last executing test programs: 43m23.397576719s ago: executing program 2 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0xb, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unlink(&(0x7f00000003c0)='./cgroup\x00') migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x13e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2, 0xc0150, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xf3, 0x6d, 0x1c, 0x10, 0x856, 0xac32, 0xd841, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0xb4, 0xc0, 0xc, "", [{{0x9, 0x4, 0x5f, 0x4, 0x0, 0x81, 0xaf, 0xe1, 0x8}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x400, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0xec, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0xffffffffffffffff}, {0x0, 0x6, 0xcc, 0x4}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}}, 0xec}}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8940, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20008080) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x605, 0xfffffffe, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 43m22.679049718s ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd, r2}, 0x38) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x4, 0x40000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60823, 0x5a527}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) fsopen(&(0x7f0000000040)='binder\x00', 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r10, 0xc04c5609, &(0x7f0000000240)=@multiplanar_userptr={0x4000008, 0x9, 0x4, 0x100000, 0x9, {}, {0x4, 0x1, 0x8, 0x2a, 0x1, 0x4, "9e55c1d5"}, 0x5, 0x2, {0x0}, 0x40, 0x0, r9}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000001c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1d}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xe000) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="f67d19e33ea85cf312ffda6b7bd4cd957cf088494e8cdadd1fac", 0x1a}, {&(0x7f0000000100)="4c596e58e50f934a9b2607f2d95160fbdeb07fca4490b32570f06c3ca85f79e76544fb946d4f7c2cd3979464b29622aa45e4ad1bbac043fb784075e32f63a550bef024f6d395737eb984ebcf2474faf16b5ce4", 0x53}, {&(0x7f0000000180)="8159166dcede7867ceb6b913a0e43b9a1a82023d56c75aa86984baa3f938db4ece63f2b7dd40267e6655f7ec2e3236cb670fcd382c7c2cdb7e63d08975647fbf56ba8fbfec0f65b442309889c02dbdd1b4aeaf209c5c28b16d5188a623871062605ad75acc11d7714437ff0187a40ad4a5ec03b994aa9a8d6ba69af57aae8d8785dd3524abeb5ab3e10865038954361e5ce63700daf72cbff11bd29139994a526d6ff3d310", 0xa5}, {&(0x7f0000000240)="3140c40ca050c9f9da049898f8fe211207093b3f7a8db10b31", 0x19}], 0x4}, 0x20004050) 43m18.502241526s ago: executing program 2 (id=898): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xff01, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000005c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f00000001c0)={{r9, r8, 0x1, [0x0, 0xf7df]}, {r9, r10, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) r11 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) openat$ocfs2_control(0xffffff9c, 0x0, 0x210902, 0x0) getresgid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000400)={0x1, 0x0, 0x80, 0x2ff, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) 43m14.957080781s ago: executing program 2 (id=904): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x28, 0x2, 0x200, "8a00000000b8af3e8f72f108007c39492ff7e7ffffffffff4bee00", 0xa0363159}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat64(r0, &(0x7f00000003c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000340)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="40171100000006a44f3bee509f885eb4208187"], 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000002030000000000000000000003000001080005400000000008000f000000002008000440000000180800054000000000d85f16ae22c48b12864656f4"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x1) syz_io_uring_setup(0x7544, &(0x7f0000001380)={0x0, 0x43d3, 0x8000, 0x1, 0x48}, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00022cbd7000fedbdf2512000000080007000300000018000180140002000000000000000000000000000000000008000800f7ffff"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x800) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={0x0}) socket(0x1, 0x803, 0xfffffffc) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x67) setsockopt(r2, 0x5, 0x40, &(0x7f0000000440)="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", 0xfe0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x3) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2700000001060101000000000000000001000003"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000004) 43m13.364152421s ago: executing program 2 (id=908): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYRES8=r0], 0x20) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x80000003, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xc, 0xb44b, 0x11, 0x4, 0xa, 0x4, 0x3, 0x6}}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) close(r0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x3, {0x0, 0xa}, {0x1, 0x3cc}, @const={0x0, {0x0, 0x8, 0x2, 0x81}}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r4 = epoll_create1(0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000030601020000000000000000050000080900020073797a31000000000500010007000000b8fb81721d274e74023b"], 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xe000200c}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x5, 0x2) 43m12.760726608s ago: executing program 2 (id=909): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x9, 0xfa11, 0x9d54}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r5}}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x150, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xf7, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x7b, 0x2, 0x2, 0x6, 0x0, 0xee, {{0x5}, {0x5, 0x24, 0x0, 0xbf6f}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x0, 0xf}, [@mdlm_detail={0x103, 0x24, 0x13, 0x7, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xe0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x3, 0xff}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20100) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3c, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x8, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 43m12.265553636s ago: executing program 32 (id=909): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x9, 0xfa11, 0x9d54}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r5}}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x150, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xf7, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x7b, 0x2, 0x2, 0x6, 0x0, 0xee, {{0x5}, {0x5, 0x24, 0x0, 0xbf6f}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x0, 0xf}, [@mdlm_detail={0x103, 0x24, 0x13, 0x7, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xe0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x3, 0xff}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20100) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3c, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x8, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 17.138822484s ago: executing program 4 (id=7231): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = fsopen(&(0x7f00000004c0)='hpfs\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500900000008732b13004001010000010902bd000301f40006080b0002010020400904000000010120000924010300063f00130f240805050100010000000000010010240206ff0101056f070000000000000724080106030091949bf01e2f9ab20f5b00000006d47f0904010000010220000904010101010220000a2402025200050003030a24020211ff0a005905090501090800030509082501030f0c08000904020000010220000904020101010220000a24020200000d0000b609058209200007ff4c082501810f40050306a2de9fbb1034b84248eb5e0d3f"], &(0x7f0000000240)={0x0, 0x0, 0x15, &(0x7f0000000540)=ANY=[@ANYBLOB="0000004207000000000015638a708abc85", @ANYRES32=r0, @ANYBLOB="5ed9dd04a0287ed8108adb0252962034d65e188366a779ca0b39ef4dabe75f5d18a1a9ca49910c46afa4c0188a581e63a2b75c79d4f39aa86a6cded072256f5f794d0e3c5479f6fd664281a30deaf5b69dbfd9ce8c6ecf43fd0f2b47fea2b8a5378fc6958d5e898f00301bb3ef9938ea2fdef7216e2721ae61fedd7a28e290a847d0dd094fab4ce4c08de85dc437d3158ebc6924167768a4a958c6f7298597844a35a0ff184d5a9f538af5136a3457ce362d96a06bedc4c5760ababa57a4bf50a4f544ea936de980907c5422b03ad0c2c18b31a530323318ed04734f90ce32", @ANYRES64=r5, @ANYRESDEC=r3]}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r9, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r9, &(0x7f0000000440)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 17.1381388s ago: executing program 0 (id=7244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x33) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x4}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x3b, 