last executing test programs: 19m23.500011534s ago: executing program 1 (id=701): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x1433c2, 0x24) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) setsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000000)=0x800, 0x4) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0x9, {0xe, 0x7, 0xc647, 0x40008}}) 19m23.39153221s ago: executing program 1 (id=703): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0xffffff69) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0xa04000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80801) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r7, &(0x7f0000000200)={0x2a, 0x3, 0xfffffffe}, 0xc) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x8, 0x400c00) ioctl$FE_READ_BER(r8, 0x80046f46, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 19m22.98530137s ago: executing program 1 (id=709): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000f3ffff0014000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) clock_settime(0xfffffff8, &(0x7f0000000140)) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a60000000060a0b040000000000000000020000000900010073797a3000000000340076803000018008000100636d7000240002801000038009000100e7a6f6264f000000080801400000000a0800024000001400000028e1a74250e7d38a067cf81100010000"], 0x88}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='name', &(0x7f0000000ac0)='\xf0\xdd\x0e\xbd\x00', 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x1010, r0, 0x60d9e000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x0, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000080)={0x8, 0x0, 0x8, 0x2, 0x4, 0x9, 0x10}, 0xc) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'full', 0x20, 0x5, 0x20, 0x6}, 0x2f) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f00000000c0)={0xc, @local, 0x4e20, 0x3, 'dh\x00', 0x38, 0x4, 0x22}, 0x2c) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100)={0x19980330}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ftruncate(r9, 0x57a645d0) 19m22.862865042s ago: executing program 1 (id=711): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4a003, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xd8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x206a2e2c, 0x0) keyctl$search(0xa, r0, &(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, r0) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000440)="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", 0xffffffffffffff58, r4) keyctl$link(0x8, r0, r0) 19m22.838396801s ago: executing program 1 (id=713): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2b, 0x1, 0x0) close(0x3) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x4, 0x518, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xb7, 0xe3, 0xc5, 0x8, 0x1199, 0x68c0, 0x9ab3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x506, 0x1, 0xd, 0x8, 0x90, 0x8, [{{0x9, 0x4, 0xe0, 0x5, 0xc, 0x0, 0x65, 0x60, 0x6, [@generic={0x64, 0x6, "5be27ca60d32dc404fcba70c98b1f9b9d98710f76132b1cf9b7166a9bd856e23f1d3e8ecffbaa054d6390444945aebe9123626c1c9164375b51b3f46137f157a816cc395a725bd6453987498b51ac11692292e1a487f6c307c4e01696ecd0240a49f"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x8, 0x8, 0xc1, [@generic={0x7, 0x5, "0ba19a1819"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0xb, 0x1, 0x5, [@generic={0x2d, 0x0, "02b150d04ebed5ffbe48f7d66cbba90ac1c10ab3806f3a4b56c11c5a887e746c9e06036e7097f040842e16"}, @generic={0xbd, 0x11, "6ca51ecc5cd972f059fe51d531ea70de32c3d1349eeadd662715a63b5bd1de491b5a2bf50a8f7e6c7110fb7aee134b855aca7a929531c34ba4a890fba49c34b4c5c81f72ff2c914ee002218e56cbca2f2371a5bf3c9c186b529ca1f4f8b27bc1abde0703bcea11ff4ce5704f91fa16f8ddc7b0c53496705e20566c1478f1ed23d9cbcf3edb6edd87b8803baa403cf6fb3da9423972ffbe2b037debc3cdbcd122e0e920f8ef238b0539d9ba1e75a16f874e585abf60926d3c6f70ec"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0xe, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x0, 0xc, 0x2, [@generic={0xd8, 0x3, "03d9c68d24942940f6b83531768b7aebb5a58e74d41a1cbb42602bda0fea53a1e224733bfe805bfb5271c6868fb071d8cdeb47ea3029039230a4315efe0d75912b3e88befdaf5377ec8327dbcd04049e3273817300a179e8b07ea8c8edf59e2df3382d9357d2cc476a17f9de7c0bd9239ef3743d35e899f44cabaa53249740f6974f13e3467e065aa91416b4128497d215979604603f02a3a07fba457eb41cc72ceca2f1cf5815ad2e5201991a6d5d43ea925969ae114902bc987b6ebcee207fec746aab3be75d29ea6678e30f3128daf1042b65ba6f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x7, 0x8, [@generic={0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x5, 0xfb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x2}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x4, 0x7, 0x28}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x8, 0x2, 0x6, [@generic={0x6d, 0x1, "a5f49c682665c973ce85be15110c5a811db56197451defd1bb3cd326aff9e41cbd96b7a41d3ba6882c67513bb0cb034abadb252354ddfa7e9bc637b3cfeccc1b62a336a81c278dd1bea3e2d972836402a54aa1a24f754c3f164744456a8fc401005cf18450fbd54b571bb4"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x7}, @generic={0x71, 0x8, "246279802d8b7c345187298372d432a0eeb18a98f3480173919b4b6246869b890d0aa22348fbf9b2408583e88ab29937a6f4f10d78305142103ff5aa8d05accc461f818daea2c7f282735b82f4d422830eb16332cc00679f3a3a33017f984eddff74a6be4dd388f33af2ad348bc763"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x4, 0x96, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}, @generic={0x6e, 0x21, "bf3cfd46d0c74e94ffb34fb3997808d892b501338b0fb0756a072c6cad24c0b1cffec3f7caa8ad64e058cb1181da47a64f6192182aa8c3e518e454b25945774fb261f2a12c0a5163977589032373a646b017b737985d6c84823be37169a15bea39bb98b6f385dad2c5270817"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb7, 0xc}, @generic={0xe3, 0x11, "5f24db102dfa841e375923f1ff1ec06b77e62f5a1f8dc2f9ba05de40982e7c0193b27bd00b984833bde6556278196087782ff9fac7e6894a9e3ae71e5f0a8461a499e1b9954296534dc829bfa11c0d81eaa0d0b3587122ee60e22e32005aeda36cbb6bcaa5a241e3d54e09a151e404f697f86ca36a3344abb864fa18a7cc462c0e256712365127030baf8ffb1462888904aca80c00750edd03317fe5450a661cc0007b3f2a041a318bd376052fb09b0439c4ff4f638aed8bf58146fc995ec875078bde47b4f9769eff5d6672533acee3672e80725762472da14803514366528d9a"}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0xa, 0x3, 0xff, 0x9c}, 0x110, &(0x7f0000000940)={0x5, 0xf, 0x110, 0x5, [@ptm_cap={0x3}, @generic={0xea, 0x10, 0x1, "0493a0ceb6be250bae89f266c2de08817abd66135d82c80f8064e12976b3d337ffb8954be16a63db476ff049b1c9886feea554ec3616e45a68ab0dad4c53270c3c3c8a16b8d75c7a8df26e1c752125da04b5d70970cc5f57d5f04e2d7697a7ae18ff316aa51ef739399ac676f78d17d77edee799d5a37553ea94149dbf2a3149fc62d3944367caf72e14f7b3680f67032aa8fecc1a936a1c33de4d0ffc22c23150fc4ec4572fd2a33d54c4af4f54ed5e77583b1ca38c280c56ac0fc9cfa27439030765c97562f6270e20b81b26ae79b05abafdb2a9bfba73ab14297f36e14c2efd5b15b3c65381"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1c0988b11900262c2d18eac5b18520b3"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x9, 0x2}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x409}}, {0x63, &(0x7f0000000a80)=@string={0x63, 0x3, "3fb9c67031dbe688ece8c32ea4a10b9c49cf67457def738d491535a2cf7fd8f872cba9ccae27cc0c712f373a36c0a84e12fa4e7aabb3d9935b5080fa9177d1c476aaa0f0036d50c1281278b9b14764288b7459b152fb4dee2687119f6568313710"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0x6c, &(0x7f0000000b40)=@string={0x6c, 0x3, "0c918a994a21789e08df1b5b9bcaed2cfdc29d1d8ecbf07cb78e8cd7f33e3199a63873f52259ba4647c190c8ab9ce7d4078640b422f33bd8f509876f552f68d425f2f13b71a9411fd35785b0d0c8dbb5da3e9fb8b67b4640375c8c580176463f9ac9870fde45d5cfec4a"}}]}) socket$inet_sctp(0x2, 0x5, 0x84) memfd_create(&(0x7f0000000200)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\xf7\xd8V#\xb3\xcf\x1f\xbd\xef\xc8\xe6\x84*\xc0\xfeR\x01\x95', 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) r3 = syz_open_pts(r1, 0x400900) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000340)="89f5c27adafe93b12113246d096f1578249e52ac5f1b2724f6c2638a220a3b59ab934e3a822d86cba1565674bea76d73ac0f5f34f456eada484e00fe902e42d0fbae2db19352276e78e8a920450c9658de41c1704a96ebb904a119778c0e4d7efba0d5080ec0ebc2bdd594df5d768ed5764382851ce77727748214b211cb517b565f8d0a042566e28f68ff350d48a1a592fb94c953608b5518510d1cd04f1e1ad65b7219a92412") sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1200000000000000840000000600000008208400000000000000800000000b0040015a93fd9c82e2de3069d050e80298d4d7f8b1b8e1f7959a924da0aacbeccc"], 0x30, 0x4}, 0x40) 19m22.619353309s ago: executing program 2 (id=715): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='exec :'], 0x1e0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000440)={0xa2040680, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) 19m22.618641719s ago: executing program 2 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x34}}, 0x80) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0)=0x4, 0x4) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6c23, 0x3c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6e}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xca}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x42}]}, 0x38}, 0x1, 0x0, 0x0, 0x47}, 0x4000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000580), 0x60080, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000005c0)={0x48408c03, 0xf6, "43572f6d7d77dad21225282ce2068bbc6217cde2cd17f7f49416bf82e263762365580fde413c70a745c1bee534cd2488b300444f3552085c0d940275620ce88c2a5926593b40b1659d1c038f115f621a7c70f3b1cc976545e45fbcee44ae93c370311c8dabe1e263d25bac6c472ff137304fe2111c740343a56f39bf8b9deccd6700486801234a548c96ea1113d3927d29480473e9d031120f57074995dcd65371140194614eaaacb30e16c68ada9cb1cdeb0e3b45d8430fa96c67228a4ef44b90b62d98e5b4c88f39d50369b452b15a1fc6656c2d015dea90b021fb18d7ffe22ac79210692880cb4203c03432026c937f4fc5bfa473"}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x4) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ppoll(&(0x7f0000000740)=[{r4, 0x64}, {r4, 0xc000}, {r4, 0x8}, {r4, 0x1000}], 0x4, &(0x7f00000007c0)={r5, r6+60000000}, &(0x7f0000000800)={[0x1]}, 0x8) r7 = memfd_secret(0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000840), &(0x7f0000000880)=0xc) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000008c0)=[{}], &(0x7f0000000900)=0x8) ioctl$int_out(r4, 0xa8c2, &(0x7f0000000940)) recvmsg$inet_nvme(r4, &(0x7f0000000e00)={&(0x7f0000000980)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/33, 0x21}, {&(0x7f0000000a40)=""/193, 0xc1}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/133, 0x85}], 0x5}, 0x10002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000e40)=0x10, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000e80)={0x0, 0x77}, 0x8) writev(r4, &(0x7f0000003ec0)=[{&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="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", 0x1000}], 0x3) timer_create(0x0, &(0x7f0000004000)={0x0, 0x2f, 0x0, @thr={&(0x7f0000003f00)="48562f8211b6e537ca90c1d7f89a9d15cc68241690c3d0804b95e0d7d256da3af2aae1d99418aaf332159cdeacc05079d5d7f0b37d0307184c589b", &(0x7f0000003f40)="dc12d789e688c339efd0eec1c277e10411a7ef93e63603c61f250f7649b2087388ee6667ac90faad9785b9c3ddd6114802f8e98a6216f832a20a11d241a32356ccaddb6e023dc775632d9a8026e13267cec5464719a69db5bae74fa54e28368c95f09e5fa0186a56d545455a7644171c803da6321be42447e162f48ca6cacfb988b76c788d4c97b4b9b92c0b01b99a05b722d5fc27d29eff278a96a7f83515285d45934d2e059eaf0fc734982ee37e1ccd03fe"}}, &(0x7f0000004040)=0x0) timer_settime(r8, 0x0, &(0x7f0000004080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000040c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000004100)={0x0, @in6={{0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0xa0, 0x3dd8}, &(0x7f00000041c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000004200)={0x0, 0x6}, &(0x7f0000004240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000004280)={r9, 0xb, 0x8000000, 0x606, 0x3, 0x6, 0x8, 0xa, {r10, @in6={{0xa, 0x4e23, 0x7fff, @mcast2, 0x4}}, 0x7, 0x0, 0x8, 0x5, 0x5}}, &(0x7f0000004340)=0xb0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000004380)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000043c0)={r11, @in6={{0xa, 0x4e24, 0x0, @loopback, 0xb30}}, [0x0, 0x9, 0x8001, 0x7, 0x29, 0x3, 0x61, 0xfffffffffffffe00, 0x8001, 0x10001, 0x1, 0x2, 0x2, 0x8000, 0x7fffffffffffffff]}, &(0x7f00000044c0)=0x100) 19m22.262698939s ago: executing program 1 (id=717): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x3c6e, 0xc0000060, 0x3, 0x1b, "9f940b3491d052d172e0e573229ac6de50806c"}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0xfffffffffffffffc}) statx(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x6000, 0x800, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@access_any}], [{@subj_role={'subj_role', 0x3d, 'version=9p2000.u'}}, {@uid_gt={'uid>', r2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@fowner_lt={'fowner<', r3}}, {@flag='ro'}]}}) 19m21.659546846s ago: executing program 2 (id=722): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x1e1200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x80, 0x6, 0x4, 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x3, 0xa, 0x0, 0xffff}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x8, 0x401, 0x7, 0x800, 0x9}, &(0x7f0000000180)=0x14) 19m21.569904465s ago: executing program 2 (id=724): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000021d233c24a0842578946150001000000000000000000e000000200"/44, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"], 0xb8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0x810c9365, 0x0) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r7 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f10000009800000000000000000000108f"], 0x400040) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 19m21.066642162s ago: executing program 2 (id=726): r0 = inotify_init() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 19m20.070829734s ago: executing program 2 (id=732): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) 19m19.89155933s ago: executing program 32 (id=732): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) 19m7.226758302s ago: executing program 33 (id=717): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x3c6e, 0xc0000060, 0x3, 0x1b, "9f940b3491d052d172e0e573229ac6de50806c"}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0xfffffffffffffffc}) statx(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x6000, 0x800, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@access_any}], [{@subj_role={'subj_role', 0x3d, 'version=9p2000.u'}}, {@uid_gt={'uid>', r2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@fowner_lt={'fowner<', r3}}, {@flag='ro'}]}}) 4.130691691s ago: executing program 0 (id=6299): syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) (async) r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x3f, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) (async) move_pages(0x0, 0x3f, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.543577548s ago: executing program 5 (id=6305): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) 3.404447644s ago: executing program 5 (id=6306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000280)="00000000020001000003be8c5e687a8a", 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100022406"], 0x0) 2.153448304s ago: executing program 3 (id=6314): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) (async, rerun: 64) ppoll(&(0x7f0000000140)=[{r2, 0x200}], 0x1, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x4, 0x0, {0xa, 0x4e21, 0x1ff, @remote, 0xfffffffe}}}, 0xfffffd0d) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.048287443s ago: executing program 3 (id=6315): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/31, 0x1f}], 0x1, 0x4, 0x3) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @local, @private2={0xfc, 0x2, '\x00', 0x5}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x2, 0x1000, 0x64, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x0, 0xfffffffc}}) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x5, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x23}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xf, '\x00', 0x45}, {0x7, 0xd, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0xff}, {0x56, 0x4, 0x1}, {0x3, 0xcf, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0xc2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0x7, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0x8, '\x00', 0x7}]}}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async, rerun: 32) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x14e, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x5, 0x8000000000000004, 0xc595, 0x0, 0x1, 0x6, 0x2000000000000000, 0xb0, 0x8d], 0xeeee8000, 0x2010d3}) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r6, 0xffffffffffffffff, 0x80000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 2.023860182s ago: executing program 3 (id=6316): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x10001, 0xffffffffffffffff, 'id1\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="5400000078000106d4fcec7f030000005ab02b2774c88b083c8fe52ab48e5ae2f8d3d93553aab1a538345873412bc6bb1c5616b5caf1470f55173b03ee193b54652bbe9c37008280b529bee5cf3a3e38a6410000"], 0x54}], 0x1, 0x0, 0x0, 0x549784c163dc3584}, 0x20008055) 1.980100093s ago: executing program 3 (id=6317): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70023000000090507", @ANYRES32], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={r2, 0x58a6, 0x2, 0x400, 0x9, 0x7}, 0x14) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, &(0x7f0000000000)=@ret_unlink={{0x4, 0x3cac}, {0x4}}, 