last executing test programs: 20m16.394538684s ago: executing program 2 (id=1827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044081}, 0x80) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/201, 0xc9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800006, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f00000003c0)={&(0x7f0000b6e000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1}) setuid(0xee01) 20m15.193497124s ago: executing program 2 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x4}]}]}]}, 0xa4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x684c0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x4c1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c810}, 0x40) syz_usb_connect$uac3(0x3, 0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090274000301d8100c080b0102012120020904000000010130000a2401100a0007000000090401"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x22, 0x200, 0x70bd2d, 0x25dfdbfd, {0x15}, [@typed={0x8, 0xd0, 0x0, 0x0, @uid=r3}, @generic="f0b07375d3b45ce4cb7e2966942998f508d3456f6f3b13959a2ab6593f4a1190ce02d285572ffc7a6307b7d7351775957a32bf90da5d78336ae521ce4c75f8b1ccba19526332e8cbb7d5a2120c8e9fc5258e8d5328472a6e214ad47246d0c3eef070ac9fd8e14c6926b0726efb920b698b71256d37a580395e645f822dc1db22", @generic="6b2e8d25777ab92cdf7639e6e3ed3e3fbf7aa22b1a7877dd167f44e2813ad2d80bcf916762bbe6c031b53064a0b32a2a58c16928d56d40d6ec9770cfe4cc38da017330a2ec6d49e9c561e6007d5aa8377323661f03c669862064ed8095cf52f08a8ed38bcdcbc225c50b0c3986d86705a95d1ede22026ab646ceff1ed6f81737362de1e9", @nested={0x28, 0x34, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x96}, @typed={0xc, 0x79, 0x0, 0x0, @u64=0xff}, @typed={0xc, 0x5, 0x0, 0x0, @u64}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 20m13.589650854s ago: executing program 2 (id=1837): unshare(0x2c020400) rseq(&(0x7f0000000d00), 0x20, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ed426d436179868323920a5adc54a31b3a64a11b7374298d6245e8c488f527db189552c04e929ebde52f12a666c99a8d8493c5dca674a46be2fb61d699aee7af", 0x39}, 0x48, r0) keyctl$read(0xb, r0, &(0x7f0000000140)=""/4, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) 20m13.445371897s ago: executing program 2 (id=1839): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x14081, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0x2042240, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x38) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r3, 0x5, 0x40, 0x1) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x40010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_submit(r5, 0x3, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0, 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x1, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x39a15cdefb419067, 0x3, r4, &(0x7f0000000180)="72c713666a57e4b46fd404c3b662d3c5ede02709c594475e1310b0b4d07d1da548543a9d3a8ccb9c1a44a4de96ded0fe149717e2a2bcb132aba1101d1210148cca9d71e3cab1e2ed21e6fc35382acada6c4b1307a5716b9cef71e6cb3145a0da6dd4519a81cd91ffc93b3cb12f6fa9d00dc0f793ef297387d97e73f98df25195a89ddf1e2904b576febf125604d5f5c4a55d23876a9521965d0e6ce164c10e65684c145199776a4c28fe3d8cad3031533f3303f1400158f9c59128a8a6414b228ad2fa56938a603d5d54a02f1d7dfea65413bdf9a81f3f77dcf96110faa6e9facde4008edfa55fbe", 0xe8, 0x7fff, 0x0, 0x0, r4}]) syz_clone3(0x0, 0x0) 20m12.973758672s ago: executing program 2 (id=1840): setgroups(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x3, 0xfffff008}, {0x6, 0x0, 0xff, 0x9a85}]}, 0x10) 20m11.094099937s ago: executing program 2 (id=1846): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x800000000000209, &(0x7f00002b2000/0x3000)=nil, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x7, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) listen(r0, 0x7f) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x10000}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xff7ffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffef, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newtfilter={0xfffffffffffffd83, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) pidfd_send_signal(r10, 0x8, &(0x7f0000000240)={0x8, 0x727a, 0x5}, 0x0) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r11, 0xc058534b, &(0x7f0000000080)={0x6, 0x83d3, 0xce9, 0x4, 0x5, 0x7ff}) ioctl$KVM_SET_ONE_REG(r12, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) 20m10.615449904s ago: executing program 32 (id=1846): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x800000000000209, &(0x7f00002b2000/0x3000)=nil, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x7, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) listen(r0, 0x7f) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x10000}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xff7ffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffef, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newtfilter={0xfffffffffffffd83, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) pidfd_send_signal(r10, 0x8, &(0x7f0000000240)={0x8, 0x727a, 0x5}, 0x0) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r11, 0xc058534b, &(0x7f0000000080)={0x6, 0x83d3, 0xce9, 0x4, 0x5, 0x7ff}) ioctl$KVM_SET_ONE_REG(r12, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) 12m25.204790232s ago: executing program 1 (id=3899): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fanotify_init(0x200, 0x40000) fanotify_mark(r4, 0x1, 0x1001, 0xffffffffffffffff, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x8, 0xffffffff}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d49380371400a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40e30}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 12m23.044238003s ago: executing program 1 (id=3906): symlink(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000040)='./file1\x00') execve(&(0x7f0000000080)='./file1/../file0\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x96, 0x5, 0xfb, 0x20, 0x8086, 0xb63, 0x8ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x40, 0x40, 0x4, "", [{{0x9, 0x4, 0x1e, 0x10, 0x1, 0x2d, 0xbe, 0x54, 0x7, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x25, 0x3}}]}}]}}]}}, 0x0) 12m19.91341836s ago: executing program 1 (id=3922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000980)=""/62, 0x3e}, {&(0x7f00000009c0)=""/102, 0x66}, {&(0x7f0000000a40)=""/39, 0x27}], 0x5, &(0x7f0000000b00)=""/76, 0x4c}, 0x9}], 0x1, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x9, 0x76a, 0x1c, "00ef02ffffe40000000000010100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@loopback, @in6=@private2, 0x33, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@loopback, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) unshare(0x6a040000) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 12m17.343050455s ago: executing program 1 (id=3928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x48402) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x90000019}) epoll_pwait(r4, &(0x7f0000001100)=[{}], 0x1, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r5, 0x5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a"], 0x4a) 12m16.200698013s ago: executing program 1 (id=3935): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffd17, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0xe0000000, 0x50426000, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1080, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) unshare(0xe060400) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) cachestat(r2, 0x0, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0xe7ff, 0x0, 0x34324241, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c9ccf310c80a01c305d40102030109021200010c0190060904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x258, 0x0, 0x80000006}]}) (async, rerun: 64) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x800009, 0x9, 0x3, 0x1041, 0x4, 0x0, 0x200000, 0x2000003, 0x2001040100000002, 0x49, 0x8, 0x800005, 0x6b], 0xd000, 0x101052}) (async, rerun: 64) ioctl$KVM_RUN(r1, 0xae80, 0x0) 12m15.375579728s ago: executing program 1 (id=3938): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c4, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff580}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4607}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fc}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2ed}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d1d3188}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1a1e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8201, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) chdir(&(0x7f0000000c80)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x3) 12m14.995906549s ago: executing program 33 (id=3938): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c4, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff580}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4607}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fc}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2ed}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d1d3188}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1a1e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8201, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) chdir(&(0x7f0000000c80)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x3) 4m4.233455616s ago: executing program 5 (id=5688): r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$inet(0x2, 0x6000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async, rerun: 64) read(r0, &(0x7f00000002c0)=""/151, 0x97) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) (async) mmap(&(0x7f0000b8d000/0x2000)=nil, 0x2000, 0x2800009, 0x13, r0, 0x4d8ea000) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000c67000/0x4000)=nil, 0x4000}}) 4m2.636878062s ago: executing program 5 (id=5696): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000300)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x2}) 4m0.258341261s ago: executing program 5 (id=5702): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0xf) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) unshare(0x200) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r2, 0xffffa000) socket$igmp(0x2, 0x3, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x1178}, 0x1, 0x0, 0x0, 0x40000}, 0x45) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0xfffffe7d, 0x2000c015, &(0x7f0000000540)={0xa, 0x4c21, 0xfffffff7, @mcast2}, 0x1c) sendfile(r6, 0xffffffffffffffff, 0x0, 0xd39a) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80140, 0xea757e1739bf98c7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x400440c5}, 0x24004090) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x80000000, 0x1000, 0x4, 0x3, 0x10005, 0x0, 0x0, 0x2, 0x0, 0x8000001, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x8001, 0xffffffffffffffff, 0x81, 0xffffffff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x2, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0xffffffffffffbffc, 0x8000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4, 0x3, 0x638b, 0x1, 0x0, 0x10000, 0x8, 0xfdfffffffffffffe, 0x0, 0xe68, 0x0, 0x1, 0x1, 0x20040000000, 0x1, 0x8, 0x80000000, 0xc20, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x4, 0x9, 0x4, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80, 0x4, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, 0x40000000002, 0x19e86239, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x9, 0x9, 0x0, 0x801075, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffffffc, 0x3, 0x7, 0xb, 0x20, 0x2006, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @loopback, 0x1}, 0x1c) 3m58.672922811s ago: executing program 5 (id=5708): userfaultfd(0x80001) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) shutdown(r2, 0x0) (async) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028006000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m58.389480143s ago: executing program 5 (id=5709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000406008000800000095000000000000dcce4e996140"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x2, 0xc000, 0x4, r5, r6, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x0, 0x7, 0x120000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r5, r6, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) keyctl$chown(0x4, r2, r5, r7) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x40, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x80, 0x700, 0xd, 0xc}}) sendmsg$inet(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="e59b9c818f7d708bbf9c55352bab43f06fef5e826b6190a566967c92b93342f8a1ef0f2317b619ed100d44cb7822fc3a99bd2f3c2671b2", 0x37}, {&(0x7f0000000600)="53dc8b98dbd3b8404128d5a5023b459dd44ea2fe8b29e46758e29d68381ec471342eceb8079c73dffa681206e0efa20742d07ade601162cd5b32e9a4e825b6f0949c20e8338ad150149887b64d8723ee55a14ba1d9e3ed6af44a4e84a5ef136845fe14e5efaa2480e97d605b57d6d78925a7ff48ff870b1b39ff093b5926b31e349441107fe623f828deb1d632753cf9b77e6efbb4ddbe02656961c79c468a6bbfb2f771375de7995796453f797da44e8a372731340667fa561d9f9edf750ac4d668eb5f228fa18005d3c4073452ebaf1f77d5614d7dddad62e0da4a372c4abf75ae861c113eff863d5a2fd88cae48ec", 0xf0}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x6d, 0xffffffffffffffff, [{0x2, 0xa, "a4fb89bb61797334"}, {0x88ac6be1eaf4a8a6, 0x9, "f24143d32c107b"}, {0x1, 0xe, "35978bafaac7017427031b65"}, {0x5, 0x8, "226dcc000831"}, {0x2, 0x4, '\'W'}, {0x7, 0x7, "5df53fa0de"}, {0x7, 0xb, "d69fe2a213a095b0c5"}, {0x0, 0x10, "aef92a8e779c4b25cec51b8b27c6"}, {0x0, 0x6, "39dd244f"}, {0x2, 0x12, "58665e529b41d4339f2fe852e72611b3"}]}, @lsrr={0x83, 0x2b, 0x90, [@multicast2, @multicast2, @empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010101, @loopback, @multicast1]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x6, [0x800, 0xe6, 0xffff]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x138}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x110, 0xffffffffffffffff, 0xec776000) r11 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r11, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 3m58.127211883s ago: executing program 5 (id=5710): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000006b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='I', 0x1}], 0x1}], 0x1, 0x20000001) read$alg(r2, &(0x7f0000000000)=""/12, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_clone(0x4008111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000003ece65fbcee5586dd600101cc5b241377d443e191edc383df0000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00030e220016907802"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8677aaa984c6ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15fa9b309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b045", 0x98}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008894}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 3m41.782018046s ago: executing program 34 (id=5710): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250a000000140002800800010022b3000008000200f05c00001800078008000200010000000c000400e2a600002f0000003400038008000300060000000800030033310000080002000e000000080001000700000008000100ab93000008000300090000004000048014000780080003000100000008000300050000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b0000727c9b4ab67338868ffe333870a9ee5ed8e1649a1923f0f26d2f132b2a6506b9d1af292d9eadd523ec55fbe7b7e747581470c5898a59ef9252a6f9799fcf0162485faaa62532d60154cddb22195a076fbfba8dc825330b04f7775442e32064643402e149c238a98e72ff8e4267a32e0e8ed3a8a9cfe5e29b3246412551f753b99f34a886d7d58732369886867ba6b0d06d42e367f4864c20349a11f7c39112172fb5a00850ff5c0d98631119ce2d0dd68f42a5cea17632910a5d4858631d82c628433a916f55cad5a29c69b3f852c9d1121a0ba51ae705dfce021f8d6405096408a6826150"], 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000006b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='I', 0x1}], 0x1}], 0x1, 0x20000001) read$alg(r2, &(0x7f0000000000)=""/12, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_clone(0x4008111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000003ece65fbcee5586dd600101cc5b241377d443e191edc383df0000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00030e220016907802"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8677aaa984c6ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15fa9b309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b045", 0x98}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008894}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 3.121919468s ago: executing program 7 (id=6903): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 2.153145705s ago: executing program 7 (id=6906): syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 1.977355858s ago: executing program 4 (id=6908): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002640), 0x43, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x3ff) 1.83917209s ago: executing program 4 (id=6910): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200030002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1.706095256s ago: executing program 4 (id=6912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000100)=0x5, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.465267487s ago: executing program 3 (id=6915): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.397443521s ago: executing program 3 (id=6917): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0xfffff000, 0x0, 0x2}) 1.397057201s ago: executing program 4 (id=6918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xffff, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1003, 0x10, 0x0, 0x4, 0x0, 0x8, 0xb], 0x0, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.169277946s ago: executing program 6 (id=6921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.0158094s ago: executing program 0 (id=6922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xda) 889.859889ms ago: executing program 4 (id=6923): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ed0bbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fff500000000"}}}}}}}, 0x0) 889.67189ms ago: executing program 0 (id=6924): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000005580)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) close(r0) 841.466194ms ago: executing program 6 (id=6925): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000e00)="832fa575f3f53abd97944443ab60e3adbaba37296ff4bc91", 0x18}], 0x1) 815.694488ms ago: executing program 7 (id=6926): io_setup(0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x20000400) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 809.467154ms ago: executing program 4 (id=6927): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000006800010000fd0000000000000200030004000000080006000100000008000500", @ANYRES32=r1, @ANYBLOB="96a5e346d68b98e74f0c3fda0ccd1d84896dfc83ef13df02d919740127655b0e7257060397b3025359c6f31b030642da3168e6eb39ece00bb244e5363919713c1d883a4828876cfb041ed2e5b32450ca9b8278a50fe68cfc6a07e4141463468b860300000006000000930ce3c35e1a2a97d2bccedb46a098e91fcda0b7b373e6b418613d06a89c85ddd5a5c150a29ae187d9c2ec8fd2dfe8438b00e3081ccf0fb871bbfc302e41364917f4f7ebf9f6adb4535c8a9ec010a25e60712aa28e4b"], 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 705.41133ms ago: executing program 6 (id=6928): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700008afaf2fc64", 0x18) 693.122222ms ago: executing program 0 (id=6929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 631.046168ms ago: executing program 6 (id=6930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x0, 0x8, 0x22, 0x3e, 0x9, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0x1000, 0x4000, 0xe, 0x1f, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x3}, {0x4000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xdddd1000, 0x8, 0x4b, 0x3, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x10}, {0xeeee8000, 0x1, 0x9, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x3000, 0xfffd}, 0xc0000025, 0x0, 0x0, 0x2024, 0x5, 0x0, 0x50000, [0x7, 0x9, 0x60, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 546.049477ms ago: executing program 7 (id=6931): r0 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0x2fcc, 0x4) 545.706846ms ago: executing program 3 (id=6932): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 419.950139ms ago: executing program 3 (id=6933): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48ad42c4cf742d6f, 0x0) 379.073374ms ago: executing program 7 (id=6934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3, 0x1}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e22, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 318.16997ms ago: executing program 0 (id=6935): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) 212.561755ms ago: executing program 3 (id=6936): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000100000000000208004500003a0000000040117cb17f0000017f00000112341388"], 0x48) 212.24309ms ago: executing program 6 (id=6937): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ed0bbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fff500000000"}}}}}}}, 0x0) 208.532127ms ago: executing program 7 (id=6938): socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) inotify_init() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 171.914823ms ago: executing program 0 (id=6939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@udp6, 0x1}, 0x20) 100.572808ms ago: executing program 0 (id=6940): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x0, 0x0, @multicast}, 0x14) 25.738959ms ago: executing program 3 (id=6941): close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000001c0)) r5 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x200, 0xf0, [0x6, 0x30000000]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) keyctl$session_to_parent(0x12) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, 0x0, 0x0) shutdown(r9, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="24240000224800001400030065727370616e3000000000000000000008001b000104"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 0s ago: executing program 6 (id=6942): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x9) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0x10001, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000140)="1c", 0x1}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) kernel console output (not intermixed with test programs): =0 [ 1634.339771][T20421] usb 8-1: config 0 descriptor?? [ 1634.773589][T20421] mcp2221 0003:04D8:00DD.0062: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1635.232648][T20421] usb 8-1: USB disconnect, device number 29 [ 1635.361354][T29413] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1635.611195][T29413] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1635.671173][T29413] usb 5-1: not running at top speed; connect to a high speed hub [ 1635.715093][T29413] usb 5-1: config 5 has an invalid interface number: 152 but max is 0 [ 1635.751995][T29413] usb 5-1: config 5 has no interface number 0 [ 1635.782866][T29413] usb 5-1: config 5 interface 152 has no altsetting 0 [ 1635.842638][T29413] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=f5.2e [ 1635.877026][T29413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.924543][T29413] usb 5-1: Product: syz [ 1635.947607][T29413] usb 5-1: Manufacturer: syz [ 1635.972529][T29413] usb 5-1: SerialNumber: syz [ 1636.222081][T30781] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1636.332750][T29413] as10x_usb: device has been detected [ 1636.377804][T29413] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1636.442898][T29413] usb 5-1: DVB: registering adapter 4 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1636.609537][T29413] as10x_usb: error during firmware upload part1 [ 1636.633601][T29413] Registered device Elgato EyeTV DTT Deluxe [ 1636.651627][T29413] usb 5-1: USB disconnect, device number 78 [ 1636.950110][T20421] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 1636.968274][T29413] Unregistered device Elgato EyeTV DTT Deluxe [ 1636.970385][T29413] as10x_usb: device has been disconnected [ 1637.142063][T20421] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1637.171203][T20421] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1637.209697][T20421] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1637.233772][T20421] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1637.265404][T20421] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1637.293258][T20421] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1637.321213][T20421] usb 8-1: string descriptor 0 read error: -22 [ 1637.337354][T20421] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1637.368776][T20421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.681910][T30799] fuse: Bad value for 'fd' [ 1637.692066][T30786] raw-gadget.1 gadget.3: failed to queue resume event [ 1637.822347][T30801] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1637.864045][T21611] raw-gadget.1 gadget.3: failed to queue suspend event [ 1637.886811][T28873] usb 8-1: USB disconnect, device number 30 [ 1638.005908][T30808] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1638.209943][T20421] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1638.421012][T20421] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1638.533340][T20421] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1638.621666][T20421] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1638.706939][T30818] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.723233][T30818] binder: 30817:30818 ioctl 4018620d 200000000100 returned -16 [ 1638.732983][T20421] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1638.758102][T30818] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.777473][T20421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.790241][T30818] binder: 30817:30818 ioctl 4018620d 200000004a80 returned -16 [ 1638.808379][T20421] usb 1-1: Product: syz [ 1638.832426][T20421] usb 1-1: Manufacturer: syz [ 1638.849231][T20421] usb 1-1: SerialNumber: syz [ 1639.086915][T30799] kvm: kvm [30798]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1639.129625][T30799] kvm: kvm [30798]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1639.307631][T20421] usb 1-1: Can't get UAC3 power state for id 10 [ 1639.345639][T20421] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1639.399141][T20421] usb 1-1: applying playback min mute quirk [ 1639.432169][T20421] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1639.465656][T20421] usb 1-1: applying playback min mute quirk [ 1639.490933][T20421] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1639.527490][T20421] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1639.726360][T20421] usb 1-1: USB disconnect, device number 38 [ 1639.927157][T28371] udevd[28371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1640.338842][T30845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6197'. [ 1640.349542][T30847] fuse: Unknown parameter '舽ð÷¤>½Ð‡ŒÓÜ”ÜÙÍíöÿãÄé~?è+rnR ¥6' [ 1640.392534][T30847] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.6198'. [ 1640.468381][T30847] ¾x9ÿ: left allmulticast mode [ 1640.490549][T30847] ¾x9ÿ: left promiscuous mode [ 1640.515324][T30847] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1640.556694][T30847] bridge_slave_1: left allmulticast mode [ 1640.574656][T30847] bridge_slave_1: left promiscuous mode [ 1640.595964][T30847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.684555][T30847] bond0: (slave bond_slave_0): Releasing backup interface [ 1640.757978][T30847] bond0: (slave bond_slave_1): Releasing backup interface [ 1640.808465][T30847] team0: Port device team_slave_0 removed [ 1640.877934][T30847] team0: Port device team_slave_1 removed [ 1640.915935][T30847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.953338][T30847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.002902][T30847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1641.714256][T30867] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6202'. [ 1642.452489][T30870] netlink: 'syz.7.6203': attribute type 10 has an invalid length. [ 1642.851241][T30878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.868594][T30878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.888411][T30878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.904813][T30878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.970161][T29413] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1643.129987][T29413] usb 8-1: Using ep0 maxpacket: 8 [ 1643.142418][T29413] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1643.161788][T29413] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1643.186265][T29413] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1643.216641][T29413] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1643.238684][T29413] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1643.260104][T29413] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1643.299692][T29413] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1643.325886][T29413] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.580858][T29413] usb 8-1: GET_CAPABILITIES returned 0 [ 1643.604622][T29413] usbtmc 8-1:16.0: can't read capabilities [ 1643.697539][T30882] loop3: detected capacity change from 0 to 7 [ 1643.716641][T30882] Dev loop3: unable to read RDB block 7 [ 1643.727882][T30882] loop3: unable to read partition table [ 1643.739726][T30882] loop3: partition table beyond EOD, truncated [ 1643.757044][T30882] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1643.860404][T30876] raw-gadget.1 gadget.3: failed to queue resume event [ 1644.051973][T30889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.087516][T30876] kAFS: unable to lookup cell 'ßñÏ(,c¾ûL' [ 1644.098093][T30889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.116586][T30884] fuse: blksize only supported for fuseblk [ 1644.141543][T30889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.169663][T30889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.343079][T30897] lo: entered allmulticast mode [ 1644.373547][T30889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1644.669784][T29413] usb 8-1: USB disconnect, device number 31 [ 1644.678359][T15785] raw-gadget.1 gadget.3: failed to queue suspend event [ 1645.045975][T30910] netlink: 'syz.7.6215': attribute type 1 has an invalid length. [ 1645.538199][T30920] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1645.689952][T29413] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1645.865969][T29413] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1645.879614][T29413] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1645.893692][T29413] usb 8-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1645.904411][T29413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.913475][T29413] usb 8-1: Product: syz [ 1645.918420][T29413] usb 8-1: Manufacturer: syz [ 1645.923335][T29413] usb 8-1: SerialNumber: syz [ 1646.178796][T30928] loop3: detected capacity change from 0 to 7 [ 1646.187547][T30928] Dev loop3: unable to read RDB block 7 [ 1646.194287][T30928] loop3: unable to read partition table [ 1646.200956][T30928] loop3: partition table beyond EOD, truncated [ 1646.218639][T30928] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1646.240311][T30931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6221'. [ 1646.328450][T29413] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1646.363693][T29413] usb 8-1: MIDIStreaming interface descriptor not found [ 1646.546407][T29413] usb 8-1: USB disconnect, device number 32 [ 1646.898354][T30941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1646.951869][ T1214] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1647.040049][T29214] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1647.110573][ T1214] usb 5-1: Using ep0 maxpacket: 8 [ 1647.122357][ T1214] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1647.133342][ T1214] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1647.155925][ T1214] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1647.179052][ T1214] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1647.195466][T29214] usb 1-1: Using ep0 maxpacket: 16 [ 1647.208112][T29214] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.218700][ T1214] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1647.232656][ T1214] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1647.254592][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.282814][T29214] usb 1-1: config 16 has no interfaces? [ 1647.307929][T29214] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1647.344509][T29214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.357382][T29214] usb 1-1: Product: syz [ 1647.362649][T29214] usb 1-1: Manufacturer: syz [ 1647.368407][T29214] usb 1-1: SerialNumber: syz [ 1647.475916][ T1214] usb 5-1: GET_CAPABILITIES returned 0 [ 1647.483440][ T1214] usbtmc 5-1:16.0: can't read capabilities [ 1647.597736][T30946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.614635][T30946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.720946][T30944] raw-gadget.1 gadget.3: failed to queue resume event [ 1647.732654][T29214] usb 1-1: USB disconnect, device number 39 [ 1647.876838][T18339] usb 5-1: USB disconnect, device number 79 [ 1647.907290][T21611] raw-gadget.1 gadget.3: failed to queue suspend event [ 1648.433739][T30962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.483129][T30962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.640023][T29413] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1648.800047][T30962] raw-gadget.1 gadget.3: failed to queue resume event [ 1648.809075][T29413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.827818][T29413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.892966][T29413] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1648.927624][T29413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.967098][T29413] usb 