92fc75b950822f8274bb48fe9bb3cdd1fbe42314b9637bcd0c3b28381c03ecc81ce5cdec21166efd0b1ac58ad7d214003a2ee582f5000cbd619cc77180a658762e438576706cd34dcd1dee1fe47eba3dc314768f9f34d1ef902d4506895713c41e9b4e60429b713e2065ec86dd81094d94d36d6fd57b6bf93c0a94132ecb4ebb000447e3a3baf5ab8a499f135a97e25c7ceeaab6c3e3cceb6e6895636f0bb03541d2d5aab542017370f9b0cc00b266ffc4ea3572b61c9c127c5c81c769f9ddfbe797527f9a0756e6a5b1c19fb2fa4a21f231a19c84245aab0abfdec9b2e7dadba548c72d63bb34090ebbcebfe691fad5c2e880f41e3f0d2129d4f87380e539e28f9b5bcf474bb33054ffe93d63d34c1a937b3f2056d14b8d90d55661b9ea1250b17f455499fa61274eaeff85e195cae351b54ab3ca07e62bab91138fd87e72603ef98f3b5f997b7513bd38ab2dff743e900bcffd75bef1c5c82def0ec5d57a71130c27ce61da1061c0b0f10c30c3ca48363f6c9facfc280fb8ade3bcfdfda9f5aba898c543c959f42dce64c6b262112dc2a00b0ce18af8f48eab1a2d5f7ec2b423fe0b725211bb5603964f35086cfcbc385c4d9dcf4a759cfb4cc04ad752c4dceceace0d2572f7eb094e7ae5820ce4ee0bb1db1d7b56a831fc616e8d1ab4dd6cf292dd327c4802662922ac9d1ec1d76bad95a586d338868eb1c57fe57ce315b382be55455e689b695e7353d8184b174eba2b0d082a85b844ab4244713235ac61c26c7fcbd7f03ecaeb6012317397ecb9cf9126ef9c18ff137f42873069de86adb68a1c269849c229ff457943230ca1b62c1e0b4ff59821d62549e133781f6c063a05c5207fa4406681112b8bc293a775563720e032dca81c9de8e80e0f1c8be72d042c8db51bf9342a7d37ba8f12fde323912b8ec54f87ba90f540e46d0bd8407048167b79b4d7c5127dcbfeac19bc85c89a8eaba623004b84489dd88c1c301b5787bc903940899602e8d39ecce19f58af5959a389916c33f59d61a9b0d0c7e4f352947ed87102337b9b74c825fc10595a9d48a116493370cebe861ba9cef6183d823f5ac9d4abf68761918097e2e3da9eb7310b61fa7a17c6e03abdd1f647fee50caaa70f816b5ef66de2f76c7c569e92640804ef319b498aca29c4194e73920196bf8aaad0210dcf4e026ec264b34896377f3b65a56becfef7b9fa295cee315188ed539aa8c976d60e874406c439ff827a251cf1cb31d13bd872e576d4e458f49b8bbadb9404f7cb9c6ec9a3da00dc9c77b7f6959c46a5c63d0d0f3902723bddb2cc8a2740c59a78c9a06ee4e14a684b40458b3a6b7a9ff2028b91d3268bcf92ef68ef86b685c0fb7555cd9b5765675bc426698c62504143e6a4d19b75d64b01481f9c6de28599025a64140bc1fe8a84ff5f7508d16690de95c9d347e7b13457650f9bb2d19f37071df38e87a58a2f758b200fa53e70a74348ac69d25bbecfc56dc4577e59e6846540c5bcc9b5e453afc02a26feb8b367bf65fafcab49e848316f96844cf298c46b36674786f1b92027a71d92c2315fd3d24e337e52d8183507eb7cdda3000fca5f52d0d14540aaa85c5e9018d853ed74b91a80b979b226fc6b0245fd0c30951d314d09e67c638db3ea1b8a28d2daa7833a52cdd8a72a87b767b99e4f4057c645ea3f80301bdbb89f5ae901c2224917ebe359fc198d50e8856d1160c42f7bd1fbb11e8e4d247a9be107b3d09bcc2ed322a9e38364e9263e926b8752dc8486967abf7ba034e39959f9dc2cd6e4ecf49d168e433fd120e4026fd29b7bd92adf96780daa9375ed036d79cee511b5beb31c2380a4f580abb8c0e2b7321b5a502ed4738f17e6784a72b46e291e114de8ea8cdb22c7e9768d9199d8a6443e029700eb2e03342d20f9bba243e67910accd80636683f15110167c09f7a36701e6666e27e73464cfca6035b2b6ed38f6ded81e18d5aa990fa1c78d3e8fb50706a09944b1e3e19b11ec36d051b8607306352fa7791fe85b122334f0f58f49a9a535f9f4e877d23cc18f3c5b721eeee6f404f5ab44c43da439a98d090c0927483c9c6aebbfedfa6a9d02dec74f6aff932d518f614c0cd32303042208d3907c926dab2fd0269fbf18ad273eea03db0a227ee779cb2b5cb8cc8ada3655d537aca8b6fe25b18f15df2fb123b26a4c4daf1726b544a57f897b993b669b78d3ff6937d5976c44741799d57291d8101f1ca6dd9ba8bda070185934e882ee21bdb5b748bb7e306e848e3687dbf5388c1b1ed705ba46d4fe91cac3cc087508aaeffaa9f515c37d6db86a847680d9b6a0ac7e82c476a725d7156b2fe0cda2261f057724b2907437bea27e157056d957ace0ee50df2e04594dab7149dc98bd351e198228f6f85327c76ce4554fa39814ee101d36673c686658c7bbc605ba1368549179096bc497050475a3160d757fe938b26868b86015ef586078087a2417b404c3ba6d45913982257f7e5add098068b0bcbdac07bb3f86d75460f18cf05551c6a16b94a972be3f3f11159c38fda6b5eef52f20ae6ad9473c9d726fdb493f739af0ba5f10dc563016a030a809e760e1375adab239d2a2c63f671dfb1d3a5cb716a38ba3f8ba202e541b2f93f968cb1b481a9ae28e2da772ce8413d17558fcd93afbedb953dfe5266a769e755641f5797524bedfbaaad3769a91380f7af72c92768363b09e1ec7d6f94aa58216591814db8e2f963500795fc49ac545ffe6e46af18586338ee2c605447bafa676fc9178d862fffc38a3c6d48a2eefd6a760ba151ee5b485384ea3d68e40fb1f95d01a481a0b7eb2004a9cb51dd9203c26af3d0c28c867706e59fa5aa13c42131a675ae805bc242e747ac0e1fb4467d96c003e715e3f0666513db4346e4e269cb31c2db0c4e48f5288ad686a83044eb9d6e28bb0c1f81d775d4ad5c5062a97dd0dde2706c305ef4e8c626bb87d237453ac0e0968b4c7d76d20e50172ecde2736a8447946bbf1aeae22df33ec59b1d3fc1ed49f21f07fc742998c525901e4644383990b672688ab05e008238aa5f4f238b0bddd6e4c758ef6b5511618eab22a0e810bcf3cb2922a414c47dc684712a3d96a984839d291457751b330e7e452d04c21f51f70860f5d8cedd5b6c4960f3e7baeec053c68d20bf411fb20348df5b2665680165ac19c6778fce0737becfa6fdced37f6394e922f304275825b589bef9093ff06eaec1718469e73b2470513851eacd79d790288e41a27c7a2874ddf9ab77d04152c827b766da3b9a40dfb29142b57c68481423deefb1620b26cdf261b5c2f55ccc3622a61d5d872392e257e33120124932bca7e7235dfc6e49038fb7d525d2d76b9247273de295f6bd8c74dd0b326fd963fe726855721e11e72fd6f4d0cf9c48a8e16209f75ad72d38ff77453408cc20da657e0e7bbe137393a2ad69cfb1f119e14c82727c7c95717568007ad4848ddc3e6e03d3623fc6d75308376a59d4135b490546c74d4a5f926ff6cf72446a51dce596c74c9b06bd2fb213b358495bda4657a6126b2c59fe571bbc5c6052d5d82138dde254d0697c3b66dc5917c8535064bd2c87d296530bbd446f51ee1ef77776af76f734aa7296478f7c2b4b9fc1b3d5075db01841dbeee9c2cb63db64217371933113601afbb4690324df749a9fc720f9f8dc1efee45b3d6cf460063410b6d61f58cca9ad02fd2ccda6a67924e795c0d99e8eeade7af9fa8dfd59fd5e9539b9ed4f92ad8c51cde94d927eee983d054ae5a2477790e04894ba2774b2923ef85754b863498fcbf8338dab98e52601eb3c9d0ab472e741d4df0b65d9f2a4809287953db9f9447adcbca0434a73e558dc2247fd78feb59032f59cfe15772c472e057a5101bae0d60f75328e3d13ba7e0b084f4e21879aab98f5ca1162d6d35529a13b2efef1d6717b5fd5b6df0d487392dbfc52008669a4d732bfd7f696ae71e7e3f1e640df57b1861a3b999c66b02e496e8f007cdff387cdf290e06013068e8207ab847e6f69619df22292269a30cc22d92dad078aefd8f2ec17d2cbdd337e1f3ac5d32bdf13263c70e2e6b3590f64112574e0da5113943e11ad2edf0863e2616d50f21cd09d4ae5227f6bf705652ed68c720506f987c7fc0eb90033b1a414a55d5f0981272902eb7f52bc892a85979bb49d776e80a706ff9b25d58eda15485b2df934e1e7c0e3b01de28b1daf187757fe29ec54f7ebea718a39151055a645323010ba65de60c3a22a2563f2e646c88fc6f6dc5b0905c8034864a9d3611c76aed56dcd5c9d45be2f2c98777b2288c46f1aedcda17b6e6be2e0b7d631a381d64fd13a002562b6207c3a3af742507ac1dd20f938ad8e29a753e6010b0bd0c1020b3f05565d17d6a0b780164438b96ed0d4e9bdbdff9ac957b8b9ae8ef2796018fd6bb71001d7f45c0459b870fa943093d2dc574db5c2222ee380d044d4d25086eab0ac7c1574c3a9ebcd8dd87a7eca27c768cb011a6eac7c34b7ede3375b26e8a079bd856511e53c20ff339874de516b359f463b18801b84304863b2b2bd3b3c6dbb1d5a210b839433cd31cc5eb3b1ab0924bc882fb052caee3e1b3c887c344231454dbc99e149b9c3cf2ca803b892bb9017e26831f6beb9585c419a2695253f2fd47f5a25dad50e0b80e40d9ef97307b34bd0223043ef2a8d2a92727a2fb32b4c0448a7c6f5f64b188324024a170c5df897ceb2feeaf2f9261938407e7e9798d74771faf39e54292c86743e1ec65ecc0a5a8d26dde7c36fa67191791b0c1e88721018bcafc61c34b78e707d8c4aed02e4e9bdb7966b8ccb9ec431bf07a9061877d4b2982d1d73a8492f1a6cab84f099f569c1294c190c81ac7cadfdeb80fd5c3f62ed497073c04a6e675a147d681759b1de26b51054ead82838d20f75b84c6095fb72720a3bb647f5233f271bc2214c61e29be7ab34afc1a5d0fc10c4c29613186a26d958cd0b47ed5d9a0241fdab1aceb34a44b611a935b88ccf5069b7cd3808ff11739f5af99a28bb18cab4ac2cb0f3bd5bddeacce1c499216672e7a441ce25bc80c21a01279f486fb5b01182a71b2975f0ad9fa2d067c551a84467f06c3e9e194234916fbea5134b8d3b36b537176fce23dcf409666771913047af3b4d0d917817d9c423a5e29c4ef91caba3d08da36fddba281e31ff157f64b2111e113cd42ee9e32a5c9c0905c9cb740f826ae349611d502646c4c79e5a2a264d6c870bc8fab01e3122c9b401b2b0e6a74a51d245ed20ece439db78f40ce65c8ddd7114b568ee289d14b0ff31e0a9cc93a65c2f3cfd3938342c6a99d8d56803f96c490c0d0e6eb16c7ede8b8f23b9668f9efa6d8be37b31380549400fdb30c16d78d64b848c38bf569b5dca34fc25443ebb1302c75f2a39f3aadf39e29c7dcb87ffe89a6c01177ce96e512591dafdc526995f5af2e234a0827cdc15cd53ac4e2c55d4d85067228a9ee95c9426f209bbfcfaabfc467071842b402916f154e5a3c05be456fbdf2849b7c90761f8559ecf411242f049719a582da34e231d3eb1733c6ecf2c81ec07a4a01e594a724971bec92d6c19c492e1e8ce2d45b2123e0a39f2a72b422acb6c00ee8a7fe15e128848ecac38915656219e05f4926035a33bdbf2c5d2d3e26e99c0a2f06e8307748a72977ad065fe7320748429d04fc3739fb165a9ced3f3ef955645a7d4a3c8e3420398fa064e75ce27bada68f07af82d2194e78cfb29d0692cebb4f84fa7a759efbe3984c29819ab4159044173760316fb9afc7b1bb8fe49c13465a9f2d45d11c3899da93c4a8cf7f8b2a1892007068debc297ccbc67b529bb8d7d8db4b9636765ee3bc760a38baaabd8ac381f1510f6526363ba22b4fb67e410df24ea41d21a2faa5ffd0ce81457bd1306a99da0935ed8866382e078bcca33a45955428682d2eec305d379e8927299974770862eac2a9dd9bf355bfa2316d773488cc2690d9f6940ff39ce8b104e98601a44e1e1728e5a378429b9da197e3ff5b1abe73eaf2ebfd77fc3437633c018c1eee4ef84027c26ab80b8a7b494e8564ad11022e6099ef7af43d08d0845013fbbad0a7f72fde3099f702ff5df3925dc58dd941d023db913d8ef496f3106f1560115807143b48da67d8bba998800f7c3ee6dc540b566bcd39f31589a48b63771f550c043cba9c525ccf5e6b54948fbb955318004af3abff47b51822a385b205af382b6cdc494a438c3670212f53fc45a0273fa025401363a812e86bcfa0415a1e7bbbe6eccee4fe5a79a389768e92bc4a67167cf2f7b8123ff1fb2ddd35af17ac621256b1fea2f111b18dabbda4fc50d2880a414bd10a5d68ad46b31a27aa49af2c361a3c3bde343399ce390ba6a3888403911b6da47114d9b59c729f35ba3c65da90fcef46d50a1fc463effc5623b64c8e0482f61dd742affc8ecc27c5786c1246826d2351413c8ea466f22b7c3a1122e361cfbcd85863bf63bb8c15c256ac3e25d600442a57995169eb21d419fa0c208f1841388b84ef04df86c2087fb217c58084e050428f67e4939002c9e384b9dc7ad35740caeebc8beb70c252b0760a683be220b0cdc5c44ebf85cac0aa1781c0febd25e651e84526248299a2c90712d6e53f770156b0cc136fc3a3fbb33c54a1781be92cbeeb1d97350d6731460d1ee763fa16ec5bd5743bbcbdc2a930d167ee853d5eede77401d4cd2897e3774fbadb9609fc925a363093a44f7102d1a6ec57a27adb375dddd8d932699cba502275b9ef9c6c24a391f97b12e3a3fe6cd9f582fb2eb8651c75c23a7dfb02782480bd2bc496666cb9c6b5dda2514e6f5932efa19a12a8fdfd48d54c81404fa32f65c012c73180e6e5befbdc02fe582daca5550858e34aeb371655104e9d2385111b872b0ede10815f4deea7106a020b570516c5d782b241e9310a5b229c60861af67f73ac22ca861ffb87b48eebcdb6e50e3c97427db3438c5f0253425578db2fbf77931806d1612f2c501ee2cd1b1ab24646f9b2394acd6c24e9c028f9682f5e2b5caaad7c57a4c81047edf6a061fcc002a371ff634509985a1d2a54df61475c3580a019f11aa7382a003745ee58ebe0bdf0e11b362f3da6bdde427b101f12442bc467138867aa1b5b38527cbbe02b4c0d6cdccf6b8f63dcb6d1eb773fc1d9ad8485579551dfb6070d8674c728b9a7757552453605e13877162e6324566c751aa2e21bd8b54ee4dc317b6f1aba4cf547b8eac3a4e29f2558fa97b179749e8de8e90b309855d390c1413619743d9a7aa8c868152f91d52e59a2fcea36dd91c784c3175c4744a6048326c0aec214c7dcc12c1963d57bdfa3df82bbeb6f1a01900c914c616e43c1de9a26b06b3f642a92d63ce007ab5a3e5ce51e312fa5a4d59bccca0cc67d938a8d5dd4097d502bc34bb31807d77d04bd2293859c325db8f31173cb6bde541f1413ce5da8dcaf1e9f0b5eddf67f5e3fd86b907d5124badf9122f2f294d621933886ed72d04e061f0bd34e98cc3d83fcb4269539f36d5fe4ed26396af5cfd7e658ea3951f18ea939e9f1aa15730a95f33fc72a09e2539d5f0c31f72f50e94f33983c6fa8aad3b295593d1c06fa8496b4ecacc1b50aaed8b6749d17bc71d960110643b75275aa941d730b67dd6b065e50baef05837cb31577b6bffa66f42cab96fe8ef40f809f3c844cebf97365b26ff042a34d597241ef11b8f742823ee0955662c461db5fbdeac847ad366299a545b82ef9f5f036ff0962e93cad5d67eee6bcdb9eaad4c64199a7b02ca0e390e34930d473bf67302b1ab1b2dd42338bb4f9488bdc1e1b392b1e2b6ed820af63ad5b0763a173d1b0eb3228facecbd6700e852fa10898e09c33f1d6f9446838ec460f6b61a4aad733f9486f4e6afeab437abadba07d36dc26e90ec1e0ae28dcdcf4331deff044567c466d0a8145272ab58dfcaf9b77f22b402742f54aecefe8116c1f7e703efa4eeb25e3d2a79d69e06e0d0dfe5e0807f907866ab8e2c1ab83994145ef74e3f9893eecea56f62090ec3500583e07c2fd8bf843dcce1e2b344dab2a328dce75a42372a4f6a8fa678ddb8f3d67bed41ed4c9c88dfb3b07ffaf2d45e3c2347bbbbef98cd83288563097419231fa1849ef3a2b09ab3ca3dd920416729680bbea3440a6befc1f2b6f34", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0x9, {0x2, 0x2, 0x742, 0x0, 0xad, 0x4, {0x5, 0x4, 0x8000000000000000, 0x5, 0x5, 0x82ca, 0x80000001, 0xf, 0x80, 0xa000, 0x4, r10, 0x0, 0x3, 0xfffffff9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}], [{@subj_type={'subj_type', 0x3d, '/dev/fuse\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@measure}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r10}}, {@appraise}]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, 0xffffffffffffffff, 0xd000) ioctl$KVM_RUN(r7, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 22m37.752247242s ago: executing program 3 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000240)={0x9, @pix_mp={0x0, 0x800, 0x50313134, 0x9, 0xa, [{0xf, 0x6}, {0x4, 0x5}, {0xffffbe93, 0x9}, {0x4, 0x5}, {0x6, 0x1}, {0xa, 0x5}, {0x1}, {0x3, 0x7}], 0xd, 0x9, 0x1, 0x1, 0x2}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xfffffffffffffe85, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) 22m37.48874315s ago: executing program 3 (id=150): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x72}}, 0x8, 0xffff, 0x9, 0x0, 0x9b, 0x7ff, 0x6}, 0x9c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0x2, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 22m36.922216137s ago: executing program 32 (id=150): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x72}}, 0x8, 0xffff, 0x9, 0x0, 0x9b, 0x7ff, 0x6}, 0x9c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0x2, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 7.226331815s ago: executing program 4 (id=5659): syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b01e84d0109025000010000000009041f0000ff0100000508240805040004960d24060101030200010006000609240306010104050507240405"], 0x0) 6.152828481s ago: executing program 2 (id=5663): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000340)=@ethtool_link_settings={0x26, 0x4, 0xfa, 0x4, 0x2, 0xb, 0x59, 0x6, 0xb, 0x15, [0x3, 0x7fff, 0x3, 0xfffffff8, 0x7, 0x20000, 0x2, 0x4]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 5.79946059s ago: executing program 4 (id=5666): userfaultfd(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) socket(0x1e, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 5.798547604s ago: executing program 2 (id=5667): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.671344939s ago: executing program 2 (id=5668): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 5.403082504s ago: executing program 0 (id=5669): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x5, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) dup2(r1, r0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 5.353560332s ago: executing program 0 (id=5670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000880)={{r2}, "b42bc57710e8cfa149dedc302e989e25502c0a3ef72b67c2d971dcdbd2bd6814c4b348f8fe2b5c1e7fa6212257ecd593a503ca9d168f3085a1249b7b971338f92c932acef7de20057e47a73f66bb6efac960cae5fab4359d025b0d48e1290f0c5343a12f67180b12d037877686d50f9ba69bdab9a02a888c8b85fa224194ae80738130188e72df3cccf43ea5bb908278a7ee6033ff84556e38e1eb0abdaa6646e910ea8db77929b431bfb924bcc0e816fddc94712ee2c54b841392df88de38c304cde8b3160969c5cfba72be0491761a112ccd91e6cefeb6c146cf8db31789feff522efa594f0e0a540df8856f18010166e5c031fbeb6fca0670fa99aa51108c0ad403d35ce901dadd6994cb77b5b1a22eab8bfc6dc520a5bcc2c38c4bed10a03b858a00a53e6e26297d4eeae5168c9e4bf0e0690a41d43f137f0d95f86b7a7fa013f50c6583d03a85c73dcb94ae96bfd4ec84d725366b58bc0657338b7784e2df0d028f8a91dee0af59266a07bdfc016e6681eb8ca2fb036be2df8b2185dae80d5f926471a2a9d91786e3adb44165581db58c58cce7fae5adc1ef3ca830d92be519a83c74a697f8d297cfe36f521235b4512d9f574d786a5d76b62e057117697495079663640a91395dd0c9f46cadaf8e1cddef6a9b242561179165fa908e3db7cb0a469221c903cdf28af1b6fb5f2620da00a631af91865f440770b8dbc99205b3bfc0d34b59a25521d954efaf7d539bc8517fdb8b4831a1a6ab8e248dceb903884e103ed14301e1c875e6c7266f156094d91359361187b65a8fa93898d27c913084de0097d928a9b29601225cd8e88fd85f70999c7ce104b358ca57c24d4aea9a6394bff5d8b536983686cc2a9dd50fea4bfabaf154b7518c35f92870d1c0b4b65e8017e8c17aa98c053678f6197fecd7fca8f4a2284afeb2027ac1ec3b92eb47848436eced792d540055f8172ba28cb0fea3f0aa449a54e0dfb10d7f5f6678558194b7626048a2e4ec3d04140cbe054e4ea7c0ebf09517347f115da2ec2130bf356b6149d8f019a0bc4df57c09362c18fe0acbe78f02e5b8fd489b1c4148370b67b8205a64c3451869c431a1f1c76f9924eea39897deb6e700613227728121837c6788455118eb1465af1f9ba7dfe6d01935df3c870548b05629fd50246e688f8e326268416694afe0ffc239993962526180c97062df99a34b415232e9e3bd92abbc599b77594b997fd07f09657bf57696d15adf9b9577fa258273dccbd85b9aeaf13828187d35a0771b10b40e1db0941f68c1ec28d4fab721fda2f376b993e1e3622cc5dcae123c7e962857ab0f7e701eaabba245a97f84888ccd7dfa0ab08e3f8934cf8af3f37b4ae66f0980cdccf9410d37b366cb2b81700ec2defd1a1d97b3c04a6ac5081cfae23453c3fb09d7bd1702535c2f85b209dd657dcea8ef4fd45473b062e06299b59c6d9aae51f59a64aabe0598c5c139fc476e35480a655c76308852ad2ad03c86b0f5cde0d6019efe73e603ad6ab22f7d795f40aed95fabf017ac56a94055f8d3a10c245d7745496836c0e2f4eea0aa9c1f98da8ccc9fec221235cc2313b70173f83af1cf8684ab0e128747a2cc1800f628a45d4ec268044486d5a29de17c5eede0eca8e2f12b6d35ad44274aafcfd7c449afb3e2319f4d357220ff9a15d18791b9445a7adb0592f2517dfea8a6e1626b06d65976a296a9e204de9f93577c42b60a54b66a5209f5fb88fa7b8986db802974725641c935842b7a59f6f92e0f5831b8e805db5ee9f11940a76273b5c4ba1e75a3208e56e6515b424eef41d65cdab25ed57da97134a04e78441df5fc35427866a9ecfa15ca4b1cf9622166e168a526394c83420610b4ab1ef17442434105bc970e98ba0207c0d46ad52fdb9e8453ecca6fdc4ae40577a9fae294e5ab250ef51b3d2965a6ae50b120571a46b734b81360513acc533b381010b6ce6302c99e02d52a626451a70727769acc99bbb72c65a6483f052ea9381e7966122aa2292db516de3dcd5159bbfc670fac68b0447eb7c30ce94d1b94f1afb63c90627aae75d3d20b76435d99983dafab197502f27be13b86dfbef1980c40b45fbe3b28cf7668397d308143aea3dfedc1239406bc7cf7458427645e7ac9a4943b451ece28c67a2f5bdb7b95f2cad57b6d6c3f21c80039b59dfbcc9dd4577005fdf