0x30) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.811869386s ago: executing program 5 (id=6318): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x82002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8001, 0x100}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x40}, &(0x7f0000000140)=0x8) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1004000}) 1.7266697s ago: executing program 5 (id=6320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r1, 0x3, {0x0, 0xff, 0x2}, 0x1}, 0x18) 1.65923476s ago: executing program 5 (id=6321): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) syz_emit_vhci(0x0, 0x0) 1.567442696s ago: executing program 4 (id=6322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nullb, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f00000003c0)=0x800001, 0x4) listen(r0, 0x801fd) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) clock_gettime(0x0, &(0x7f0000000100)) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}, {0x77359400}}) 1.566374303s ago: executing program 5 (id=6323): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "280cdf93", {0x1, 0x3ff, 0x7fff, 0x0, 0x1}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) r2 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0xfe, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="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", 0x0, 0x2, 0x0, 0x2, 0x0}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000005440)={0x3, 0x2, 0x0, "c165800400a27d4c2328a656f51640957f84b6a11d204715fac6704bbdc92e00"}) 1.509329795s ago: executing program 4 (id=6324): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x499}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008800}, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100a1201000"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100a1201000"}) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ff05000000ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "1277a5904e3402bb"}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r8, 0x0, 0xffffffff004) (async) sendfile(r6, r8, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async) sendmsg$inet(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r10, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(r9, &(0x7f00000006c0)=[{&(0x7f0000000fc0)="1a00d1bed6cdf42c4c71ccf5bef8c673723a4e5f894c879abd153c920b58a0687f1adfa05edcb2d26affd583567c6a49276ccaad12faf4ee05ecffdc3569680812e98bfdc6c87a92992bc3623743339cb72dff62034108dd8623e18e9040da705ced504e5381092d135092bf415c08340c0a34bb1848c53c8cc4ebe35142bbd80bcb91eebc5f027d542ae7f52560a421276f964785027b92e0e0de966d2f981022e860fa741b797e08be16abdfc624dc1e66cdc74ac45628b0bfcc54cf0f3eeb20bf2236184216cea94d1e64e27a4c2432827846f5c4893670b263914bd61012251280c71bb51d560f27ae0bf0912566e818c291474c1b0cb1160d2a5129baead2170d9e6e14c89dde47a3e1bced390b028de178f691aa17a17d9a8f1d29df2e5a8d8cf0d0830140a7eedb0f4e05d0e3a5913f47b803363aa0f50a7594e6ad3b2ffc5db07736ab74b1301727584f4a71a0ac94e6ac7eb77609ee83a909f39751df9975d1551069a56ee58a364b5bdfa13d49c9adf99fdf70d13f0fa76d36d043feb803bb47bfae2f243ea1bd87e5ebd20ade98ae6be013040b96c9dd4b78814ac452c38ae166eeaadc229afbab3baa68b2cb5940f9dc335cada324b1e3041a4609401edbe20f6d22186189139c808e65628ea315184d9e431821e4c6a6a5048bc2b9ebdff28b9e30be1c8a678763a534ccb787632c77a04e8a43618dffd9a3ddd9134a298989d6844150fef9ef787fec0e2d3ca7374aeb5eb3575d9f4b5352757c4f8e0cccf7f53466f7386087cc326984cb11237c6ef42edd2e4fd53d5e7ffa9d792f3c9b29802449cfb7c13d56e3daa8eb7e7b56705621e8041252f04b9e6572726a6bb3a1ab03e8d5e342a2cf66098b2df8ff1ddcab27bbaa78968febc35fbb1dea2889ac72496fa7c26623d880f8afc86516b53baeb41b231ad627efeefdbc95db5e76e672ad2fcef800217e143977c4b4c7cce94375cebdb12a3b86ac06560319adc1030a46ad4063650deb3827513dfb3723a74bfae70444db5558599a30f37d5f751bcaf26eff1609274ac72bfa590071e16e1d7e119cb3f7961f73c71d2db1fb7ea5f6a80ca0ef405323b5c244a6db95eee0b186430da4ce092d63a0ac316355ea4e1995abd1bb3f19987785f8f49583d0552d66e6ca88843798de577c05922cd89ac403568c393f6663c46713600b7688b636323a56f909eaf841b5f2b68aed8f1e0e35688be6cf3f2a56a0f354ea61fc5eb94c818265016b82fec197171ec9821f1d531696b9c69c60ce69f0fb64a32bc0e6123f791c574cd014aff40d79dc4c61af5fe5324a732671618fa9507b88dc2d5c7b9bb37801f3b8cff4d2ed9509d8368fb25b59f4fc861b27e9501fb0134da173db85bce7d19cde2e37df55f943f6d1d66f3888c2cbc1412b6378c9a1e840891fd58938dd6182a9958b7ebee4e2d7d019faa1ab985e3341882692766daad8b101a44c3052d2456e69be026382bda45c02cae7cd21404e9792c52f4f477ca2889231b6909861e51d233a3fe4d4880e6e86eb82713210e7dcccaa0e0368bea479e94f46b71a38180a419e7b5d8a94ff5e3a7782394fe8816ae54fe22f5dc1377a7cc18cc62a322292a0d2f08160b658f2931f44bae3edcd9deb828ca83a9a37774efb81656cf7241b5a6ce31f37ffccace530e2f73b59ae2fabbd9a7388d04da2839764f7853bbec4d6d30114bb2f29873045517ff51bd15ac25a22caecb3e6835d4a5cd3ef83e8497ae3073a473abfbfebe28248230aa91cd6de00446baf7ea486f293535fe9bbb03ee7f9542817cfb2364fa48138ffe097e20c503385b0cb1b45e7b853d6d3e5df48de29ac242eaee2f8aee4af9660be7d95bbfcfe9aa565f056e9ce2ca87799a831c3b9acafbd976d7b0130cc9ac0acad491e934055b5f72ced97883568c9305ba3e9d7c0ffe6649a21f6f036f76e5bcdcc854556f27874b1e47d8526075916e40b91814584471050102893480544ca9a1899c78604300c865879eacd3e1a85abf568871fd41235fc7aa488bba4d35be9836eccee96c0b602de1f86db002651efe49d73246017ee5cd8ec224bc6c5661565c928eb76b78ee2d4b2c8b680619dcf1b597140936fd204d673e116998ce3b6b36bdf6cde73fba5d22a5c9ea06fdbbdcbcbec7a20b7102e046b25dec6855a1c3fe83775dc05452c2ed2031d832cb7af8bb4fae53d5ee65bcda140ad505cef0cc998fedabf71d021be7e6bcb80323eedb57410f54191773b608f7290f76ab8c40ba98d5a95ef46b74204390e2e1c6a4139c8dc77222c8610278e4220949c0ab9813660446bd797653e6e2742093cdcc58ccee9c71497d4777bcc4aa76756f0a8aa3ae1c9c127d0a281c6b92ca9eb62eed5577d9b0f139f9272daea1ddd25f75255046befdd798c1f4bc15ba2f3bcdd9c88ffcc5683961ef07a6159d6c48190363fc7cdd0e698926b1e64b24d7de95706e7564a88a1cea92102186caba34dff8951a701acdbcae620ff58d84e0ebea83e23978a176caa1fe0d5b42197f84e9f867a663e744a6e5a93c56963aa1a854a30ef41fdf3a4068d75717f51f83855867a0aae7fe79824e144a62974303038a669f0d0d346157e30bb0440c68fd62a4f15ccb5b97ba5c036fd2ef3e2d27ab21af6ac05feb57264a27c07e786720d0fb34c4e89fb6128ee48cbf7dfe219f4797b5298abe2847319ba8f14231dbda2c7ba728089cd836c79872b614af8f31e01fe216c63e7918659944ca3b29353ec5698ac0c6898d251063f8c2afb1053e60e819a3c2dc46ad54214ae153bf753104f8aa922cd56becef747036d0087602fda669bc8c00d5118f6e8a294b1acb8924884709fafdc4eb9ae55029aede5aac629f8f4f1d9c6d6bf11c661c587137d2169a72cacef8521d722adfd005c9021bd4a3d8424ed8b9f8c38ca3380e8b52a6f809ab0fa172c73ab32e861273936d15ad524a2d47cef13576b28b8b7873f0ebc14ef59d4cf3db1b9112402e560de67ffb1e81be1b82fda33b5ee3b6953d1a958d5cf5adfe47adbbbb790d14f0a050a9ec5bf3f01496e39c00f49156c378c3275e38644eb9686a1f5433b780e80ee9ef0e1b56fe6917f0e15e3b5e7bad3dbf05dd6c50acbf9be7d80cc11d750dcc0c2705698d174e8e0baffd716661b6d1ba4eff1c703d19c7230426da7521c3d7d0190ec1517780b946a56a36fc2d0b8a7efb71f8311d6aa89ce79e9996a694dde56a4f43659c71c4bec615840c7dc850ac3d0bd7b4ef85cc8a44f4b301222202a0639ff062f2b794609b7f613285e593354a34e817c4bf1be71371ea4e99732363213c786820644a0ce415453ea7a94e5da1f595e7649d628cadd3e8c271090d64dcc655312f05fe6a95cd8f1fab707f8d7b59e3862811f2d79488e49b4a4ccfeeb2fa206be9bdcd71ee1482d0250a0033d5f253fc9ee8130075da153f03fe168bd6b1b4d7615bfdd9b2026ff3fb9d50fc4c93ff68125a00c24cf4be1e3da9da655a378cc710fcaaf31e1234918bed74fcdd124a3e75a704a09a947a30d46fe86101d6b445faeb421e549fdfdbc763afa20c94b5f95a0458f01e4ddcfd00dc8abc5f0b541ef75bd3b10280d353c1dfda0cbad3ca043c25fef9cf2a1e56ac2ecd9f1d15158b77cbdc69ee663f9464d19733a56c4a829fd81371501fef98029e6ba622f0ae9493d5843d76820c1389a44eac87b97372532e393597c9756eed7603eab04174e4f4f10ace7dba49f51af230df7b7749100027680bdcc0ad6f2564729b621f3225d500dbeb9b213c1c99c5af66e6cca5200d6c84f8251caaa553c87725d1384c71445dd948872855a0a777eef24d25a752245527196ac4429e4a0983c0e76b15ad73a557a40dabd864a37ac47fe2a72d3ac5689a56be972f49822c3e1ed929063a530c9a90a18f35d1045d330fbf4a3af2ff63455172985760b3d64d8eb017eba46261f54a4e599c489a4e8b9089bb6bf0de9333abcdc39e48619ddbf1022450e142ca21aee74090800d7de90c8e299542954eeed090c8eb61583cb1b04276bdc213592ec8db970c1ca38d1d67182b21bc0f3c727bcc0018a2b85799a8ebcb2f1ff427dcff4b2bd5e3374e2240e687f6646ab18b5fc320cb6c172d92a47f6bda4bc79488038b3df32354c899bcc04a2706e4f0f7ff5d857fc59fcd28c0a35f24d5944779791d7a5b425e9216291b671fa11ea6da772c6ffad6a9b4dccbb89256d66822cfccd6f9e3ee0ec996ff2adaf14dcf767cfc3ce23712b16359876a130316e882da886b41775453925014113d25a522661d006ac6be39cf1ad909c164219c4efd3d0753d28c52fe04d29a22bf800e0e6334323efc67c9f274a3d5c816828cfd799651cdf2651a35d68ab9135c52d698576abc33617164efe5defae3426f803dd75d437060a4b2d4f7eebe44f86017c67c493d06b8840ce93e496c626c3a2907d2ed750caf63ea828264448cb5cf5b35f311ac196972821204dd3f660c137e30472b79c602b5204dbe614800c9fe7a13eb15e8136ad605c1b06eccbd7eeebadc793e6e7159a90979de79a08a26d187f3cd8d014282e948c8628cd66a904c14a229754831666505c8ea94584301a256fdc03e9c8d845919427154f91e5d00d64e9b62082d690ed0e850da30441f4300737d8affa505e6cb1ccab8214c5dbe6a02fbbe9438c06765b1be1d262f78b645f1760697dba660d65c71d5ca05386d03a3560731de17610b44b6e4868ce54147e587c044e8fd3bf73673f563e22996b5d322e81c4b793285c222f59e351e356ee38338dfdbc7c1588912869ed620acc289cbb69796a2f12e5b64cec327de6d18cc4b8eab489af7c5885e737668eda7121567a208eca9e98ff00b016b68fb5ea8cd1f27bc32a1741d5cff6ea3bece8c11c332b3f17f2f877982df2776e7df3aedf75ee50a7e9a0c51510387657ba936d5afc0bcc83d18761086faa3735e5104b6d63d793878fcd28c336b8f03c42d4d79fb85d3b9da70b7add1ec3e25333563f5c7468acf9d9d3e9eae11217d9f78e4d757fcf69879f058456d22f3d3986c0ecd00dd62db042397112a8e89d5c8764f1e68b132ed91bf847faff370f09506762c7a10423424153a127eae4e5e999ffc39dab0003b8650418f89968816a117ceb92bf03352d2f9a301909b2cc6f256ba845c209a9ca2682acf6d5bbca94e562eab25be0df593fe7ce392ff4a86e9ba5b5a82529d4cadbdb52dac131796c2cbb43f698023e57a6e1ed975def5f4adc88b9c802a52a82cd76449053bbda39c1ed6528e0c7fcaa9f33c60a7cc4b99e3220832c0e4c3e1a9d2848ed3c558042b3b046cd8c16cd631afaa8815542a197f61df350df1b73f4b2e1d104a94a39fcdb2975165016de724b076796e30a8eb9421f0306f05a50c293696a86d17b1aba470f0d8a4d50e391b534920a7f9f95e63e470b0e67625a4317939600bbee6ccd76add3cee975db061eac8d6f0f4ec8f5da5dcc4c7dc286fad22f6127348de926deca07fa755bfb5417d2b5e5a41b7d4645f71c1a4da947c134a6f54bfbdc15c3fb8acbc0a62b86633134e87313325c1e1bb69c2013cffdc0cf4f9b1aa8785d76c2b0240e252a78649d9a4eba1a186f9b059719762519c6f5ebce3e0fc6b6d3b12e3377f1fc8fa3e7ffe3fed6b9bca93d448e1501e34a4166dab1187c5669f7368503ac48e5f901c8c91a80ced574bb0e1c25d19c47aca59801b3faa8326bf8304de1a9c4435bdf9e0cf3b6a1fa938526e59c45a9418f", 0x1000}, {&(0x7f00000004c0)="c2a094885b780cacf1ff78f540023a62587f7bbe48d2d44db56a0a961ad3b519163c01b5b6d57bf68ab46ee6fbe9e9113f56cdb9ab2aaea14e4c8c2c24128311998aab32f1a2fb4b19ba40b529bc60cebb1942394c67e0b42b4086cadfe39a599c298714e155030732c8", 0x6a}, {&(0x7f0000000580)="598afaa6b89e3398389d27ed7057d3d505a25c792ee7ab233bac867d7d3e2437123f13717685ff8e62f676854ed00f28e3de68b693e8229b828018f029d87a5a47f68f1be847c29326f81dd77939fba559ca69abdad49284518ea02e4171e1c2a3804da8eb4871ffd792dc3babd172b9c3dca31cf441004ee0e7", 0x7a}, {&(0x7f0000000600)="6a9e86044b7aef4a579891b6d5b806aaab6a6ddead145084095dd5cd", 0x1c}, {&(0x7f0000000640)="c526713d3acd0430cd1d5842faab2c301d0dc5335a9f62ab46bcd03e8a86849482f621637deeafc1989244564ecc98e9da94895af09ccae3430017f2a806d717649da20a965d8a79306d", 0x4a}], 0x5, 0x7) (async) vmsplice(r9, &(0x7f00000006c0)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f00000004c0)="c2a094885b780cacf1ff78f540023a62587f7bbe48d2d44db56a0a961ad3b519163c01b5b6d57bf68ab46ee6fbe9e9113f56cdb9ab2aaea14e4c8c2c24128311998aab32f1a2fb4b19ba40b529bc60cebb1942394c67e0b42b4086cadfe39a599c298714e155030732c8", 0x6a}, {&(0x7f0000000580)="598afaa6b89e3398389d27ed7057d3d505a25c792ee7ab233bac867d7d3e2437123f13717685ff8e62f676854ed00f28e3de68b693e8229b828018f029d87a5a47f68f1be847c29326f81dd77939fba559ca69abdad49284518ea02e4171e1c2a3804da8eb4871ffd792dc3babd172b9c3dca31cf441004ee0e7", 0x7a}, {&(0x7f0000000600)="6a9e86044b7aef4a579891b6d5b806aaab6a6ddead145084095dd5cd", 0x1c}, {&(0x7f0000000640)="c526713d3acd0430cd1d5842faab2c301d0dc5335a9f62ab46bcd03e8a86849482f621637deeafc1989244564ecc98e9da94895af09ccae3430017f2a806d717649da20a965d8a79306d", 0x4a}], 0x5, 0x7) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x42031, 0xffffffffffffffff, 0x180000000) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4400029b"], 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x4040854) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x464, 0x8, 0x70bd26, 0x25dfdbff, "419ef6555220a5a22b54f49ae0ec2f4a42ba1c14ce7bd0a2a970dfff6818e32e9b659b372454222c21b80d1ac4a9cbf0b1ca4648b17e26766de3f2e2345c2d497796a842c38a3e9e866866ac96d9a787acd803f618ce23ba9175e2645bea30333439def3e912b8732b3167f7428968349ee8ecc4265632245b249a99dbd795157816fc6996653c704d002a540064", [""]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0c0}, 0x400c0) 1.359443295s ago: executing program 3 (id=6325): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)={0x0, 0xf, 0x3, "fbf037"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x2, "e49f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2082"], 0x0, 0x0, 0x0}) 1.263524383s ago: executing program 4 (id=6326): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0xfffffff9, 0x200405, 0xfffffff5, 0xc6cf, 0x90, "10000000800104fcff00", 0x23fffd, 0x1fd}) ioctl$TCXONC(r0, 0x540a, 0x2) 1.230916946s ago: executing program 4 (id=6327): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) socket$netlink(0x10, 0x3, 0x4) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) (async) 1.159948468s ago: executing program 4 (id=6328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r1, &(0x7f00000001c0)="d1", 0x1) close(r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x207, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x4008080) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x407}}}}, 0x6a) 864.773968ms ago: executing program 0 (id=6329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x80}}, 0x0) 735.845834ms ago: executing program 0 (id=6330): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x6, 0x6}) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a44b000102030109025c000201000000090d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020a"], 0x0) (rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) syz_clone(0x4b001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x40], [0x7f]], '\x00', [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], '\x00', 0x1000}) 708.523978ms ago: executing program 3 (id=6331): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x5}, 0x8) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 647.118451ms ago: executing program 0 (id=6332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xca, 0x80040, 0x18, @remote, @dev={0xfe, 0x80, '\x00', 0x16}, 0x10, 0x700, 0x4, 0x6c4}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd, 0x3f, 0x6, "3eccd25569e20900"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x40880) 491.342183ms ago: executing program 4 (id=6333): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001640)=""/107, 0x6b}], 0x1) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000540)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x7, 0x3}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0xe, 0x10, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x4, 0x8, 0x81, 0xf9, 'veth0_to_batadv\x00', 'caif0\x00', {0xff}, {0xff}, 0x0, 0x10c}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000100)=0x10000) (async) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000888000/0x3000)=nil, 0x3000, 0x2000007, 0x4002012, r5, 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r6, &(0x7f0000000800)='[', 0x1, 0x7) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) (async) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000440)={0x4, 0x0, [{0x0, 0x1, 0x1, 0x0, @irqchip={0x4, 0x7}}, {0x0, 0x5, 0x0, 0x0, @msi={0x100, 0xfffff61c, 0x0, 0xb}}, {0x0, 0x5, 0x1, 0x0, @adapter={0x6, 0x0, 0x9e1, 0x8, 0x2}}, {0x0, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffffc, 0x6, 0x6, 0x5, 0x7}}]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x50, r8, 0x0) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000040)={@loopback}, &(0x7f0000000140)=0xc) 490.41018ms ago: executing program 0 (id=6334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) kexec_load(0x2, 0x1, &(0x7f00000015c0)=[{0x0, 0x0, 0x410000000000000, 0x41000000}], 0x80000) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="bedd1b2fd2000000"], 0x103c}, 0x1, 0x0, 0x0, 0x84}, 0x4800) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x6, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01034200"/18, @ANYRES32=r8, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050500080000fbdbdf2544000000080003008af661be6c7ac3a7f48cb1", @ANYRES32=r12, @ANYBLOB="0c002380060001003d000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x43080140}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="70e6ff00", @ANYRES16=r6, @ANYBLOB="200028bd7000fedbdf257f00000008000300", @ANYRES32=r12, @ANYBLOB="0c00990081ffffff730000000a0034000101010101010000060048005b00000014005500f705c837056506ce18782a5dae04159c06004800590000000a00f50008021100000000000a0034000202020202020000"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES16=r13, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r13, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20044890) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x23}, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 0s ago: executing program 0 (id=6335): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32={[0xffffffff]}}], 0x1c) syz_usb_disconnect(r4) r5 = socket(0x40000000015, 0x5, 0x0) listen(r5, 0x3) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000340)) socket$kcm(0x29, 0x7, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x4, 0x0, 0x0, 0x10000}) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) kernel console output (not intermixed with test programs): tity 4711 [ 1254.782330][T25208] tipc: Enabled bearer , priority 10 [ 1255.045559][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1255.184630][ T10] usb 6-1: device descriptor read/64, error -71 [ 1255.357211][T25219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.367606][T25219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.441110][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1255.580078][ T10] usb 6-1: device descriptor read/64, error -71 [ 1255.697892][ T10] usb usb6-port1: attempt power cycle [ 1255.976933][ T5824] tipc: Node number set to 10136234 [ 1256.051322][T25231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1256.063494][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1256.094379][ T10] usb 6-1: device descriptor read/8, error -71 [ 1256.118564][T25233] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1256.128497][T25233] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1256.178517][T25235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.187349][T25235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.349795][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1256.372791][ T10] usb 6-1: device descriptor read/8, error -71 [ 1256.437401][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1256.437424][ T30] audit: type=1326 audit(1771064721.977:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.469698][ T30] audit: type=1326 audit(1771064721.977:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.492689][ T10] usb usb6-port1: unable to enumerate USB device [ 1256.504584][ T30] audit: type=1326 audit(1771064721.977:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.527798][ T30] audit: type=1326 audit(1771064721.977:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.550612][ T30] audit: type=1326 audit(1771064721.977:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.573718][ T30] audit: type=1326 audit(1771064721.977:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.596478][ T30] audit: type=1326 audit(1771064721.977:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.619584][ T30] audit: type=1326 audit(1771064721.977:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.643372][ T30] audit: type=1326 audit(1771064721.977:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b52d5c84e code=0x7ffc0000 [ 1256.666064][ T30] audit: type=1326 audit(1771064721.977:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.0.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b52d9bf79 code=0x7ffc0000 [ 1256.795975][T25252] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5639'. [ 1256.843745][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.854328][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.863591][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.876446][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.886882][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.895881][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.904465][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.915021][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.924552][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.934582][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.943444][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.952280][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.681234][T25272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5645'. [ 1257.733834][T25274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.756525][T25274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.773749][T25274] sctp: [Deprecated]: syz.4.5646 (pid 25274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1257.773749][T25274] Use struct sctp_sack_info instead [ 1258.316888][T24477] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1258.352826][T25283] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5650'. [ 1258.365799][T25283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.376519][T25283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.477212][T24477] usb 6-1: Using ep0 maxpacket: 16 [ 1258.484562][T24477] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1258.496181][T24477] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1258.509417][T24477] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1258.519212][T24477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.527508][T24477] usb 6-1: Product: syz [ 1258.531827][T24477] usb 6-1: Manufacturer: syz [ 1258.536457][T24477] usb 6-1: SerialNumber: syz [ 1258.543784][T24477] usb 6-1: config 0 descriptor?? [ 1258.551389][T24477] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1258.560714][T24477] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1258.830878][T24477] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1258.990712][T24477] em28xx 6-1:0.0: Config register raw data: 0x41 [ 1259.030574][T25290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1259.040320][T25290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1259.051057][T25290] validate_nla: 123 callbacks suppressed [ 1259.051069][T25290] netlink: 'syz.4.5652': attribute type 10 has an invalid length. [ 1259.123682][T25294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.134236][T25294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.709656][T25298] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1259.787954][T25303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.798323][T25303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.683618][T25322] sg_write: data in/out 393179/8 bytes for SCSI command 0x0-- guessing data in; [ 1260.683618][T25322] program syz.4.5664 not setting count and/or reply_len properly [ 1260.684813][T25323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.713688][T25323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.738796][T25323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.747784][T25323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.124895][T25335] cgroup: Bad value for 'name' [ 1261.175357][ T5926] usb 6-1: USB disconnect, device number 40 [ 1261.186444][ T5926] em28xx 6-1:0.0: Disconnecting em28xx [ 1261.200048][ T5926] em28xx 6-1:0.0: Freeing device [ 1261.599634][ T5926] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1261.627734][T25343] sit0: entered promiscuous mode [ 1261.635971][T25343] netlink: 'syz.4.5672': attribute type 1 has an invalid length. [ 1261.644784][T25343] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5672'. [ 1261.771784][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.781907][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1261.790970][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.810328][ T5926] usb 6-1: config 0 descriptor?? [ 1262.050802][ T5926] lg-g15 0003:046D:C222.0066: item fetching failed at offset 5/7 [ 1262.059140][ T5926] lg-g15 0003:046D:C222.0066: probe with driver lg-g15 failed with error -22 [ 1262.251192][ T5824] usb 6-1: USB disconnect, device number 41 [ 1262.665312][T25353] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1262.901857][T25360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.910661][T25360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.926153][T25360] netlink: 'syz.4.5675': attribute type 30 has an invalid length. [ 1262.937315][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5675'. [ 1263.095642][ T5824] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1263.255956][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 1263.262796][ T5824] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1263.271441][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.282116][ T5824] usb 6-1: config 0 has no interface number 0 [ 1263.288338][ T5824] usb 6-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1263.302017][ T5824] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1263.311157][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.321344][ T5824] usb 6-1: config 0 descriptor?? [ 1263.332819][ T5824] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.414330][ T5824] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 1263.544311][T25358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.554587][T25358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.571117][ T5824] usb 6-1: USB disconnect, device number 42 [ 1263.580778][T25362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.595757][T25362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.183711][T25370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.200024][T25370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.374376][T25375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5684'. [ 1264.496106][ T5926] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1264.667810][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1264.681151][ T5926] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.702592][ T5926] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.714889][ T5926] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1264.728305][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1264.737793][ T5926] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1264.745826][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5688'. [ 1264.748067][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.786681][ T5926] usb 6-1: config 0 descriptor?? [ 1264.903783][T25397] /dev/nullb0: Can't open blockdev [ 1264.918226][T25398] /dev/nullb0: Can't open blockdev [ 1265.249953][T25373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.264328][T25373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.293553][ T5926] hid (null): unknown global tag 0xe [ 1265.319586][ T5926] hid (null): unknown global tag 0xe [ 1265.324969][ T5926] hid (null): unknown global tag 0xe [ 1265.339583][ T5926] hid (null): unknown global tag 0xc [ 1265.482441][T25423] CUSE: info not properly terminated [ 1265.509037][ T5926] usb 6-1: USB disconnect, device number 43 [ 1265.669306][T25432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.678540][T25432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.696811][T25434] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1266.012147][T25439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1266.021734][T25438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1266.267774][T25447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.276834][T25447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.356284][ T5824] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1266.381751][T25447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5703'. [ 1266.390732][T25453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5705'. [ 1266.538175][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 1266.547948][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 1266.567853][ T5824] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1266.577804][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.593959][ T5824] usb 6-1: config 0 descriptor?? [ 1267.046723][ T5824] mcp2221 0003:04D8:00DD.0068: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1267.150830][T25468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.161758][T25468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.252974][T25470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.265792][T25470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.495345][ T5824] usb 6-1: USB disconnect, device number 44 [ 1267.984317][T25472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.993316][T25472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.430205][ T5926] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1268.601577][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 1268.608879][ T5926] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1268.632125][T25480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.633322][ T5926] usb 6-1: config 0 has no interface number 0 [ 1268.652071][T25480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.677511][ T5926] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1268.697401][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.716324][ T5926] usb 6-1: Product: syz [ 1268.720882][ T5926] usb 6-1: Manufacturer: syz [ 1268.725501][ T5926] usb 6-1: SerialNumber: syz [ 1268.743148][ T5926] usb 6-1: config 0 descriptor?? [ 1268.763921][ T5926] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1268.783017][ T5926] usb 6-1: selecting invalid altsetting 1 [ 1268.794316][ T5926] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1268.816044][ T5926] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1268.836720][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1268.855933][ T5926] usb 6-1: media controller created [ 1268.888787][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1268.970879][ T5926] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1268.986290][ T5926] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1269.232150][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5713'. [ 1269.253969][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5713'. [ 1269.287492][ T5926] usb 6-1: USB disconnect, device number 45 [ 1269.473298][T25486] netlink: 'syz.4.5717': attribute type 21 has an invalid length. [ 1269.509188][T25486] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5717'. [ 1269.525972][T25487] netlink: 'syz.4.5717': attribute type 21 has an invalid length. [ 1269.543464][T25487] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5717'. [ 1269.646152][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.656937][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.671050][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.689540][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.302833][ T5926] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1270.334380][T25511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.344613][T25511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.477155][T25502] input: syz1 as /devices/virtual/input/input221 [ 1270.559597][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1270.569239][ T5926] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1270.576811][ T5926] usb 6-1: can't read configurations, error -71 [ 1270.946694][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5729'. [ 1270.957821][T25516] veth1_macvtap: left promiscuous mode [ 1271.018898][T25518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.027698][T25518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.221134][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1272.329162][T25537] netlink: 'syz.4.5735': attribute type 12 has an invalid length. [ 1272.337145][T25537] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5735'. [ 1272.349556][T25537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.361187][T25537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.567443][ T5910] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1272.729279][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.739502][ T5910] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1272.748665][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.758708][ T5910] usb 6-1: config 0 descriptor?? [ 1273.207190][ T5910] usb 6-1: USB disconnect, device number 48 [ 1273.280064][T25557] wlan1 speed is unknown, defaulting to 1000 [ 1273.289482][T25557] hsr0 speed is unknown, defaulting to 1000 [ 1273.332781][T25561] netlink: 'syz.4.5742': attribute type 1 has an invalid length. [ 1273.341049][T25561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5742'. [ 1273.351244][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5742'. [ 1273.360706][T25561] netlink: 'syz.4.5742': attribute type 2 has an invalid length. [ 1273.368490][T25561] netlink: 'syz.4.5742': attribute type 2 has an invalid length. [ 1273.376424][T25561] netlink: 'syz.4.5742': attribute type 2 has an invalid length. [ 1273.416537][T25561] syzkaller1: entered promiscuous mode [ 1273.422212][T25561] syzkaller1: entered allmulticast mode [ 1273.573242][T25564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.581938][T25564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.074996][ T5926] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1274.193454][ T5820] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1274.226143][T25582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.237792][T25582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.258880][ T5926] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1274.269959][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.278489][ T5926] usb 6-1: Product: syz [ 1274.282665][ T5926] usb 6-1: Manufacturer: syz [ 1274.287334][ T5926] usb 6-1: SerialNumber: syz [ 1274.727643][ T5926] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1274.739632][ T5926] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1274.843773][T25584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.853730][T25584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.396443][ T5926] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1275.408463][ T5926] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1275.418536][ T5926] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1275.430607][ T5926] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1275.473651][T25586] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5752'. [ 