1-1: config 0 descriptor?? [ 1648.987562][T21609] raw-gadget.1 gadget.3: failed to queue suspend event [ 1649.192002][T30973] loop3: detected capacity change from 0 to 7 [ 1649.216636][T30973] Dev loop3: unable to read RDB block 7 [ 1649.232071][T30973] loop3: unable to read partition table [ 1649.248324][T30973] loop3: partition table beyond EOD, truncated [ 1649.261941][T30973] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1649.356098][T30975] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6234'. [ 1649.430637][T30977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1649.443059][T29413] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1649.457967][T29413] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1649.480819][T29413] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1649.503248][T29413] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1649.540864][T29413] playstation 0003:054C:0DF2.0063: unknown main item tag 0x0 [ 1649.565592][T29413] playstation 0003:054C:0DF2.0063: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1649.652495][T29413] playstation 0003:054C:0DF2.0063: Invalid byte count transferred, expected 20 got 0 [ 1649.700815][T29413] playstation 0003:054C:0DF2.0063: Failed to retrieve DualSense pairing info: -22 [ 1649.718186][T29413] playstation 0003:054C:0DF2.0063: Failed to get MAC address from DualSense [ 1649.757954][T29413] playstation 0003:054C:0DF2.0063: Failed to create dualsense. [ 1649.814289][T29413] playstation 0003:054C:0DF2.0063: probe with driver playstation failed with error -22 [ 1649.867379][T29413] usb 1-1: USB disconnect, device number 40 [ 1650.149315][ T30] audit: type=1400 audit(1786147604.071:3925): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=30992 comm="syz.7.6240" [ 1650.201382][T30994] fuse: Bad value for 'fd' [ 1650.476816][T31000] fuse: blksize only supported for fuseblk [ 1650.559973][T18339] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1650.722928][T18339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1650.740778][T18339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.752662][T18339] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1650.762673][T18339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.777669][T18339] usb 8-1: config 0 descriptor?? [ 1650.800009][T28873] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1650.978051][T28873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1650.995359][T28873] usb 1-1: not running at top speed; connect to a high speed hub [ 1651.017653][T28873] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1651.035963][T28873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.052206][T28873] usb 1-1: Product: syz [ 1651.059236][T28873] usb 1-1: Manufacturer: syz [ 1651.067182][T28873] usb 1-1: SerialNumber: syz [ 1651.213285][T18339] konepure 0003:1E7D:2DBE.0064: unknown main item tag 0x4 [ 1651.230425][T18339] konepure 0003:1E7D:2DBE.0064: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.7-1/input0 [ 1651.289333][T31003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.316137][T31003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.351646][T28873] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1651.359504][T28873] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1651.372787][T28873] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1651.417599][T29413] usb 8-1: USB disconnect, device number 33 [ 1651.483272][T28873] usb 1-1: USB disconnect, device number 41 [ 1651.618513][T29457] udevd[29457]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1651.940101][T18339] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1652.123270][T18339] usb 5-1: Using ep0 maxpacket: 16 [ 1652.135921][T18339] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1652.174526][T18339] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1652.207658][T18339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1652.235558][T18339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1652.277406][T18339] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1652.295125][T18339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.318346][T18339] usb 5-1: Product: syz [ 1652.337734][T18339] usb 5-1: Manufacturer: syz [ 1652.356375][T18339] usb 5-1: SerialNumber: syz [ 1652.374198][T18339] usb 5-1: config 0 descriptor?? [ 1652.396294][T18339] appledisplay 5-1:0.0: Could not find int-in endpoint [ 1652.415184][T18339] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1652.618679][T31006] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 1652.656793][T31026] program syz.6.6251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1652.874873][ T30] audit: type=1400 audit(1786147606.801:3926): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31029 comm="syz.3.6252" [ 1652.894341][T31030] fuse: Bad value for 'fd' [ 1653.077133][ T30] audit: type=1326 audit(1786147607.001:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.108934][ T30] audit: type=1326 audit(1786147607.001:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.149644][ T30] audit: type=1326 audit(1786147607.001:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.179979][ T30] audit: type=1326 audit(1786147607.001:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.205158][ T30] audit: type=1326 audit(1786147607.001:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.276134][ T30] audit: type=1326 audit(1786147607.021:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.390263][ T30] audit: type=1326 audit(1786147607.021:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850c19e0d9 code=0x7ffc0000 [ 1653.419324][ T30] audit: type=1326 audit(1786147607.031:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.6.6253" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f850c15e90e code=0x7ffc0000 [ 1653.464500][T31036] fuse: blksize only supported for fuseblk [ 1654.200168][T18339] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1654.369903][T18339] usb 8-1: Using ep0 maxpacket: 8 [ 1654.388635][T18339] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1654.405691][T18339] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1654.422147][T18339] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.444909][T18339] usb 8-1: config 4 has no interface number 0 [ 1654.463953][T18339] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1654.479145][T18339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.504466][T18339] usb 8-1: Product: syz [ 1654.517623][T18339] usb 8-1: Manufacturer: syz [ 1654.532969][T18339] usb 8-1: SerialNumber: syz [ 1654.724482][T28873] usb 5-1: USB disconnect, device number 80 [ 1654.782510][T18339] uvcvideo 8-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1654.799119][T18339] uvcvideo 8-1:4.147: No valid video chain found. [ 1654.826608][T18339] usb 8-1: USB disconnect, device number 34 [ 1655.010130][ T1214] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1655.173071][ T1214] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1655.208025][ T1214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.237862][ T1214] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1655.269137][ T1214] usb 1-1: string descriptor 0 read error: -22 [ 1655.277686][T31060] netlink: 'syz.4.6262': attribute type 23 has an invalid length. [ 1655.291666][ T1214] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1655.309648][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.353596][ T1214] usb 1-1: selecting invalid altsetting 1 [ 1655.380852][ T1214] usb 1-1: unit 6 not found! [ 1655.499565][T31066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.499663][T31064] fuse: Bad value for 'fd' [ 1655.512650][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1655.512667][ T30] audit: type=1400 audit(1786147609.421:3949): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31063 comm="syz.7.6264" [ 1655.562461][T31066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.936371][T31072] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6267'. [ 1656.219950][T18339] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1656.270619][T31079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.301295][T31079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.303209][T31078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.359403][ T1214] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1656.420766][T18339] usb 8-1: Using ep0 maxpacket: 8 [ 1656.434134][T31078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.461063][T18339] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1656.530173][T18339] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1656.567910][ T1214] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1656.618954][ T1214] usb 1-1: USB disconnect, device number 42 [ 1656.642293][T18339] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1656.693797][T18339] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1656.725370][T18339] usb 8-1: Manufacturer: syz [ 1656.738636][T18339] usb 8-1: SerialNumber: syz [ 1656.971702][T31071] xt_l2tp: v2 doesn't support IP mode [ 1657.022834][T18339] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1657.084074][T18339] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1657.132170][T18339] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1657.166605][T18339] usb 8-1: media controller created [ 1657.212165][T31093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.240347][T31093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.287185][T18339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1657.369388][T18339] zl10353_read_register: readreg error (reg=127, ret==0) [ 1657.462221][T18339] usb 8-1: USB disconnect, device number 35 [ 1657.910577][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1658.123549][T31102] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6277'. [ 1658.183939][T31102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.230792][T31102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.288586][T31102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6277'. [ 1658.424189][T31107] tipc: Started in network mode [ 1658.447151][T31107] tipc: Node identity ac14140f, cluster identity 4711 [ 1658.484547][T31107] tipc: New replicast peer: 172.30.0.8 [ 1658.508363][T31107] tipc: Enabled bearer , priority 10 [ 1658.535570][T31107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6279'. [ 1658.549479][T31107] tipc: Disabling bearer [ 1659.110424][T29412] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1659.306977][T29412] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 1659.331151][T29412] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 1659.388100][T29412] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1659.433199][T29412] usb 8-1: config 0 has no interface number 0 [ 1659.455660][T29412] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1659.505883][T29412] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 1659.570161][T29412] usb 8-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1659.643171][T29412] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1659.691322][T29412] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.740872][T29412] usb 8-1: config 0 descriptor?? [ 1659.801593][T31115] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1659.928126][T29412] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1659.950212][ T1214] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1659.968067][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.052250][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.166339][T31141] loop3: detected capacity change from 0 to 7 [ 1660.173048][ T1214] usb 5-1: Using ep0 maxpacket: 16 [ 1660.193449][T31141] Dev loop3: unable to read RDB block 7 [ 1660.220231][T31141] loop3: unable to read partition table [ 1660.234764][ T1214] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1660.252843][T31141] loop3: partition table beyond EOD, truncated [ 1660.274392][T31115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.284539][T31141] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1660.300306][ T1214] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1660.361585][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.405695][ T1214] usb 5-1: config 0 descriptor?? [ 1660.529212][T31115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.786113][ T1214] usbhid 5-1:0.0: can't add hid device: -71 [ 1660.815835][ T1214] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1660.876093][ T1214] usb 5-1: USB disconnect, device number 81 [ 1660.970803][T31147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1661.016380][T31148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6289'. [ 1661.062955][T21601] usb 8-1: Failed to submit usb control message: -110 [ 1661.090400][T21601] usb 8-1: unable to send the bmi data to the device: -110 [ 1661.132978][T21601] usb 8-1: unable to get target info from device [ 1661.158670][T21601] usb 8-1: could not get target info (-110) [ 1661.179365][T21601] usb 8-1: could not probe fw (-110) [ 1661.235992][T31147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.247717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.271866][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.292432][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.336607][T31150] fuse: Bad value for 'group_id' [ 1661.359989][T31150] fuse: Bad value for 'group_id' [ 1661.427842][T31153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.439329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.564177][T31153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.572875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.252992][T31170] fuse: blksize only supported for fuseblk [ 1662.941983][T18336] usb 8-1: USB disconnect, device number 36 [ 1663.075260][T31180] loop3: detected capacity change from 0 to 7 [ 1663.116273][T31180] Dev loop3: unable to read RDB block 7 [ 1663.167802][T31180] loop3: unable to read partition table [ 1663.214214][T31183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.225150][T31180] loop3: partition table beyond EOD, truncated [ 1663.247210][T31180] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1663.278244][T31183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.312783][ T4978] Dev loop3: unable to read RDB block 7 [ 1663.319428][ T4978] loop3: unable to read partition table [ 1663.331295][ T4978] loop3: partition table beyond EOD, truncated [ 1663.482118][T31189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.503018][T31189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.970131][T20421] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1664.158955][T20421] usb 5-1: config 253 has an invalid interface number: 82 but max is 0 [ 1664.181925][T20421] usb 5-1: config 253 has no interface number 0 [ 1664.189455][T20421] usb 5-1: config 253 interface 82 has no altsetting 0 [ 1664.201659][T20421] usb 5-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ec.7d [ 1664.214244][T20421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.224936][T20421] usb 5-1: Product: syz [ 1664.231092][T20421] usb 5-1: Manufacturer: syz [ 1664.236396][T20421] usb 5-1: SerialNumber: syz [ 1664.431670][T31199] xt_hashlimit: size too large, truncated to 1048576 [ 1664.477177][T31192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6301'. [ 1664.518299][T31192] ip6gre1: entered promiscuous mode [ 1664.524533][T31192] ip6gre1: entered allmulticast mode [ 1664.557620][T21601] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1664.582911][T18336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1664.591998][T21601] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1664.995875][T18336] net_ratelimit: 11 callbacks suppressed [ 1664.995895][T18336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.024334][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.040141][T28873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.052922][T29214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1665.062606][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.085272][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.094756][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.107614][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.134401][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.156115][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.214934][T18339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.430674][T18339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1665.471842][T31212] syzkaller0: entered promiscuous mode [ 1665.493572][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1665.504893][T31212] syzkaller0: entered allmulticast mode [ 1665.572251][T31215] tipc: Enabled bearer , priority 0 [ 1665.695308][T31212] tipc: Resetting bearer [ 1665.725327][ T24] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 0.00 [ 1665.766982][T20421] rtl8150 5-1:253.82: couldn't find required endpoints [ 1665.784225][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.807776][T20421] rtl8150 5-1:253.82: probe with driver rtl8150 failed with error -5 [ 1665.828121][ T24] usb 1-1: Product: syz [ 1665.854516][ T24] usb 1-1: Manufacturer: syz [ 1665.879996][T20421] usb 5-1: USB disconnect, device number 82 [ 1665.889497][ T24] usb 1-1: SerialNumber: syz [ 1665.906063][T31223] trusted_key: encrypted_key: master key parameter 'usr:syz 0000000000000000861' is invalid [ 1666.144742][T31214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.165189][T31214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.215163][T31208] tipc: Resetting bearer [ 1666.269479][T20421] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1666.306971][T31208] tipc: Disabling bearer [ 1666.450659][T20421] usb 5-1: Using ep0 maxpacket: 32 [ 1666.482021][T20421] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1666.504407][T20421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.533209][T20421] usb 5-1: Product: syz [ 1666.546841][T20421] usb 5-1: Manufacturer: syz [ 1666.568182][T20421] usb 5-1: SerialNumber: syz [ 1666.601075][T20421] usb 5-1: config 0 descriptor?? [ 1666.911984][T31233] loop3: detected capacity change from 0 to 7 [ 1666.926657][T31233] Dev loop3: unable to read RDB block 7 [ 1666.934527][T31233] loop3: unable to read partition table [ 1666.942608][T31233] loop3: partition table beyond EOD, truncated [ 1666.958643][T31233] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1667.033568][T20421] airspy 5-1:0.0: Board ID: 00 [ 1667.049075][T20421] airspy 5-1:0.0: Firmware version: [ 1667.208005][ T24] ax88179_178a 1-1:1.0: probe with driver ax88179_178a failed with error -71 [ 1667.237934][T31236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.280598][ T24] usb 1-1: USB disconnect, device number 43 [ 1667.362383][T31236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.639141][T31223] trusted_key: encrypted_key: keylen parameter is missing [ 1667.652891][T20421] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 1667.661211][T31238] netlink: 'syz.7.6313': attribute type 49 has an invalid length. [ 1667.676245][T20421] airspy 5-1:0.0: Registered as swradio24 [ 1667.691167][T20421] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1667.714420][T20421] usb 5-1: USB disconnect, device number 83 [ 1668.330043][T18339] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1668.499932][T18339] usb 1-1: Using ep0 maxpacket: 8 [ 1668.510417][T23427] [U]  [ 1668.533235][T18339] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1668.563012][T18339] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1668.595509][T18339] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1668.633360][T18339] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1668.669466][T18339] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1668.710149][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1668.744672][T18339] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1668.767294][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1668.781610][T18339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.793167][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.806362][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1668.815029][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.823117][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1668.838011][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1668.848368][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1669.118577][T18339] usb 1-1: GET_CAPABILITIES returned 0 [ 1669.144342][T31251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.164259][T18339] usbtmc 1-1:16.0: can't read capabilities [ 1669.170380][T31248] raw-gadget.1 gadget.3: failed to queue resume event [ 1669.198662][T31251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.362666][T15783] raw-gadget.1 gadget.3: failed to queue suspend event [ 1669.374231][T18339] usb 1-1: USB disconnect, device number 44 [ 1669.484748][T31272] netlink: 'syz.7.6321': attribute type 1 has an invalid length. [ 1669.704341][T31271] team0: Port device xfrm0 added [ 1670.266175][T31289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.278025][T15783] net_ratelimit: 18 callbacks suppressed [ 1670.278080][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.291191][T31289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.324265][T31291] FAULT_INJECTION: forcing a failure. [ 1670.324265][T31291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.387276][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.405103][T31289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.454784][T31289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.490572][T31291] CPU: 0 UID: 0 PID: 31291 Comm: syz.0.6325 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.490614][T31291] Tainted: [L]=SOFTLOCKUP [ 1670.490621][T31291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1670.490631][T31291] Call Trace: [ 1670.490639][T31291] [ 1670.490646][T31291] dump_stack_lvl+0xe8/0x150 [ 1670.490677][T31291] should_fail_ex+0x40c/0x560 [ 1670.490702][T31291] _copy_to_user+0x31/0xb0 [ 1670.490758][T31291] simple_read_from_buffer+0xe1/0x170 [ 1670.490789][T31291] proc_fail_nth_read+0x1bb/0x230 [ 1670.490830][T31291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1670.490859][T31291] ? rw_verify_area+0x24a/0x4c0 [ 1670.490886][T31291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1670.490910][T31291] vfs_read+0x213/0xa80 [ 1670.490940][T31291] ? __pfx___mutex_lock+0x10/0x10 [ 1670.490966][T31291] ? __pfx_vfs_read+0x10/0x10 [ 1670.490993][T31291] ? __fget_files+0x2a/0x420 [ 1670.491019][T31291] ? __fget_files+0x3a2/0x420 [ 1670.491041][T31291] ? __fget_files+0x2a/0x420 [ 1670.491069][T31291] ksys_read+0x150/0x270 [ 1670.491097][T31291] ? __pfx_ksys_read+0x10/0x10 [ 1670.491122][T31291] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1670.491147][T31291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.491166][T31291] do_syscall_64+0x174/0x580 [ 1670.491188][T31291] ? trace_irq_disable+0x3b/0x140 [ 1670.491209][T31291] ? clear_bhb_loop+0x70/0xc0 [ 1670.491232][T31291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.491250][T31291] RIP: 0033:0x7f88ccd5e90e [ 1670.491266][T31291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1670.491281][T31291] RSP: 002b:00007f88cdbbafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1670.491299][T31291] RAX: ffffffffffffffda RBX: 00007f88cdbbb6c0 RCX: 00007f88ccd5e90e [ 1670.491313][T31291] RDX: 000000000000000f RSI: 00007f88cdbbb0a0 RDI: 0000000000000006 [ 1670.491324][T31291] RBP: 00007f88cdbbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.491334][T31291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.491344][T31291] R13: 00007f88cd026128 R14: 00007f88cd026090 R15: 00007f88cd14fa48 [ 1670.491372][T31291] [ 1670.936058][T21601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2304 - 0 [ 1670.965272][T21601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1670.976498][ T5620] Bluetooth: hci0: command tx timeout [ 1670.990033][T21601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.094742][T31305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6328'. [ 1671.108448][T31264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.115938][T28873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.150252][T31264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.163795][T31264] bridge_slave_0: entered allmulticast mode [ 1671.177455][T31264] bridge_slave_0: entered promiscuous mode [ 1671.404594][T31264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.433290][T31264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.452597][T31264] bridge_slave_1: entered allmulticast mode [ 1671.476022][T31264] bridge_slave_1: entered promiscuous mode [ 1671.714268][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.719285][T21601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2304 - 0 [ 1671.734334][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.756659][T21601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1671.782301][T21601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.043743][T31264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.055720][T31313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.071141][T31313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.083576][T31313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.094015][T31313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.106804][T31313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.125834][T31313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.181826][T21601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2304 - 0 [ 1672.200282][T21601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1672.211260][T21601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.261275][T31264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.390474][T21601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2304 - 0 [ 1672.414938][T31282] syz.7.6324 (31282): drop_caches: 1 [ 1672.420737][T21601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1672.443165][T21601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.555084][T31264] team0: Port device team_slave_0 added [ 1672.566954][T31264] team0: Port device team_slave_1 added [ 1672.685315][T31264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.708586][T31264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.775635][T31264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.808980][T31264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.820298][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1672.840353][T31264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.883017][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.898284][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.910351][T31264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.992521][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1673.028219][ T24] usb 1-1: config 5 has an invalid interface number: 159 but max is 3 [ 1673.040778][ T5620] Bluetooth: hci0: command tx timeout [ 1673.066330][T31283] syz.7.6324 (31283): drop_caches: 1 [ 1673.072000][ T24] usb 1-1: config 5 has an invalid interface number: 238 but max is 3 [ 1673.100189][ T24] usb 1-1: config 5 has an invalid descriptor of length 199, skipping remainder of the config [ 1673.137364][ T24] usb 1-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 1673.164729][ T24] usb 1-1: config 5 has no interface number 0 [ 1673.185347][ T24] usb 1-1: config 5 has no interface number 1 [ 1673.211252][ T24] usb 1-1: config 5 interface 238 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1673.257403][ T24] usb 1-1: config 5 interface 159 has no altsetting 0 [ 1673.266014][ T24] usb 1-1: config 5 interface 238 has no altsetting 0 [ 1673.278785][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c232, bcdDevice=dc.76 [ 1673.288561][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.297197][T31322] syzkaller1: entered allmulticast mode [ 1673.297598][ T24] usb 1-1: Product: syz [ 1673.307587][ T24] usb 1-1: Manufacturer: syz [ 1673.319105][ T24] usb 1-1: SerialNumber: syz [ 1673.432786][T31327] loop3: detected capacity change from 0 to 7 [ 1673.442803][T31327] Dev loop3: unable to read RDB block 7 [ 1673.448609][T31327] loop3: unable to read partition table [ 1673.457910][T31327] loop3: partition table beyond EOD, truncated [ 1673.465958][T31264] hsr_slave_0: entered promiscuous mode [ 1673.475769][T31264] hsr_slave_1: entered promiscuous mode [ 1673.476685][T31327] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1673.485410][T31264] debugfs: 'hsr0' already exists in 'hsr' [ 1673.509328][T31264] Cannot create hsr debugfs directory [ 1673.555139][T31316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.572911][T31316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.609377][T31316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.649334][T31316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.910738][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1673.963480][T21601] bridge_slave_0: left allmulticast mode [ 1673.982273][T21601] bridge_slave_0: left promiscuous mode [ 1673.998658][T21601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.040673][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.060639][T21601] lo: left allmulticast mode [ 1674.072059][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.152600][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.645522][T31343] program syz.7.6337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.968534][T21601] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 1674.982718][T21601] bridge1 (unregistering): left promiscuous mode [ 1674.989349][T21601] bridge1 (unregistering): left allmulticast mode [ 1675.012576][T21601] bond1 (unregistering): Released all slaves [ 1675.035425][T21601] bond2 (unregistering): Released all slaves [ 1675.066630][T21601] bond3 (unregistering): (slave veth3): Releasing active interface [ 1675.080639][T21601] bond3 (unregistering): Released all slaves [ 1675.105407][T21601] bond4 (unregistering): (slave veth5): Releasing active interface [ 1675.113791][ T5620] Bluetooth: hci0: command tx timeout [ 1675.122467][T21601] bond4 (unregistering): Released all slaves [ 1675.156236][T21601] bond0 (unregistering): Released all slaves [ 1675.185223][T21601] bond5 (unregistering): Released all slaves [ 1675.207721][T21601] bond6 (unregistering): (slave veth0_to_batadv): Releasing active interface [ 1675.223354][T21601] bond6 (unregistering): Released all slaves [ 1675.249553][T21601] bond7 (unregistering): Released all slaves [ 1675.277864][T21601] bond8 (unregistering): Released all slaves [ 1675.314444][T21611] tipc: Resetting bearer [ 1675.668184][T21601] tipc: Disabling bearer [ 1675.702887][T21601] tipc: Left network mode [ 1676.238266][ T24] usb 1-1: USB disconnect, device number 45 [ 1676.313785][T21609] net_ratelimit: 7 callbacks suppressed [ 1676.313804][T21609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.354305][T21609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.880314][T28873] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1677.031903][T18339] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1677.063486][T28873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1677.088170][T28873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.120886][T28873] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1677.154021][T28873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.179710][T28873] usb 1-1: config 0 descriptor?? [ 1677.190313][ T5620] Bluetooth: hci0: command tx timeout [ 1677.254717][T18339] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1677.271402][T18339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.290060][T18339] usb 8-1: Product: syz [ 1677.315502][T18339] usb 8-1: Manufacturer: syz [ 1677.342154][T18339] usb 8-1: SerialNumber: syz [ 1677.532878][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.556471][T15783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.644465][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.681159][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.698834][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.727661][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.748620][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.770439][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.813048][T28873] isku 0003:1E7D:319C.0065: unknown main item tag 0x0 [ 1677.840531][T31362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.874513][T31362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.885841][T31373] misc userio: The device must be registered before sending interrupts [ 1677.899659][T28873] isku 0003:1E7D:319C.0065: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1677.980079][T31362] raw-gadget.1 gadget.3: failed to queue resume event [ 1678.176494][T28873] isku 0003:1E7D:319C.0065: couldn't init struct isku_device [ 1678.188007][T28873] isku 0003:1E7D:319C.0065: couldn't install keyboard [ 1678.225712][T28873] isku 0003:1E7D:319C.0065: probe with driver isku failed with error -5 [ 1678.236082][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.262997][T18339] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0a:33:2d:81:bd:7e [ 1678.403256][T15783] raw-gadget.1 gadget.3: failed to queue suspend event [ 1678.412537][T18339] rtl8150 8-1:1.0: eth13: rtl8150 is detected [ 1678.422120][T29412] usb 1-1: USB disconnect, device number 46 [ 1678.457792][T18339] usb 8-1: USB disconnect, device number 37 [ 1678.572063][T21601] hsr_slave_0: left promiscuous mode [ 1678.585110][T21601] hsr_slave_1: left promiscuous mode [ 