0x660f537e, 0x7f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r6 = syz_open_dev$rtc(&(0x7f0000000040), 0x300000000000000, 0x100) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000050000000000000000000009030000000e000000000000110500000000000000000000000100000d0000000008000000040000001000000031127a00000008010000000061"], &(0x7f0000000200)=""/128, 0x59, 0x80, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="ff7f000000000000000000000000000000080000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000500"/28], 0x50) 17.12814935s ago: executing program 5 (id=7245): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a00011027bd7000fedbdf250a803302fe01fd0000020000220004008fb2361e0a9c70c266633f0f70df2147564c3ada7bd81f796a9b1e3fd161e95959ea62e9e18b53bcf80b1ef1", @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0xff, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xc7d}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_getanyicast={0x14, 0x3e, 0x429, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x240040c0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x30) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x480, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x6, 0x3, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xbd, 0xc9, 0xe, 0xff}}}, 0x9) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0xd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000000080)={0x16, 0x100, 0x4, 0x7, 0x9}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0x0, 0x4a9}]}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 14.620830788s ago: executing program 5 (id=7238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) 14.616379149s ago: executing program 4 (id=7239): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6(0x10, 0x2, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x20010, r3, 0x42799000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r12, 0x0, 0x0, 0x40080) sendmmsg$inet6(r12, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="15", 0x1}], 0x1}}], 0x2, 0x24040040) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000001040)={0x1, 'dvmrp0\x00', 0x3}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 13.107612495s ago: executing program 3 (id=7240): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040b0b19c9"], 0xe) mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0xf8, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) 12.335825852s ago: executing program 1 (id=7243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xc6, 0xc, "177bb674ef1101f43d251963f7fbc5bfbf5177a3896cc7cc9e564b0462977ee8a4a806795d6268da79db61bc8f9e6d80482be8fd79fdad63d1081159b2c163f2804e26373df2540bd51249460585f867e43389c91585ff2d5c38456669092e0b0143ca8f7a0573d09d331f4a37abf1df382661c0ad21e7620483eeb301ebac67a1de75530de92cba4728d6df2cc4bdd6019b362b2361c6fdf533e2e2805d6c7267d890cdc331d7256e636087bdc32eef34994b51fb6e2a9330312995da6a1ee292c3"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x164}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xffffffffffffff06}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000025bd7000fbdbdf25093b1486d03d4264b32c5d4b19de5fbb607e081338387d7c140000007fe292000800"/56], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x9000000000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r13 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') ioctl$BTRFS_IOC_DEV_REPLACE(r13, 0xca249435, &(0x7f0000000680)={0x0, 0x6, @status={[0x2, 0xb5000000000, 0x0, 0xffffffffffffff81, 0x80, 0x791a1a07]}, [0x6, 0x2, 0x400, 0x64a, 0x5a78, 0x0, 0xf, 0xc5, 0x800, 0x2, 0x1, 0x50, 0x1, 0x3, 0x9, 0xcd35, 0x7fffffffffffffff, 0x3, 0x7f000000000000, 0x6, 0x9, 0x3b, 0x8, 0x7, 0x81, 0x7fffffff, 0x7, 0xdfd, 0xb, 0xfffffffffffffbff, 0x6, 0x150f, 0x7, 0x8001, 0x7ff, 0x6, 0x0, 0x75d, 0x4, 0xff, 0x595, 0xffffffffffffffff, 0x2, 0xff, 0x40, 0x4, 0x2, 0x8000000000000001, 0x5, 0x20a, 0x2, 0x3, 0x62, 0x0, 0x5c, 0x3, 0x5, 0x6cc5d941, 0x1, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x64f3]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) 12.32961347s ago: executing program 0 (id=7256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x33) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x4}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r6 = syz_open_dev$rtc(&(0x7f0000000040), 0x300000000000000, 0x100) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], &(0x7f0000000200)=""/128, 0x59, 0x80, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="ff7f000000000000000000000000000000080000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000500"/28], 0x50) 11.850490665s ago: executing program 1 (id=7246): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x18}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r10 = shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r10) 10.997745093s ago: executing program 5 (id=7247): r0 = syz_open_dev$radio(&(0x7f0000000b80), 0x0, 0x2) writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="62456f9b21f9e1fef39d128763d94e0e8f1051d0344457c573a583a71bf95b11c723a4e00f93d7c708e0693407e0d173d4608f080b430f7d7fa7ee8eb3039db1b4b5b931b7b2157d97c693402f7a33ec23d1ff4d8ad1ee4793510d05719eb6b0d701306e7fa90edecd8022df5885776dfbb41e4c3f7a74c6a12fa8f64e212fcc74ac727145c87d", 0x87}], 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000bc0)={0x0, "cd48b8ad5516b3851ea8a13d68eb4d6d7d86d64a7263cc6b7e157fff84922c04", 0x1, 0x4, 0x108c, 0x2, 0x4, 0x2, 0x3, 0x2b}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffd, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@getchain={0x2c, 0x66, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffe2}, {0xb}}, [{0x8, 0xb, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="6558fc70760d1916384e297e571fd7057ee962f65f8e9fd6341f5350efb139561451", 0x22}], 0x1}, 0x4008840) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x449, 0x47314356, 0x34324241, 0x3, [{0x9, 0x2009}, {0x5, 0xfffffffe}, {0x0, 0x2003}, {0x292, 0x9}, {0x7, 0x4}, {0xee, 0x200}, {0xffffff03, 0x7ffe}, {0x1, 0x4}], 0x2, 0xa, 0x1, 0x2, 0x6}}) r9 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r10 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r9) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x810c5701, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040fec20720704"], 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e20500050002000000050001000600000084"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050019030a00bd8f7bdcb6"], 0x17) 10.997151999s ago: executing program 3 (id=7248): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00", 0x21}], 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x61, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f00000003c0)={{0x11, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@remote, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 8.926222928s ago: executing program 4 (id=7250): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = fsopen(&(0x7f00000004c0)='hpfs\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500900000008732b13004001010000010902bd000301f40006080b0002010020400904000000010120000924010300063f00130f240805050100010000000000010010240206ff0101056f070000000000000724080106030091949bf01e2f9ab20f5b00000006d47f0904010000010220000904010101010220000a2402025200050003030a24020211ff0a005905090501090800030509082501030f0c08000904020000010220000904020101010220000a24020200000d0000b609058209200007ff4c082501810f40050306a2de9fbb1034b84248eb5e0d3f"], &(0x7f0000000240)={0x0, 0x0, 0x15, &(0x7f0000000540)=ANY=[@ANYBLOB="0000004207000000000015638a708abc85", @ANYRES32=r0, @ANYBLOB="5ed9dd04a0287ed8108adb0252962034d65e188366a779ca0b39ef4dabe75f5d18a1a9ca49910c46afa4c0188a581e63a2b75c79d4f39aa86a6cded072256f5f794d0e3c5479f6fd664281a30deaf5b69dbfd9ce8c6ecf43fd0f2b47fea2b8a5378fc6958d5e898f00301bb3ef9938ea2fdef7216e2721ae61fedd7a28e290a847d0dd094fab4ce4c08de85dc437d3158ebc6924167768a4a958c6f7298597844a35a0ff184d5a9f538af5136a3457ce362d96a06bedc4c5760ababa57a4bf50a4f544ea936de980907c5422b03ad0c2c18b31a530323318ed04734f90ce32", @ANYRES64=r5, @ANYRESDEC=r3]}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r9, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r9, &(0x7f0000000440)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 8.842317594s ago: executing program 0 (id=7251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x33) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x4}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x3b, 0x660f537e, 0x7f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r6 = syz_open_dev$rtc(&(0x7f0000000040), 0x300000000000000, 