1275.562448][T25590] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5754'. [ 1275.577754][T25590] netlink: 'syz.4.5754': attribute type 21 has an invalid length. [ 1276.014565][T25605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.029325][T25606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.038339][T25605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.054598][T25606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.624351][T25612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.633240][T25612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.035230][ T10] usb 6-1: USB disconnect, device number 49 [ 1277.075237][T25616] syzkaller1: entered promiscuous mode [ 1277.081667][T25616] syzkaller1: entered allmulticast mode [ 1277.093608][T25617] /dev/nullb0: Can't open blockdev [ 1277.099931][T25617] /dev/nullb0: Can't open blockdev [ 1277.107433][T25617] /dev/nullb0: Can't open blockdev [ 1277.113241][T25617] /dev/nullb0: Can't open blockdev [ 1277.118811][T25617] /dev/nullb0: Can't open blockdev [ 1277.124868][T25617] /dev/nullb0: Can't open blockdev [ 1277.130450][T25617] /dev/nullb0: Can't open blockdev [ 1277.136882][T25617] /dev/nullb0: Can't open blockdev [ 1277.142781][T25617] /dev/nullb0: Can't open blockdev [ 1277.148834][T25617] /dev/nullb0: Can't open blockdev [ 1277.155116][T25617] /dev/nullb0: Can't open blockdev [ 1277.160794][T25617] /dev/nullb0: Can't open blockdev [ 1277.166907][T25617] /dev/nullb0: Can't open blockdev [ 1277.172511][T25617] /dev/nullb0: Can't open blockdev [ 1277.178522][T25617] /dev/nullb0: Can't open blockdev [ 1277.184348][T25617] /dev/nullb0: Can't open blockdev [ 1277.190328][T25617] /dev/nullb0: Can't open blockdev [ 1277.196196][T25617] /dev/nullb0: Can't open blockdev [ 1277.202773][T25617] /dev/nullb0: Can't open blockdev [ 1277.208689][T25617] /dev/nullb0: Can't open blockdev [ 1277.214567][T25617] /dev/nullb0: Can't open blockdev [ 1277.221706][T25617] /dev/nullb0: Can't open blockdev [ 1277.227569][T25617] /dev/nullb0: Can't open blockdev [ 1277.234072][T25617] /dev/nullb0: Can't open blockdev [ 1277.248506][T25617] /dev/nullb0: Can't open blockdev [ 1277.255655][T25619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.264456][T25619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.272565][T25617] /dev/nullb0: Can't open blockdev [ 1277.278291][T25617] /dev/nullb0: Can't open blockdev [ 1277.284285][T25617] /dev/nullb0: Can't open blockdev [ 1277.290140][T25617] /dev/nullb0: Can't open blockdev [ 1277.296104][T25617] /dev/nullb0: Can't open blockdev [ 1277.301975][T25617] /dev/nullb0: Can't open blockdev [ 1277.316768][T25617] /dev/nullb0: Can't open blockdev [ 1277.322418][T25617] /dev/nullb0: Can't open blockdev [ 1277.606993][T25624] overlayfs: missing 'lowerdir' [ 1277.977794][T25627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.986631][T25627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.411292][T25630] 9p: Bad value for 'rfdno' [ 1278.472818][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5766'. [ 1278.481778][T25631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5766'. [ 1278.561559][T25633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.570443][T25633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.467593][T25640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.477792][T25640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.689568][T25644] netlink: 'syz.0.5772': attribute type 29 has an invalid length. [ 1279.826430][ T5910] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1279.987645][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1279.995759][ T5910] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1280.004561][ T5910] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.014888][ T5910] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1280.025763][ T5910] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1280.034947][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.043285][ T5910] usb 6-1: Product: syz [ 1280.047475][ T5910] usb 6-1: Manufacturer: syz [ 1280.053584][ T5910] usb 6-1: SerialNumber: syz [ 1280.081318][T25648] syzkaller1: entered promiscuous mode [ 1280.086914][T25648] syzkaller1: entered allmulticast mode [ 1280.437637][T25669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.448160][T25669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.502122][ T5910] usb 6-1: 0:2 : does not exist [ 1281.164777][T25674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.175853][T25674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.586077][ T5910] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1281.624464][ T5910] usb 6-1: USB disconnect, device number 50 [ 1281.636910][T22817] udevd[22817]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1281.751840][ T5192] buffer_io_error: 6 callbacks suppressed [ 1281.751851][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.765798][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.773940][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.781914][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.792969][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.802374][ T5192] ldm_validate_partition_table(): Disk read failed. [ 1281.809374][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.818195][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.826909][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.835187][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.844141][ T5192] Dev loop6: unable to read RDB block 0 [ 1281.851659][ T5192] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.859862][ T5192] loop6: unable to read partition table [ 1281.865717][ T5192] loop6: partition table beyond EOD, truncated [ 1281.946905][T25684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.955673][T25684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.175857][T25694] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.5788'. [ 1282.185162][T25694] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1282.584588][T24477] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1282.754195][T24477] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1282.762212][T25707] input: syz0 as /devices/virtual/input/input222 [ 1282.766291][T24477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.789756][T24477] usb 6-1: Product: syz [ 1282.798610][T24477] usb 6-1: Manufacturer: syz [ 1282.809289][T24477] usb 6-1: SerialNumber: syz [ 1282.932327][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.959173][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.993524][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.010793][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.261566][T24477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1283.273650][T24477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1283.717501][T25722] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5799'. [ 1283.745366][T25724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.755240][T25724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.928786][T24477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1283.940725][T24477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1283.950491][T24477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1283.968898][T24477] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1284.328518][T25732] tipc: Started in network mode [ 1284.333686][T25732] tipc: Node identity ac14140f, cluster identity 4711 [ 1284.341306][T25732] tipc: New replicast peer: 255.255.255.255 [ 1284.347755][T25732] tipc: Enabled bearer , priority 10 [ 1284.604040][T25743] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5806'. [ 1284.618893][T25743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.631232][T25743] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1284.641552][T25743] bond0 (unregistering): Released all slaves [ 1284.660391][T25744] netlink: 'syz.4.5806': attribute type 9 has an invalid length. [ 1284.668136][T25744] netlink: 'syz.4.5806': attribute type 11 has an invalid length. [ 1284.676179][T25744] netlink: 'syz.4.5806': attribute type 12 has an invalid length. [ 1284.685854][T25744] netlink: 199280 bytes leftover after parsing attributes in process `syz.4.5806'. [ 1284.830135][T25755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5809'. [ 1284.956325][T25761] infiniband: Added to hash: ib_dev=ffff8880798e4000 (0)() ndev=ffff888028dac000 (21)(wg0) [ 1284.966643][T25761] wg0 speed is unknown, defaulting to 1000 [ 1284.975094][T25761] wg0 speed is unknown, defaulting to 1000 [ 1284.982032][T25761] wg0 speed is unknown, defaulting to 1000 [ 1284.994666][T25761] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1285.020793][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.028191][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.035613][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.042772][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.050840][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.059093][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.067587][T25761] wg0 speed is unknown, defaulting to 1000 [ 1285.535615][T24477] tipc: Node number set to 2886997007 [ 1285.553550][T24477] usb 6-1: USB disconnect, device number 51 [ 1286.029576][T25802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.049644][T25802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.015624][T25812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.044744][T25829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.053547][T25829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.148007][T25831] ./cgroup.net/devices.allow: Can't lookup blockdev [ 1288.341043][T25836] netlink: 'syz.5.5836': attribute type 1 has an invalid length. [ 1288.647643][ T10] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1288.663447][T25845] loop5: detected capacity change from 0 to 7 [ 1288.671930][T25845] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1288.677253][T25845] loop5: partition table partially beyond EOD, truncated [ 1288.684633][T25845] loop5: p1 size 4294377484 extends beyond EOD, truncated [ 1288.719674][T22525] udevd[22525]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1288.746238][T25847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.756871][T25847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.769023][T25847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.777880][T25847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.789469][T25847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.798311][T25847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.807283][T25847] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1288.816455][T25847] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1288.819553][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.835680][ T10] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1288.845263][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.855648][ T10] usb 6-1: config 0 descriptor?? [ 1289.301090][ T10] cherry 0003:046A:0023.0069: hidraw0: USB HID v10.00 Device [HID 046a:0023] on usb-dummy_hcd.5-1/input0 [ 1289.407078][T25850] tun0: tun_chr_ioctl cmd 2148553947 [ 1289.412559][T25850] tun0: tun_chr_ioctl cmd 1074025673 [ 1289.514006][ T5926] usb 6-1: USB disconnect, device number 52 [ 1289.761118][T25857] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5842'. [ 1290.160328][ T5820] Bluetooth: hci3: link tx timeout [ 1290.170993][ T5820] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1290.220151][ T5142] Bluetooth: hci3: link tx timeout [ 1290.228281][ T5142] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1290.250315][ T5142] Bluetooth: hci3: link tx timeout [ 1290.255472][ T5142] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1290.410465][T24477] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1290.447399][ T5142] Bluetooth: hci3: link tx timeout [ 1290.452660][ T5142] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1290.591860][T24477] usb 6-1: Using ep0 maxpacket: 32 [ 1290.600575][T24477] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1290.609917][T24477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.617994][T24477] usb 6-1: Product: syz [ 1290.622268][T24477] usb 6-1: Manufacturer: syz [ 1290.626919][T24477] usb 6-1: SerialNumber: syz [ 1290.633415][T24477] usb 6-1: config 0 descriptor?? [ 1290.643600][T24477] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1290.651341][T24477] dvb-usb: bulk message failed: -22 (4/0) [ 1290.657139][T24477] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1290.668388][T24477] dvb-usb: bulk message failed: -22 (5/0) [ 1290.674139][T24477] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1290.686835][T24477] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1290.697478][T24477] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1290.705608][T24477] usb 6-1: media controller created [ 1290.717501][T24477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1290.733759][T24477] usb 6-1: selecting invalid altsetting 3 [ 1290.739516][T24477] ttusb2: set interface to alts=3 failed [ 1290.755045][ T5142] Bluetooth: hci3: link tx timeout [ 1290.760203][ T5142] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1290.789613][T24477] DVB: Unable to find symbol tda10086_attach() [ 1290.797777][T24477] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1290.809581][T24477] dvb-usb: bulk message failed: -22 (4/0) [ 1290.815327][T24477] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1290.830132][T24477] dvb-usb: bulk message failed: -22 (5/0) [ 1290.835889][T24477] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1290.846713][T24477] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1290.866443][T24477] usb 6-1: USB disconnect, device number 53 [ 1290.897448][T24477] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1291.526022][ T5142] Bluetooth: hci3: link tx timeout [ 1291.531176][ T5142] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1292.377318][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 1293.013734][T25865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.198949][T25904] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5851'. [ 1293.213160][T25904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.223441][T25904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.536847][ T10] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1293.704566][ T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.715489][ T10] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1293.728793][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1293.735686][ T10] usb 6-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.00 [ 1293.744825][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.755462][ T10] usb 6-1: config 0 descriptor?? [ 1294.198088][ T10] saitek 0003:0738:1713.006A: report_id 24164 is invalid [ 1294.205383][ T10] saitek 0003:0738:1713.006A: item 0 2 1 8 parsing failed [ 1294.212948][ T10] saitek 0003:0738:1713.006A: parse failed [ 1294.219137][ T10] saitek 0003:0738:1713.006A: probe with driver saitek failed with error -22 [ 1294.412868][T15819] usb 6-1: USB disconnect, device number 54 [ 1295.241155][T25944] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1296.387840][T25957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.396665][T25957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.461012][ T5881] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1296.632001][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 1296.638657][ T5881] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 1296.649483][ T5881] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.660646][ T5881] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 1296.673915][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1296.680636][ T5881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1296.689743][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.699777][ T5881] usb 6-1: config 0 descriptor?? [ 1297.156592][ T5881] usbhid 6-1:0.0: can't add hid device: -71 [ 1297.169361][ T5881] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1297.183308][ T5881] usb 6-1: USB disconnect, device number 55 [ 1297.317355][T25974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1297.453539][T25979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.468553][T25979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.490122][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5870'. [ 1297.583654][ T5881] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1297.747593][ T5881] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1297.756814][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.764809][ T5881] usb 6-1: Product: syz [ 1297.769507][ T5881] usb 6-1: Manufacturer: syz [ 1297.774130][ T5881] usb 6-1: SerialNumber: syz [ 1297.784845][ T5881] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1297.791231][ T5881] r8152-cfgselector 6-1: config 0 descriptor?? [ 1298.014514][ T5881] r8152-cfgselector 6-1: Needed 1 retries to read version [ 1298.025231][ T5881] r8152-cfgselector 6-1: Unknown version 0x5890 [ 1298.041404][ T5881] r8152-cfgselector 6-1: bad CDC descriptors [ 1299.216000][T26016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.227063][T26016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.843568][T26039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.854355][T26039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.426732][ T5926] r8152-cfgselector 6-1: USB disconnect, device number 56 [ 