1678.601118][T21601] veth1_macvtap: left promiscuous mode [ 1678.606831][T21601] veth0_macvtap: left promiscuous mode [ 1678.613204][T21601] veth1_vlan: left promiscuous mode [ 1678.624643][T21601] veth0_vlan: left promiscuous mode [ 1678.680998][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.693594][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.590714][T15785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.601701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.830314][T15785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.632848][T31427] bridge0: entered promiscuous mode [ 1680.681272][T31427] bridge0: entered allmulticast mode [ 1680.693528][T31264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1680.716742][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1680.751306][T31264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1680.786765][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1680.841080][T31264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1680.985045][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1681.013491][T31264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1681.048643][T31264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1681.112491][T21601] IPVS: stop unused estimator thread 0... [ 1681.644708][T31450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1681.965841][T31460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6362'. [ 1682.043167][T31264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.132860][T31264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.150779][T21600] net_ratelimit: 4 callbacks suppressed [ 1682.150797][T21600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.189534][T15782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.196798][T15782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.205033][T21600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.353402][T15782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.360635][T15782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.410374][T29412] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1682.434295][T31474] FAULT_INJECTION: forcing a failure. [ 1682.434295][T31474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.489090][T31474] CPU: 1 UID: 0 PID: 31474 Comm: syz.6.6365 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.489119][T31474] Tainted: [L]=SOFTLOCKUP [ 1682.489125][T31474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1682.489134][T31474] Call Trace: [ 1682.489140][T31474] [ 1682.489146][T31474] dump_stack_lvl+0xe8/0x150 [ 1682.489172][T31474] should_fail_ex+0x40c/0x560 [ 1682.489192][T31474] _copy_from_user+0x2d/0xb0 [ 1682.489214][T31474] do_sock_getsockopt+0x200/0x7e0 [ 1682.489235][T31474] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1682.489261][T31474] ? __fget_files+0x3a2/0x420 [ 1682.489281][T31474] ? __fget_files+0x2a/0x420 [ 1682.489304][T31474] __x64_sys_getsockopt+0x1a4/0x240 [ 1682.489323][T31474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.489339][T31474] do_syscall_64+0x174/0x580 [ 1682.489359][T31474] ? trace_irq_disable+0x3b/0x140 [ 1682.489376][T31474] ? clear_bhb_loop+0x70/0xc0 [ 1682.489394][T31474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.489408][T31474] RIP: 0033:0x7f850c19e0d9 [ 1682.489422][T31474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.489434][T31474] RSP: 002b:00007f850d0e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1682.489450][T31474] RAX: ffffffffffffffda RBX: 00007f850c426090 RCX: 00007f850c19e0d9 [ 1682.489461][T31474] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 1682.489469][T31474] RBP: 00007f850d0e1090 R08: 0000200000000080 R09: 0000000000000000 [ 1682.489479][T31474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.489487][T31474] R13: 00007f850c426128 R14: 00007f850c426090 R15: 00007f850c54fa48 [ 1682.489509][T31474] [ 1682.925325][T31264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1682.940316][T29412] usb 8-1: Using ep0 maxpacket: 32 [ 1682.966196][T29412] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1682.993068][T29412] usb 8-1: config 0 has no interface number 0 [ 1683.016181][T29412] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1683.072462][T29412] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1683.098071][T29412] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.125000][T29412] usb 8-1: Product: syz [ 1683.138301][T29412] usb 8-1: Manufacturer: syz [ 1683.158266][T29412] usb 8-1: SerialNumber: syz [ 1683.201152][T29412] usb 8-1: config 0 descriptor?? [ 1683.237855][T31264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.249206][T31467] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1683.521850][T21601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.547965][T21601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.609520][T31467] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1683.745157][T31264] veth0_vlan: entered promiscuous mode [ 1683.835247][T31264] veth1_vlan: entered promiscuous mode [ 1683.932902][T20421] hsr0: entered promiscuous mode [ 1683.972661][T29412] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1684.015549][T29412] asix 8-1:0.188: probe with driver asix failed with error -61 [ 1684.039608][T31264] veth0_macvtap: entered promiscuous mode [ 1684.066540][T31264] veth1_macvtap: entered promiscuous mode [ 1684.166637][T31264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1684.225367][T31264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1684.280251][T15784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.358058][T29214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.430316][T21601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.492249][T21601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.543066][T15782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.678714][T15784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.687101][T15782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.718976][T15782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.727743][T15784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.786360][T15782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.818542][T15782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.148313][T31497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.175220][T31497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.187179][T31499] syzkaller1: entered promiscuous mode [ 1685.197889][T31499] syzkaller1: entered allmulticast mode [ 1685.261112][T20421] usb 8-1: USB disconnect, device number 38 [ 1685.440811][T21611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.449388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.462992][ T1214] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1685.632008][ T1214] usb 5-1: not running at top speed; connect to a high speed hub [ 1685.648621][ T1214] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 1685.670310][ T1214] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1685.689937][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.757319][ T1214] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1685.845220][T21600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.990674][T29214] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1686.032329][ T30] audit: type=1326 audit(1786147639.961:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.085176][ T1214] gspca_spca501: reg write: error -71 [ 1686.108316][ T30] audit: type=1326 audit(1786147639.961:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.161920][ T1214] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1686.183280][T29214] usb 8-1: Using ep0 maxpacket: 32 [ 1686.190282][ T1214] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 1686.211581][ T30] audit: type=1326 audit(1786147639.961:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.224829][ T1214] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 1686.266674][T29214] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1686.289464][ T1214] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1686.306280][T29214] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1686.322883][ T1214] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1686.344568][ T30] audit: type=1326 audit(1786147639.991:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.347898][ T1214] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 1686.390677][T31523] loop5: detected capacity change from 0 to 7 [ 1686.396890][T29214] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1686.419564][T31523] Dev loop5: unable to read RDB block 7 [ 1686.432394][T29214] usb 8-1: config 1 has no interface number 0 [ 1686.450226][T31523] loop5: unable to read partition table [ 1686.456495][ T1214] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 1686.490068][T31523] loop5: partition table beyond EOD, truncated [ 1686.511602][ T1214] usb 5-1: USB disconnect, device number 84 [ 1686.523762][T31523] loop_reread_partitions: partition scan of loop5 (þ被xüŸâ·û) failed (rc=-5) [ 1686.567545][T29214] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1686.588805][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1686.612283][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1686.623356][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1686.632543][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1686.639348][ T30] audit: type=1326 audit(1786147639.991:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.695934][T29214] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1686.705974][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1686.766229][T29214] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1686.799911][ T30] audit: type=1326 audit(1786147639.991:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.824296][T29214] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1686.833571][T29214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.864867][T31523] IPVS: set_ctl: invalid protocol: 32 51.240.255.255:8192 [ 1686.882810][ T30] audit: type=1326 audit(1786147639.991:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1686.920934][T29214] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1686.961448][ T30] audit: type=1326 audit(1786147639.991:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01eaf9e0d9 code=0x7ffc0000 [ 1687.052859][ T30] audit: type=1326 audit(1786147639.991:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f01eaf5e90e code=0x7ffc0000 [ 1687.083813][T29214] snd_usb_pod 8-1:1.1: cannot start listening: -90 [ 1687.102454][T29214] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1687.123961][T29214] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 1687.154898][ T30] audit: type=1326 audit(1786147640.001:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31498 comm="syz.4.6319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01eaf5e90e code=0x7ffc0000 [ 1687.312844][T31517] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6377'. [ 1687.336070][T31517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.361805][T31517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.378886][T18339] usb 8-1: USB disconnect, device number 39 [ 1687.458778][T28873] net_ratelimit: 3 callbacks suppressed [ 1687.458797][T28873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.666393][T29136] vivid-000: reconnect [ 1688.061546][T18339] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1688.141678][T15784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.160168][T15784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.250316][T18339] usb 5-1: device descriptor read/64, error -71 [ 1688.406484][T21600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.449180][T21600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47235 - 0 [ 1688.462071][T21600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1688.531817][T18339] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1688.632791][T15785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.643929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.690302][T18339] usb 5-1: device descriptor read/64, error -71 [ 1688.727396][T21600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.741435][T21600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47235 - 0 [ 1688.753813][T21600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1688.791806][ T5620] Bluetooth: hci5: command tx timeout [ 1688.811621][T18339] usb usb5-port1: attempt power cycle [ 1688.922494][T21600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.933883][T21600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47235 - 0 [ 1688.945412][T21600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1689.016312][T31527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.028028][T31527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.038027][T31527] bridge_slave_0: entered allmulticast mode [ 1689.048952][T31527] bridge_slave_0: entered promiscuous mode [ 1689.093708][T21600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.104720][T21600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47235 - 0 [ 1689.116829][T21600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1689.142118][T31527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.156554][T31527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.169646][T31527] bridge_slave_1: entered allmulticast mode [ 1689.176482][T18339] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1689.196932][T31527] bridge_slave_1: entered promiscuous mode [ 1689.223422][T18339] usb 5-1: device descriptor read/8, error -71 [ 1689.270391][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1689.293724][T31527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.314446][T21601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.344831][T21601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.368303][T31527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.469049][T31527] team0: Port device team_slave_0 added [ 1689.480351][T18339] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1689.505634][T31527] team0: Port device team_slave_1 added [ 1689.514417][T31563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6390'. [ 1689.533932][T18339] usb 5-1: device descriptor read/8, error -71 [ 1689.651814][T18339] usb usb5-port1: unable to enumerate USB device [ 1689.754199][T31527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.777787][T31527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.824876][T31527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.869593][T31527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.877437][T31527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.926811][T31527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.116468][T21600] bridge_slave_1: left allmulticast mode [ 1690.124672][T21600] bridge_slave_1: left promiscuous mode [ 1690.131782][T21600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.166553][T21600] bridge_slave_0: left allmulticast mode [ 1690.180848][T21600] bridge_slave_0: left promiscuous mode [ 1690.188526][T21600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.229401][T21600] lo: left allmulticast mode [ 1690.251857][T21600] dvmrp8: left allmulticast mode [ 1690.872370][ T5620] Bluetooth: hci5: command tx timeout [ 1691.244032][T21600] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1691.439162][T21600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.457468][T21600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.477406][T21600] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 1691.494739][T21600] bond0 (unregistering): Released all slaves [ 1691.562362][T21600] bond1 (unregistering): Released all slaves [ 1691.590150][T28873] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1691.604970][T21600] bond2 (unregistering): Released all slaves [ 1691.629598][T31592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6394'. [ 1691.658924][T21600] bond3 (unregistering): (slave veth7): Releasing active interface [ 1691.672945][T21600] bond3 (unregistering): Released all slaves [ 1691.690787][T21600] bond4 (unregistering): Released all slaves [ 1691.714757][T21600] bond5 (unregistering): (slave veth9): Releasing active interface [ 1691.730842][T28873] usb 5-1: device descriptor read/64, error -71 [ 1691.733500][T21600] veth0_to_bond: entered promiscuous mode [ 1691.757031][T21600] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1691.770332][T21600] bond5 (unregistering): Released all slaves [ 1691.791378][T21600] bond6 (unregistering): Released all slaves [ 1691.809502][T21600] bond7 (unregistering): Released all slaves [ 1691.892047][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1691.967599][T21600] tipc: Left network mode [ 1692.000078][T28873] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1692.149072][T31527] hsr_slave_0: entered promiscuous mode [ 