134ea56e0633f2c5277b421c3dfd8ac13a8e9f0b08c5fd6b26cc8e2c48d29311587320de91534fb2a805d23a8686b685c394b5f3be7f0ead293c4d9c5d8d6be315e61508d3052473d843934d9cb1dab45744744daaa62b6ec7b5a4013fa7026efdf07f030008296994531b0b169996264f8333e4f4ef7a30b3965efa57a0d7948374bea34a6c4e7f71864d9994fcacf0f527f9afccfc23a3bb4139ac2f1bc4a049b095be09e509d98b5ec07b604e48260a3197c226d0ec4dbfcc709a7aac4f64ee58e02e9a48599d4a127f5dc931656fc9fb887bd5654e26022adb0e35024140cd363dd80c5a6f8665804acaf3cc494d65aef55ba7fbe89d5b78027e51c537a1613218434060f0e139d6247b75c4ea59049b12d0deab8f597a580a91d4cda53359a83691924ffb6177ca14c0d3ee6202b44978a3fa2fd39d789694e3de80fcedb12fd057db18a1079287a15340726c6ff08bb3c03ec05cff0aeb8d98251103aa141a989bd41534eb00245a65d0d5c918cd148ad17694c05d9a055e65cd05a0da5a73a38fae75c905d0d4026c3104f3d54e6bb9ed7fe15a031dc1ddb8394325eb4ba778d90180ceba0e262634be348d691bbcfc16f40ef8a69ecf02518c7bbb3e5636db77ef79770282ca3ce301d45918f099dba678fecc59e034b5f1355f928809fc9e53cd43592b0b17c68ac4b60d17dbc17e29543d28f4681ecf65b657955f6500964298c8b34cc3350196594c76cef18069c656f8deecd05356f876bbb0de0b91927954668e977da5324880a0efde73c56ff615fa9261b76f66bf0a17a2b3ef96d5e046efdd9b46d7b3424b8567c0dfddafd3f324e85dd16fcd185390418faea5e9b9f42185746a5d07cb95afe23e28a325a161c1706bb78e40a33863e7219bedf32c24c65778536c3fd4ec738b646f0067620ead22e2321e706fe9ace819cb53649ce294653256b10f7a7a04077d2fcff5237f2cef966fb23755ebb0938b698ac00c1f1d789cf9b9da28fb1291fac19a2bd05759aa3a98e1c49493e968dc8dbf4d2612b76e3de03dce5afdd24097a003ac6b4fe0f7046c34b3f5a6895656c8717f880e5e16a453389a3fa40e8daf90fcc2bd137516731943df8c32a8a16527d1aef41eb096290f4fa12039dc1b8ac9840d67eea29c80b258a3775ad1f1ad04b1ad7c50757107f1f22a6a8b53550862e4f27dec2f8d3913595605078326c902f810e044e4162233f5eb42dd4de9561ac186b865738b0fdc74eedc894ae34be66f44c7f15d32e825dc5f14819a76ab7b1481ed4c0853d00ee8500e65e9614c944f68427aafb4b569e371b0d2560ce8957f23935d4f93702dd459349b7dbe1b97c86bc938b417efbaca18083bb4c9609fe46c46a0ef6b0292582f972e9becfc6e6519ca46205f7b1eab4df59997beb73847acbd177cca8bffbde5f79e23cd9c4f28dcadfc1e9af52a9279622a23f26203c4886396f704b573659a16ab5f3cd3d66c64b2369a77993d4636d1609bc1a20f038827e2db0a765db540e67fdc64257767e7caab37cd97a888d3782d57e9cd7e82daf1b97979e926c157d0c210a2ba1909378b469f7c507e14efbf518e5228596cbe67e923c0e6759afe61fe9e1bf4e7ad3adb1ef40af8a50ebd7f7d7919670156655ab283ceea479c9b693c245e663250f4d8dd29a3aab7c22a9b93ddaa311a34135b67630d862536fbd55123e5bb8e8f2917c4e2c3fdcd25affed47dbbd6cebd69cd9aa91fdf7e0b6d407c12e6654e9300810cf857ce6ec23d0c1aba005bfcc5c72877791291998f0b37a281b17a1aacd49f518caf113d0f385ffba590fd5c345c5bdadbb50ab751f86512bdaf6bfcd3d0a7810f840e7f5d9e85294d59fe6df23ccc0bd0d5107b01eacabac9685f614c399aef5118eab41c003ec8c064142913d327bba24c29dc5c7e7a0183aeb23eee0ae95fc02ddd21b1010bef4fb043a6ebb65af05d0285944da12257f2e379fa0850dd188f4cd02626bb284e1a18e578f515297dbb74cd41587608416f162e18bec2c5d0238bb0dc61f716bc913cb14b24ced1085a62b7040dd7321eca96bd292b24684f8d85318c0079d9134a79f07d15379e9b4fe29072abf23939b7c9a24603755b1acd9145bbdd2ffeeae2be5179d0705c9960d866a6bed092e57bf6949b651841c83c2e8c751b3fed9daf7a56f93e4031dee50cccf59633c3dda9c138b5c80d851fe2cb6fd4cf5a2429ec1e4f50591a7186ec0226569ee4cd111639b86387cc82fc6b5be3bbc8f784627980a0970e094107a9ed18a89a13ae62866ca33d05c1cf46469766cc55ce98adf3f5b286c75191e06485a132bbc7ac6b1c2396a01b9dfcf577f64fdbcb2f01be19a4e28d722043a823059a85671d3af4a24f805d50cfc0514b432d5624c0a3603b3c84b0f3b08c4f5a1ca2723442b9376f4b45ba72b0157074aae0dbf3bd28b070e2f019e7931d8c00640acc8a6278673f3f61ada7e05682a648979f302b6fa2532edaf8bb5e27eed9b7d8d257365c233948f0a27eb94d864d1b8028d15a74609fbd00d8bec08fa4c5c243b370e09101735b08d61256052492e2c9e29585083189808fe62f85a83e2fc2396b421fc64700516cd260ea2769eeaa70f883ab0f772172368e2aa043fc0f0cf562c6f09a1613f39b4d7bad6addb6cb2a17d0fa0f440373c8e799519caafb514ec8b4cae1565d6ff296577ed291746304fec130f0f9b51a8188ecd7a9cdca887141b695e9db2669163eb71d0fa4c11db9b695a5d5fb68b668a430887b629d752f79c4aec2271efd7b72bbdd105c6d273e6373403208f7a2f22170ddb072830a3f3e7d16152ba3eadcf87ab4bb9cd8e09a3187a2b0928014b866b2c16e02076399e015486cdec8813789cb713e5b7a9a944ac97df2ed5ffa8425715fb197e9041f9e0013793f074ce63c0d27000d3a075e543d5a03db8b63c81e1db0e15517236575d4dececffb2bd6935b8a9075cf658e168b310ab90551db4d52bd83884245512fc926907b7dc60d9b967c78702a8b7200a2b48e49807aecd99dbd7c4fda73b0b04ba4d7b9053c3980f51e618f665b261e22d8e4cd74acb04bb0c905cea39ac993e39e5217237d7e19557fc41519ae443a494af8635bd70024480824a981d9b653ca34086c681bf36e660fcec20a043185386d4cc62cc17442d44dbd74d21e69ea2b2fbb4e2c8e530dcf6dc32878d2d60a5d8ed42ed096785f18ce6cdea26366014eb2a752d2007219267322a95524c9ceb0b8a8a81b5d323b3a47b088681d1cc89d82a5523895b506d596c03642d9d0035b38c3ea120766ddcf2aa3107134d3d8c6b5c1331afd017ffe6433879daec295a1447111eec62481f183697a2da837d55ce75433f1f60449f6a043c093d27e328a3d9730288eaecc6c16114e427e4ef2f133c5f19489410f2f92d21f32a456564553d6514995125906ad5c9151afc6683df91fe52ee18f1135d832e47914834d4ee30583895a0ba8b9997bd3121f011b3ae3511c56f7248bc1a2d5db64abf1974dd9880be021038cc002aaca1358dce64029c39a261f67cbb1a6e"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.279640955s ago: executing program 0 (id=5671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2001010000"], 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 4.214169192s ago: executing program 4 (id=5676): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086", 0x17, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1a) 4.21330007s ago: executing program 2 (id=5677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.073801078s ago: executing program 1 (id=5679): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) 3.979930711s ago: executing program 1 (id=5680): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8a, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee804892565862580967cecce07a590ce64bd320eb14a5d5bb2cc093b26e40b4662d2b522e223c4689bc3c3682840266c724f5f02ed46df1fc9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x4c) socket(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x414f, &(0x7f0000000140)={0x0, 0xf38, 0x4, 0x2, 0x30}, 0x0, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) fchdir(r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r8 = fspick(r7, &(0x7f0000000200)='./file1\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$peeksig(0x4209, r9, &(0x7f0000000140)={0x2}, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 3.969865519s ago: executing program 2 (id=5681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x2c000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$evdev(0x0, 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda443000090401010101023000090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.574045494s ago: executing program 4 (id=5683): readlink(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)=""/164, 0xa4) socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @nested={0x10, 0xf8, 0x0, 0x1, [@typed={0x4, 0xb1}, @typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 3.387757121s ago: executing program 4 (id=5684): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @string={0x4, 0x3, '>M'}}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.956753928s ago: executing program 5 (id=5685): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xfff1, 0xffff}, {0x15, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x240000c1}, 0x24049890) 2.748234089s ago: executing program 5 (id=5686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001340)={0x1, 0x0, [{0x4b564d03, 0x0, 0x9988}]}) 2.467180243s ago: executing program 5 (id=5687): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000000)=""/161, 0xa1}, {&(0x7f0000001b00)=""/227, 0xe3}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001f40)=""/260, 0x104}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001a80)=""/85, 0x55}, {&(0x7f00000000c0)=""/82, 0x52}], 0xb}, 0x7f}], 0x4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x105a00, 0x0) r3 = syz_open_dev$loop(0x0, 0x8, 0x126402) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = dup(r3) read$FUSE(r4, &(0x7f0000003c40)={0x2020}, 0xffffff0a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=ANY=[@ANYBLOB="380000001800010000080000000000000a4000000000000000000000080080153ed5a1c6a922589d015fb7cd3fbfa3a1d1a57975b32fbe97aadbc787682b4e2c99e955b871050a25327b9132e9c524fc768fa6aabc7ede0bf3a6c8b7586ca7c9ac2957e737e7ebab8e8d4637a37d06ee943eaf1a3904f906b80012d2c2a2c51e36629706d212b0876e30d349cc0733a8c3117404629ae60cddefa2e19e484c16c27f570dbb438fee9d57f452542772c14e56b0645468bab2f5d898befb6f46962e5f8a5faf92", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32], 0x38}}, 0x10) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) setregid(r7, r7) socket(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) listen(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x4d, 0xf, 0x9], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 2.271374908s ago: executing program 1 (id=5688): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x541e, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create(0xaf2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0xe000200f}) 2.215163113s ago: executing program 5 (id=5689): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d00"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 2.090425607s ago: executing program 0 (id=5690): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0x100ffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x2000, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000100)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.029781905s ago: executing program 0 (id=5691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000720000032bbd7000ffdbc72507000000", @ANYRES32=0x0, @ANYBLOB="08000100000000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x4008000) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x80e, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0xe, 0x64}, {@multicast1, 0x4623, 0x4, 0x100000cd, 0x12d5e, 0x3}}, 0x44) sendmmsg$sock(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="020000", 0x3}, {&(0x7f00000001c0)="00eff7f3a1c922959f4d144c871805b511b33c57ddc4b44353e5f1bb255d4d1cddb10971ab47", 0x26}], 0x2, 0x4, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r3) 2.017762972s ago: executing program 1 (id=5692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000f4, 0x0, 0x2}]}) 1.89836281s ago: executing program 1 (id=5693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, &(0x7f0000000700)={0x0, 0x24, 0x9, {0x9, 0xf, "e1cbd687a96569"}}, &(0x7f0000000780)={0x0, 0x3, 0x13, @string={0x13, 0x3, "e177e3913e9a60ee082ce5bfbfbb555108"}}, 0x0, 0x0}, 0x0) 1.838032351s ago: executing program 2 (id=5694): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) read(r1, 0x0, 0xff00) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000009000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011000100"], 0x64}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) close_range(r3, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) syz_usb_connect$uac2(0x0, 0xd4, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x4712, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0xa, 0x80, 0x6, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x8, 0x36, 0x9}, [@sample_rate={0x9, 0x24, 0xd, 0x6, 0x3, 0x4, [0x1]}, @source_unit={0x8, 0x24, 0xa, 0xa, 0x3, 0xf9, 0x9, 0x4}, @processing_unit={0xb, 0x24, 0x8, 0x2, 0x4, [0x0, 0x3, 0x3]}, @processing_unit={0x11, 0x24, 0x8, 0x6, 0x4, [0x1, 0x3, 0x0, 0x0, 0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x3, 0x0, {0x8, 0x25, 0x1, 0x3, 0x18, 0x81, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0xe, 0xcb, "dab195", "b0cf7d"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xd, 0x3, 0x2, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x0, '9Q;'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x8, 0x8, {0x8, 0x25, 0x1, 0x1, 0x3, 0x8, 0x1000}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x5, 0x7, 0x5, 0x8, 0x4}, 0x129, &(0x7f00000004c0)={0x5, 0xf, 0x129, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x3, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x1, 0x0, 0x8, [0xc00f, 0xffc030, 0x0, 0x30, 0xc0, 0xff006f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x9, 0x6}, @generic={0xf2, 0x10, 0x1, "40708edc1bc0c51a881c3b5f821407ed05753e4499be8fce67cbe3d7ddcedc0c46d780607fa9aded12832113ec1fadf3800d003893d316706ef45c6eb6cc36a577ae930a2b3c95342941e12a85565e7b733a350b923e8d7ef27de68984fcda04585e7f3a8403cdf47b1bfedcc201420fcaa43c3803f619c4770ee0764ef4f06071ff43a154a8a9b5a0b3ca2f6f2f9b8f152b84b97fcf7f139addac69ce390f8e00c5b155fad915a67cb3597ef30ad1af58c7f70db4b67f2fbb9adeeefa86fa1ffe8d095107d4de152d112ad13269d15a512a354b823f0942f66559c07eb922a0813adf2829422e0fca26f1bb8998ee"}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x42, 0x3, 0x406}}]}) 1.318939424s ago: executing program 4 (id=5695): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r0, 0x1276, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 1.318125028s ago: executing program 5 (id=5705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20000040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.073716156s ago: executing program 5 (id=5696): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xed9) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000300)=0xfffffffe) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, r7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x9d2, &(0x7f00000009c0)="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", 0x0, 0x1000}) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r8) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 1.066403047s ago: executing program 1 (id=5707): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x560}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f00000f6000/0x4000)=nil, 0x4000}, 0x1}) 0s ago: executing program 0 (id=5697): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) syz_clone(0x3000200, 0x0, 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): rsing attributes in process `syz.2.5111'. [ 1326.210964][T24333] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5115'. [ 1326.471867][T11665] usbhid 1-1:0.0: can't add hid device: -71 [ 1326.478314][T11665] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1326.525038][T11665] usb 1-1: USB disconnect, device number 117 [ 1326.703458][T24339] syzkaller1: entered promiscuous mode [ 1326.737966][T24339] syzkaller1: entered allmulticast mode [ 1327.026294][ T5725] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1327.106028][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.113560][ C0] bridge0: topology change detected, propagating [ 1327.120166][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.127490][ C0] bridge0: topology change detected, propagating [ 1327.299785][ T5725] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1327.318436][ T5725] usb 5-1: config 0 has no interface number 0 [ 1327.336762][ T5725] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1327.385626][ T5725] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1327.424849][ T5725] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1327.453875][ T5725] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1327.509491][ T5725] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1327.545391][ T5725] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1327.574992][ T5725] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1327.593384][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.624089][ T5725] usb 5-1: config 0 descriptor?? [ 1327.648549][T24337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1327.691097][T24337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1327.775868][ T5725] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1328.378504][T24337] ldusb 5-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1328.572104][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5125'. [ 1330.168503][ T24] usb 5-1: USB disconnect, device number 106 [ 1330.216847][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1330.350634][T24382] syzkaller0: entered promiscuous mode [ 1330.365292][T24382] syzkaller0: entered allmulticast mode [ 1335.967901][T24427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5141'. [ 1336.217160][T24391] tipc: Enabled bearer , priority 0 [ 1336.229348][T24396] syzkaller0: entered promiscuous mode [ 1336.235235][T24396] syzkaller0: entered allmulticast mode [ 1336.270447][T24386] tipc: Resetting bearer [ 1336.318633][T24386] tipc: Disabling bearer [ 1336.472389][ T29] audit: type=1326 audit(1777919259.312:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.504605][ T29] audit: type=1326 audit(1777919259.312:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.584327][T24439] fuse: Bad value for 'fd' [ 1336.600482][ T29] audit: type=1326 audit(1777919259.342:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.640172][ T29] audit: type=1326 audit(1777919259.342:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.688816][T24444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1336.700247][ T29] audit: type=1326 audit(1777919259.342:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.729895][T24446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1336.756009][T24446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1336.769620][ T29] audit: type=1326 