1300.449813][T26045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.463290][T26045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.496969][T26047] netlink: 'syz.5.5882': attribute type 10 has an invalid length. [ 1300.865523][ T5926] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1301.068923][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 1301.075601][ T5926] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1301.083912][ T5926] usb 6-1: config 0 has no interface number 0 [ 1301.092031][ T5926] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1301.101602][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.109609][ T5926] usb 6-1: Product: syz [ 1301.113921][ T5926] usb 6-1: Manufacturer: syz [ 1301.118522][ T5926] usb 6-1: SerialNumber: syz [ 1301.125714][ T5926] usb 6-1: config 0 descriptor?? [ 1301.132486][ T5926] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1301.252444][T26054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.262182][T26054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.275934][T26054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.285109][T26054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.294869][T26054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.304606][T26054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.348691][ T5926] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1301.364402][ T5926] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1301.775581][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1301.784596][ T5926] usb 6-1: USB disconnect, device number 57 [ 1301.794532][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1301.810772][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1301.823136][ T5926] quatech2 6-1:0.51: device disconnected [ 1301.908491][T26058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.919247][T26058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.396186][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1302.463996][T26063] netlink: 'syz.5.5889': attribute type 1 has an invalid length. [ 1302.475561][T26063] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5889'. [ 1302.524580][T26066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.540484][T26066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.144321][T26074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.154546][T26074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.786972][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1303.829762][T26095] wlan1 speed is unknown, defaulting to 1000 [ 1303.837111][T26095] hsr0 speed is unknown, defaulting to 1000 [ 1303.844834][T26095] wg0 speed is unknown, defaulting to 1000 [ 1303.944689][ T10] usb 6-1: device descriptor read/64, error -71 [ 1304.028418][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 1304.036610][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 1304.072275][T26100] ceph: No mds server is up or the cluster is laggy [ 1304.216922][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1304.271443][T26115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.284769][T26115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.365968][ T10] usb 6-1: device descriptor read/64, error -71 [ 1304.492358][ T10] usb usb6-port1: attempt power cycle [ 1304.864073][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1304.886791][T26154] nvme_fabrics: missing parameter 'transport=%s' [ 1304.893160][T26154] nvme_fabrics: missing parameter 'nqn=%s' [ 1304.899539][ T10] usb 6-1: device descriptor read/8, error -71 [ 1305.014741][T26162] atomic_op ffff888058eb0198 conn xmit_atomic 0000000000000000 [ 1305.163110][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1305.184974][ T10] usb 6-1: device descriptor read/8, error -71 [ 1305.302769][ T10] usb usb6-port1: unable to enumerate USB device [ 1305.953358][T26166] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3580128042 out of range (51000000..2150000000) [ 1305.966766][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.975453][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.554022][T26169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.562819][T26169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.816660][T26174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.826383][T26174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.837280][T26174] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1306.844877][T26175] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1306.858579][T26174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.864716][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1306.864733][ T30] audit: type=1326 audit(1771064769.140:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.3.5914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56c39bf79 code=0x0 [ 1306.868667][T26174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.162287][ T5910] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1307.203848][ T5820] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 1307.266298][T26181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.275187][T26181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.324440][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.335646][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.346118][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.359266][ T5910] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.368358][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.378449][ T5910] usb 6-1: config 0 descriptor?? [ 1307.603836][ T5910] usbhid 6-1:0.0: can't add hid device: -71 [ 1307.609876][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1307.620284][ T5910] usb 6-1: USB disconnect, device number 62 [ 1307.845612][T26184] wlan1 speed is unknown, defaulting to 1000 [ 1307.852942][T26184] hsr0 speed is unknown, defaulting to 1000 [ 1307.861534][T26184] wg0 speed is unknown, defaulting to 1000 [ 1307.953391][ T30] audit: type=1326 audit(1771064770.160:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26182 comm="syz.3.5916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56c39bf79 code=0x0 [ 1308.256976][ T5910] IPVS: starting estimator thread 0... [ 1308.262280][T26198] delete_channel: no stack [ 1308.267749][T26198] delete_channel: no stack [ 1308.279589][T26198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5919'. [ 1308.280666][T26206] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1308.370528][T26204] IPVS: using max 43 ests per chain, 103200 per kthread [ 1308.552058][T15819] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1308.736010][T15819] usb 6-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.747530][T15819] usb 6-1: config 42 has 0 interfaces, different from the descriptor's value: 1 [ 1308.759943][T15819] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1308.770329][T15819] usb 6-1: New USB device strings: Mfr=1, Product=230, SerialNumber=2 [ 1308.778759][T15819] usb 6-1: Product: syz [ 1308.783354][T15819] usb 6-1: Manufacturer: syz [ 1308.788079][T15819] usb 6-1: SerialNumber: syz [ 1309.037431][T15819] usb 6-1: USB disconnect, device number 63 [ 1309.115470][T26225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.127952][T26225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.142344][T26225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.153851][T26225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.766599][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.784090][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.983477][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.992833][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.134284][ T5881] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1310.307923][ T5881] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1310.317203][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.327114][ T5881] usb 6-1: config 0 descriptor?? [ 1310.338471][ T5881] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1310.665755][ T30] audit: type=1800 audit(1771064772.704:794): pid=26236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5932" name="memory.events" dev="tmpfs" ino=1797 res=0 errno=0 [ 1310.728364][T26238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.737557][T26238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.771707][T26233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.781778][T26233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.791198][T26233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.800562][T26233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.811732][ T5881] gp8psk: usb out operation failed. [ 1310.817114][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1310.828032][ T5881] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1310.837516][ T5881] usb 6-1: media controller created [ 1310.849269][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1310.868488][ T5881] gp8psk_fe: Frontend attached [ 1310.876024][ T5881] usb 6-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 1310.884194][ T5881] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1310.894999][T26239] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1310.941401][ T5881] gp8psk: usb in 138 operation failed. [ 1310.949825][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1310.960364][ T5881] gp8psk: found Genpix USB device pID = 203 (hex) [ 1310.970312][ T5881] usb 6-1: USB disconnect, device number 64 [ 1311.017959][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1311.404116][T26241] netlink: 'syz.5.5934': attribute type 10 has an invalid length. [ 1311.412535][T26241] veth0_vlan: entered allmulticast mode [ 1311.426589][T26241] veth0_vlan: left promiscuous mode [ 1311.441799][T26241] veth0_vlan: entered promiscuous mode [ 1311.452755][T26241] team0: Device veth0_vlan failed to register rx_handler [ 1311.473825][T26241] tipc: Resetting bearer [ 1311.525522][T26243] netlink: 'syz.5.5935': attribute type 21 has an invalid length. [ 1311.535139][T26244] netlink: 'syz.5.5935': attribute type 21 has an invalid length. [ 1312.179886][T26252] infiniband: Added to hash: ib_dev=ffff888079e88000 (0)() ndev=ffff888029c88000 (17)(vcan0) [ 1312.191802][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1312.203790][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1312.210679][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1312.426883][ T29] vcan0 speed is unknown, defaulting to 1000 [ 1312.437109][T26252] infiniband syz1: set active [ 1312.442612][T26252] infiniband syz1: added vcan0 [ 1312.450791][T26252] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1312.455545][T26252] infiniband syz1: Couldn't open port 1 [ 1312.495120][T26252] RDS/IB: syz1: added [ 1312.500010][T26252] smc: adding ib device syz1 with port count 1 [ 1312.506606][T26252] smc: ib device syz1 port 1 has no pnetid [ 1312.517833][ T29] vcan0 speed is unknown, defaulting to 1000 [ 1312.527131][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1312.652650][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1312.774222][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1312.897632][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1313.018526][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1313.137633][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1313.258762][T26252] vcan0 speed is unknown, defaulting to 1000 [ 1313.422194][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5943'. [ 1313.431704][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5943'. [ 1313.704974][ T29] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1313.877657][ T29] usb 6-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 1313.889177][ T29] usb 6-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 1313.900736][ T29] usb 6-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 1313.911296][ T29] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1313.920419][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.929558][ T30] audit: type=1326 audit(1771064775.754:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.4.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499cf9bf79 code=0x7fc00000 [ 1313.962440][ T29] usb 6-1: config 0 descriptor?? [ 1314.114331][T26275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.123313][T26275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.185062][ T29] usb 6-1: USB disconnect, device number 65 [ 1314.697569][T26277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.707860][T26277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.041481][ T29] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1315.212328][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1315.219242][ T29] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1315.228102][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.238222][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1315.249056][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1315.265901][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.274083][ T29] usb 6-1: Product: syz [ 1315.279803][ T29] usb 6-1: Manufacturer: syz [ 1315.284427][ T29] usb 6-1: SerialNumber: syz [ 1315.342899][T26288] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5951'. [ 1315.352694][T26288] 0: renamed from hsr0 (while UP) [ 1315.359650][T26288] 0: entered allmulticast mode [ 1315.364656][T26288] hsr_slave_0: entered allmulticast mode [ 1315.370493][T26288] hsr_slave_1: entered allmulticast mode [ 1315.377681][T26288] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 1315.423583][T26290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.433598][T26290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.671795][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888062096000 (15)(ip6gretap0) start [ 1315.694840][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888062096000 (7)(ip6gretap0) end [ 1315.731092][ T29] usb 6-1: 0:2 : does not exist [ 1315.736394][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805f74e000 (12)(erspan0) start [ 1315.757677][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805f74e000 (7)(erspan0) end [ 1315.791173][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888053960000 (7)(gretap0) start [ 1315.822546][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888053960000 (7)(gretap0) end [ 1315.844962][T26294] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1315.845614][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.947202][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805d5f0000 (5)(geneve1) start [ 1315.967257][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.980489][ T1005] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1315.981998][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805d5f0000 (5)(geneve1) end [ 1316.005873][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888059974000 (5)(geneve0) start [ 1316.025835][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888059974000 (5)(geneve0) end [ 1316.049972][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802acf0000 (13)(bond0) start [ 1316.081388][ T1005] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1316.092620][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802acf0000 (13)(bond0) end [ 1316.121204][ T1005] bond0 (unregistering): Released all slaves [ 1316.133702][T26296] @0: renamed from bond_slave_1 (while UP) [ 1316.224397][ T1005] tipc: Left network mode [ 1316.263273][ T1005] IPVS: stopping backup sync thread 23207 ... [ 1316.278913][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888048444000 (11)(wlan2) start [ 1316.357208][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888048444000 (3)(wlan2) end [ 1316.451853][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888051048000 (11)(wlan1) start [ 1316.478157][T26298] 9p: Bad value for 'rfdno' [ 1316.498616][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888051048000 (3)(wlan1) end [ 1316.560344][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058334000 (15)(syzkaller1) start [ 1316.577608][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058334000 (7)(syzkaller1) end [ 1316.625812][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880336e4000 (6)(wlan0) start [ 1316.666840][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880336e4000 (3)(wlan0) end [ 1316.895541][T26305] fuse: Bad value for 'group_id' [ 1316.901188][T26305] fuse: Bad value for 'group_id' [ 1316.965618][T26305] netlink: 'syz.3.5957': attribute type 11 has an invalid length. [ 1317.193434][ T1005] hsr_slave_0: left promiscuous mode [ 1317.200036][ T1005] hsr_slave_1: left promiscuous mode [ 1317.206802][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.214558][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.232261][ T1005] veth1_macvtap: left promiscuous mode [ 1317.238078][ T1005] veth0_macvtap: left promiscuous mode [ 1317.251088][ T1005] veth1_vlan: left promiscuous mode [ 1317.260063][ T1005] : left promiscuous mode [ 1317.325966][ T29] usb 6-1: USB disconnect, device number 66 [ 1317.404636][T22525] udevd[22525]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.433077][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880632d4000 (15)(macsec0) start [ 1317.473554][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880632d4000 (8)(macsec0) end [ 1317.567537][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888034960000 (11)(macvtap0) start [ 1317.604579][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888034960000 (7)(macvtap0) end [ 1317.628210][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807abd6000 (9)(veth0_macvtap) start [ 1317.657352][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807abd6000 (9)(veth0_macvtap) end [ 1317.709265][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88803a3e4000 (7)(veth1_macvtap) start [ 1317.730267][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88803a3e4000 (7)(veth1_macvtap) end [ 1317.751992][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880674be000 (6)(ipvlan1) start [ 1317.796949][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880674be000 (6)(ipvlan1) end [ 1317.869535][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807ad68000 (6)(ipvlan0) start [ 1317.940671][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807ad68000 (6)(ipvlan0) end [ 1317.967999][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804fde0000 (5)(macvlan1) start [ 1317.989698][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804fde0000 (5)(macvlan1) end [ 1318.008238][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804ff50000 (5)(macvlan0) start [ 1318.070495][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804ff50000 (5)(macvlan0) end [ 1318.117649][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888023362000 (6)(vlan1) start [ 1318.153379][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888023362000 (6)(vlan1) end [ 1318.178739][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802b0f2000 (6)(vlan0) start [ 1318.195387][ T796] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1318.211915][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802b0f2000 (6)(vlan0) end [ 1318.232127][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880353fa000 (8)(5) start [ 1318.249909][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880353fa000 (8)(5) end [ 1318.272122][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880342f2000 (8)(veth1_vlan) start [ 1318.340593][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880342f2000 (8)(veth1_vlan) end [ 1318.373629][ T796] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1318.374979][ T1005] vcan0 (unregistering): left allmulticast mode [ 1318.390399][ T796] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1318.407056][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058ae6000 (6)(virt_wifi0) start [ 1318.446675][ T796] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1318.457320][ T796] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1318.467040][ T796] usb 6-1: Product: syz [ 1318.472757][ T796] usb 6-1: Manufacturer: syz [ 1318.484211][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058ae6000 (5)(virt_wifi0) end [ 1318.501866][ T796] usb 6-1: SerialNumber: syz [ 1318.507489][T26332] tipc: Enabled bearer , priority 0 [ 1318.517482][ T796] usb 6-1: config 0 descriptor?? [ 1318.540944][T26334] dvmrp1: entered allmulticast mode [ 1318.550446][T26332] tipc: Disabling bearer [ 1318.561513][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880799f6000 (4)(veth0_virt_wifi) start [ 1318.605322][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880799f6000 (4)(veth0_virt_wifi) end [ 1318.649926][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807dd62000 (4)(veth1_virt_wifi) start [ 1318.679598][ T796] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1318.689053][T26339] openvswitch: netlink: Actions may not be safe on all matching packets [ 1318.689948][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807dd62000 (4)(veth1_virt_wifi) end [ 1318.756426][T22525] udevd[22525]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.773256][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880799f2000 (4)(hsr0) start [ 1318.801147][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880799f2000 (4)(hsr0) end [ 1318.813332][ T5881] usb 6-1: USB disconnect, device number 67 [ 1318.827971][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888059184000 (3)(hsr_slave_1) start [ 1318.883244][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888059184000 (3)(hsr_slave_1) end [ 1318.903758][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888059186000 (4)(veth1_to_hsr) start [ 1318.966476][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888059186000 (4)(veth1_to_hsr) end [ 1318.985290][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807b47a000 (3)(hsr_slave_0) start [ 1319.027562][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807b47a000 (3)(hsr_slave_0) end [ 1319.065262][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880790e4000 (4)(veth0_to_hsr) start [ 1319.084017][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880790e4000 (4)(veth0_to_hsr) end [ 1319.125960][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888078cce000 (4)(batadv_slave_1) start [ 1319.144761][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888078cce000 (4)(batadv_slave_1) end [ 1319.185123][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880340f8000 (4)(veth1_to_batadv) start [ 1319.221347][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880340f8000 (4)(veth1_to_batadv) end [ 1319.264133][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888035f82000 (4)(batadv_slave_0) start [ 1319.298253][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888035f82000 (4)(batadv_slave_0) end [ 1319.328620][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888035f80000 (4)(veth0_to_batadv) start [ 1319.346677][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888035f80000 (4)(veth0_to_batadv) end [ 1319.360277][ T5881] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1319.365531][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888011c20000 (3)(team_slave_1) start [ 1319.390318][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888011c20000 (3)(team_slave_1) end [ 1319.409968][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804ac46000 (4)(veth1_to_team) start [ 1319.429324][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804ac46000 (4)(veth1_to_team) end [ 1319.447108][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058c4c000 (3)(team_slave_0) start [ 1319.465140][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058c4c000 (3)(team_slave_0) end [ 1319.482611][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058c4a000 (4)(veth0_to_team) start [ 1319.500475][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888058c4a000 (4)(veth0_to_team) end [ 1319.518062][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888022ba8000 (3)(bond_slave_1) start [ 1319.536111][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888022ba8000 (3)(bond_slave_1) end [ 1319.543602][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 1319.558225][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805f888000 (4)(veth1_to_bond) start [ 1319.588520][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805f888000 (4)(veth1_to_bond) end [ 1319.606025][ T5881] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1319.614761][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.625495][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.629730][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880632ce000 (3)(bond_slave_0) start [ 1319.653760][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880632ce000 (3)(bond_slave_0) end [ 1319.671406][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880632cc000 (4)(veth0_to_bond) start [ 1319.692059][ T5881] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.701129][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.715189][ T5881] usb 6-1: Product: syz [ 1319.719396][ T5881] usb 6-1: Manufacturer: syz [ 1319.732213][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880632cc000 (4)(veth0_to_bond) end [ 1319.749745][ T5881] usb 6-1: SerialNumber: syz [ 1319.752948][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888076922000 (3)(bridge_slave_1) start [ 1319.783683][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888076922000 (3)(bridge_slave_1) end [ 1319.802379][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888076920000 (4)(veth1_to_bridge) start [ 1319.822885][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888076920000 (4)(veth1_to_bridge) end [ 1319.840514][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805ade6000 (3)(bridge_slave_0) start [ 1319.866567][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805ade6000 (3)(bridge_slave_0) end [ 1319.884898][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805ade4000 (4)(veth0_to_bridge) start [ 1319.902449][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805ade4000 (4)(veth0_to_bridge) end [ 1319.922238][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888034ffa000 (4)(veth1) start [ 1319.940141][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888034ffa000 (4)(veth1) end [ 1319.957137][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888078c84000 (4)(veth0) start [ 1319.973800][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888078c84000 (4)(veth0) end [ 1319.991568][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802c600000 (4)(batadv0) start [ 1320.010038][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802c600000 (4)(batadv0) end [ 1320.026913][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888049dbe000 (4)(dummy0) start [ 1320.043812][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888049dbe000 (4)(dummy0) end [ 1320.060670][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804ef40000 (3)(syzkaller0) start [ 1320.077908][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804ef40000 (3)(syzkaller0) end [ 1320.099634][ T1005] IPVS: stop unused estimator thread 0... [ 1320.232696][T26347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.245237][T26347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.257822][ T5881] usb 6-1: 0:2 : does not exist [ 1320.404188][T26364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.420678][T26364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.430875][T26364] EXT4-fs: Conflicting test_dummy_encryption options [ 1320.546030][T26373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.556029][T26373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.342498][T26347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.357278][T26347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.379284][T26377] netlink: 'syz.4.5981': attribute type 11 has an invalid length. [ 1321.410564][ T9188] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804f51c000 (11)(s) start [ 1321.448000][ T9188] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804f51c000 (4)(s) end [ 1321.881735][T26399] IPVS: Unknown mcast interface: pimreg0 [ 1321.993241][T26403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.004515][T26403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.068202][T26411] 8021q: VLANs not supported on ipvlan1 [ 1322.512114][ T5881] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1322.520162][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5994'. [ 1322.534334][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5994'. [ 1322.617465][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1322.643107][ T5881] usb 6-1: USB disconnect, device number 68 [ 1322.682617][T22525] udevd[22525]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.986669][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.996765][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.123399][ T5881] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1323.273050][ T5881] usb 6-1: device descriptor read/64, error -71 [ 1323.540374][ T5881] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1323.679351][ T5881] usb 6-1: device descriptor read/64, error -71 [ 1323.739411][T26460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.754199][T26460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.797265][ T5881] usb usb6-port1: attempt power cycle [ 1323.808263][T26464] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1323.821546][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880697f8000 (21)(dummy0) start [ 1323.839934][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff8880697f8000 (14)(dummy0) end [ 1324.181858][ T5881] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1324.203814][ T5881] usb 6-1: device descriptor read/8, error -71 [ 1324.334086][T26471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.344766][T26471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.355993][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802bfd0000 (11)(pimreg0) start [ 1324.373036][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802bfd0000 (6)(pimreg0) end [ 1324.460203][ T5881] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1324.481620][ T5881] usb 6-1: device descriptor read/8, error -71 [ 1324.576805][T26477] netlink: 'syz.3.6016': attribute type 10 has an invalid length. [ 1324.591342][ T1005] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805d580000 (16)(geneve0) start [ 1324.608661][ T5881] usb usb6-port1: unable to enumerate USB device [ 1324.610270][ T1005] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88805d580000 (13)(geneve0) end [ 1324.984655][T26482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.993551][T26482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.577547][ T30] audit: type=1326 audit(1771064786.651:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26478 comm="syz.3.6017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c39bf79 code=0x7fc00000 [ 1325.671905][ T9188] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802a090000 (11)(l2tpeth0) start [ 1325.694189][ T9188] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88802a090000 (3)(l2tpeth0) end [ 1326.267557][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1326.417597][ T796] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1326.477649][T26514] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1326.497252][T26514] ip6gretap0: entered promiscuous mode [ 1326.513396][T26514] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1326.576469][ T796] usb 6-1: device descriptor read/64, error -71 [ 1326.766957][T26530] netlink: 'syz.4.6034': attribute type 11 has an invalid length. [ 1326.781749][T26530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.793268][T26530] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1326.843996][ T796] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1326.993453][ T796] usb 6-1: device descriptor read/64, error -71 [ 1327.074314][T26539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.093825][T26539] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1327.111273][ T796] usb usb6-port1: attempt power cycle [ 1327.171813][T26541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1327.191749][T26541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1327.289058][T26543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1327.317267][ T5820] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1327.339444][T26546] IPv6: A: Disabled Multicast RS [ 1327.497189][ T796] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1327.520547][ T796] usb 6-1: device descriptor read/8, error -71 [ 1327.784959][ T796] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1327.817265][ T796] usb 6-1: device descriptor read/8, error -71 [ 1327.946250][ T796] usb usb6-port1: unable to enumerate USB device [ 1328.247886][T26568] pim6reg1: entered allmulticast mode [ 1328.343872][T26570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.353674][T26570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.365303][T26570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.374051][T26570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.537266][T26583] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1328.654705][T26589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.807588][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.817530][T26608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.817594][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.817954][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.834085][T26608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.839906][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.862467][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.870387][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.880082][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.891714][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.902118][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.910626][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.920390][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.928166][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.937638][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.945497][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.955137][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.962931][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1328.972325][T26605] netlink: 'syz.3.6060': attribute type 1 has an invalid length. [ 1328.980062][T26605] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1329.653325][T26649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.662145][T26649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.963594][ T30] audit: type=1326 audit(1771064790.748:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26650 comm="syz.3.6076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56c39bf79 code=0x0 [ 1330.256779][T26667] gfs2: error -5 reading superblock [ 1330.349239][T26672] validate_nla: 25 callbacks suppressed [ 1330.349256][T26672] netlink: 'syz.4.6082': attribute type 3 has an