0x100) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000050000000000000000000009030000000e000000000000110500000000000000000000000100000d0000000008000000040000001000000031127a00000008010000000061"], &(0x7f0000000200)=""/128, 0x59, 0x80, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="ff7f000000000000000000000000000000080000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000500"/28], 0x50) 7.392440707s ago: executing program 3 (id=7252): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000300)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r5, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x64, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6af1f106ddbf56004"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 7.382373125s ago: executing program 1 (id=7263): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x35}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x2, 0xf44, 0x0, 0x0, 0x1000, 0xffffff7f, 0xffffffffffffffff, 0x0, 0x118}}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb36}], 0x1, 0x40002042, 0x0) getrusage(0x0, &(0x7f0000000400)) read$dsp(r0, &(0x7f00000000c0)=""/229, 0xe5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002c80)={0xc4, 0x0, &(0x7f0000000a00)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1000003}, @clear_death, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f0000000300)={0x0, 0x1c, 0x34}}, 0x40}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/134, 0x86, 0x1, 0xe}, @fda={0x66646185, 0x3, 0x1, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/193, 0xc1, 0x80000000, 0xc}}, &(0x7f0000000880)={0x0, 0x28, 0x44}}, 0x40}, @increfs={0x40046304, 0x2}, @exit_looper], 0xea, 0x0, &(0x7f0000002b80)="f91a26866ba642f843d4f84e20cde5b25ee514fa6036b77b50231994bfde685f2258aa6e2b16ff1265123cbf55bfc8ae53eaac32ddca49a052a50580a42ed273be077299dd22b6bda7f0ed87907e071b7a85bb581434383d49d31f6645cb74572e4641727ea3f7746937ef41f16130cf7e29a65c8bc28962ce9fdfa2f1f1acd6c093e9afaeac27b4fc93a03f95338ca5d127d78e9ef6ec060cc049e918fc12d4e703b8dd0b45e053de62d3cd65dd8f0a5742105367691ad2a37bfa2a7f39580e6ea31a0bccc5d139dd4ead29861abf23fc8992de5c4f73d0140db693f26f19054aa9e36ca6795d2da19f"}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x7fffffff) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000500)='./bus\x00', 0x40) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4004080) 5.308345775s ago: executing program 3 (id=7253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a00011027bd7000fedbdf250a803302fe01fd0000020000220004008fb2361e0a9c70c266633f0f70df2147564c3ada7bd81f796a9b1e3fd161e95959ea62e9e18b53bcf80b1ef1", @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x11, 0x4, 0x0, 0x3c, 0x70, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2]}, @lsrr={0x83, 0x1b, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @loopback, @remote]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1b0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x2, 0xc, 0x204, 0x3, 0xe}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x6, 0x0}, 0x3501, 0x4, 0x3, 0x2, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0xa}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 5.307046151s ago: executing program 0 (id=7265): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040b0b19c9"], 0xe) mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000007fffff5850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, r8, 0x6, '\x00', 0x0, r5, 0x0, 0x8000000, 0x4}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r10, @ANYBLOB='\t\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff, r11, 0x4}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 3.990213696s ago: executing program 3 (id=7258): keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x5b) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0) pipe(&(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) 3.711121122s ago: executing program 5 (id=7259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x33) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x4}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x3b, 0x660f537e, 0x7f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r6 = syz_open_dev$rtc(&(0x7f0000000040), 0x300000000000000, 0x100) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], &(0x7f0000000200)=""/128, 0x59, 0x80, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="ff7f000000000000000000000000000000080000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000500"/28], 0x50) 3.565575881s ago: executing program 0 (id=7260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000003feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000bf000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) 2.819825877s ago: executing program 4 (id=7261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0x84, 0x6, 0x1, 0x7, 0x4, 0x1000, 0x0, {0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1800000, 0xc, 0x8001, 0x4}}, &(0x7f0000000cc0)=0xb0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0xf8, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) 2.318670298s ago: executing program 1 (id=7262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x33) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x4}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r6 = syz_open_dev$rtc(&(0x7f0000000040), 0x300000000000000, 0x100) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], &(0x7f0000000200)=""/128, 0x59, 0x80, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="ff7f000000000000000000000000000000080000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000500"/28], 0x50) 230.649789ms ago: executing program 5 (id=7264): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x18}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r10 = shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r10) 216.355095ms ago: executing program 1 (id=7275): r0 = gettid() sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x2, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r7 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000980), 0xfdef) splice(r9, 0x0, r8, 0x0, 0x20000083, 0x4) splice(r9, 0x0, r7, 0x0, 0x4010d00, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000140)={0x7, 'hsr0\x00', {0xc6}}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'vxcan1\x00', {'bond0\x00'}, 0x7}) r14 = dup(r13) r15 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r15, 0x8916, &(0x7f0000000000)={@local, 0x78, r16}) r17 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r17, 0xc0405602, &(0x7f0000000280)={0x51, 0xa, 0x0, "3258ae1e10004000100000100000000000000000000000000100000000000010", 0x38303553}) ioctl$sock_inet6_tcp_SIOCINQ(r15, 0x8936, &(0x7f0000000000)) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x0, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x2, 0xb9}}], 0x1, &(0x7f0000000400)={0x2e, 0x48, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r11, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r18 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r18, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) 0s ago: executing program 3 (id=7266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x33) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0x6, 0x4}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x3b, 0x660f537e, 0x7f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) r6 = syz_open_dev$rtc(&(0x7f0000000040), 0x300000000000000, 0x100) ioctl$RTC_UIE_ON(r6, 0x7003) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000050000000000000000000009030000000e000000000000110500000000000000000000000100000d0000000008000000040000001000000031127a00000008010000000061"], &(0x7f0000000200)=""/128, 0x59, 0x80, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="ff7f000000000000000000000000000000080000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000500"/28], 0x50) kernel console output (not intermixed with test programs): a5) with 1 interfaces [ 2773.945871][ T5709] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 2774.065979][ T5709] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 2774.066553][ T5709] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2774.066995][ T5709] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2774.067536][ T5709] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2774.091406][ T5709] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 2774.091464][ T5709] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 2774.186729][ T5709] i2c i2c-4: Added multiplexed i2c bus 6 [ 2774.224966][ T5709] i2c i2c-4: Added multiplexed i2c bus 7 [ 2774.247082][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 2774.247570][T30988] xt_cgroup: path and classid specified [ 2774.348144][ T5709] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-110]! [ 2774.348210][ T5709] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-110]! [ 2774.511508][ T5709] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -110 [ 2774.698767][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.698813][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.302605][T20324] usb 2-1: USB disconnect, device number 107 [ 2775.880126][T31041] syzkaller1: entered promiscuous mode [ 2775.880168][T31041] syzkaller1: entered allmulticast mode [ 2776.622477][T31046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2776.637554][T31046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2776.960357][T31053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2777.710143][T31065] vivid-000: ================= START STATUS ================= [ 2777.710165][T31065] vivid-000: Radio HW Seek Mode: Bounded [ 2777.710524][T31065] vivid-000: Radio Programmable HW Seek: false [ 2777.710544][T31065] vivid-000: RDS Rx I/O Mode: Block I/O [ 2777.710564][T31065] vivid-000: Generate RBDS Instead of RDS: false [ 2777.710584][T31065] vivid-000: RDS Reception: true [ 2777.710602][T31065] vivid-000: RDS Program Type: 0 inactive [ 2777.710656][T31065] vivid-000: RDS PS Name: inactive [ 2777.710678][T31065] vivid-000: RDS Radio Text: inactive [ 2777.710827][T31065] vivid-000: RDS Traffic Announcement: false inactive [ 2777.789552][T31065] vivid-000: RDS Traffic Program: false inactive [ 2777.789579][T31065] vivid-000: RDS Music: false inactive [ 2777.794829][T31065] vivid-000: ================== END STATUS ================== [ 2779.927591][T31084] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2780.125794][T10127] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2780.255808][T10127] usb 1-1: device descriptor read/64, error -71 [ 2780.446778][T20324] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2780.495779][T10127] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2780.621695][T20324] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2780.625053][T20324] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2780.625084][T20324] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2780.625136][T20324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.625781][T10127] usb 1-1: device descriptor read/64, error -71 [ 2780.735712][T31093] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2780.735985][T10127] usb usb1-port1: attempt power cycle [ 2780.782198][T20324] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2781.075791][T10127] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2781.096675][T10127] usb 1-1: device descriptor read/8, error -71 [ 2781.335699][T10127] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2781.357183][T10127] usb 1-1: device descriptor read/8, error -71 [ 2781.466603][T10127] usb usb1-port1: unable to enumerate USB device [ 2783.233166][ T5709] usb 2-1: USB disconnect, device number 108 [ 2783.390812][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 2783.464024][T31125] IPVS: Unknown mcast interface: pim6reg [ 2783.568396][T31131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6641'. [ 2784.345014][T31143] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2785.056237][T30794] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2785.206414][T30794] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2785.207768][T30794] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x79, changing to 0x9 [ 2785.207799][T30794] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2785.207826][T30794] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2785.207848][T30794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2785.211262][T30794] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2785.211286][T30794] usb 2-1: Product: syz [ 2785.211301][T30794] usb 2-1: Manufacturer: syz [ 2785.211316][T30794] usb 2-1: SerialNumber: syz [ 2785.301060][T30794] usb 2-1: config 0 descriptor?? [ 2785.352495][T30794] usb 2-1: selecting invalid altsetting 0 [ 2785.672598][T31155] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2785.712173][T31142] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 2785.772172][T25321] usb 2-1: USB disconnect, device number 109 [ 2786.207346][T31166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.207758][T31166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.508687][T31160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6650'. [ 2786.513900][T31160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.514342][T31160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.573971][T31160] input: syz0 as /devices/virtual/input/input148 [ 2786.645680][T30797] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2786.795783][T30797] usb 1-1: Using ep0 maxpacket: 16 [ 2786.796559][T30797] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2786.800571][T30797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2786.800595][T30797] usb 1-1: Product: syz [ 2786.800610][T30797] usb 1-1: Manufacturer: syz [ 2786.800625][T30797] usb 1-1: SerialNumber: syz [ 2787.066741][T30797] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2787.070891][T30797] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2787.071557][T30797] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2787.071606][T30797] usb 1-1: media controller created [ 2787.126649][T30797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2787.272034][T30797] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2787.381812][T31169] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6652'. [ 2787.382593][T31169] netlink: 'syz.0.6652': attribute type 1 has an invalid length. [ 2787.448791][T30797] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2787.544731][T31184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.546842][T31184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.660476][T31185] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2788.865571][T31204] libceph: resolve '0..' (ret=-3): failed [ 2789.309913][T31213] program syz.5.6657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2789.437124][ T5709] usb 1-1: USB disconnect, device number 81 [ 2789.933359][T31226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2789.944924][T31226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2790.365876][T30797] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 2790.518105][T30797] usb 2-1: not running at top speed; connect to a high speed hub [ 2790.518143][T30797] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 2790.519517][T30797] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 2790.519542][T30797] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2790.519561][T30797] usb 2-1: config 11 has no interface number 0 [ 2790.519600][T30797] usb 2-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 2790.519626][T30797] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x86 has invalid maxpacket 65535, setting to 64 [ 2790.519652][T30797] usb 2-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2790.519678][T30797] usb 2-1: config 11 interface 95 has no altsetting 0 [ 2790.522619][T30797] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 2790.522656][T30797] usb 2-1: Manufacturer: syz [ 2790.636397][T31232] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2790.873791][T30794] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 2790.891818][T30794] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2791.271478][T31244] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2791.536357][T31232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6661'. [ 2791.587309][T30797] usb 2-1: USB disconnect, device number 110 [ 2792.759751][T31263] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5630] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[31263] [ 2792.779420][T31264] netlink: 'syz.0.6676': attribute type 2 has an invalid length. [ 2793.166578][ T5709] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2793.331576][T31272] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2793.339635][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 2793.341272][ T5709] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2793.362341][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2793.362383][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2793.362442][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.412848][ T5709] usb 1-1: config 0 descriptor?? [ 2793.465172][ T5709] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2793.698108][T31273] netlink: 12286 bytes leftover after parsing attributes in process `syz.4.6669'. [ 2793.700030][T31273] netlink: 