audit(1777919259.372:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.817753][ T29] audit: type=1326 audit(1777919259.372:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.893479][T24450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1336.904629][ T29] audit: type=1326 audit(1777919259.372:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.933154][ T29] audit: type=1326 audit(1777919259.372:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1336.957944][ T29] audit: type=1326 audit(1777919259.372:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.2.5144" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1337.265671][T24463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5153'. [ 1337.298206][T24463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5153'. [ 1338.416055][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1338.626214][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1338.646847][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.670525][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1338.692530][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1338.708214][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.729069][ T24] usb 5-1: Product: syz [ 1338.741913][ T24] usb 5-1: Manufacturer: syz [ 1338.762348][ T24] usb 5-1: SerialNumber: syz [ 1338.798230][ T24] usb 5-1: config 0 descriptor?? [ 1338.819404][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 1338.840346][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1338.868739][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1338.901063][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1338.939089][T22959] usb 5-1: Failed to submit usb control message: -71 [ 1338.964834][T22959] usb 5-1: unable to send the bmi data to the device: -71 [ 1338.989707][T24497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1339.005799][T22959] usb 5-1: unable to get target info from device [ 1339.030158][T22959] usb 5-1: could not get target info (-71) [ 1339.057947][T22959] usb 5-1: could not probe fw (-71) [ 1339.220138][T24500] fuse: Bad value for 'fd' [ 1339.456355][T24505] raw_sendmsg: syz.2.5163 forgot to set AF_INET. Fix it! [ 1339.697456][ T24] usb 5-1: USB disconnect, device number 107 [ 1340.336281][ T10] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1340.540604][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1340.576272][ T10] usb 3-1: config 0 has no interface number 0 [ 1340.597780][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1340.616335][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1340.662350][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1340.701915][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1340.789895][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1340.854542][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1340.866649][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1340.881655][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1340.896481][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.918550][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.943129][ T24] usb 5-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1340.974062][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.014878][ T10] usb 3-1: config 0 descriptor?? [ 1341.030405][ T24] usb 5-1: config 0 descriptor?? [ 1341.078000][T24526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1341.129523][T24526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1341.223072][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1341.962036][T24526] ldusb 3-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1341.972456][T24550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5178'. [ 1341.976014][ T5725] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1342.001579][T24550] openvswitch: netlink: Flow key attr not present in new flow. [ 1342.155989][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 1342.170008][ T5725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1342.184913][ T5725] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1342.195003][ T5725] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1342.219868][ T5725] usb 1-1: Product: syz [ 1342.232906][ T5725] usb 1-1: Manufacturer: syz [ 1342.254430][ T5725] usb 1-1: SerialNumber: syz [ 1342.618346][ T5725] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 1342.660510][ T5725] visor 1-1:1.0: probe with driver visor failed with error -110 [ 1342.827522][T24559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.881281][T24559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.225224][T24571] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1343.278539][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1343.297289][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1343.370484][ T24] usb 5-1: USB disconnect, device number 108 [ 1343.443650][T11665] usb 3-1: USB disconnect, device number 124 [ 1343.487964][T11665] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1343.598589][T24577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5185'. [ 1344.106726][T11665] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1344.293566][T11665] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1344.325096][T11665] usb 3-1: config 0 has no interface number 0 [ 1344.352016][T11665] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1344.385814][T11665] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1344.432291][T11665] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1344.480932][T11665] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1344.519394][T11665] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1344.558541][T11665] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1344.584389][T11665] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1344.594423][T11665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.649730][T11665] usb 3-1: config 0 descriptor?? [ 1344.695129][T24582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1344.713421][T24582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1344.787710][T16653] usb 1-1: USB disconnect, device number 118 [ 1344.954587][T24594] syz_tun: entered promiscuous mode [ 1344.976291][T24594] macsec1: entered promiscuous mode [ 1344.995865][T24594] macsec1: entered allmulticast mode [ 1345.020549][T24594] syz_tun: entered allmulticast mode [ 1345.033254][T11665] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1345.104137][T24594] syz_tun: left allmulticast mode [ 1345.117065][T24594] syz_tun: left promiscuous mode [ 1345.352419][T24598] FAULT_INJECTION: forcing a failure. [ 1345.352419][T24598] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.415360][T24598] CPU: 1 UID: 0 PID: 24598 Comm: syz.0.5190 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.415392][T24598] Tainted: [L]=SOFTLOCKUP [ 1345.415400][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1345.415410][T24598] Call Trace: [ 1345.415418][T24598] [ 1345.415428][T24598] dump_stack_lvl+0xe8/0x150 [ 1345.415456][T24598] should_fail_ex+0x412/0x560 [ 1345.415486][T24598] should_failslab+0xa8/0x100 [ 1345.415518][T24598] ? __pmd_alloc+0xc1/0x5c0 [ 1345.415539][T24598] kmem_cache_alloc_noprof+0x87/0x650 [ 1345.415572][T24598] __pmd_alloc+0xc1/0x5c0 [ 1345.415598][T24598] handle_mm_fault+0xe96/0x3170 [ 1345.415635][T24598] ? handle_mm_fault+0xee/0x3170 [ 1345.415665][T24598] ? __pfx_handle_mm_fault+0x10/0x10 [ 1345.415701][T24598] ? __lock_acquire+0x6b5/0x2cf0 [ 1345.415727][T24598] ? lock_mm_and_find_vma+0xa7/0x340 [ 1345.415756][T24598] do_user_addr_fault+0x75b/0x1340 [ 1345.415800][T24598] exc_page_fault+0x6a/0xc0 [ 1345.415824][T24598] asm_exc_page_fault+0x26/0x30 [ 1345.415842][T24598] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1345.415874][T24598] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1345.415891][T24598] RSP: 0018:ffffc9000ec87d38 EFLAGS: 00050202 [ 1345.415910][T24598] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c [ 1345.415922][T24598] RDX: 0000000000000001 RSI: 00000000800014c0 RDI: ffffc9000ec87da0 [ 1345.415933][T24598] RBP: ffffc9000ec87e88 R08: ffffc9000ec87dab R09: 1ffff92001d90fb5 [ 1345.415945][T24598] R10: dffffc0000000000 R11: fffff52001d90fb6 R12: 000000000000000c [ 1345.415957][T24598] R13: 000000000000000c R14: ffffc9000ec87da0 R15: 00000000800014c0 [ 1345.415983][T24598] _copy_from_user+0x7a/0xb0 [ 1345.416010][T24598] __sys_connect+0x156/0x450 [ 1345.416030][T24598] ? fd_install+0x94/0x3d0 [ 1345.416053][T24598] ? __pfx___sys_connect+0x10/0x10 [ 1345.416097][T24598] __ia32_sys_connect+0x7a/0x90 [ 1345.416122][T24598] __do_fast_syscall_32+0x229/0x6e0 [ 1345.416148][T24598] ? do_fast_syscall_32+0x33/0x70 [ 1345.416171][T24598] ? lockdep_hardirqs_on+0x7a/0x110 [ 1345.416194][T24598] ? asm_int80_emulation+0x1a/0x20 [ 1345.416212][T24598] ? do_int80_emulation+0x286/0x530 [ 1345.416241][T24598] do_fast_syscall_32+0x33/0x70 [ 1345.416266][T24598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.416289][T24598] RIP: 0023:0xf703f01c [ 1345.416306][T24598] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1345.416323][T24598] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 1345.416342][T24598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800014c0 [ 1345.416355][T24598] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.416367][T24598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.416378][T24598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1345.416390][T24598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.416418][T24598] [ 1346.205251][T24600] loop8: detected capacity change from 0 to 4096 [ 1346.293254][T24581] ldusb 3-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1346.390748][T24610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5191'. [ 1347.190021][T24630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.221157][T24630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.282509][T24630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.314826][T24630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.362385][T24630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.392200][T24630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.599618][ T24] usb 3-1: USB disconnect, device number 125 [ 1347.655273][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1347.799541][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5199'. [ 1347.865393][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5199'. [ 1348.021828][T24636] netlink: 'syz.0.5201': attribute type 8 has an invalid length. [ 1348.057756][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5201'. [ 1348.074299][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5200'. [ 1348.170537][T24636] bond0: entered promiscuous mode [ 1348.192072][T24636] bond_slave_0: entered promiscuous mode [ 1348.206305][T24636] bond_slave_1: entered promiscuous mode [ 1348.246167][T24636] gretap0: entered promiscuous mode [ 1348.277811][T24636] ip6gretap0: entered promiscuous mode [ 1348.325864][T24636] hsr1: entered promiscuous mode [ 1348.742714][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5208'. [ 1348.816556][T24660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.823826][T24660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.845016][T24663] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1348.875542][T24664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5208'. [ 1348.939639][T24663] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1348.979656][T24663] program syz.0.5209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1350.674484][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 1350.674496][ T29] audit: type=1326 audit(1777919273.512:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.2.5220" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1350.759550][ T29] audit: type=1326 audit(1777919273.552:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.2.5220" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1351.403932][ T29] audit: type=1326 audit(1777919274.242:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.5221" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 1351.478323][ T29] audit: type=1326 audit(1777919274.252:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.5221" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 1352.019279][ T29] audit: type=1326 audit(1777919274.862:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24718 comm="syz.2.5226" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1352.063018][ T29] audit: type=1326 audit(1777919274.882:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24718 comm="syz.2.5226" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1352.119576][ T29] audit: type=1326 audit(1777919274.892:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24718 comm="syz.2.5226" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1352.181566][ T29] audit: type=1326 audit(1777919274.892:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24718 comm="syz.2.5226" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1352.256092][ T29] audit: type=1326 audit(1777919274.902:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24718 comm="syz.2.5226" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1352.352549][ T29] audit: type=1326 audit(1777919274.902:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24718 comm="syz.2.5226" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1352.956046][T11665] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1353.133257][T11665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.169973][T11665] usb 1-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1353.201809][T11665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.255674][T11665] usb 1-1: config 0 descriptor?? [ 1353.638350][T24750] fuse: Bad value for 'user_id' [ 1353.708149][T24750] fuse: Bad value for 'user_id' [ 1353.772032][T11665] usbhid 1-1:0.0: can't add hid device: -71 [ 1353.802446][T11665] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1353.811675][T24747] syzkaller0: entered promiscuous mode [ 1353.821934][T24747] syzkaller0: entered allmulticast mode [ 1353.835516][T11665] usb 1-1: USB disconnect, device number 119 [ 1353.868463][T24758] loop5: detected capacity change from 0 to 7 [ 1353.957865][T24758] Dev loop5: unable to read RDB block 7 [ 1353.979874][T24758] loop5: AHDI p1 [ 1354.007969][T24758] loop5: partition table partially beyond EOD, truncated [ 1354.298952][T24771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1354.809257][T24789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5243'. [ 1355.967773][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5248'. [ 1355.986283][ T5725] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1356.222053][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.267120][ T5725] usb 3-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1356.304447][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.347232][ T5725] usb 3-1: config 0 descriptor?? [ 1360.020224][T24808] syzkaller0: entered promiscuous mode [ 1360.025795][T24808] syzkaller0: entered allmulticast mode [ 1360.094927][ T5725] usbhid 3-1:0.0: can't add hid device: -71 [ 1360.104490][ T5725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1360.138959][ T5725] usb 3-1: USB disconnect, device number 126 [ 1360.777131][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5254'. [ 1360.892224][T24840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5254'. [ 1361.683674][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.690333][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.664009][T24832] syzkaller0: entered promiscuous mode [ 1365.669941][T24832] syzkaller0: entered allmulticast mode [ 1365.896330][T24853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5257'. [ 1365.917121][T24855] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1365.949280][T24855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1365.963820][T24849] syz_tun: entered promiscuous mode [ 1365.969479][T24855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1365.992272][T24849] macsec1: entered promiscuous mode [ 1366.018321][T24849] macsec1: entered allmulticast mode [ 1366.042405][T24849] syz_tun: entered allmulticast mode [ 1366.080253][T24849] syz_tun: left allmulticast mode [ 1366.108399][T24849] syz_tun: left promiscuous mode [ 1366.174796][T24864] loop8: detected capacity change from 0 to 4096 [ 1366.186111][ T24] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1366.315788][T24864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1366.359835][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1366.385740][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.414364][ T24] usb 3-1: Product: syz [ 1366.429148][ T24] usb 3-1: Manufacturer: syz [ 1366.435321][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1366.454983][ T24] usb 3-1: SerialNumber: syz [ 1366.673919][T24866] veth1_vlan (unregistering): left allmulticast mode [ 1366.710444][T24878] fuse: root generation should be zero [ 1366.850664][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5269'. [ 1366.874433][T24885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5269'. [ 1366.901825][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1366.931192][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1367.299034][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1367.299051][ T29] audit: type=1326 audit(1777919290.142:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.5275" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 1367.333471][ T29] audit: type=1326 audit(1777919290.142:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.5275" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf702f01c code=0x7ffc0000 [ 1367.693313][T24911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.710743][T24911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.165294][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1368.480082][T11665] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 1368.559289][T24918] bond21: option packets_per_slave: invalid value (18446744071562067969) [ 1368.604571][T24918] bond21: option packets_per_slave: allowed values 0 - 65535 [ 1368.640303][T24918] bond21 (unregistering): Released all slaves [ 1368.662805][T11665] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1368.703340][T11665] usb 5-1: config 0 has no interface number 0 [ 1368.730076][T11665] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1368.778958][T11665] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1368.829338][T11665] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1368.875855][T11665] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1368.893408][T11665] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1368.945533][T11665] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1369.033972][T11665] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1369.074108][T11665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.110330][T24924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5280'. [ 1369.148169][T11665] usb 5-1: config 0 descriptor?? [ 1369.159644][T24917] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1369.188262][T24917] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1369.235365][T11665] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1369.272406][T24857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.303887][T24857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.372756][T24857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.417790][T24857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.661388][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 1369.683674][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1369.697071][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1369.708586][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1369.741814][T24915] ldusb 5-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1369.753241][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1369.777725][ T24] usb 3-1: USB disconnect, device number 127 [ 1369.828297][T24934] syzkaller0: entered promiscuous mode [ 1369.844090][T24934] syzkaller0: entered allmulticast mode [ 1370.346028][ T24] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1370.534447][ T24] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1370.601459][ T24] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1370.645558][ T24] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1370.682341][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1370.708467][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1370.743966][ T24] usb 1-1: SerialNumber: syz [ 1370.965596][T24946] syzkaller0: entered promiscuous mode [ 1370.991278][T24946] syzkaller0: entered allmulticast mode [ 1371.011717][T24937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1371.191582][T24954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1371.253143][ T5725] usb 5-1: USB disconnect, device number 109 [ 1371.293735][ T5725] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1371.560847][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5290'. [ 1372.628153][T24970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5292'. [ 1372.789949][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1373.469332][ T24] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 1373.482481][ T24] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 1373.529542][ T24] usb 1-1: USB disconnect, device number 120 [ 1374.566094][T16653] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1374.730470][T16653] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1374.742223][T16653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.750715][T16653] usb 3-1: Product: syz [ 1374.755265][T16653] usb 3-1: Manufacturer: syz [ 1374.760336][T16653] usb 3-1: SerialNumber: syz [ 1375.221552][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1375.239960][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1376.552002][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1377.580464][T24987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.591881][T24987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.608197][T24987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.617525][T24987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.846440][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 1377.869964][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1377.883099][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1377.894187][T16653] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1377.913788][T16653] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1377.930050][T16653] usb 3-1: USB disconnect, device number 2 [ 1378.208674][T24989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.230714][T24989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.423708][T24998] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1378.466035][T24989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.547515][T24989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.816057][T11665] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 1378.866027][ T24] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 1378.979188][T11665] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1379.004036][T11665] usb 5-1: config 0 has no interface number 0 [ 1379.021097][T11665] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1379.048981][T11665] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1379.084108][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1379.102858][T11665] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1379.102877][ T24] usb 1-1: config 0 has no interface number 0 [ 1379.102921][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1379.172730][T11665] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1379.201467][T11665] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1379.217438][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1379.239654][T11665] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1379.262938][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1379.282706][T11665] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1379.300923][T11665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.321080][T11665] usb 5-1: config 0 descriptor?? [ 1379.328439][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1379.332344][T25003] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1379.360411][T25003] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1379.388669][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1379.424016][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1379.451856][T11665] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1379.476566][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1379.523434][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.563786][ T24] usb 1-1: config 0 descriptor?? [ 1379.581609][T25004] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 1379.604933][T25004] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 1379.694846][ T24] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1379.791297][T25000] ldusb 5-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1381.379063][T25023] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1381.468193][T25023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1381.514108][ T24] usb 1-1: USB disconnect, device number 121 [ 1381.536598][T25023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1381.550402][ T24] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 1381.578018][T25023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1381.601631][T25023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1381.672778][T25021] fuse: Bad value for 'user_id' [ 1381.688512][ T50] usb 5-1: USB disconnect, device number 110 [ 1381.703846][T25021] fuse: Bad value for 'user_id' [ 1381.719067][ T50] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1381.918000][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 1382.266204][ T5762] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1382.379768][T25041] netlink: 'syz.2.5308': attribute type 10 has an invalid length. [ 1382.389444][T25041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5308'. [ 1382.492270][ T5762] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1382.510879][ T5762] usb 1-1: config 0 has no interface number 0 [ 1382.527367][ T5762] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1382.542132][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.566599][ T5762] usb 1-1: Product: syz [ 1382.574979][ T5762] usb 1-1: Manufacturer: syz [ 1382.583564][ T5762] usb 1-1: SerialNumber: syz [ 1382.601188][ T5762] usb 1-1: config 0 descriptor?? [ 1382.646053][T25033] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1382.698625][T25041] dummy0: entered promiscuous mode [ 1382.764684][T25041] bridge0: port 3(dummy0) entered blocking state [ 1382.826722][ T5762] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1382.837923][T25041] bridge0: port 3(dummy0) entered disabled state [ 1382.861238][ T5762] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1382.901911][T25054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.915174][ T5762] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1382.915225][T25054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.934327][T25041] dummy0: entered allmulticast mode [ 1382.946157][ T5762] usb 1-1: media controller created [ 1382.968249][T25054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.995232][T25054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.011122][T25050] syzkaller0: entered promiscuous mode [ 1383.020839][T25050] syzkaller0: entered allmulticast mode [ 1383.031740][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1383.087671][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5307'. [ 1383.104663][T25054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.129571][T25054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.222213][T25035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.259088][T25035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.346443][T21803] Bluetooth: hci5: command 0x0406 tx timeout [ 1383.516242][T21803] Bluetooth: hci3: command 0x0406 tx timeout [ 1383.586005][T21803] Bluetooth: hci0: command 0x0406 tx timeout [ 1383.586037][T21807] Bluetooth: hci2: command 0x0406 tx timeout [ 1383.666860][T21807] Bluetooth: hci1: command 0x0406 tx timeout [ 1383.916680][T14246] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1383.968711][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5314'. [ 1384.097315][T14246] usb 5-1: Using ep0 maxpacket: 8 [ 1384.115260][T14246] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1384.145558][T14246] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1384.169050][T14246] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1384.196020][T14246] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1384.222240][T14246] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1384.232068][ T5762] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 1384.271667][T14246] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1384.309721][T14246] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1384.336937][T14246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.483170][T25068] fuse: Bad value for 'user_id' [ 1384.500599][T25068] fuse: Bad value for 'user_id' [ 1384.564650][T25067] syzkaller0: entered promiscuous mode [ 1384.583652][ T29] audit: type=1326 audit(1777919307.422:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1384.612851][T25067] syzkaller0: entered allmulticast mode [ 1384.644571][T14246] usb 5-1: GET_CAPABILITIES returned 0 [ 1384.656481][T14246] usbtmc 5-1:16.0: can't read capabilities [ 1384.664750][ T29] audit: type=1326 audit(1777919307.422:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1384.735688][ T29] audit: type=1326 audit(1777919307.422:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1384.811947][ T29] audit: type=1326 audit(1777919307.422:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1384.869041][T25062] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1384.876666][ T29] audit: type=1326 audit(1777919307.422:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1384.939779][ T29] audit: type=1326 audit(1777919307.422:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1384.997741][ T29] audit: type=1326 audit(1777919307.422:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1385.026197][T16653] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1385.070224][ T29] audit: type=1326 audit(1777919307.422:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1385.122666][T14246] usb 1-1: USB disconnect, device number 122 [ 1385.162252][ T29] audit: type=1326 audit(1777919307.472:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1385.187066][T16653] usb 3-1: device descriptor read/64, error -71 [ 1385.219330][ T29] audit: type=1326 audit(1777919307.472:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25060 comm="syz.4.5313" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1385.264066][T25078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.273183][T25078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.291981][ T24] usb 5-1: USB disconnect, device number 111 [ 1385.439393][T16653] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1385.513984][T25075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.526723][T25075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.576374][T16653] usb 3-1: device descriptor read/64, error -71 [ 1385.697245][T16653] usb usb3-port1: attempt power cycle [ 1386.046028][T16653] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1386.097537][T16653] usb 3-1: device descriptor read/8, error -71 [ 1386.165271][T25092] syzkaller0: entered promiscuous mode [ 1386.171717][T25092] syzkaller0: entered allmulticast mode [ 1386.356133][T16653] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1386.387079][T16653] usb 3-1: device descriptor read/8, error -71 [ 1386.506230][T16653] usb usb3-port1: unable to enumerate USB device [ 1387.296103][ T5762] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 1387.483524][ T5762] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1387.521164][ T5762] usb 1-1: config 0 has no interface number 0 [ 1387.580208][ T5762] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1387.628604][ T5762] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1387.684577][ T5762] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1387.735135][ T5762] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1387.778492][ T5762] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1387.823620][ T5762] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1387.867789][ T5762] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1387.919713][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.987598][ T5762] usb 1-1: config 0 descriptor?? [ 1388.066183][T25110] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1388.073629][T25110] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1388.185005][ T5762] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1388.538621][T25109] ldusb 1-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1389.046170][T25131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5334'. [ 1389.496460][T25140] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1389.507327][T25140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1389.912989][T14246] usb 1-1: USB disconnect, device number 123 [ 1389.930839][T14246] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1390.047944][T25133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5335'. [ 1390.505467][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 1390.505487][ T29] audit: type=1326 audit(1777919313.342:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25159 comm="syz.5.5342" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702f01c code=0x0 [ 1390.606011][T25161] netlink: 'syz.4.5340': attribute type 62 has an invalid length. [ 1390.802907][T25171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.880546][T25171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.096096][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1394.117607][T25193] dlm: Unknown command passed to DLM device : 0 [ 1394.117607][T25193] [ 1395.152811][T25142] tipc: Started in network mode [ 1395.162440][T25142] tipc: Node identity 2e6103c61a08, cluster identity 4711 [ 1395.172093][T25142] tipc: Enabled bearer , priority 0 [ 1395.183124][T25143] syzkaller0: entered promiscuous mode [ 1395.214106][T25143] syzkaller0: entered allmulticast mode [ 1395.471061][T25209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5353'. [ 