invalid length. [ 1330.368904][T26672] netlink: 'syz.4.6082': attribute type 1 has an invalid length. [ 1330.559097][T26682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.567941][T26682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.681660][ T796] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1330.865309][ T796] usb 6-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 1330.875886][ T796] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1330.887261][ T796] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1330.896492][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.904516][ T796] usb 6-1: Product: syz [ 1330.909589][ T796] usb 6-1: Manufacturer: syz [ 1330.914203][ T796] usb 6-1: SerialNumber: syz [ 1331.233186][T26693] netlink: 'syz.4.6092': attribute type 1 has an invalid length. [ 1331.359283][ T796] usb 6-1: 0:2 : does not exist [ 1331.376883][T26697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.386803][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.406631][ T796] usb 6-1: USB disconnect, device number 77 [ 1332.166596][T26711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.208486][T26710] netlink: 'syz.4.6097': attribute type 5 has an invalid length. [ 1332.229250][T26713] netlink: 'syz.3.6098': attribute type 3 has an invalid length. [ 1332.458959][ T30] audit: type=1400 audit(1771064793.087:798): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=26728 comm="syz.5.6104" [ 1332.769876][T26751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.778706][ T10] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1332.798795][T26751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.961707][ T10] usb 6-1: config 0 has an invalid interface number: 46 but max is 0 [ 1332.971975][ T10] usb 6-1: config 0 has no interface number 0 [ 1332.978096][ T10] usb 6-1: too many endpoints for config 0 interface 46 altsetting 0: 223, using maximum allowed: 30 [ 1332.993760][ T10] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1333.004764][ T10] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1333.014791][ T10] usb 6-1: config 0 interface 46 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 1333.030797][ T10] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1333.040084][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.048681][ T10] usb 6-1: Product: syz [ 1333.053506][ T10] usb 6-1: Manufacturer: syz [ 1333.058537][ T10] usb 6-1: SerialNumber: syz [ 1333.069488][ T10] usb 6-1: config 0 descriptor?? [ 1333.076396][T26729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1333.089620][ T10] ums-karma 6-1:0.46: USB Mass Storage device detected [ 1333.198402][ T10] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5 [ 1333.317608][ T5881] usb 6-1: USB disconnect, device number 78 [ 1333.918806][T26809] input: syz0 as /devices/virtual/input/input224 [ 1334.165799][T26819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.176909][T26819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.803509][T26822] random: crng reseeded on system resumption [ 1334.867596][ T30] audit: type=1326 audit(1771064795.341:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26813 comm="syz.5.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08af9bf79 code=0x7fc00000 [ 1334.880329][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.910093][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.946372][T26828] __nla_validate_parse: 33 callbacks suppressed [ 1334.946390][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1334.962833][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1335.310770][ T5881] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1335.472645][ T5881] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1335.480848][ T5881] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.491393][ T5881] usb 6-1: config 8 has no interface number 0 [ 1335.498152][ T5881] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1335.508522][ T5881] usb 6-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 1335.532618][ T5881] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1335.547876][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.563299][ T5881] usb 6-1: NFC: intf ffff888034877000 id ffffffff8f3f1d60 [ 1335.680201][T26843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.691621][T26842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.691960][T26843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.705089][T26842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.780665][ T30] audit: type=1400 audit(1771064796.192:800): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.891364][T26832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.919773][ T29] usb 6-1: USB disconnect, device number 79 [ 1336.132856][T26863] loop8: detected capacity change from 0 to 8 [ 1336.140348][T26863] Dev loop8: unable to read RDB block 8 [ 1336.147500][T26863] loop8: unable to read partition table [ 1336.153427][T26863] loop8: partition table beyond EOD, truncated [ 1336.159817][T26863] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1336.172286][T26863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.181948][T26863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.190789][T26863] netlink: 'syz.4.6143': attribute type 1 has an invalid length. [ 1336.199717][T26863] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1336.272251][ T30] audit: type=1326 audit(1771064796.650:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26864 comm="syz.3.6144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff56c39bf79 code=0x0 [ 1336.443924][ T29] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1336.621609][ T29] usb 6-1: config 128 has an invalid interface number: 3 but max is 0 [ 1336.639180][ T29] usb 6-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1336.648459][ T29] usb 6-1: config 128 has an invalid interface number: 93 but max is 0 [ 1336.656792][ T29] usb 6-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 1336.671773][ T29] usb 6-1: config 128 has no interface number 0 [ 1336.678137][ T29] usb 6-1: config 128 has no interface number 1 [ 1336.684919][ T29] usb 6-1: config 128 interface 3 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1336.696059][ T29] usb 6-1: config 128 interface 3 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 1336.706867][ T29] usb 6-1: config 128 interface 3 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 1336.718959][ T29] usb 6-1: config 128 interface 3 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1336.730210][ T29] usb 6-1: config 128 interface 3 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1336.741478][ T29] usb 6-1: config 128 interface 3 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1336.752382][ T29] usb 6-1: config 128 interface 3 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 1336.763089][ T29] usb 6-1: too many endpoints for config 128 interface 93 altsetting 208: 152, using maximum allowed: 30 [ 1336.777181][ T29] usb 6-1: config 128 interface 93 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 1336.798529][ T29] usb 6-1: config 128 interface 3 has no altsetting 0 [ 1336.805341][ T29] usb 6-1: config 128 interface 93 has no altsetting 0 [ 1336.814945][ T29] usb 6-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=6d.a9 [ 1336.824157][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.832904][ T29] usb 6-1: Product: 왕咏撃ꁺꅂ䥼炶傰靭浴丶伖蔀Ⲯ訴ᘪⰽ架 [ 1336.843627][ T29] usb 6-1: Manufacturer: Ы [ 1336.848410][ T29] usb 6-1: SerialNumber: syz [ 1336.860967][T26859] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1337.155432][ T29] usb 6-1: USB disconnect, device number 80 [ 1337.658269][T26878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6148'. [ 1337.725049][T26881] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1337.738049][T26881] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 1337.747089][T26881] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1337.753837][T26883] max out of range [ 1337.755544][T26881] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 1338.015484][ T796] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1338.075073][T26896] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6154'. [ 1338.141529][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.152651][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.163204][T26901] Invalid argument reading file caps for ./file0 [ 1338.179169][ T796] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1338.188764][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.196776][ T796] usb 6-1: Product: syz [ 1338.201045][ T796] usb 6-1: Manufacturer: syz [ 1338.205730][ T796] usb 6-1: SerialNumber: syz [ 1338.215753][ T796] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1338.231401][T24477] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1338.662777][ T29] usb 6-1: USB disconnect, device number 81 [ 1338.872702][T26911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.881882][T26911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.892482][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6159'. [ 1339.330581][T24477] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1339.337743][T24477] ath9k_htc: Failed to initialize the device [ 1339.345008][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 1339.524328][T26921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.533717][T26921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.600670][ T29] IPVS: starting estimator thread 0... [ 1339.607133][T26928] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1339.673286][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1339.704511][T26929] IPVS: using max 37 ests per chain, 88800 per kthread [ 1339.921895][T26942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1339.932985][T26942] bridge_slave_1: left allmulticast mode [ 1339.938629][T26942] bridge_slave_1: left promiscuous mode [ 1339.944689][T26942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.954234][T26942] bridge_slave_0: left allmulticast mode [ 1339.960101][T26942] bridge_slave_0: left promiscuous mode [ 1339.966304][T26942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.980323][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888048544000 (24)(bridge0) start [ 1339.997410][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888048544000 (22)(bridge0) end [ 1340.128405][T26947] overlayfs: invalid origin (0000) [ 1340.287079][T26954] syzkaller0: entered allmulticast mode [ 1340.294730][T26954] syzkaller0: entered promiscuous mode [ 1340.303873][T26953] syzkaller0: left promiscuous mode [ 1340.305902][T26958] bpf: Bad value for 'gid' [ 1340.309473][T26953] syzkaller0: left allmulticast mode [ 1340.356740][ T5881] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 1340.500548][T26970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.509907][T26971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.523114][T26971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.527897][T26970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.532244][ T5881] usb 6-1: device descriptor read/64, error -71 [ 1340.795209][ T5881] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 1340.913050][T26986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1340.924371][T26985] tipc: Enabling of bearer rejected, failed to enable media [ 1340.944784][ T5881] usb 6-1: device descriptor read/64, error -71 [ 1341.062756][ T5881] usb usb6-port1: attempt power cycle [ 1341.321931][T26989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.330652][T26989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.341108][T26989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.349750][T26989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.396719][T26994] netlink: 300 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1341.447868][ T5881] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 1341.487611][ T5881] usb 6-1: device descriptor read/8, error -71 [ 1341.687169][T27012] sg_write: data in/out 393179/8 bytes for SCSI command 0x0-- guessing data in; [ 1341.687169][T27012] program syz.4.6190 not setting count and/or reply_len properly [ 1341.789199][ T5881] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 1341.824411][ T5881] usb 6-1: device descriptor read/8, error -71 [ 1341.949937][ T5881] usb usb6-port1: unable to enumerate USB device [ 1342.694368][T27041] netlink: 'syz.4.6192': attribute type 10 has an invalid length. [ 1342.702154][T27045] netlink: 'syz.4.6192': attribute type 10 has an invalid length. [ 1342.703556][T27041] veth1_vlan: entered allmulticast mode [ 1342.720353][T27041] team0: Device veth1_vlan failed to register rx_handler [ 1342.731747][T27045] team0: Device veth1_vlan failed to register rx_handler [ 1343.737541][T24477] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1343.918011][T24477] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1343.926168][T24477] usb 6-1: config 1 has no interface number 0 [ 1343.932802][T24477] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1343.948633][T24477] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1343.958609][T24477] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.974408][T24477] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1343.984296][T24477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.992481][T24477] usb 6-1: Product: syz [ 1343.996724][T24477] usb 6-1: Manufacturer: syz [ 1344.001413][T24477] usb 6-1: SerialNumber: syz [ 1344.018311][T27049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1344.281105][T27049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.291303][T27049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.305378][T24477] usb 6-1: Error in usbnet_get_endpoints (-71) [ 1344.321327][T24477] usb 6-1: USB disconnect, device number 86 [ 1344.761768][T27067] fuse: Unknown parameter 'groupHOd' [ 1344.808739][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804b098000 (12)(pimreg0) start [ 1344.827989][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88804b098000 (6)(pimreg0) end [ 1344.880625][T27070] kAFS: unable to lookup cell 'mSjˡ8' [ 1345.011031][T27078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.020692][T27078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.829979][T27040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1346.322152][T15819] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1346.428582][T27117] netlink: 'syz.5.6216': attribute type 12 has an invalid length. [ 1346.438582][T27117] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1346.995594][T15819] usb 6-1: device descriptor read/64, error -71 [ 1347.073195][T27134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.082281][T27134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.275522][T15819] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1347.444499][T15819] usb 6-1: Using ep0 maxpacket: 8 [ 1347.451422][T15819] usb 6-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 1347.461834][T15819] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1347.471014][T15819] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 1347.480148][T15819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.490057][T15819] usb 6-1: config 0 descriptor?? [ 1347.654180][T27156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.663897][T27156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.714044][ T796] usb 6-1: USB disconnect, device number 88 [ 1348.253793][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.262987][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.386286][T27174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6233'. [ 1348.440641][T27176] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1348.770209][ T5910] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1348.932542][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.944394][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1348.953820][ T5910] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1348.966366][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.978784][ T5910] usb 6-1: config 0 descriptor?? [ 1348.987689][ T5910] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1348.998993][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 1349.011624][ T5910] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1349.021178][ T5910] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1349.028686][ T5910] usb 6-1: media controller created [ 1349.035739][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1349.052422][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 1349.061080][ T5910] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1349.073420][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input226 [ 1349.090153][ T5910] dvb-usb: schedule remote query interval to 150 msecs. [ 1349.097721][ T5910] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1349.220302][T27178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.229108][T27178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.262065][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1349.270296][ T796] dvb-usb: error while querying for an remote control event. [ 1349.280773][T15819] usb 6-1: USB disconnect, device number 89 [ 1349.298888][T27185] netlink: 520 bytes leftover after parsing attributes in process `syz.3.6241'. [ 1349.308624][T27185] openvswitch: netlink: Flow key attr not present in new flow. [ 1349.328956][T27185] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1349.332260][T15819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1349.864029][T27189] binder: 