12286 bytes leftover after parsing attributes in process `syz.4.6669'. [ 2794.059288][T31264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.277821][T31264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.461446][T31276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.464634][T31276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2795.477175][T30794] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2795.626404][T30794] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 2795.627291][T30794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2795.627344][T30794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2795.627358][T30794] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2795.627371][T30794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2795.627384][T30794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2795.627394][T30794] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2795.627417][T30794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2795.632829][T30794] usb 2-1: config 0 descriptor?? [ 2795.664949][T30794] appledisplay 2-1:0.0: Submitting URB failed [ 2795.665170][T30794] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 2795.697956][T30797] usb 1-1: USB disconnect, device number 82 [ 2795.924110][T31278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2795.924525][T31278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2795.942554][T31278] bridge_slave_0: default FDB implementation only supports local addresses [ 2795.945121][ T5709] usb 2-1: USB disconnect, device number 111 [ 2796.238445][T30797] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2796.386723][T30797] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2796.391865][T30797] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2796.392044][T30797] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2796.392111][T30797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.424584][T31290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2796.439497][T30797] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2798.816911][T31321] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2799.452149][T31334] syzkaller1: entered promiscuous mode [ 2799.452204][T31334] syzkaller1: entered allmulticast mode [ 2799.764960][T30794] usb 1-1: USB disconnect, device number 83 [ 2799.807621][T30797] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2799.957132][T30797] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2799.958188][T30797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2799.958213][T30797] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2799.958238][T30797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2799.958259][T30797] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2799.958297][T30797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2799.986987][T30797] usb 2-1: config 0 descriptor?? [ 2800.201267][T31332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6679'. [ 2800.302369][T31344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6683'. [ 2800.302433][T31344] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6683'. [ 2800.370686][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6683'. [ 2800.370759][T31346] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6683'. [ 2800.372903][T31333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2800.373475][T31333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2800.403625][T31337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2800.404126][T31337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2800.440254][T31337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2800.440530][T31337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2800.450493][T30797] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 2800.450535][T30797] hdpvr 2-1:0.0: device init failed [ 2800.450608][T30797] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 2802.052955][T31354] fuse: Bad value for 'rootmode' [ 2802.065176][T31354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.069857][T31354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.268987][T31358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.269432][T31358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.502423][T30794] usb 2-1: USB disconnect, device number 112 [ 2802.624895][T31366] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1613360309/1613360311 [ 2802.624914][T31366] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1613360309/1613360310 [ 2802.625256][T31366] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1613360309/1613360311 [ 2802.625271][T31366] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1613360309/1613360310 [ 2802.923628][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6689'. [ 2802.939195][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6689'. [ 2802.940612][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6689'. [ 2802.941275][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6689'. [ 2803.655864][T25321] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2803.751710][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6692'. [ 2803.834862][T25321] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2803.868750][T25321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2803.930116][T25321] usb 2-1: selecting invalid altsetting 3 [ 2803.930159][T25321] comedi comedi5: could not set alternate setting 3 in high speed [ 2803.930211][T25321] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2803.974056][T25321] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2804.566654][T31391] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2805.361962][T31400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6694'. [ 2805.372438][T31400] kAFS: unable to lookup cell '' [ 2806.222130][T30794] usb 2-1: USB disconnect, device number 113 [ 2806.627949][T31411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6708'. [ 2806.658105][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6707'. [ 2807.474845][T31430] syzkaller1: entered promiscuous mode [ 2807.474876][T31430] syzkaller1: entered allmulticast mode [ 2807.507530][T31440] sctp: [Deprecated]: syz.0.6701 (pid 31440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2807.507530][T31440] Use struct sctp_sack_info instead [ 2808.401931][T31449] fuse: Bad value for 'fd' [ 2808.653058][T31456] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 2809.092369][T31456] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6703'. [ 2810.055907][T31472] tipc: Enabling of bearer rejected, already enabled [ 2810.284088][T31472] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2810.695944][T31482] ipvlan0: Caught tx_queue_len zero misconfig [ 2810.721335][T31484] syz.1.6711 (31484): drop_caches: 2 [ 2811.129686][T31488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6710'. [ 2811.129727][T31488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6710'. [ 2811.575246][T31487] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 2811.650792][T31488] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.6710'. [ 2811.766654][T31501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.767054][T31501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.929423][T31504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.940175][T31504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2812.010500][T31506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2812.028554][T31501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2812.029435][T31501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2812.736158][T31520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2812.814401][T31517] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2812.846780][T31517] syzkaller0: left promiscuous mode [ 2812.894902][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 2812.952280][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 2813.021680][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 2813.067617][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 2813.100516][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 2813.100975][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 2813.462728][ T31] kauditd_printk_skb: 730 callbacks suppressed [ 2813.462748][ T31] audit: type=1326 audit(1790596944.821:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.462794][ T31] audit: type=1326 audit(1790596944.821:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.463536][ T31] audit: type=1326 audit(1790596944.821:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.463582][ T31] audit: type=1326 audit(1790596944.821:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.464529][ T31] audit: type=1326 audit(1790596944.821:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.464574][ T31] audit: type=1326 audit(1790596944.821:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.464615][ T31] audit: type=1326 audit(1790596944.821:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.465619][ T31] audit: type=1326 audit(1790596944.821:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.465662][ T31] audit: type=1326 audit(1790596944.831:9977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.470220][ T31] audit: type=1326 audit(1790596944.831:9978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31537 comm="syz.0.6721" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2813.773403][T31540] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6720'. [ 2815.022385][T31556] veth3: entered allmulticast mode [ 2816.054607][T31574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2816.055698][T31574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2816.223077][T31577] __nla_validate_parse: 1 callbacks suppressed [ 2816.223098][T31577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6730'. [ 2816.309908][T31577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2816.310915][T31577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2816.810309][T31562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2816.810989][T31562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2817.598950][T31588] syz.4.6732 (31588): drop_caches: 2 [ 2817.951572][T31592] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2818.721156][T31607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.721973][T31607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2819.101072][ T5709] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2819.243819][T25321] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2819.592309][T25321] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2819.662766][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2819.662817][ T5709] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 2819.732848][T25321] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2819.732885][T25321] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2819.732904][T25321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2819.732948][T25321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2819.732973][T25321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2819.812583][ T5709] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2819.929967][T31624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6739'. [ 2819.953023][T25321] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2819.953051][T25321] usb 1-1: Product: syz [ 2819.953066][T25321] usb 1-1: Manufacturer: syz [ 2820.024742][T25321] cdc_wdm 1-1:1.0: skipping garbage [ 2820.024764][T25321] cdc_wdm 1-1:1.0: skipping garbage [ 2820.027822][T25321] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2820.027842][T25321] cdc_wdm 1-1:1.0: Unknown control protocol [ 2820.232752][ T5709] usb 2-1: string descriptor 0 read error: -22 [ 2820.232897][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2820.397054][T31627] pimreg: entered allmulticast mode [ 2820.402724][T31627] pimreg: left allmulticast mode [ 2820.696488][T31627] syz.3.6740 (31627): drop_caches: 2 [ 2821.118740][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118777][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118803][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118829][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118855][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118881][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118908][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118934][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118961][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.118987][ T5709] glorious 0003:22D4:1503.0051: unknown main item tag 0x0 [ 2821.456226][ T5709] glorious 0003:22D4:1503.0051: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 2821.961553][T30794] usb 1-1: USB disconnect, device number 84 [ 2822.089456][T31642] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2822.215801][T30794] usb 2-1: USB disconnect, device number 114 [ 2823.432874][T31657] tipc: Enabling of bearer rejected, already enabled [ 2823.438308][T31657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6746'. [ 2823.611759][T31657] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 2823.611759][T31657] Please contact the netfilter-devel mailing list or update your nftables rules. [ 2823.729269][T31661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2823.897929][T20324] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2824.130135][T20324] usb 2-1: Using ep0 maxpacket: 16 [ 2824.131505][T20324] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 2824.133872][T20324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2824.134009][T20324] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 32, changing to 7 [ 2824.134067][T20324] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1600, setting to 1024 [ 2824.134161][T20324] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2824.328490][T20324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.328519][T20324] usb 2-1: Product: syz [ 2824.328534][T20324] usb 2-1: Manufacturer: syz [ 2824.328549][T20324] usb 2-1: SerialNumber: syz [ 2824.524170][T31668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2824.524626][T31668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2824.693511][ T31] kauditd_printk_skb: 148 callbacks suppressed [ 2824.693531][ T31] audit: type=1326 audit(1790596956.051:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.696146][ T31] audit: type=1326 audit(1790596956.061:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.701736][ T31] audit: type=1326 audit(1790596956.061:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.702024][ T31] audit: type=1326 audit(1790596956.061:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.702357][ T31] audit: type=1326 audit(1790596956.061:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.704987][ T31] audit: type=1326 audit(1790596956.061:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.707154][ T31] audit: type=1326 audit(1790596956.071:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.708198][ T31] audit: type=1326 audit(1790596956.071:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.818680][ T31] audit: type=1326 audit(1790596956.091:10135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2824.818801][ T31] audit: type=1326 audit(1790596956.091:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31660 comm="syz.1.6745" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2825.782652][T20324] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2826.021300][T20324] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2826.089463][T20324] usb 2-1: USB disconnect, device number 115 [ 2826.263001][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2827.954151][T31697] xt_policy: too many policy elements [ 2828.475581][T31716] syz.1.6758 (31716): drop_caches: 2 [ 2828.623511][T31717] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2828.882587][T31723] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6759'. [ 2828.996531][T31723] netlink: zone id is out of range [ 2828.996548][T31723] netlink: zone id is out of range [ 2828.996557][T31723] netlink: zone id is out of range [ 2828.996566][T31723] netlink: zone id is out of range [ 2828.996574][T31723] netlink: zone id is out of range [ 2828.996583][T31723] netlink: zone id is out of range [ 2828.996592][T31723] netlink: zone id is out of range [ 2828.996600][T31723] netlink: zone id is out of range [ 2828.996608][T31723] netlink: zone id is out of range [ 2828.996617][T31723] netlink: set zone limit has 4 unknown bytes [ 2829.836626][T31736] IPVS: Error connecting to the multicast addr [ 2830.394504][T31747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.397416][T31747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.405904][T31747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.412900][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 2830.412919][ T31] audit: type=1804 audit(1790596961.771:10197): pid=31726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6760" name="bus" dev="ramfs" ino=191305 res=1 errno=0 [ 2830.413866][T31747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.464684][ T31] audit: type=1804 audit(1790596961.821:10198): pid=31726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6760" name="bus" dev="ramfs" ino=191305 res=1 errno=0 [ 2830.814821][ T5709] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2831.166187][ T5709] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2831.236256][ T5709] usb 2-1: config 0 has no interfaces? [ 2831.516922][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2831.516951][ T5709] usb 2-1: Product: syz [ 2831.516966][ T5709] usb 2-1: Manufacturer: syz [ 2831.516981][ T5709] usb 2-1: SerialNumber: syz [ 2831.519778][ T5709] usb 2-1: config 0 descriptor?? [ 2832.502499][T31761] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5630] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[31761] [ 2832.988968][T31764] vivid-000: ================= START STATUS ================= [ 2832.988990][T31764] vivid-000: Generate PTS: true [ 2833.014016][T31764] vivid-000: Generate SCR: true [ 2833.024159][T31764] tpg source WxH: 720x576 (R'G'B) [ 2833.024181][T31764] tpg field: 6 [ 2833.024189][T31764] tpg crop: (0,0)/720x576 [ 2833.024211][T31764] tpg compose: (0,0)/720x576 [ 2833.024225][T31764] tpg colorspace: 1 [ 2833.024233][T31764] tpg transfer function: 0/3 [ 2833.036023][T31764] tpg quantization: 0/1 [ 2833.036055][T31764] tpg RGB range: 0/1 [ 2833.036081][T31764] vivid-000: ================== END STATUS ================== [ 2833.710201][T31770] program syz.5.6771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2833.731146][T31770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6771'. [ 2833.886629][T31776] syz.0.6772 (31776): drop_caches: 2 [ 2834.038519][T30794] usb 2-1: USB disconnect, device number 116 [ 2834.605881][T31787] net_ratelimit: 1 callbacks suppressed [ 2834.605902][T31787] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2834.670600][T31792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2834.671658][T31792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2834.750140][T31792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2834.751289][T31792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2834.774426][T31792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2834.782876][T31792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2834.788668][T31793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2834.913591][T31796] binder: 31795:31796 ioctl c018620c 800000c0 returned -22 [ 2835.096183][T31798] tipc: Enabled bearer , priority 10 [ 2835.495922][T30794] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2835.655708][T30794] usb 2-1: Using ep0 maxpacket: 8 [ 2835.705810][T30794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2835.705910][T30794] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 2835.752831][T30794] usb 2-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 2835.752860][T30794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2835.761422][T30794] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 2835.761479][T30794] usb 2-1: Manufacturer: syz [ 2836.025613][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6783'. [ 2836.027430][T31811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6783'. [ 2836.056837][T31811] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2836.142409][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.142468][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.212032][T30794] usb 2-1: 0:1 : does not exist [ 2836.278617][T20324] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2836.479552][T30794] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2836.499145][T30794] usb 2-1: USB disconnect, device number 117 [ 2836.564713][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2836.839140][T20324] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2836.839195][T20324] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 2836.979879][T20324] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2837.299202][T20324] usb 1-1: string descriptor 0 read error: -22 [ 2837.299500][T20324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2837.363528][ T31] audit: type=1800 audit(1790596968.721:10199): pid=31823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6784" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2837.451930][T31823] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6784'. [ 2837.459868][T31823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6784'. [ 2837.477669][T31823] fuse: Bad value for 'fd' [ 2837.489992][ T31] audit: type=1804 audit(1790596968.851:10200): pid=31823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6784" name="/newroot/1410/file1" dev="fuse" ino=1 res=1 errno=0 [ 2838.134482][T20324] hid_parser_main: 4007 callbacks suppressed [ 2838.134509][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134541][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134569][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134596][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134622][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134648][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134674][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134700][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134726][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.134752][T20324] glorious 0003:22D4:1503.0052: unknown main item tag 0x0 [ 2838.416494][T20324] glorious 0003:22D4:1503.0052: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.0-1/input0 [ 2838.683223][T20324] usb 1-1: USB disconnect, device number 85 [ 2838.737420][T31839] fido_id[31839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2838.879853][T31841] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2839.123187][T31849] syzkaller0: entered allmulticast mode [ 2839.148918][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 2839.167912][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 2839.168370][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 2839.173877][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 2839.214030][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 2839.217925][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6790'. [ 2839.557123][T31860] veth7: entered allmulticast mode [ 2840.180421][T31872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2840.180888][T31872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2840.328013][T31875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2840.328467][T31875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2840.820869][T31880] netlink: zone id is out of range [ 2840.820887][T31880] netlink: zone id is out of range [ 2840.820896][T31880] netlink: zone id is out of range [ 2840.820904][T31880] netlink: zone id is out of range [ 2840.820912][T31880] netlink: zone id is out of range [ 2840.820921][T31880] netlink: zone id is out of range [ 2840.820928][T31880] netlink: zone id is out of range [ 2840.820936][T31880] netlink: zone id is out of range [ 2840.820945][T31880] netlink: zone id is out of range [ 2840.820953][T31880] netlink: set zone limit has 4 unknown bytes [ 2842.757602][ T5709] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2842.958529][ T5709] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2842.960696][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2842.960724][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2842.960737][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2842.960759][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2842.960792][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2842.963293][ T5709] usb 1-1: config 0 descriptor?? [ 2843.247188][T31900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2843.247614][T31900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2843.250133][T31900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2843.250590][T31900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2843.281314][ T5709] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 2843.281351][ T5709] hdpvr 1-1:0.0: device init failed [ 2843.281508][ T5709] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 2844.284738][T30797] hid_parser_main: 4007 callbacks suppressed [ 2844.284766][T30797] hid-generic 0005:046E:0007.0053: unknown main item tag 0x1 [ 2844.311348][T30797] hid-generic 0005:046E:0007.0053: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 2844.312629][T31906] __nla_validate_parse: 2 callbacks suppressed [ 2844.312649][T31906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6802'. [ 2844.421821][T31906] gtp0: entered promiscuous mode [ 2844.421844][T31906] gtp0: entered allmulticast mode [ 2844.452400][T31915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6803'. [ 2844.482782][T31906] netlink: 'syz.4.6802': attribute type 3 has an invalid length. [ 2845.273603][T31925] syzkaller0: entered allmulticast mode [ 