1395.739515][T25210] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5352'. [ 1395.751995][T25210] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1396.080423][T25222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.097636][T25222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.126768][T25137] tipc: Resetting bearer [ 1396.287991][T25137] tipc: Disabling bearer [ 1396.323044][T11665] tipc: Node number set to 879297478 [ 1396.526003][ T5762] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 1396.537137][T25233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1396.587779][T25233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1396.687206][T16653] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1396.700501][ T5762] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1396.739405][ T5762] usb 1-1: config 0 has no interface number 0 [ 1396.775001][T25235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.785705][ T5762] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1396.820196][T25235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.838850][ T5762] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1396.865525][T25235] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5359'. [ 1396.880019][ T5762] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1396.900064][T16653] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.926444][ T5762] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1396.942299][T16653] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1396.947574][T25235] netlink: 4352 bytes leftover after parsing attributes in process `syz.1.5359'. [ 1396.974772][T25235] openvswitch: netlink: Flow actions attr not present in new flow. [ 1396.991317][ T5762] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1397.003277][T16653] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1397.033444][T16653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.050097][ T5762] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1397.116031][ T5762] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1397.146677][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.183008][ T5762] usb 1-1: config 0 descriptor?? [ 1397.199507][T25221] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1397.220993][T25221] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1397.245404][ T5762] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1397.703475][T25221] ldusb 1-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1397.771816][T25242] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1397.779219][T25242] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 1397.812201][T25242] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1397.849756][T25247] loop8: detected capacity change from 0 to 4096 [ 1397.866937][T25247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5361'. [ 1399.141650][T25240] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1399.230956][T14246] usb 1-1: USB disconnect, device number 124 [ 1399.296743][T14246] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1399.571431][T25257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.606051][T25257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.616268][ T29] audit: type=1326 audit(1777919322.462:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25253 comm="syz.0.5364" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703f01c code=0x0 [ 1399.673549][T25254] loop8: detected capacity change from 0 to 4096 [ 1399.719015][T25254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5363'. [ 1399.844900][ T5762] usb 3-1: USB disconnect, device number 7 [ 1399.966039][T14246] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1400.085684][T25266] vti0: entered allmulticast mode [ 1400.153825][T14246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.179733][T14246] usb 1-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1400.213242][T14246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.245842][T14246] usb 1-1: config 0 descriptor?? [ 1400.378703][T25273] syzkaller0: entered promiscuous mode [ 1400.394167][T25273] syzkaller0: entered allmulticast mode [ 1400.514357][T25281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1400.612208][T25283] loop8: detected capacity change from 0 to 4096 [ 1400.769374][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 1400.889703][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 1400.962507][T25292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.981288][T25292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.392481][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1402.082196][T25310] Invalid argument reading file caps for ./file0 [ 1402.516833][T14246] usbhid 1-1:0.0: can't add hid device: -71 [ 1402.538632][T14246] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1402.562632][T14246] usb 1-1: USB disconnect, device number 125 [ 1402.679203][T25297] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1403.013083][T25323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5387'. [ 1403.107452][T25322] syzkaller0: entered promiscuous mode [ 1403.150123][T25322] syzkaller0: entered allmulticast mode [ 1403.251302][T25329] loop8: detected capacity change from 0 to 4096 [ 1403.329241][T25331] bond20: option mode: unable to set because the bond device has slaves [ 1403.924613][T25349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1403.981204][T25344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1404.371829][T25360] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1404.513881][ T29] audit: type=1326 audit(1777919327.352:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25362 comm="syz.0.5399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703f01c code=0x0 [ 1404.664319][T25368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5400'. [ 1404.866400][T14246] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1404.911372][T25373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.948718][T25373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.001563][T25373] netlink: 'syz.5.5402': attribute type 1 has an invalid length. [ 1405.079503][T14246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.090197][T14246] usb 1-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1405.113581][T14246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.144213][T14246] usb 1-1: config 0 descriptor?? [ 1405.154837][T25378] bond22: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1405.223830][T25378] bond22: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1405.286142][ T5725] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1405.341286][T25378] bond22: (slave ip6gre1): making interface the new active one [ 1405.387342][T25378] bond22: (slave ip6gre1): Enslaving as an active interface with an up link [ 1405.448272][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 1405.459542][ T5725] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1405.473490][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.488143][ T5725] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1405.511031][ T5725] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 56, using maximum allowed: 30 [ 1405.535830][ T5725] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 1405.549586][T25381] syzkaller0: entered promiscuous mode [ 1405.557389][T25381] syzkaller0: entered allmulticast mode [ 1405.565390][ T5725] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1405.577662][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.587835][ T5725] usb 3-1: Product: syz [ 1405.592306][ T5725] usb 3-1: Manufacturer: syz [ 1405.597607][ T5725] usb 3-1: SerialNumber: syz [ 1406.053999][T25392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.073219][T25392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.111798][T25392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.128456][T25392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.152556][T25392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.172949][T25390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.182192][T25392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.195633][T25390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.919449][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5409'. [ 1407.024565][T25399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.040946][T25399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.429526][T14246] usbhid 1-1:0.0: can't add hid device: -71 [ 1407.440725][T14246] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1407.465833][T14246] usb 1-1: USB disconnect, device number 126 [ 1407.783834][T25410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1408.004177][ T5725] usb 3-1: 0:2 : does not exist [ 1408.087505][ T5725] usb 3-1: USB disconnect, device number 8 [ 1409.978277][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5417'. [ 1410.025673][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5417'. [ 1410.496633][ T5762] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1410.660159][ T5762] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1410.682739][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.721728][ T5762] usb 5-1: Product: syz [ 1410.737951][ T5762] usb 5-1: Manufacturer: syz [ 1410.742709][ T5762] usb 5-1: SerialNumber: syz [ 1410.800449][T25447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1410.824211][T25450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1410.851595][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1411.157686][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1411.170317][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1411.276166][ T24] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 1411.309154][T25462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.319080][ T5725] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1411.337053][T25462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.452265][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1411.470899][ T24] usb 3-1: config 0 has no interface number 0 [ 1411.477308][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 1411.490953][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1411.503074][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1411.521587][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.534837][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1411.551196][ T5725] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1411.561108][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1411.573206][ T5725] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 56, using maximum allowed: 30 [ 1411.592408][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1411.605922][ T5725] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 1411.622112][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1411.641257][ T5725] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1411.652084][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1411.668419][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.683856][ T5725] usb 1-1: Product: syz [ 1411.690279][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1411.700252][ T5725] usb 1-1: Manufacturer: syz [ 1411.705286][ T5725] usb 1-1: SerialNumber: syz [ 1411.711088][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.764419][ T24] usb 3-1: config 0 descriptor?? [ 1411.787360][T25456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1411.811360][T25456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1411.848628][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1412.426483][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1413.509328][T25442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.538350][T25442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.607768][T25442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.638016][T25442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.877576][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 1413.930179][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1413.955121][T16653] usb 3-1: USB disconnect, device number 9 [ 1413.985320][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1414.003811][T16653] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1414.028898][ T5762] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1414.074087][ T5762] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1414.113766][ T5725] usb 1-1: 0:2 : does not exist [ 1414.173963][ T5762] usb 5-1: USB disconnect, device number 112 [ 1414.180462][T25478] FAULT_INJECTION: forcing a failure. [ 1414.180462][T25478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.252889][T25478] CPU: 0 UID: 0 PID: 25478 Comm: syz.5.5430 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.252923][T25478] Tainted: [L]=SOFTLOCKUP [ 1414.252930][T25478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1414.252943][T25478] Call Trace: [ 1414.252952][T25478] [ 1414.252961][T25478] dump_stack_lvl+0xe8/0x150 [ 1414.252988][T25478] should_fail_ex+0x412/0x560 [ 1414.253013][T25478] _copy_from_user+0x2d/0xb0 [ 1414.253037][T25478] ia32_restore_sigcontext+0xf2/0x560 [ 1414.253058][T25478] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 1414.253090][T25478] ? _raw_spin_unlock_irq+0x23/0x50 [ 1414.253114][T25478] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 1414.253132][T25478] ? __task_pid_nr_ns+0x28/0x470 [ 1414.253156][T25478] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 1414.253182][T25478] ? asm_int80_emulation+0x1a/0x20 [ 1414.253206][T25478] do_int80_emulation+0x181/0x530 [ 1414.253231][T25478] ? asm_int80_emulation+0x1a/0x20 [ 1414.253248][T25478] ? clear_bhb_loop+0x40/0x90 [ 1414.253276][T25478] ? clear_bhb_loop+0x40/0x90 [ 1414.253299][T25478] asm_int80_emulation+0x1a/0x20 [ 1414.253317][T25478] RIP: 0023:0xf702f047 [ 1414.253335][T25478] Code: 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 <0f> 0b 62 e7 ff ff 68 01 00 00 82 02 00 00 05 05 54 e7 ff ff 5f 01 [ 1414.253352][T25478] RSP: 002b:00000000f53fbfc0 EFLAGS: 00000282 ORIG_RAX: 00000000000000ad [ 1414.253372][T25478] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fc04c [ 1414.253385][T25478] RDX: 00000000f53fbfcc RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.253396][T25478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.253408][T25478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1414.253419][T25478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.253447][T25478] [ 1414.287804][ T5725] usb 1-1: USB disconnect, device number 127 [ 1414.730095][T25474] udevd[25474]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1414.863399][T25492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1415.237042][ T5762] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1415.419446][T25494] netlink: 'syz.4.5433': attribute type 1 has an invalid length. [ 1415.474903][T25508] FAULT_INJECTION: forcing a failure. [ 1415.474903][T25508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.508599][T25507] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1415.536931][T25503] loop5: detected capacity change from 0 to 7 [ 1415.547381][T25508] CPU: 1 UID: 0 PID: 25508 Comm: syz.4.5433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.547414][T25508] Tainted: [L]=SOFTLOCKUP [ 1415.547421][T25508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1415.547434][T25508] Call Trace: [ 1415.547442][T25508] [ 1415.547451][T25508] dump_stack_lvl+0xe8/0x150 [ 1415.547478][T25508] should_fail_ex+0x412/0x560 [ 1415.547513][T25508] _copy_from_iter+0x1d3/0x1670 [ 1415.547539][T25508] ? rcu_is_watching+0x15/0xb0 [ 1415.547568][T25508] ? __pfx__copy_from_iter+0x10/0x10 [ 1415.547599][T25508] ? netlink_sendmsg+0x650/0xb40 [ 1415.547623][T25508] ? skb_put+0x11b/0x210 [ 1415.547649][T25508] netlink_sendmsg+0x6c0/0xb40 [ 1415.547679][T25508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.547707][T25508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1415.547738][T25508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1415.547767][T25508] ____sys_sendmsg+0x972/0x9f0 [ 1415.547800][T25508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1415.547828][T25508] ? kstrtoull+0x12f/0x1d0 [ 1415.547855][T25508] ___sys_sendmsg+0x2a5/0x360 [ 1415.547880][T25508] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.547903][T25508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1415.547949][T25508] ? get_pid_task+0x20/0x1f0 [ 1415.547972][T25508] ? get_pid_task+0x20/0x1f0 [ 1415.547993][T25508] ? get_pid_task+0x20/0x1f0 [ 1415.548038][T25508] ? __fget_files+0x2a/0x420 [ 1415.548059][T25508] ? __fget_files+0x3a0/0x420 [ 1415.548098][T25508] __sys_sendmsg+0x183/0x260 [ 1415.548126][T25508] ? __pfx___sys_sendmsg+0x10/0x10 [ 1415.548171][T25508] __do_fast_syscall_32+0x229/0x6e0 [ 1415.548197][T25508] ? do_fast_syscall_32+0x33/0x70 [ 1415.548219][T25508] ? lockdep_hardirqs_on+0x7a/0x110 [ 1415.548242][T25508] ? asm_int80_emulation+0x1a/0x20 [ 1415.548260][T25508] ? do_int80_emulation+0x286/0x530 [ 1415.548283][T25508] ? trace_irq_disable+0x3b/0x140 [ 1415.548309][T25508] do_fast_syscall_32+0x33/0x70 [ 1415.548333][T25508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.548357][T25508] RIP: 0023:0xf7f9401c [ 1415.548375][T25508] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1415.548391][T25508] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1415.548411][T25508] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 