27188:27189 ioctl c0306201 2000000003c0 returned -14 [ 1349.884910][T27189] 9p: Bad value for 'rfdno' [ 1350.748629][T27210] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 1350.758082][T27210] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 1351.494745][T27220] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1351.505022][T27220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1351.644733][T27228] netlink: 'syz.4.6256': attribute type 16 has an invalid length. [ 1351.653113][T27228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6256'. [ 1351.667121][T27228] veth1_macvtap: entered allmulticast mode [ 1351.701040][T27232] netlink: 'syz.3.6257': attribute type 21 has an invalid length. [ 1351.712668][T27232] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6257'. [ 1351.723771][T27232] netlink: 'syz.3.6257': attribute type 4 has an invalid length. [ 1351.732621][T27232] netlink: 'syz.3.6257': attribute type 3 has an invalid length. [ 1351.741553][T27234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.750787][T27234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.236238][T27259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1353.556203][T27271] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6268'. [ 1353.565523][T27271] ip6tnl0: entered promiscuous mode [ 1353.830801][ T30] audit: type=1326 audit(1771064813.085:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27277 comm="syz.3.6271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56c39bf79 code=0x0 [ 1353.978008][T27280] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6271'. [ 1353.999939][T24477] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1354.147795][T24477] usb 6-1: device descriptor read/64, error -71 [ 1354.404242][T24477] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1354.564470][T24477] usb 6-1: device descriptor read/64, error -71 [ 1354.682609][T24477] usb usb6-port1: attempt power cycle [ 1354.931339][T27289] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1355.045526][T24477] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1355.090955][T24477] usb 6-1: device descriptor read/8, error -71 [ 1355.156783][T27303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.167238][T27303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.355788][T24477] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1355.388676][T24477] usb 6-1: device descriptor read/8, error -71 [ 1355.505535][T24477] usb usb6-port1: unable to enumerate USB device [ 1356.000716][T27331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.010813][T27331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.023741][T27331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.033089][T27331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.041977][T27331] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1356.069925][T27331] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1356.760566][T27346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6289'. [ 1356.771985][T27346] syzkaller1: entered promiscuous mode [ 1356.777623][T27346] syzkaller1: entered allmulticast mode [ 1356.911766][T27350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.920570][T27350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.945109][T27350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.962457][T27350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.365550][ T796] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1357.525755][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 1357.543648][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.557540][ T796] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d8.55 [ 1357.566767][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.575284][ T796] usb 6-1: Product: syz [ 1357.579887][ T796] usb 6-1: Manufacturer: syz [ 1357.584677][ T796] usb 6-1: SerialNumber: syz [ 1357.593258][ T796] usb 6-1: config 0 descriptor?? [ 1357.603393][ T796] ttusbir 6-1:0.0: cannot find expected altsetting [ 1357.651216][T27356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.660487][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.671704][T27356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.680500][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.689018][T27356] netlink: 'syz.4.6294': attribute type 46 has an invalid length. [ 1357.697266][T27357] netlink: 'syz.4.6294': attribute type 46 has an invalid length. [ 1357.711387][ T5142] Bluetooth: hci3: link tx timeout [ 1357.716535][ T5142] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1357.820812][ T796] usb 6-1: USB disconnect, device number 94 [ 1358.267142][T27361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.276020][T27361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.769720][T27378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.779765][T27378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.923972][T27385] netlink: 'syz.4.6302': attribute type 11 has an invalid length. [ 1358.955011][ T1005] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888031de0000 (4)(s) start [ 1358.973392][ T1005] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888031de0000 (3)(s) end [ 1359.007951][T27387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.016818][T27387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.351483][ T1005] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888031de0000 (4)(wlan2) start [ 1359.368135][ T1005] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff888031de0000 (3)(wlan2) end [ 1359.590529][T27396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.599211][T27396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.774384][T24477] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1359.943360][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 1359.957873][T24477] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.999681][T24477] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1360.013524][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807e27c000 (23)(bnep0) start [ 1360.016537][T24477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.075552][ T9190] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e88000 (11)(syz1) rdma_ndev=ffff888029c88000 (19)(vcan0) cookie=ffff88807e27c000 (13)(bnep0) end [ 1360.080836][T24477] usb 6-1: Product: syz [ 1360.144786][T24477] usb 6-1: Manufacturer: syz [ 1360.149425][T24477] usb 6-1: SerialNumber: syz [ 1360.168711][T24477] usb 6-1: config 0 descriptor?? [ 1360.190194][T24477] ims_pcu 6-1:0.0: Union descriptor too short (2 vs 5) [ 1360.207035][T24477] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 1360.391765][T27422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.403097][T27422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.419113][T27422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.427520][ T5926] usb 6-1: USB disconnect, device number 95 [ 1360.449241][T27422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.098653][T27460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.100558][T27459] syzkaller1: entered promiscuous mode [ 1361.111182][T27459] syzkaller1: entered allmulticast mode [ 1361.631053][ T796] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1361.682091][T27495] netlink: 'syz.4.6327': attribute type 7 has an invalid length. [ 1361.825884][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 1361.833162][ T796] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1361.842155][ T796] usb 6-1: config 179 has no interface number 0 [ 1361.850361][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1361.861897][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1361.873538][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1361.885213][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1361.896997][ T796] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1361.911502][ T796] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1361.920796][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.946143][T27475] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1362.222436][ T796] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input229 [ 1362.415494][T27533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6333'. [ 1362.454113][T27536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.475886][T27536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.476449][T27535] netlink: zone id is out of range [ 1362.495376][T27533] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7e7ff pfn:0x7600c [ 1362.508154][T27533] memcg:ffff8880268e0d40 [ 1362.512428][T27533] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 1362.520918][T27533] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 1362.525470][T27535] netlink: zone id is out of range [ 1362.535919][T27535] netlink: zone id is out of range [ 1362.541278][T27535] netlink: zone id is out of range [ 1362.546591][T27535] netlink: zone id is out of range [ 1362.550367][T27533] raw: 000000000007e7ff 0000000000000000 00000001ffffffff ffff8880268e0d40 [ 1362.552080][T27535] netlink: zone id is out of range [ 1362.560391][T27533] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 1362.560411][T27533] page_owner tracks the page as allocated [ 1362.560419][T27533] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 27533, tgid 27530 (syz.4.6333), ts 1362495324368, free_ts 1362489783305 [ 1362.560449][T27533] post_alloc_hook+0x231/0x280 [ 1362.571337][T27539] netlink: 'syz.0.6334': attribute type 2 has an invalid length. [ 1362.603430][T27535] netlink: zone id is out of range [ 1362.615737][T27533] get_page_from_freelist+0x24dc/0x2580 [ 1362.615767][T27533] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1362.615785][T27533] alloc_pages_mpol+0x232/0x4a0 [ 1362.615803][T27533] alloc_pages_noprof+0xa8/0x190 [ 1362.615818][T27533] folio_alloc_noprof+0x1e/0x30 [ 1362.615833][T27533] filemap_alloc_folio_noprof+0x111/0x470 [ 1362.615860][T27533] page_cache_ra_order+0x551/0xeb0 [ 1362.615874][T27533] do_sync_mmap_readahead+0x6ad/0x8e0 [ 1362.615890][T27533] filemap_fault+0x6e2/0x1320 [ 1362.656871][T27535] netlink: zone id is out of range [ 1362.674392][T27533] __do_fault+0x138/0x390 [ 1362.675581][T27475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.679748][T27533] do_pte_missing+0x1006/0x3750 [ 1362.690921][T27475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.716375][T27535] netlink: zone id is out of range [ 1362.726767][T27533] handle_mm_fault+0x1bec/0x3310 [ 1362.730392][T27535] netlink: zone id is out of range [ 1362.744281][T27533] __get_user_pages+0x165b/0x29d0 [ 1362.761246][T27533] populate_vma_page_range+0x2be/0x3c0 [ 1362.770785][T27535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6334'. [ 1362.778435][T27533] __mm_populate+0x25f/0x390 [ 1362.795335][T27533] page last free pid 27532 tgid 27530 stack trace: [ 1362.805080][T27533] free_unref_folios+0xed5/0x16d0 [ 1362.810682][T27533] folios_put_refs+0x789/0x8d0 [ 1362.816284][T27533] truncate_inode_pages_range+0x3dd/0xe30 [ 1362.822500][T27533] set_blocksize+0x2ce/0x440 [ 1362.827273][T27533] blkdev_bszset+0x1b2/0x230 [ 1362.832364][T27533] blkdev_ioctl+0x2c7/0x740 [ 1362.837125][T27533] __se_sys_ioctl+0xfc/0x170 [ 1362.842208][T27533] do_syscall_64+0x14d/0xf80 [ 1362.846817][T27533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.856055][T27533] ------------[ cut here ]------------ [ 1362.862166][T27533] kernel BUG at mm/filemap.c:859! [ 1362.888932][T27533] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1362.895215][T27533] CPU: 1 UID: 0 PID: 27533 Comm: syz.4.6333 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.906161][T27533] Tainted: [L]=SOFTLOCKUP [ 1362.910486][T27533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1362.920531][T27533] RIP: 0010:__filemap_add_folio+0x11bc/0x1350 [ 1362.926603][T27533] Code: 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 9c 85 27 ff 90 0f 0b e8 54 5b c5 ff 4c 89 e7 48 c7 c6 80 9a d7 8b e8 85 85 27 ff 90 <0f> 0b e8 3d 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 6e 85 27 ff [ 1362.946205][T27533] RSP: 0018:ffffc9000ce671e0 EFLAGS: 00010246 [ 1362.952260][T27533] RAX: 57b66c7284552400 RBX: 0000000000000000 RCX: 0000000000000000 [ 1362.960216][T27533] RDX: 0000000000000007 RSI: ffffffff8e0108cf RDI: 00000000ffffffff [ 1362.968172][T27533] RBP: ffffc9000ce67360 R08: ffffffff903399b7 R09: 1ffffffff2067336 [ 1362.976127][T27533] R10: dffffc0000000000 R11: fffffbfff2067337 R12: ffffea0001d80300 [ 1362.984089][T27533] R13: dffffc0000000000 R14: ffffea0001d80308 R15: 0000000000000004 [ 1362.992139][T27533] FS: 00007f499de426c0(0000) GS:ffff88812510b000(0000) knlGS:0000000000000000 [ 1363.001055][T27533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1363.007626][T27533] CR2: 0000562a4efb9008 CR3: 0000000047c7a000 CR4: 00000000003526f0 [ 1363.015586][T27533] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1363.023547][T27533] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1363.031504][T27533] Call Trace: [ 1363.034769][T27533] [ 1363.037688][T27533] ? percpu_ref_put+0x19/0x180 [ 1363.042440][T27533] ? __pfx___filemap_add_folio+0x10/0x10 [ 1363.048062][T27533] ? percpu_ref_put+0xf9/0x180 [ 1363.052808][T27533] ? __mem_cgroup_charge+0x149/0x1e0 [ 1363.058076][T27533] filemap_add_folio+0x264/0x530 [ 1363.063003][T27533] page_cache_ra_order+0x6b5/0xeb0 [ 1363.068109][T27533] do_sync_mmap_readahead+0x6ad/0x8e0 [ 1363.073472][T27533] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1363.079348][T27533] ? count_memcg_event_mm+0x1d/0x250 [ 1363.084627][T27533] ? count_memcg_event_mm+0x1d/0x250 [ 1363.089899][T27533] filemap_fault+0x6e2/0x1320 [ 1363.094561][T27533] ? __pfx_filemap_fault+0x10/0x10 [ 1363.099652][T27533] ? kmem_cache_alloc_noprof+0x307/0x650 [ 1363.105281][T27533] ? ptlock_alloc+0x20/0x70 [ 1363.109781][T27533] ? __raw_spin_lock_init+0x45/0x100 [ 1363.115099][T27533] ? pte_alloc_one+0x1f9/0x370 [ 1363.119855][T27533] __do_fault+0x138/0x390 [ 1363.124172][T27533] do_pte_missing+0x1006/0x3750 [ 1363.129015][T27533] handle_mm_fault+0x1bec/0x3310 [ 1363.133942][T27533] ? mt_find+0x186/0x630 [ 1363.138175][T27533] ? handle_mm_fault+0xee/0x3310 [ 1363.143105][T27533] ? __pfx_handle_mm_fault+0x10/0x10 [ 1363.148383][T27533] __get_user_pages+0x165b/0x29d0 [ 1363.153415][T27533] populate_vma_page_range+0x2be/0x3c0 [ 1363.158864][T27533] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1363.164840][T27533] ? down_read+0x272/0x2e0 [ 1363.169241][T27533] ? __mm_populate+0x173/0x390 [ 1363.173996][T27533] __mm_populate+0x25f/0x390 [ 1363.178575][T27533] ? __pfx___mm_populate+0x10/0x10 [ 1363.183678][T27533] vm_mmap_pgoff+0x3aa/0x4f0 [ 1363.188261][T27533] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1363.193361][T27533] ? __fget_files+0x2a/0x420 [ 1363.197946][T27533] ? __fget_files+0x3a0/0x420 [ 1363.202613][T27533] ? __fget_files+0x2a/0x420 [ 1363.207194][T27533] ksys_mmap_pgoff+0x51e/0x760 [ 1363.211964][T27533] do_syscall_64+0x14d/0xf80 [ 1363.216548][T27533] ? trace_irq_disable+0x3b/0x150 [ 1363.221558][T27533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.227606][T27533] ? clear_bhb_loop+0x40/0x90 [ 1363.232266][T27533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.238143][T27533] RIP: 0033:0x7f499cf9bf79 [ 1363.242542][T27533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.262130][T27533] RSP: 002b:00007f499de42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1363.270530][T27533] RAX: ffffffffffffffda RBX: 00007f499d216090 RCX: 00007f499cf9bf79 [ 1363.278498][T27533] RDX: 0000000002000007 RSI: 0000000000003000 RDI: 0000200000888000 [ 1363.286454][T27533] RBP: 00007f499d0327e0 R08: 0000000000000008 R09: 0000000000000000 [ 1363.294411][T27533] R10: 0000000004002012 R11: 0000000000000246 R12: 0000000000000000 [ 1363.302370][T27533] R13: 00007f499d216128 R14: 00007f499d216090 R15: 00007fffcd3b05b8 [ 1363.310336][T27533] [ 1363.313351][T27533] Modules linked in: [ 1363.317876][T27533] ---[ end trace 0000000000000000 ]--- [ 1363.347888][T27533] RIP: 0010:__filemap_add_folio+0x11bc/0x1350 [ 1363.364291][ T5926] usb 6-1: USB disconnect, device number 96 [ 1363.364380][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1363.379119][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1363.391354][T27533] Code: 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 9c 85 27 ff 90 0f 0b e8 54 5b c5 ff 4c 89 e7 48 c7 c6 80 9a d7 8b e8 85 85 27 ff 90 <0f> 0b e8 3d 5b c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 6e 85 27 ff [ 1363.418010][T27533] RSP: 0018:ffffc9000ce671e0 EFLAGS: 00010246 [ 1363.424827][T27533] RAX: 57b66c7284552400 RBX: 0000000000000000 RCX: 0000000000000000 [ 1363.433022][T27533] RDX: 0000000000000007 RSI: ffffffff8e0108cf RDI: 00000000ffffffff [ 1363.441123][T27533] RBP: ffffc9000ce67360 R08: ffffffff903399b7 R09: 1ffffffff2067336 [ 1363.455429][T27533] R10: dffffc0000000000 R11: fffffbfff2067337 R12: ffffea0001d80300 [ 1363.463824][T27533] R13: dffffc0000000000 R14: ffffea0001d80308 R15: 0000000000000004 [ 1363.474984][T27533] FS: 00007f499de426c0(0000) GS:ffff88812510b000(0000) knlGS:0000000000000000 [ 1363.484332][T27533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1363.491126][T27533] CR2: 0000556c8e8bd950 CR3: 0000000047c7a000 CR4: 00000000003526f0 [ 1363.499268][T27533] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1363.507519][T27533] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1363.515613][T27533] Kernel panic - not syncing: Fatal exception [ 1363.522070][T27533] Kernel Offset: disabled [ 1363.526473][T27533] Rebooting in 86400 seconds..