1692.158147][T31527] hsr_slave_1: entered promiscuous mode [ 1692.184428][T31527] debugfs: 'hsr0' already exists in 'hsr' [ 1692.206691][T31527] Cannot create hsr debugfs directory [ 1692.212345][T28873] usb 5-1: device descriptor read/64, error -71 [ 1692.331732][T28873] usb usb5-port1: attempt power cycle [ 1692.693841][T28873] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1692.730897][T28873] usb 5-1: device descriptor read/8, error -71 [ 1692.950605][ T5620] Bluetooth: hci5: command tx timeout [ 1693.032368][T28873] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1693.063865][T28873] usb 5-1: device descriptor read/8, error -71 [ 1693.180219][T28873] usb usb5-port1: unable to enumerate USB device [ 1693.282122][T31621] netlink: 'syz.7.6398': attribute type 11 has an invalid length. [ 1693.318302][T31621] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6398'. [ 1693.814621][T21600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.838985][T21600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.102244][T21600] veth1_macvtap: left promiscuous mode [ 1694.113597][T21600] veth0_macvtap: left promiscuous mode [ 1694.124231][T21600] veth1_vlan: left promiscuous mode [ 1694.153071][T21600] veth0_vlan: left promiscuous mode [ 1694.199159][T31640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.233280][T31640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.384473][T31645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6401'. [ 1695.031174][ T5620] Bluetooth: hci5: command tx timeout [ 1695.726422][T21600] team0 (unregistering): Port device team_slave_1 removed [ 1696.846996][T31678] tipc: Started in network mode [ 1696.858638][T31678] tipc: Node identity 1, cluster identity 4711 [ 1696.873800][T31678] tipc: Node number set to 1 [ 1696.902092][T31681] fuse: Invalid rootmode [ 1697.582623][T21600] IPVS: stop unused estimator thread 0... [ 1697.862778][T31527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1697.916210][T31527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1697.948313][T31527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1697.956144][T31703] loop3: detected capacity change from 0 to 7 [ 1697.964414][T31704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.984290][T31704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.993494][T31703] Dev loop3: unable to read RDB block 7 [ 1697.998472][T31527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1698.018324][T31703] loop3: unable to read partition table [ 1698.035634][T31703] loop3: partition table beyond EOD, truncated [ 1698.043982][T31527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1698.055533][T31703] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1698.069120][T31527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1698.092978][T31527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1698.142010][T31527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1699.005368][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.187858][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.261313][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.299489][T31736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1699.351884][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.406129][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.500306][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.556752][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.588950][T31527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.632144][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.662387][T31741] syzkaller1: entered promiscuous mode [ 1699.691834][T31741] syzkaller1: entered allmulticast mode [ 1699.714026][T31527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.729240][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.761873][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.793645][T21611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.800909][T21611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.832107][T31742] key id 00000001 not found [ 1699.848438][T21611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.855734][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.855759][T21611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.906789][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.950498][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.963665][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.975590][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.995586][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.009148][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.023841][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.036132][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.056380][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.069968][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.143357][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.181688][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.209009][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.221386][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.271562][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.751710][T31527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.841564][T10194] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1700.991959][T31527] veth0_vlan: entered promiscuous mode [ 1701.010247][T10194] usb 8-1: Using ep0 maxpacket: 32 [ 1701.019606][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1701.019625][ T30] audit: type=1326 audit(1786147654.941:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31735 comm="syz.3.6413" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa5f99e0d9 code=0x0 [ 1701.065244][T10194] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1701.076725][T31527] veth1_vlan: entered promiscuous mode [ 1701.102545][T10194] usb 8-1: config 0 has no interface number 0 [ 1701.122069][T10194] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1701.150844][T10194] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.168202][T10194] usb 8-1: Product: syz [ 1701.179184][T10194] usb 8-1: Manufacturer: syz [ 1701.188391][T10194] usb 8-1: SerialNumber: syz [ 1701.215951][T10194] usb 8-1: config 0 descriptor?? [ 1701.235213][T10194] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1701.286613][T31527] veth0_macvtap: entered promiscuous mode [ 1701.343840][T31527] veth1_macvtap: entered promiscuous mode [ 1701.427172][T31527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.474411][T10194] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1701.486656][T31527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.573843][T10194] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1701.593772][T15784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.841381][T21601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.134347][T21611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.173394][T21611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.400420][T15784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.410380][T15783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.460578][T15783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.484902][T15783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.552506][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1702.555983][T28873] usb 8-1: USB disconnect, device number 40 [ 1702.633102][T28873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1702.712875][T31784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1702.722354][T28873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1702.745917][T28873] quatech2 8-1:0.51: device disconnected [ 1702.854862][T31784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.865080][T31784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.910979][T20421] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1703.039956][T10194] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1703.059976][T20421] usb 5-1: Using ep0 maxpacket: 16 [ 1703.069067][T20421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.100204][T20421] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1703.118638][T20421] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1703.135499][T20421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.171252][T20421] usb 5-1: config 0 descriptor?? [ 1703.190403][T10194] usb 1-1: Using ep0 maxpacket: 16 [ 1703.205180][T10194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.217778][T10194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.228050][T31791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1703.228178][T31791] IPv6: NLM_F_CREATE should be set when creating new route [ 1703.241824][T10194] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1703.253551][T10194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.254396][T31791] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6426'. [ 1703.274591][T10194] usb 1-1: config 0 descriptor?? [ 1703.308495][T31791] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1703.343236][T31791] bond0 (unregistering): Released all slaves [ 1703.497319][T31788] fuse: Unknown parameter 'g»h€ŒI7q00000000000000000000' [ 1703.602472][T31782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.613242][T31782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.675737][T31797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.699452][T31797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.718563][T20421] usbhid 5-1:0.0: can't add hid device: -71 [ 1703.736143][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.747407][T31797] openvswitch: netlink: Flow actions attr not present in new flow. [ 1703.757204][T20421] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1703.777042][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.789148][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.798498][T20421] usb 5-1: USB disconnect, device number 93 [ 1703.806776][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.810417][T28873] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1703.814973][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.853916][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.873143][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.886136][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.896418][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.903522][T10194] apple 0003:05AC:024B.0066: unknown main item tag 0x0 [ 1703.911452][T10194] apple 0003:05AC:024B.0066: invalid report_size 25705 [ 1703.918961][T10194] apple 0003:05AC:024B.0066: item 0 2 1 7 parsing failed [ 1703.927604][T10194] apple 0003:05AC:024B.0066: parse failed [ 1703.943272][T10194] apple 0003:05AC:024B.0066: probe with driver apple failed with error -22 [ 1703.963979][T10194] usb 1-1: USB disconnect, device number 47 [ 1703.980104][T28873] usb 8-1: device descriptor read/64, error -71 [ 1704.164631][T31802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1704.220168][T28873] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1704.360148][T28873] usb 8-1: device descriptor read/64, error -71 [ 1704.480553][T28873] usb usb8-port1: attempt power cycle [ 1704.624953][T31807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.672064][T31807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.718927][T31807] syzkaller0: entered promiscuous mode [ 1704.737135][T31807] syzkaller0: entered allmulticast mode [ 1704.763364][T31807] tipc: Enabled bearer , priority 0 [ 1704.919958][T28873] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1704.931462][T31807] tipc: Resetting bearer [ 1704.956172][T31806] tipc: Resetting bearer [ 1704.971271][T28873] usb 8-1: device descriptor read/8, error -71 [ 1705.050559][T31806] tipc: Disabling bearer [ 1705.210160][T28873] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1705.260700][T28873] usb 8-1: device descriptor read/8, error -71 [ 1705.400503][T28873] usb usb8-port1: unable to enumerate USB device [ 1705.847253][T31820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1705.875545][T31820] netlink: 'syz.0.6435': attribute type 20 has an invalid length. [ 1705.905345][T31820] netlink: 'syz.0.6435': attribute type 21 has an invalid length. [ 1706.290100][T20421] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1706.447040][T20421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1706.458508][T20421] usb 5-1: config 1 interface 2 has no altsetting 0 [ 1706.469627][T20421] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1706.483286][T20421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.491787][T20421] usb 5-1: Product: syz [ 1706.496243][T20421] usb 5-1: Manufacturer: syz [ 1706.505289][T20421] usb 5-1: SerialNumber: syz [ 1706.797131][T20421] usb 5-1: selecting invalid altsetting 0 [ 1707.039297][T20421] usb 5-1: USB disconnect, device number 94 [ 1707.070665][T29412] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1707.222754][T28371] udevd[28371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.301633][T29412] usb 8-1: Using ep0 maxpacket: 8 [ 1707.340377][T29412] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1707.367615][T29412] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1707.409542][T29412] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1707.450827][T29412] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1707.552029][T29412] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1707.585006][T29412] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.628899][T29412] usb 8-1: Product: syz [ 1707.649726][T29412] usb 8-1: Manufacturer: syz [ 1707.664182][T29412] usb 8-1: SerialNumber: syz [ 1707.693093][T29412] usb 8-1: config 0 descriptor?? [ 1707.717127][T31847] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1707.972336][T29412] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1708.014557][T29412] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input165 [ 1708.072304][ C1] powermate: config urb returned -71 [ 1708.078793][ C1] powermate: config urb returned -71 [ 1708.084392][ C1] powermate: config urb returned -71 [ 1708.090109][ C1] powermate: config urb returned -71 [ 1708.134802][T29412] usb 8-1: USB disconnect, device number 45 [ 1708.141121][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1708.582133][T31879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.979942][T29412] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1709.171889][T29412] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1709.190475][T29412] usb 8-1: config 0 has no interface number 0 [ 1709.220756][T29412] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1709.238277][T29412] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.257509][T29412] usb 8-1: Product: syz [ 1709.275787][T29412] usb 8-1: Manufacturer: syz [ 1709.288625][T29412] usb 8-1: SerialNumber: syz [ 1709.319320][T29412] usb 8-1: config 0 descriptor?? [ 1709.554659][T31882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.588488][T31882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.617372][T29412] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1709.663076][T29412] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1709.703814][T29412] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1709.724481][T29412] usb 8-1: media controller created [ 1709.753728][T29412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1709.825244][T29412] i2c i2c-4: ec100: i2c rd failed=-71 reg=33 [ 1709.998946][T29412] usb 8-1: USB disconnect, device number 46 [ 1710.088600][T31908] 8021q: VLANs not supported on ip6_vti0 [ 1710.138468][T31904] syzkaller0: entered promiscuous mode [ 1710.145471][T31904] syzkaller0: entered allmulticast mode [ 1710.178236][T31912] binder: 31907:31912 ioctl c0306201 200000000480 returned -14 [ 1710.184989][T31911] netlink: 408 bytes leftover after parsing attributes in process `syz.6.6460'. [ 1710.321777][T31916] program syz.6.6462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1710.494826][T31918] xt_hashlimit: max too large, truncated to 1048576 [ 1710.524172][T31918] xt_hashlimit: overflow, try lower: 2/0 [ 1710.840152][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1710.959728][T31918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.967399][T31918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.020855][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1711.036738][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1711.061114][ T24] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1711.070450][ T24] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1711.078980][ T24] usb 1-1: config 14 has no interface number 0 [ 1711.086633][ T24] usb 1-1: config 14 has no interface number 1 [ 1711.103489][ T24] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1711.145530][ T24] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1711.180156][ T24] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1711.200031][ T24] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1711.232110][ T24] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1711.256810][ T24] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1711.292637][ T24] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1711.308322][ T24] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1711.319472][ T24] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1711.364358][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.389487][ T24] usb 1-1: Product: syz [ 1711.403657][ T24] usb 1-1: Manufacturer: syz [ 1711.426721][ T24] usb 1-1: SerialNumber: syz [ 1711.897428][ T24] legousbtower 1-1:14.57: interrupt endpoints not found [ 1712.141315][T31918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1712.232799][T31918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.308055][ T24] legousbtower 1-1:14.228: get version request failed: -121 [ 1712.333304][ T24] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 1712.910278][T31986] raw-gadget.1 gadget.3: failed to queue resume event [ 1713.267538][T31948] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1713.300043][T21611] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.324395][T21611] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.370627][T15785] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.382371][T15785] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.057357][T15785] raw-gadget.1 gadget.3: failed to queue suspend event [ 1714.066404][ T24] usb 1-1: USB disconnect, device number 48 [ 1714.877116][T32064] netlink: 'syz.3.6523': attribute type 2 has an invalid length. [ 1714.916645][T32064] netlink: 'syz.3.6523': attribute type 2 has an invalid length. [ 1714.970141][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1715.037548][T32070] input: syz0 as /devices/virtual/input/input166 [ 1715.143378][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1715.147566][T32076] loop4: detected capacity change from 0 to 2640 [ 1715.164604][T32076] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.180731][ T24] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.193396][T32076] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.215703][ T24] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1715.233133][T32074] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.246134][ T24] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1715.262193][ T24] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1715.280810][T32074] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.290326][ T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1715.290353][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.290372][ T24] usb 1-1: Product: syz [ 1715.290385][ T24] usb 1-1: Manufacturer: syz [ 1715.290399][ T24] usb 1-1: SerialNumber: syz [ 1715.359744][T32074] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.396107][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1715.407389][T32076] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.439208][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input167 [ 1715.462148][T32074] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.508982][T32076] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.527295][T32074] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.536073][T32076] Buffer I/O error on dev loop4, logical block 0, async page read [ 1715.555926][T32081] netlink: 'syz.4.6530': attribute type 10 has an invalid length. [ 1715.567613][T32076] ldm_validate_partition_table(): Disk read failed. [ 1715.584484][T32076] Dev loop4: unable to read RDB block 0 [ 1715.594077][T32076] loop4: unable to read partition table [ 1715.598062][T32081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1715.610008][ T24] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1715.611552][T32076] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1715.627192][ T24] (id 0x00) [ 1715.652186][T32086] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1715.693884][T32081] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1715.750339][ T24] rc_core: IR keymap rc-imon-pad not found [ 1715.765879][ T24] Registered IR keymap rc-empty [ 1715.776006][ T24] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1715.803218][ T24] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1715.840629][T32081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1715.841039][T32088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1715.884115][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1715.918746][T32086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.921614][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input168 [ 1715.958277][ T24] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:49> initialized [ 1716.000001][T32086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.077034][T32086] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1716.089116][T32058] raw-gadget.1 gadget.3: failed to queue resume event [ 1716.113498][T32101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1716.126741][T15785] raw-gadget.1 gadget.3: failed to queue suspend event [ 1716.136952][T32086] bond0 (unregistering): Released all slaves [ 1716.148246][ T24] usb 1-1: USB disconnect, device number 49 [ 1716.508315][T32108] netlink: 'syz.7.6540': attribute type 1 has an invalid length. [ 1716.599394][T32112] netlink: 'syz.4.6541': attribute type 11 has an invalid length. [ 1716.619568][T32115] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6540'. [ 1716.643406][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6541'. [ 1716.739000][T32110] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1716.775101][T21600] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1716.794073][T32112] netlink: 'syz.4.6541': attribute type 11 has an invalid length. [ 1716.804931][T32115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.813434][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6541'. [ 1716.849988][T15784] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.865989][T15784] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.888117][T15784] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.905436][T15784] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1716.971063][T15784] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1717.401333][T32142] xt_hashlimit: size too large, truncated to 1048576 [ 1717.576230][T18339] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1717.663246][T32154] xt_hashlimit: size too large, truncated to 1048576 [ 1717.762147][T18339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.785138][T18339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1717.814059][T18339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1717.837458][T18339] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1717.868362][T18339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.927203][T32141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1717.968134][T18339] hub 5-1:1.0: bad descriptor, ignoring hub [ 1717.982388][T18339] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1718.004530][T18339] cdc_wdm 5-1:1.0: skipping garbage [ 1718.015840][T18339] cdc_wdm 5-1:1.0: skipping garbage [ 1718.043973][T18339] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1718.063311][T18339] cdc_wdm 5-1:1.0: Unknown control protocol [ 1718.123480][T32167] Cannot find del_set index 0 as target [ 1718.220521][T32141] raw-gadget.1 gadget.3: failed to queue resume event [ 1718.261420][T15784] raw-gadget.1 gadget.3: failed to queue suspend event [ 1718.370313][ T24] usb 5-1: USB disconnect, device number 95 [ 1718.694901][T32192] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 1718.703985][T32192] tipc: Enabled bearer , priority 10 [ 1718.715071][T32191] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1719.400027][T32218] random: crng reseeded on system resumption [ 1719.583440][ T5620] Bluetooth: hci5: ISO packet too small [ 1719.645739][T32233] netlink: 'syz.0.6593': attribute type 8 has an invalid length. [ 1719.656696][T32233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6593'. [ 1719.675975][T32233] bond0: entered promiscuous mode [ 1719.682006][T32233] bond_slave_0: entered promiscuous mode [ 1719.687937][T32233] bond_slave_1: entered promiscuous mode [ 1719.708423][T32233] gretap0: entered promiscuous mode [ 1719.718733][T32233] team0: entered promiscuous mode [ 1719.740159][T32233] team_slave_0: entered promiscuous mode [ 1719.760637][T32233] team_slave_1: entered promiscuous mode [ 1719.817424][T32233] hsr1: entered promiscuous mode [ 1719.844400][ T5711] tipc: Node number set to 2886997007 [ 1721.091934][T29309] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1721.273364][T29309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.293417][T29309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.324084][T29309] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1721.349164][T29309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.378803][T29309] usb 5-1: config 0 descriptor?? [ 1721.459925][ T24] usb 8-1: new low-speed USB device number 47 using dummy_hcd [ 1721.613737][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1721.630464][ T24] usb 8-1: config 0 has no interface number 0 [ 1721.636823][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1721.660979][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1721.673529][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1721.689859][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1721.710148][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1721.723801][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1721.747393][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1721.764391][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.790883][ T24] usb 8-1: config 0 descriptor?? [ 1721.801671][T32275] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1721.815337][T29309] hid_parser_main: 48 callbacks suppressed [ 1721.815385][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.820310][T32275] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1721.846378][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.861158][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.882432][ T24] ldusb 8-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1721.900148][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.926951][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.952408][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.966133][T29309] pyra 0003:1E7D:2CF6.0067: unknown main item tag 0x0 [ 1721.996737][T29309] pyra 0003:1E7D:2CF6.0067: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1722.041303][T29309] pyra 0003:1E7D:2CF6.0067: couldn't init struct pyra_device [ 1722.061855][T29309] pyra 0003:1E7D:2CF6.0067: couldn't install mouse [ 1722.105443][T29309] pyra 0003:1E7D:2CF6.0067: probe with driver pyra failed with error -71 [ 1722.149455][T29309] usb 5-1: USB disconnect, device number 96 [ 1722.194487][T32287] fido_id[32287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1722.212710][T32275] raw-gadget.1 gadget.3: failed to queue resume event [ 1722.243131][T32290] lo: entered allmulticast mode [ 1722.265408][T21602] raw-gadget.1 gadget.3: failed to queue suspend event [ 1722.276187][ T5711] usb 8-1: USB disconnect, device number 47 [ 1722.291396][T32290] lo: left allmulticast mode [ 1722.315480][T32292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6616'. [ 1722.329216][ T5711] ldusb 8-1:0.55: LD USB Device #1 now disconnected [ 1724.273200][T32347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.301099][T32347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.790261][T32305] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1724.798605][T32305] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1724.853128][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 1725.000124][T32361] support for the xor transformation has been removed. [ 1725.705335][T32305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1725.708794][T32389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1725.722317][T32305] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1725.795263][T32305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1725.807308][T32389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1725.820389][T32305] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1725.891139][T32305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1725.926017][T32305] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1726.080126][ T24] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1726.250016][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1726.265219][ T24] usb 8-1: config 32 has an invalid interface number: 64 but max is 0 [ 1726.291942][ T24] usb 8-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.315911][T32305] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1726.322584][ T24] usb 8-1: config 32 has no interface number 0 [ 1726.333341][T32305] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1726.342195][ T24] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 1726.373246][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.816212][ T24] uvcvideo 8-1:32.64: Found UVC 0.00 device (0bd3:0569) [ 1726.845011][ T24] uvcvideo 8-1:32.64: No valid video chain found. [ 1727.022521][ T5711] usb 8-1: USB disconnect, device number 48 [ 1729.016712][T32502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6706'. [ 1729.943006][T32530] lo: entered allmulticast mode [ 1729.964457][T32527] lo: left allmulticast mode [ 1730.233044][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.241161][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.299578][T32573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.335709][T32573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.579542][T32610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.599592][T32610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.429522][T32629] xt_hashlimit: size too large, truncated to 1048576 [ 1733.908489][T32644] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1733.966118][T32644] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1734.881762][T18339] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1735.049992][T18339] usb 5-1: Using ep0 maxpacket: 32 [ 1735.058926][T18339] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1735.077501][T18339] usb 5-1: config 0 has no interface number 0 [ 1735.087655][T18339] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1735.108103][T18339] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1735.131086][T18339] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1735.151770][T18339] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1735.169990][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1735.177735][T18339] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1735.177768][T18339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.215501][T18339] usb 5-1: Product: syz [ 1735.225668][T18339] usb 5-1: Manufacturer: syz [ 1735.235791][T18339] usb 5-1: SerialNumber: syz [ 1735.252395][T18339] usb 5-1: config 0 descriptor?? [ 1735.268381][T32662] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1735.362057][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.383484][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.398869][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1735.415306][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1735.426914][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.458509][ T24] usb 1-1: config 0 descriptor?? [ 1735.491916][T18339] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1735.513282][T18339] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 1735.564150][T18339] usb 5-1: USB disconnect, device number 97 [ 1735.823281][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1735.839093][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1735.859217][ T24] usb 1-1: USB disconnect, device number 50 [ 1735.972646][T32692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.000587][T32692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.800579][T32758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.825345][T32758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.939726][T32761] bridge: RTM_NEWNEIGH with unconfigured vlan 263 on bridge0 [ 1738.400185][T29214] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1738.505232][ T305] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6814'. [ 1738.563930][T29214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1738.589633][T29214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.601635][ T308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.613260][T29214] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1738.627231][T29214] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1738.635836][ T308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.648710][T29214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.673324][T29214] usb 8-1: config 0 descriptor?? [ 1739.101461][T29214] hid-multitouch 0003:0457:07DA.0068: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0 [ 1739.361238][ T24] usb 8-1: USB disconnect, device number 49 [ 1740.306759][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1740.360167][ T334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1740.405061][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1740.426833][T15785] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1740.440138][ T334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1740.451304][T15785] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1740.465154][T15785] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1740.476650][T15785] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1740.857718][ T349] xt_SECMARK: invalid mode: 2 [ 1741.140654][ T355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.163607][ T355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.197897][ T355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1741.357775][ T355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1741.382348][ T355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.427638][ T355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1741.442532][ T355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1741.457940][ T355] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1741.498227][T15785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.505576][T15785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.528929][T15785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.536298][T15785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.917963][ T379] binder: BC_ATTEMPT_ACQUIRE not supported [ 1741.937336][ T379] binder: 378:379 ioctl c0306201 2000000004c0 returned -22 [ 1742.474214][ T5711] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1742.639891][ T5711] usb 8-1: Using ep0 maxpacket: 8 [ 1742.653693][ T5711] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1742.683829][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1742.702671][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1742.742182][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1742.772054][ T5711] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1742.803865][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1742.816484][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1742.831733][ T5711] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1742.841538][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.849608][ T5711] usb 8-1: Product: syz [ 1742.854223][ T5711] usb 8-1: Manufacturer: syz [ 1742.879883][ T5711] usb 8-1: SerialNumber: syz [ 1742.892114][ T410] lo: entered allmulticast mode [ 1742.905870][ T5711] usb 8-1: config 0 descriptor?? [ 1742.921532][ T410] lo: left allmulticast mode [ 1742.927735][ T390] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1742.948873][ T5711] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1743.030103][T29214] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1743.102907][ T412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.140853][ T412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.186816][ T412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.203231][T29214] usb 5-1: Using ep0 maxpacket: 16 [ 1743.206370][ T416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6863'. [ 1743.214843][T29214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.223685][ T412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.267319][ T5711] usb 8-1: USB disconnect, device number 50 [ 1743.281221][T29214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.320075][T29214] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1743.359879][T29214] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1743.374883][T29214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.419653][T29214] usb 5-1: config 0 descriptor?? [ 1743.433178][T28042] udevd[28042]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1743.913754][T29214] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0069/input/input171 [ 1744.035629][T29214] microsoft 0003:045E:07DA.0069: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1744.110560][T29214] usb 5-1: USB disconnect, device number 98 [ 1744.257494][ T433] fido_id[433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1744.341644][ T437] netlink: 'syz.3.6872': attribute type 12 has an invalid length. [ 1744.557165][ T441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6874'. [ 1745.768653][ T464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1746.863827][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6887'. [ 1748.194531][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6900'. [ 1748.552233][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1748.722028][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.736432][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1748.749991][T29309] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1748.774330][ T24] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1748.791647][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.806930][ T24] usb 5-1: Product: syz [ 1748.825441][ T24] usb 5-1: Manufacturer: syz [ 1748.833565][ T24] usb 5-1: SerialNumber: syz [ 1748.865703][ T24] pl2303 5-1:1.0: required endpoints missing [ 1748.912873][T29309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.934150][T15784] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1748.937774][T29309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.957580][T29309] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1748.969324][T15784] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.976799][T29309] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1748.989221][T29309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.009961][T21611] netdevsim netdevsim6 : unset [0, 0] type 1 family 0 port 256 - 0 [ 1749.022039][T29309] usb 1-1: config 0 descriptor?? [ 1749.027132][T21611] netdevsim netdevsim6 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.036700][T21611] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1749.069525][T18343] usb 5-1: USB disconnect, device number 99 [ 1749.083646][T21611] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.102412][T21611] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1749.128795][T21611] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.342584][ T525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.354596][ T525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.477389][T29309] plantronics 0003:047F:FFFF.006A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1749.668577][T29309] usb 1-1: USB disconnect, device number 51 [ 1749.682297][T18343] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1749.713409][ T533] random: crng reseeded on system resumption [ 1749.852819][T18343] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1749.864002][ T539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6911'. [ 1749.877103][T18343] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1749.936573][T18343] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1749.960469][T18343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.969536][T18343] usb 8-1: Product: syz [ 1749.974545][T18343] usb 8-1: Manufacturer: syz [ 1749.984198][T18343] usb 8-1: SerialNumber: syz [ 1750.060758][ T546] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6914'. [ 1750.261403][T18343] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1750.289573][T18343] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1750.315631][T18343] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 1750.331356][T18343] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1750.365733][ T555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.409361][ T555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.458766][T18343] usb 8-1: USB disconnect, device number 51 [ 1750.561526][T29457] udevd[29457]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1750.726644][ T569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6923'. [ 1751.492068][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6937'. [ 1751.709312][ T609] ------------[ cut here ]------------ [ 1751.715908][ T609] skb_assert_len [ 1751.719950][ T609] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x1fb8/0x3820, CPU#0: syz.0.6940/609 [ 1751.731103][ T609] Modules linked in: [ 1751.736048][ T609] CPU: 0 UID: 0 PID: 609 Comm: syz.0.6940 Tainted: G L syzkaller #0 PREEMPT(full) [ 1751.747139][ T609] Tainted: [L]=SOFTLOCKUP [ 1751.751633][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1751.761868][ T609] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820 [ 1751.767767][ T609] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 28 45 26 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d 48 00 c6 06 48 c7 c6 7c bf 43 8e <67> 48 0f b9 3a 80 3d ee 0a a0 06 01 0f 85 86 03 00 00 e8 fa 44 26 [ 1751.788451][ T609] RSP: 0018:ffffc9000408f660 EFLAGS: 00010246 [ 1751.794765][ T609] RAX: ffffffff89a09fa1 RBX: ffff888077aaa0d0 RCX: 0000000000000002 [ 1751.812242][ T609] RDX: ffff88804cfd9f00 RSI: ffffffff8e43bf7c RDI: ffffffff9066bdc0 [ 1751.812334][ T609] RBP: ffffc9000408f910 R08: ffff888040b528a7 R09: 1ffff1100816a514 [ 1751.812354][ T609] R10: dffffc0000000000 R11: ffffed100816a515 R12: dffffc0000000000 [ 1751.812371][ T609] R13: 1ffff92000811eec R14: 0000000000000000 R15: ffff888077aaa0d0 [ 1751.812389][ T609] FS: 00007f24d77076c0(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 1751.812410][ T609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.812437][ T609] CR2: 000000110c454d7a CR3: 00000000a4fdc000 CR4: 00000000003526f0 [ 1751.812459][ T609] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1751.812476][ T609] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1751.812494][ T609] Call Trace: [ 1751.812504][ T609] [ 1751.812521][ T609] ? __alloc_skb+0x4cc/0x7a0 [ 1751.812564][ T609] ? alloc_skb_with_frags+0x6b3/0x760 [ 1751.812588][ T609] ? __lock_acquire+0x683/0x2cf0 [ 1751.812622][ T609] ? skb_set_owner_w+0x263/0x3d0 [ 1751.812649][ T609] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1751.812674][ T609] ? sock_alloc_send_pskb+0x896/0x990 [ 1751.812707][ T609] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1751.812742][ T609] ? packet_parse_headers+0x4dc/0x7b0 [ 1751.812766][ T609] ? packet_parse_headers+0x57e/0x7b0 [ 1751.812789][ T609] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1751.812821][ T609] ? __pfx_packet_parse_headers+0x10/0x10 [ 1751.812848][ T609] ? packet_xmit+0x68/0x330 [ 1751.812876][ T609] packet_sendmsg+0x1f38/0x4e80 [ 1751.812924][ T609] ? futex_unqueue+0x22/0x240 [ 1751.812996][ T609] ? __pfx_packet_sendmsg+0x10/0x10 [ 1751.813031][ T609] ? aa_sk_perm+0x6d5/0x900 [ 1751.813071][ T609] ? do_wp_page+0x6f0/0x4c70 [ 1751.813102][ T609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1751.813144][ T609] ? __pfx_packet_sendmsg+0x10/0x10 [ 1751.813175][ T609] sock_sendmsg_nosec+0x13a/0x180 [ 1751.813219][ T609] __sys_sendto+0x408/0x5a0 [ 1751.813248][ T609] ? __pfx___sys_sendto+0x10/0x10 [ 1751.813309][ T609] ? rcu_is_watching+0x15/0xb0 [ 1751.813352][ T609] __x64_sys_sendto+0xde/0x100 [ 1751.813377][ T609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.813403][ T609] do_syscall_64+0x174/0x580 [ 1751.813465][ T609] ? trace_irq_disable+0x3b/0x140 [ 1751.813493][ T609] ? clear_bhb_loop+0x70/0xc0 [ 1751.813523][ T609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.813547][ T609] RIP: 0033:0x7f24d679e0d9 [ 1751.813571][ T609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.813592][ T609] RSP: 002b:00007f24d7707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1751.813618][ T609] RAX: ffffffffffffffda RBX: 00007f24d6a25fa0 RCX: 00007f24d679e0d9 [ 1751.813637][ T609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1751.813652][ T609] RBP: 00007f24d6835024 R08: 0000200000000000 R09: 0000000000000014 [ 1751.813675][ T609] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 1751.813691][ T609] R13: 00007f24d6a26038 R14: 00007f24d6a25fa0 R15: 00007f24d6b4fa48 [ 1751.813726][ T609] [ 1751.813759][ T609] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1751.813781][ T609] CPU: 0 UID: 0 PID: 609 Comm: syz.0.6940 Tainted: G L syzkaller #0 PREEMPT(full) [ 1751.813817][ T609] Tainted: [L]=SOFTLOCKUP [ 1751.813827][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1751.813842][ T609] Call Trace: [ 1751.813851][ T609] [ 1751.813862][ T609] vpanic+0x56c/0xa60 [ 1751.813900][ T609] ? __pfx__printk+0x10/0x10 [ 1751.813923][ T609] ? __pfx_vpanic+0x10/0x10 [ 1751.813951][ T609] ? is_bpf_text_address+0x292/0x2b0 [ 1751.813982][ T609] ? is_bpf_text_address+0x26/0x2b0 [ 1751.814026][ T609] panic+0xc5/0xd0 [ 1751.814057][ T609] ? __pfx_panic+0x10/0x10 [ 1751.814105][ T609] __warn+0x315/0x4c0 [ 1751.814134][ T609] ? __dev_queue_xmit+0x1fb8/0x3820 [ 1751.814164][ T609] ? __dev_queue_xmit+0x1fb8/0x3820 [ 1751.814191][ T609] __report_bug+0x276/0x570 [ 1751.814219][ T609] ? packet_sendmsg+0xdef/0x4e80 [ 1751.814249][ T609] ? sock_sendmsg_nosec+0x13a/0x180 [ 1751.814278][ T609] ? __sys_sendto+0x408/0x5a0 [ 1751.814301][ T609] ? __dev_queue_xmit+0x1fb8/0x3820 [ 1751.814330][ T609] ? __pfx___report_bug+0x10/0x10 [ 1751.814382][ T609] report_bug_entry+0x19a/0x290 [ 1751.814413][ T609] ? __dev_queue_xmit+0x1fbf/0x3820 [ 1751.814448][ T609] ? __dev_queue_xmit+0x1fc4/0x3820 [ 1751.814474][ T609] handle_bug+0xce/0x200 [ 1751.814509][ T609] exc_invalid_op+0x1a/0x50 [ 1751.814541][ T609] asm_exc_invalid_op+0x1a/0x20 [ 1751.814563][ T609] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820 [ 1751.814591][ T609] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 28 45 26 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d 48 00 c6 06 48 c7 c6 7c bf 43 8e <67> 48 0f b9 3a 80 3d ee 0a a0 06 01 0f 85 86 03 00 00 e8 fa 44 26 [ 1751.814610][ T609] RSP: 0018:ffffc9000408f660 EFLAGS: 00010246 [ 1751.814630][ T609] RAX: ffffffff89a09fa1 RBX: ffff888077aaa0d0 RCX: 0000000000000002 [ 1751.814646][ T609] RDX: ffff88804cfd9f00 RSI: ffffffff8e43bf7c RDI: ffffffff9066bdc0 [ 1751.814663][ T609] RBP: ffffc9000408f910 R08: ffff888040b528a7 R09: 1ffff1100816a514 [ 1751.814680][ T609] R10: dffffc0000000000 R11: ffffed100816a515 R12: dffffc0000000000 [ 1751.814697][ T609] R13: 1ffff92000811eec R14: 0000000000000000 R15: ffff888077aaa0d0 [ 1751.814722][ T609] ? __dev_queue_xmit+0x1e1/0x3820 [ 1751.814762][ T609] ? __alloc_skb+0x4cc/0x7a0 [ 1751.814800][ T609] ? alloc_skb_with_frags+0x6b3/0x760 [ 1751.814823][ T609] ? __lock_acquire+0x683/0x2cf0 [ 1751.814855][ T609] ? skb_set_owner_w+0x263/0x3d0 [ 1751.814882][ T609] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1751.814907][ T609] ? sock_alloc_send_pskb+0x896/0x990 [ 1751.814939][ T609] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1751.814973][ T609] ? packet_parse_headers+0x4dc/0x7b0 [ 1751.814996][ T609] ? packet_parse_headers+0x57e/0x7b0 [ 1751.815019][ T609] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1751.815050][ T609] ? __pfx_packet_parse_headers+0x10/0x10 [ 1751.815077][ T609] ? packet_xmit+0x68/0x330 [ 1751.815103][ T609] packet_sendmsg+0x1f38/0x4e80 [ 1751.815151][ T609] ? futex_unqueue+0x22/0x240 [ 1751.815213][ T609] ? __pfx_packet_sendmsg+0x10/0x10 [ 1751.815247][ T609] ? aa_sk_perm+0x6d5/0x900 [ 1751.815286][ T609] ? do_wp_page+0x6f0/0x4c70 [ 1751.815316][ T609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1751.815357][ T609] ? __pfx_packet_sendmsg+0x10/0x10 [ 1751.815387][ T609] sock_sendmsg_nosec+0x13a/0x180 [ 1751.815429][ T609] __sys_sendto+0x408/0x5a0 [ 1751.815457][ T609] ? __pfx___sys_sendto+0x10/0x10 [ 1751.815515][ T609] ? rcu_is_watching+0x15/0xb0 [ 1751.815554][ T609] __x64_sys_sendto+0xde/0x100 [ 1751.815578][ T609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.815603][ T609] do_syscall_64+0x174/0x580 [ 1751.815632][ T609] ? trace_irq_disable+0x3b/0x140 [ 1751.815659][ T609] ? clear_bhb_loop+0x70/0xc0 [ 1751.815686][ T609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.815709][ T609] RIP: 0033:0x7f24d679e0d9 [ 1751.815730][ T609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.815749][ T609] RSP: 002b:00007f24d7707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1751.815772][ T609] RAX: ffffffffffffffda RBX: 00007f24d6a25fa0 RCX: 00007f24d679e0d9 [ 1751.815789][ T609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1751.815802][ T609] RBP: 00007f24d6835024 R08: 0000200000000000 R09: 0000000000000014 [ 1751.815819][ T609] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 1751.815834][ T609] R13: 00007f24d6a26038 R14: 00007f24d6a25fa0 R15: 00007f24d6b4fa48 [ 1751.815869][ T609] [ 1751.816478][ T609] Kernel Offset: disabled