1415.548425][T25508] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.548437][T25508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.548447][T25508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1415.548458][T25508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.548482][T25508] [ 1415.580051][T25503] Dev loop5: unable to read RDB block 7 [ 1415.838498][T25503] loop5: AHDI p1 [ 1415.839277][T25519] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1415.842394][ T5762] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1415.861290][T25503] loop5: partition table partially beyond EOD, truncated [ 1415.868619][ T5762] usb 5-1: no configurations [ 1415.873293][ T5762] usb 5-1: can't read configurations, error -22 [ 1416.016092][T14246] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1416.176612][T14246] usb 3-1: Using ep0 maxpacket: 16 [ 1416.189655][T14246] usb 3-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 1416.210723][T14246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.254383][T14246] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1416.279983][T14246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.319105][T25529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.327776][T14246] usb 3-1: Product: syz [ 1416.333374][T14246] usb 3-1: Manufacturer: syz [ 1416.339924][T14246] usb 3-1: SerialNumber: syz [ 1416.351908][T25529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.363065][T25526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.378978][T14246] usb 3-1: 0:2 : does not exist [ 1416.392972][T25526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.414212][T25529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.428558][T25529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.448805][T25529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.462277][T25529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.644830][T25534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1416.790413][T25515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.815134][T25515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.838609][T25515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.858127][T25515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.909177][T14246] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1416.981800][T14246] usb 3-1: USB disconnect, device number 10 [ 1417.039852][T25474] udevd[25474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1417.139674][T25539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1417.158154][T25539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1417.325280][T25541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.335296][T25541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.348413][T25543] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5449'. [ 1417.413588][T25543] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5449'. [ 1417.427420][T25543] program syz.4.5449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1417.528263][T25545] fuse: Bad value for 'group_id' [ 1417.552859][T25545] fuse: Bad value for 'group_id' [ 1417.579596][ T29] audit: type=1326 audit(1777919340.422:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25544 comm="syz.4.5450" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1417.624744][ T29] audit: type=1326 audit(1777919340.422:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25544 comm="syz.4.5450" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1417.674372][ T29] audit: type=1326 audit(1777919340.442:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25544 comm="syz.4.5450" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f9401c code=0x7ffc0000 [ 1417.862953][T25554] loop8: detected capacity change from 0 to 4096 [ 1418.080436][T25561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.094964][T25561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.131184][T25561] netlink: 'syz.5.5455': attribute type 2 has an invalid length. [ 1418.248509][T25563] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1418.771284][T25571] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1418.811507][T25574] syz_tun: left promiscuous mode [ 1418.827496][T25574] syz_tun: left allmulticast mode [ 1418.879981][T25574] team0: Port device syz_tun added [ 1418.916952][T25574] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1419.429566][T25580] loop8: detected capacity change from 0 to 4096 [ 1419.588761][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5461'. [ 1419.763397][T25586] program syz.2.5462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1420.220606][T25601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5466'. [ 1420.268044][ T5762] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1420.336322][T16653] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 1420.426114][ T5762] usb 1-1: Using ep0 maxpacket: 16 [ 1420.435766][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.456567][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.469741][ T5762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1420.485670][ T5762] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1420.510837][T16653] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1420.525446][T16653] usb 3-1: config 0 has no interface number 0 [ 1420.535330][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.544846][T16653] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1420.563171][ T5762] usb 1-1: config 0 descriptor?? [ 1420.569146][T16653] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1420.593195][T16653] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1420.607636][T16653] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1420.620080][T16653] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1420.632467][T16653] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1420.651056][T16653] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1420.664755][T16653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.690778][T16653] usb 3-1: config 0 descriptor?? [ 1420.705422][T25595] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1420.715741][T25595] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1420.739518][T16653] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1420.862202][T25609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.913913][T25609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.993113][T25608] syzkaller0: entered promiscuous mode [ 1420.998275][T25599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.017017][T25599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.035242][T25608] syzkaller0: entered allmulticast mode [ 1421.067301][T25613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1421.120284][ T5762] usbhid 1-1:0.0: can't add hid device: -71 [ 1421.136248][ T5762] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1421.182372][ T5762] usb 1-1: USB disconnect, device number 2 [ 1421.197998][T25616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1421.234069][T25595] ldusb 3-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1421.292229][T25617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.321312][T25617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.970222][ T29] audit: type=1326 audit(1777919344.812:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25620 comm="syz.0.5476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703f01c code=0x0 [ 1422.306716][ T50] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1422.589132][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.601492][ T50] usb 1-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1422.618506][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.649541][ T50] usb 1-1: config 0 descriptor?? [ 1423.124074][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.130851][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.994143][T16653] usb 3-1: USB disconnect, device number 11 [ 1424.073331][T16653] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1424.524926][ T10] IPVS: starting estimator thread 0... [ 1424.659138][T25651] IPVS: using max 54 ests per chain, 129600 per kthread [ 1428.148634][ T50] usbhid 1-1:0.0: can't add hid device: -32 [ 1428.154720][ T50] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1428.329842][ T5762] usb 1-1: USB disconnect, device number 3 [ 1428.370287][T25637] syzkaller0: entered promiscuous mode [ 1428.387540][T25637] syzkaller0: entered allmulticast mode [ 1433.058403][T25685] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1433.098777][T25685] bond14: (slave lo): Enslaving as an active interface with an up link [ 1433.116407][T25685] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1433.466532][T25712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.490915][T25712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.866928][ T50] usb 5-1: new low-speed USB device number 115 using dummy_hcd [ 1434.042087][ T50] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1434.058717][ T50] usb 5-1: config 0 has no interface number 0 [ 1434.087768][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1434.132532][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1434.160831][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1434.191007][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1434.215111][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1434.238769][ T50] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1434.254450][ T24] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 1434.273933][ T50] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1434.293543][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.308390][ T50] usb 5-1: config 0 descriptor?? [ 1434.311872][T25725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5495'. [ 1434.343016][T25714] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1434.361041][T25725] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5495'. [ 1434.371530][T25714] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1434.428551][ T50] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1434.450993][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1434.476691][ T24] usb 1-1: config 0 has no interface number 0 [ 1434.484407][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1434.501129][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1434.513134][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1434.529218][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1434.551029][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1434.565853][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1434.586009][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1434.598106][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.610683][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5496'. [ 1434.622901][ T24] usb 1-1: config 0 descriptor?? [ 1434.659287][T25719] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1434.686057][T25728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5496'. [ 1434.690001][T25719] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1434.697997][T16653] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1434.724168][ T24] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1434.864688][T25707] ldusb 5-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1434.886805][T16653] usb 3-1: Using ep0 maxpacket: 32 [ 1434.926895][T16653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1434.940368][T16653] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.957790][T16653] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1434.984697][T16653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.019180][T16653] usb 3-1: Product: syz [ 1435.038255][T16653] usb 3-1: Manufacturer: syz [ 1435.053402][T16653] usb 3-1: SerialNumber: syz [ 1435.308815][T16653] usb 3-1: Limiting number of CPorts to U8_MAX [ 1435.340823][T25732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.357903][T25732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.376369][T16653] usb 3-1: Not enough endpoints found in device, aborting! [ 1435.697932][T25734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.722944][T25734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.439911][T16653] usb 5-1: USB disconnect, device number 115 [ 1436.496170][T16653] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1436.920533][ T29] audit: type=1326 audit(1777919359.762:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.4.5501" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f9401c code=0x0 [ 1437.018561][T16653] usb 1-1: USB disconnect, device number 4 [ 1437.045121][T16653] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 1437.346569][ T5725] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1437.364476][T16653] usb 3-1: USB disconnect, device number 12 [ 1437.522144][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.545374][ T5725] usb 5-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 1437.569763][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.603078][ T5725] usb 5-1: config 0 descriptor?? [ 1437.856085][T16653] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1438.028426][T16653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1438.042959][T16653] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1438.059595][T16653] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1438.073029][T16653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.140961][T16653] usb 3-1: config 0 descriptor?? [ 1438.170160][T25749] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1438.399221][T25749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.437560][T25749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.755088][T16653] usbhid 3-1:0.0: can't add hid device: -71 [ 1438.780540][T16653] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1438.805610][T16653] usb 3-1: USB disconnect, device number 13 [ 1439.051356][T25769] loop8: detected capacity change from 0 to 4096 [ 1439.433409][T25770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.481972][T25770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.634646][T25779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.645821][T25779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.746909][ T50] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1439.765994][T16653] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1439.897556][ T5725] usbhid 5-1:0.0: can't add hid device: -71 [ 1439.912632][ T50] usb 1-1: Using ep0 maxpacket: 8 [ 1439.927783][ T5725] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1439.929414][T16653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1439.950096][T16653] usb 3-1: not running at top speed; connect to a high speed hub [ 1439.959227][ T50] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1439.989747][ T5725] usb 5-1: USB disconnect, device number 116 [ 1439.990068][T16653] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1440.041375][T16653] usb 3-1: can't read configurations, error -61 [ 1440.071679][ T50] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.100837][ T50] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1440.121906][ T50] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1440.145067][ T50] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1440.168798][ T50] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1440.187507][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.210326][ T50] usb 1-1: Product: syz [ 1440.214703][ T50] usb 1-1: Manufacturer: syz [ 1440.220372][ T50] usb 1-1: SerialNumber: syz [ 1440.246591][T16653] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1440.354189][T25784] fuse: Bad value for 'user_id' [ 1440.364986][T25783] syzkaller0: entered promiscuous mode [ 1440.387928][T25783] syzkaller0: entered allmulticast mode [ 1440.402899][T25784] fuse: Bad value for 'user_id' [ 1440.438606][T16653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1440.451790][T16653] usb 3-1: not running at top speed; connect to a high speed hub [ 1440.473088][T16653] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1440.488766][T16653] usb 3-1: can't read configurations, error -61 [ 1440.506403][T16653] usb usb3-port1: attempt power cycle [ 1440.835982][ T5725] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1440.857622][T16653] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1440.890039][T16653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1440.904114][T16653] usb 3-1: not running at top speed; connect to a high speed hub [ 1440.921619][T16653] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1440.935052][T16653] usb 3-1: can't read configurations, error -61 [ 1440.977682][ T5725] usb 5-1: device descriptor read/64, error -71 [ 1441.076139][T16653] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1441.109849][T16653] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1441.126211][T16653] usb 3-1: not running at top speed; connect to a high speed hub [ 1441.138285][T16653] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1441.152254][T16653] usb 3-1: can't read configurations, error -61 [ 1441.165734][T16653] usb usb3-port1: unable to enumerate USB device [ 1441.228191][ T5725] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1441.366515][ T5725] usb 5-1: device descriptor read/64, error -71 [ 1441.477127][ T5725] usb usb5-port1: attempt power cycle [ 1441.826946][ T5725] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1441.847895][ T5725] usb 5-1: device descriptor read/8, error -71 [ 1442.086351][ T5725] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1442.108459][ T5725] usb 5-1: device descriptor read/8, error -71 [ 1442.218904][ T5725] usb usb5-port1: unable to enumerate USB device [ 1442.431444][ T50] usb 1-1: 0:2 : does not exist [ 1442.512007][ T50] usb 1-1: USB disconnect, device number 5 [ 1442.691350][ T29] audit: type=1326 audit(1777919365.532:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25789 comm="syz.2.5515" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1442.719068][ T29] audit: type=1326 audit(1777919365.562:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25789 comm="syz.2.5515" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1442.752843][ T29] audit: type=1326 audit(1777919365.562:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25789 comm="syz.2.5515" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f5401c code=0x7ffc0000 [ 1442.906951][ T50] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1442.944581][T25794] syzkaller0: entered promiscuous mode [ 1442.950349][T25794] syzkaller0: entered allmulticast mode [ 1443.059346][T25796] IPVS: set_ctl: invalid protocol: 119 100.1.1.1:20000 [ 1443.068569][ T50] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1443.082202][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.100332][ T50] usb 1-1: Product: syz [ 1443.110145][ T50] usb 1-1: Manufacturer: syz [ 1443.119509][ T50] usb 1-1: SerialNumber: syz [ 1443.322381][T25799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.341877][T25799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.643620][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1443.656885][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1445.009702][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1446.159076][T25787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.188539][T25787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.220821][T25787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.231606][T25787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.472052][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 1446.501274][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1446.513717][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1446.540630][ T50] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1446.584501][ T50] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1446.598824][ T50] usb 1-1: USB disconnect, device number 6 [ 1447.575202][T25825] fuse: Bad value for 'fd' [ 1447.813079][ T29] audit: type=1326 audit(1777919370.622:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1447.861570][ T29] audit: type=1326 audit(1777919370.622:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1447.961532][ T29] audit: type=1326 audit(1777919370.622:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.002655][ T29] audit: type=1326 audit(1777919370.622:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.036559][ T29] audit: type=1326 audit(1777919370.622:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.064186][ T29] audit: type=1326 audit(1777919370.622:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.090508][ T29] audit: type=1326 audit(1777919370.622:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.127141][ T29] audit: type=1326 audit(1777919370.642:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.204897][ T29] audit: type=1326 audit(1777919370.642:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.278330][ T29] audit: type=1326 audit(1777919370.652:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25815 comm="syz.0.5523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 1448.942805][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5525'. [ 1453.511901][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.524334][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.590480][T25860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.609194][T25860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.726978][ T5725] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1453.897635][ T5725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 1453.910744][ T5725] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1453.924738][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1453.931890][ T5725] usb 3-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 1453.941919][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.953284][ T5725] usb 3-1: config 0 descriptor?? [ 1454.411895][ T5725] hid_parser_main: 7 callbacks suppressed [ 1454.411917][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.432108][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.439749][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.448040][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.475599][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.506884][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.522648][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.537145][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.540807][T25888] random: crng reseeded on system resumption [ 1454.555166][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.574127][ T5725] ortek 0003:05A4:1700.0087: unknown main item tag 0x0 [ 1454.599911][ T5725] ortek 0003:05A4:1700.0087: hidraw0: USB HID v0.81 Device [HID 05a4:1700] on usb-dummy_hcd.2-1/input0 [ 1454.646635][ T5725] usb 3-1: USB disconnect, device number 18 [ 1454.764520][T25893] fido_id[25893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1456.295341][T25945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.334794][T25945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.411507][T25949] sit0: left allmulticast mode [ 1456.436354][T25949] netlink: 'syz.5.5569': attribute type 1 has an invalid length. [ 1456.458963][T25949] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5569'. [ 1456.577717][T25954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.605784][T25954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.989718][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1456.996446][ T5762] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1457.194927][ T5762] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1457.204029][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.234089][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1457.246792][ T5762] usb 1-1: config 1 has no interface number 0 [ 1457.262616][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5578'. [ 1457.270328][ T5762] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1457.282748][ T5762] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1457.317759][ T5762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1457.330014][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.336460][ T50] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1457.359651][ T5762] usb 1-1: Product: syz [ 1457.364175][ T5762] usb 1-1: Manufacturer: syz [ 1457.370093][ T5762] usb 1-1: SerialNumber: syz [ 1457.399565][ T5762] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1457.407142][ T5762] cdc_ncm 1-1:1.1: bind() failure [ 1457.529575][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.545939][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.580516][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1457.623227][ T5725] usb 1-1: USB disconnect, device number 7 [ 1457.630320][ T50] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1457.650127][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.672896][ T50] usb 3-1: config 0 descriptor?? [ 1457.819890][T25979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5581'. [ 1458.169119][ T50] plantronics 0003:047F:FFFF.0088: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1458.517374][ T50] usb 3-1: USB disconnect, device number 19 [ 1458.518963][T25966] usb 3-1: string descriptor 0 read error: -19 [ 1460.835982][ T50] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1461.006590][T14246] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1461.024107][ T50] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1461.045477][ T50] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.057139][ T50] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1461.066888][ T50] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 1461.079053][ T50] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1461.089851][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.098074][ T50] usb 3-1: Product: syz [ 1461.102401][ T50] usb 3-1: Manufacturer: syz [ 1461.107266][ T50] usb 3-1: SerialNumber: syz [ 1461.188056][T14246] usb 1-1: Using ep0 maxpacket: 16 [ 1461.227102][T14246] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1461.251331][T14246] usb 1-1: config 0 has no interface number 0 [ 1461.258944][T14246] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1461.285690][T14246] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1461.361503][T14246] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1461.372890][T14246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.401982][T14246] usb 1-1: Product: syz [ 1461.416193][T14246] usb 1-1: Manufacturer: syz [ 1461.425455][T14246] usb 1-1: SerialNumber: syz [ 1461.454516][ T50] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1461.465818][T14246] usb 1-1: config 0 descriptor?? [ 1461.479206][ T50] usb 3-1: USB disconnect, device number 20 [ 1461.494066][T26011] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1461.512225][T26011] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1461.568523][T25723] udevd[25723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1461.732568][T26011] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1461.742018][T26011] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1461.979721][T14246] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1462.033948][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1462.806585][T26024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1462.815777][T26024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1462.828180][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1462.912322][T25975] batadv_slave_0: entered promiscuous mode [ 1462.973999][T25976] batadv_slave_0: left promiscuous mode [ 1463.156003][ T5762] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1463.256043][T11665] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1463.311049][T26039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.317961][ T5762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.326608][T26039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.331726][ T5762] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1463.350513][ T5762] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1463.359918][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1463.370460][ T5762] usb 3-1: SerialNumber: syz [ 1463.426753][T14246] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1463.429762][T11665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.438603][T14246] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1463.455483][T11665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.471172][T14246] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1463.480435][T11665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1463.484480][T14246] usb 1-1: USB disconnect, device number 8 [ 1463.494547][T11665] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1463.511661][T11665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.528196][T11665] usb 5-1: config 0 descriptor?? [ 1463.597801][ T5762] usb 3-1: 0:2 : does not exist [ 1463.602826][ T5762] usb 3-1: unit 48 not found! [ 1463.642857][ T5762] usb 3-1: USB disconnect, device number 21 [ 1463.673722][T25723] udevd[25723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1463.944857][T11665] hid_parser_main: 38 callbacks suppressed [ 1463.944879][T11665] steelseries 0003:1038:1410.0089: unknown main item tag 0x0 [ 1463.966196][T11665] steelseries 0003:1038:1410.0089: unknown main item tag 0x0 [ 1463.976069][T11665] steelseries 0003:1038:1410.0089: unknown main item tag 0x0 [ 1463.996126][T11665] steelseries 0003:1038:1410.0089: unknown main item tag 0x0 [ 1464.004310][T11665] steelseries 0003:1038:1410.0089: not enough fields in HID_OUTPUT_REPORT 0 [ 1464.182979][T14246] usb 5-1: USB disconnect, device number 121 [ 1464.654911][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.670583][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.026070][T11665] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1465.074352][T26079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.083169][T26079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.186794][T11665] usb 5-1: Using ep0 maxpacket: 16 [ 1465.193527][T11665] usb 5-1: config 1 has an invalid interface number: 225 but max is 2 [ 1465.201977][T11665] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.218912][T11665] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1465.228330][T11665] usb 5-1: config 1 has no interface number 0 [ 1465.238188][T11665] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1465.247543][T11665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.256241][T11665] usb 5-1: Product: syz [ 1465.260938][T11665] usb 5-1: Manufacturer: syz [ 1465.265806][T11665] usb 5-1: SerialNumber: syz [ 1465.287335][T11665] usb 5-1: 225:2 : does not exist [ 1465.295336][T11665] usb 5-1: unit 9 not found! [ 1465.343805][T26085] dummy0: entered allmulticast mode [ 1465.358406][T26085] dummy0: left allmulticast mode [ 1465.486774][T11665] usb 5-1: USB disconnect, device number 122 [ 1465.798410][ T5725] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 1465.839929][ T5725] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1466.227008][T11665] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1466.391360][T11665] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1466.401685][T11665] usb 3-1: not running at top speed; connect to a high speed hub [ 1466.412428][T11665] usb 3-1: config 2 has an invalid interface number: 52 but max is 0 [ 1466.421710][T11665] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.432444][T11665] usb 3-1: config 2 has no interface number 0 [ 1466.441457][T11665] usb 3-1: config 2 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1466.453561][T11665] usb 3-1: config 2 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1466.467030][T11665] usb 3-1: config 2 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1466.481624][T11665] usb 3-1: config 2 interface 52 has no altsetting 0 [ 1466.492122][T11665] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=d7.f8 [ 1466.501962][T11665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.510878][T11665] usb 3-1: Product: syz [ 1466.532366][T11665] usb 3-1: Manufacturer: syz [ 1466.537209][T16653] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1466.547948][T11665] usb 3-1: SerialNumber: syz [ 1466.698922][T16653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1466.720853][T16653] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1466.732537][T16653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1466.745055][T16653] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1466.760086][T16653] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1466.783304][T16653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.791818][T11665] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.52/input/input199 [ 1466.801803][T16653] usb 5-1: Product: syz [ 1466.811857][T16653] usb 5-1: Manufacturer: syz [ 1466.818892][T16653] usb 5-1: SerialNumber: syz [ 1466.828032][ T4978] bcm5974 3-1:2.52: could not read from device [ 1466.828295][T11665] usb 3-1: USB disconnect, device number 22 [ 1466.850844][T16653] usb 5-1: config 0 descriptor?? [ 1466.862948][ T4978] bcm5974 3-1:2.52: could not read from device [ 1466.865008][T16653] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1467.103368][T16653] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1467.296690][ T5725] usb 5-1: USB disconnect, device number 123 [ 1467.338931][T26128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.352161][T26128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.686219][T16653] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1467.835972][T16653] usb 1-1: Using ep0 maxpacket: 8 [ 1467.854899][T16653] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1467.872710][T16653] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.893098][T16653] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1467.922376][T16653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.935104][T26139] input: syz1 as /devices/virtual/input/input200 [ 1468.203083][T26152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.220780][T16653] usb 1-1: USB disconnect, device number 9 [ 1468.264469][T26152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.340488][T26157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5649'. [ 1468.353634][T26160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.362755][T26160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.536042][T11665] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1468.686001][T11665] usb 3-1: Using ep0 maxpacket: 16 [ 1468.703778][T11665] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1468.712265][T11665] usb 3-1: config 0 has no interface number 0 [ 1468.720115][T16653] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1468.727984][T11665] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1468.738846][T11665] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1468.752266][T11665] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1468.761876][T11665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.770107][T11665] usb 3-1: Product: syz [ 1468.774446][T11665] usb 3-1: Manufacturer: syz [ 1468.779275][T11665] usb 3-1: SerialNumber: syz [ 1468.788515][T11665] usb 3-1: config 0 descriptor?? [ 1468.801577][T26158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1468.820376][T26158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1468.896164][T16653] usb 1-1: Using ep0 maxpacket: 8 [ 1468.910404][T16653] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1468.926834][T16653] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.956103][T16653] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1468.971591][T16653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.045414][T26158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1469.071955][T26158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1469.297619][T11665] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1470.246627][T26184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.262353][T26184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.489125][ T5725] usb 1-1: USB disconnect, device number 10 [ 1470.677768][T16653] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1470.836091][T16653] usb 5-1: Using ep0 maxpacket: 8 [ 1470.852117][T16653] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1470.864380][T16653] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.875094][T16653] usb 5-1: config 0 has no interface number 0 [ 1470.884686][T16653] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1470.898180][T16653] usb 5-1: New USB device strings: Mfr=1, Product=232, SerialNumber=77 [ 1470.907316][T16653] usb 5-1: Product: syz [ 1470.911973][T11665] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1470.925556][T16653] usb 5-1: Manufacturer: syz [ 1470.931086][T11665] asix 3-1:0.34: probe with driver asix failed with error -71 [ 1470.939512][T16653] usb 5-1: SerialNumber: syz [ 1470.974917][T11665] usb 3-1: USB disconnect, device number 23 [ 1471.008116][T16653] usb 5-1: config 0 descriptor?? [ 1471.233987][T16653] uvcvideo 5-1:0.31: Found UVC 0.00 device syz (046d:08c3) [ 1471.259382][T16653] uvcvideo 5-1:0.31: No valid video chain found. [ 1471.281782][T16653] usb 5-1: USB disconnect, device number 124 [ 1471.675258][T26204] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1471.832909][T26207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.855031][T26207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.226061][ T5725] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1472.236428][T16653] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1472.388889][ T5725] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1472.398271][ T5725] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.406071][T16653] usb 5-1: Using ep0 maxpacket: 16 [ 1472.417704][T16653] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.423908][ T5725] usb 3-1: config 220 has no interface number 2 [ 1472.432364][T16653] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1472.434356][ T5725] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1472.458947][ T5725] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1472.460571][T16653] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1472.465793][ T5725] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1472.480806][T16653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.491524][T16653] usb 5-1: Product: syz [ 1472.496444][T16653] usb 5-1: Manufacturer: syz [ 1472.501332][ T5725] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1472.501337][T16653] usb 5-1: SerialNumber: syz [ 1472.503514][ T5725] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1472.533668][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.540834][T16653] usb 5-1: 0:2 : does not exist [ 1472.553112][ T5725] usb 3-1: Product: syz [ 1472.558120][ T5725] usb 3-1: Manufacturer: syz [ 1472.563206][ T5725] usb 3-1: SerialNumber: syz [ 1472.569875][T26222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.585747][T26222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.606444][T14246] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1472.744553][T16653] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1472.780818][T14246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.794716][T14246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.814370][T14246] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1472.832654][ T5725] usb 3-1: selecting invalid altsetting 0 [ 1472.836435][T16653] usb 5-1: USB disconnect, device number 125 [ 1472.848548][ T5725] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1472.864095][T14246] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1472.874452][ T5725] uvcvideo 3-1:220.0: No valid video chain found. [ 1472.881591][T14246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.900175][ T5725] usb 3-1: selecting invalid altsetting 0 [ 1472.912654][T14246] usb 1-1: config 0 descriptor?? [ 1472.918649][ T5725] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1472.950718][T25723] udevd[25723]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1472.956749][ T5725] usb 3-1: USB disconnect, device number 24 [ 1473.350800][T14246] plantronics 0003:047F:FFFF.008B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1473.854563][T26247] netlink: 'syz.1.5680': attribute type 10 has an invalid length. [ 1473.866073][T26247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5680'. [ 1473.878158][T26247] dummy0: entered promiscuous mode [ 1473.886740][T26247] bridge0: port 4(dummy0) entered blocking state [ 1473.893670][T26247] bridge0: port 4(dummy0) entered disabled state [ 1473.900962][T26247] dummy0: entered allmulticast mode [ 1474.006439][T14246] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1474.086529][T26251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.106948][T26251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.138866][T26253] netlink: 'syz.4.5683': attribute type 33 has an invalid length. [ 1474.178561][T14246] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1474.191724][T14246] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.228429][T14246] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1474.251849][T14246] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1474.263958][T14246] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1474.290163][T14246] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1474.301055][T14246] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1474.312859][T14246] usb 3-1: string descriptor 0 read error: -22 [ 1474.319804][T14246] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1474.331980][T14246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.360007][T14246] usb 3-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 1474.454773][T14246] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1474.546515][ T5725] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1474.719009][ T5725] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.747361][ T5725] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1474.773214][ T5725] usb 5-1: config 1 has no interface number 0 [ 1474.792306][ T5725] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.821761][ T5725] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1474.851918][ T5725] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.870214][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.894766][ T5725] usb 5-1: Product: syz [ 1474.907803][ T5725] usb 5-1: Manufacturer: syz [ 1474.924464][ T5725] usb 5-1: SerialNumber: syz [ 1475.123990][T11665] usb 3-1: USB disconnect, device number 25 [ 1475.269811][T26263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5687'. [ 1475.445409][T26268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.456523][T26268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.758908][ T5725] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 1475.779655][T16653] usb 1-1: USB disconnect, device number 11 [ 1475.790941][ T5725] cdc_ncm 5-1:1.1: bind() failure [ 1475.831479][T26279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.840597][ T5725] usb 5-1: USB disconnect, device number 126 [ 1475.905411][T26279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.920290][T26277] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1475.928312][T25764] IPVS: starting estimator thread 0... [ 1476.037209][T26282] IPVS: using max 54 ests per chain, 129600 per kthread [ 1476.147448][T14246] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1476.308655][T14246] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1476.320169][T14246] usb 3-1: config 0 has no interface number 0 [ 1476.337694][T14246] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1476.353876][T14246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.369031][T14246] usb 3-1: Product: syz [ 1476.374508][T14246] usb 3-1: Manufacturer: syz [ 1476.380814][T14246] usb 3-1: SerialNumber: syz [ 1476.397053][T14246] usb 3-1: config 0 descriptor?? [ 1476.555321][T26286] syzkaller0: entered promiscuous mode [ 1476.577946][T26286] syzkaller0: entered allmulticast mode [ 1476.658069][T14246] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1476.714618][T14246] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1476.754004][T14246] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1476.816004][T14246] usb 3-1: media controller created [ 1476.888130][T26281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5694'. [ 1476.927735][T14246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1476.981660][T26281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.002259][T26281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.060592][T14246] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1477.158768][T14246] usb 3-1: USB disconnect, device number 26 [ 1477.698836][T26299] ------------[ cut here ]------------ [ 1477.704545][T26299] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 1477.704570][T26299] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.0.5697/26299 [ 1477.724591][T26299] Modules linked in: [ 1477.729231][T26299] CPU: 1 UID: 0 PID: 26299 Comm: syz.0.5697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.740276][T26299] Tainted: [L]=SOFTLOCKUP [ 1477.744596][T26299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1477.755443][T26299] RIP: 0010:path_noexec+0x1af/0x200 [ 1477.761933][T26299] Code: 02 31 ff 48 89 de e8 e0 58 81 ff d1 eb eb 07 e8 f7 53 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 48 cf 66 09 cc e8 e2 53 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1477.782232][T26299] RSP: 0018:ffffc90004f87bb8 EFLAGS: 00010283 [ 1477.788986][T26299] RAX: ffffffff8244685e RBX: ffff888020352780 RCX: 0000000000080000 [ 1477.797536][T26299] RDX: ffffc90011b32000 RSI: 0000000000000063 RDI: 0000000000000064 [ 1477.805736][T26299] RBP: 0000000000080000 R08: ffff888030e28000 R09: 0000000000000003 [ 1477.813982][T26299] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 1477.822407][T26299] R13: 1ffff920009f0f8c R14: 0000000000000000 R15: dffffc0000000000 [ 1477.830866][T26299] FS: 0000000000000000(0000) GS:ffff888125390000(0063) knlGS:00000000f542db40 [ 1477.840137][T26299] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1477.847107][T26299] CR2: 000000000d3b350b CR3: 000000003c460000 CR4: 00000000003526f0 [ 1477.855097][T26299] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1477.863376][T26299] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1477.871889][T26299] Call Trace: [ 1477.875204][T26299] [ 1477.878444][T26299] do_mmap+0xa32/0x10c0 [ 1477.882635][T26299] ? __pfx_do_mmap+0x10/0x10 [ 1477.887781][T26299] ? down_write_killable+0x180/0x240 [ 1477.893231][T26299] ? __pfx_down_write_killable+0x10/0x10 [ 1477.899190][T26299] ? apparmor_mmap_file+0x2da/0x3e0 [ 1477.904701][T26299] vm_mmap_pgoff+0x2c9/0x4f0 [ 1477.909918][T26299] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1477.917199][T26299] ? __fget_files+0x2a/0x420 [ 1477.921807][T26299] ? __fget_files+0x2a/0x420 [ 1477.926778][T26299] ? __fget_files+0x2a/0x420 [ 1477.931375][T26299] ksys_mmap_pgoff+0x51e/0x760 [ 1477.936489][T26299] __do_fast_syscall_32+0x229/0x6e0 [ 1477.941707][T26299] ? do_fast_syscall_32+0x33/0x70 [ 1477.947291][T26299] ? irqentry_exit+0x10f/0x730 [ 1477.952087][T26299] ? trace_irq_disable+0x3b/0x140 [ 1477.957449][T26299] do_fast_syscall_32+0x33/0x70 [ 1477.962322][T26299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1477.968993][T26299] RIP: 0023:0xf703f01c [ 1477.973068][T26299] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1477.993007][T26299] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1478.001801][T26299] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 1478.010183][T26299] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000005 [ 1478.018386][T26299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1478.026720][T26299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1478.034692][T26299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1478.042974][T26299] [ 1478.046301][T26299] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1478.053589][T26299] CPU: 1 UID: 0 PID: 26299 Comm: syz.0.5697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1478.064522][T26299] Tainted: [L]=SOFTLOCKUP [ 1478.068838][T26299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1478.078889][T26299] Call Trace: [ 1478.082173][T26299] [ 1478.085095][T26299] vpanic+0x56c/0xa60 [ 1478.089085][T26299] ? __pfx__printk+0x10/0x10 [ 1478.093686][T26299] ? __pfx_vpanic+0x10/0x10 [ 1478.098194][T26299] ? is_bpf_text_address+0x292/0x2b0 [ 1478.103476][T26299] ? is_bpf_text_address+0x26/0x2b0 [ 1478.108681][T26299] panic+0xc5/0xd0 [ 1478.112406][T26299] ? __pfx_panic+0x10/0x10 [ 1478.116849][T26299] __warn+0x315/0x4c0 [ 1478.120825][T26299] ? path_noexec+0x1af/0x200 [ 1478.125512][T26299] ? path_noexec+0x1af/0x200 [ 1478.130110][T26299] __report_bug+0x29a/0x540 [ 1478.134641][T26299] ? path_noexec+0x1af/0x200 [ 1478.139230][T26299] ? __pfx___report_bug+0x10/0x10 [ 1478.144253][T26299] ? __pfx___schedule+0x10/0x10 [ 1478.149102][T26299] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 1478.155385][T26299] ? path_noexec+0x1af/0x200 [ 1478.159969][T26299] report_bug+0x16a/0x220 [ 1478.164297][T26299] ? path_noexec+0x1af/0x200 [ 1478.168882][T26299] ? path_noexec+0x1b1/0x200 [ 1478.173478][T26299] handle_bug+0x9c/0x200 [ 1478.177721][T26299] exc_invalid_op+0x1a/0x50 [ 1478.182219][T26299] asm_exc_invalid_op+0x1a/0x20 [ 1478.187054][T26299] RIP: 0010:path_noexec+0x1af/0x200 [ 1478.192242][T26299] Code: 02 31 ff 48 89 de e8 e0 58 81 ff d1 eb eb 07 e8 f7 53 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 48 cf 66 09 cc e8 e2 53 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1478.211849][T26299] RSP: 0018:ffffc90004f87bb8 EFLAGS: 00010283 [ 1478.217938][T26299] RAX: ffffffff8244685e RBX: ffff888020352780 RCX: 0000000000080000 [ 1478.226091][T26299] RDX: ffffc90011b32000 RSI: 0000000000000063 RDI: 0000000000000064 [ 1478.234070][T26299] RBP: 0000000000080000 R08: ffff888030e28000 R09: 0000000000000003 [ 1478.242038][T26299] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 1478.250005][T26299] R13: 1ffff920009f0f8c R14: 0000000000000000 R15: dffffc0000000000 [ 1478.257980][T26299] ? path_noexec+0x1ae/0x200 [ 1478.262574][T26299] ? path_noexec+0x1ae/0x200 [ 1478.267380][T26299] do_mmap+0xa32/0x10c0 [ 1478.271639][T26299] ? __pfx_do_mmap+0x10/0x10 [ 1478.276235][T26299] ? down_write_killable+0x180/0x240 [ 1478.281523][T26299] ? __pfx_down_write_killable+0x10/0x10 [ 1478.287144][T26299] ? apparmor_mmap_file+0x2da/0x3e0 [ 1478.292336][T26299] vm_mmap_pgoff+0x2c9/0x4f0 [ 1478.296919][T26299] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1478.302019][T26299] ? __fget_files+0x2a/0x420 [ 1478.306597][T26299] ? __fget_files+0x2a/0x420 [ 1478.311186][T26299] ? __fget_files+0x2a/0x420 [ 1478.315767][T26299] ksys_mmap_pgoff+0x51e/0x760 [ 1478.320527][T26299] __do_fast_syscall_32+0x229/0x6e0 [ 1478.325721][T26299] ? do_fast_syscall_32+0x33/0x70 [ 1478.330734][T26299] ? irqentry_exit+0x10f/0x730 [ 1478.335495][T26299] ? trace_irq_disable+0x3b/0x140 [ 1478.340513][T26299] do_fast_syscall_32+0x33/0x70 [ 1478.345532][T26299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1478.351847][T26299] RIP: 0023:0xf703f01c [ 1478.355904][T26299] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1478.375523][T26299] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1478.383970][T26299] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 1478.391938][T26299] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000005 [ 1478.399905][T26299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1478.407866][T26299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1478.415847][T26299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1478.423926][T26299] [ 1478.427457][T26299] Kernel Offset: disabled [ 1478.431786][T26299] Rebooting in 86400 seconds..