2845.275959][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6806'. [ 2845.276925][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6806'. [ 2845.277787][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6806'. [ 2845.292322][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6806'. [ 2845.292866][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6806'. [ 2845.425461][T31919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2845.425904][T31919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.566373][T20324] usb 1-1: USB disconnect, device number 86 [ 2845.870392][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870457][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870515][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870558][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870615][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870655][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870723][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870754][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.870780][T30797] hid-generic 0002:0004:0009.0054: unknown main item tag 0x0 [ 2845.872950][T30797] hid-generic 0002:0004:0009.0054: hidraw0: HID v0.04 Device [syz0] on syz0 [ 2845.938298][ T31] audit: type=1400 audit(1790596977.281:10201): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=31930 comm="syz.1.6807" [ 2847.256000][T30797] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 2847.412113][T30797] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2847.471487][T30797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2847.471548][T30797] usb 1-1: config 0 has no interfaces? [ 2847.471615][T30797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.511796][T30797] usb 1-1: config 0 descriptor?? [ 2847.870710][T31947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2847.871773][T31947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2849.838020][T31964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2849.839043][T31964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2851.260629][T31971] sctp: [Deprecated]: syz.3.6817 (pid 31971) Use of int in maxseg socket option. [ 2851.260629][T31971] Use struct sctp_assoc_value instead [ 2852.021491][T30797] usb 1-1: string descriptor 0 read error: -71 [ 2852.023380][T30797] usb 1-1: USB disconnect, device number 87 [ 2852.715730][T30797] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2852.865942][T30797] usb 1-1: Using ep0 maxpacket: 16 [ 2852.867091][T30797] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 2852.868304][T30797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2852.868363][T30797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 32, changing to 7 [ 2852.868378][T30797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1600, setting to 1024 [ 2852.868408][T30797] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2852.871032][T30797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.871057][T30797] usb 1-1: Product: syz [ 2852.871066][T30797] usb 1-1: Manufacturer: syz [ 2852.871084][T30797] usb 1-1: SerialNumber: syz [ 2853.290829][ T31] audit: type=1326 audit(1790596984.651:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.295253][ T31] audit: type=1326 audit(1790596984.651:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.323454][ T31] audit: type=1326 audit(1790596984.661:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.350091][ T31] audit: type=1326 audit(1790596984.661:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.350146][ T31] audit: type=1326 audit(1790596984.691:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.436860][ T31] audit: type=1326 audit(1790596984.781:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.437209][ T31] audit: type=1326 audit(1790596984.781:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.437406][ T31] audit: type=1326 audit(1790596984.781:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.447918][ T31] audit: type=1326 audit(1790596984.811:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2853.447997][ T31] audit: type=1326 audit(1790596984.811:10211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31985 comm="syz.0.6819" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 2854.351331][T31998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2854.352516][T31998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.414707][T32002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2854.425200][T32002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.538796][T30797] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2854.540280][T31999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2854.543339][T31999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.579018][T31999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2854.579935][T31999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.639821][T30797] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2854.649839][T30797] usb 1-1: USB disconnect, device number 88 [ 2854.847086][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2854.939904][T32006] tipc: Enabling of bearer rejected, already enabled [ 2855.000567][T32006] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2855.001027][T32006] tipc: Enabled bearer , priority 10 [ 2855.255425][T32012] net_ratelimit: 3 callbacks suppressed [ 2855.255756][T32012] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2855.485912][T32016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2855.485929][T32016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2855.488995][T32016] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2855.579287][T32019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6825'. [ 2856.029361][T32028] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6827'. [ 2856.029390][T32028] openvswitch: netlink: Message has 512 unknown bytes. [ 2856.664655][T32032] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 2856.782698][T32038] syzkaller0: entered promiscuous mode [ 2856.812182][T32038] batman_adv: batadv0: Interface activated: syzkaller0 [ 2857.352389][T32037] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 2857.483537][T32037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6831'. [ 2857.483581][T32037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6831'. [ 2857.485664][T32037] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.6831'. [ 2857.616041][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6833'. [ 2857.788169][T32054] IPVS: Unknown mcast interface: lo [ 2860.625862][T30797] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2860.826871][T30797] usb 1-1: Using ep0 maxpacket: 32 [ 2860.889007][T30797] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2860.951272][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 2860.951292][ T31] audit: type=1804 audit(1790596992.321:10268): pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6837" name="bus" dev="ramfs" ino=194556 res=1 errno=0 [ 2860.951336][ T31] audit: type=1804 audit(1790596992.321:10269): pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6837" name="bus" dev="ramfs" ino=194556 res=1 errno=0 [ 2861.012724][T30797] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 2861.012752][T30797] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2861.012773][T30797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2861.012794][T30797] usb 1-1: config 1 has no interface number 0 [ 2861.012840][T30797] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2861.012862][T30797] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2861.012903][T30797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2861.089476][T30797] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2861.304004][T30797] snd_usb_pod 1-1:1.1: invalid control EP [ 2861.304059][T30797] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 2861.304523][T30797] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 2861.306032][T30797] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2861.406001][T32077] syzkaller0: entered allmulticast mode [ 2861.458193][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6839'. [ 2861.459778][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6839'. [ 2861.460176][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6839'. [ 2861.508538][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6839'. [ 2861.508961][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6839'. [ 2861.509263][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6839'. [ 2861.848087][T25321] usb 1-1: USB disconnect, device number 89 [ 2862.111512][T32090] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2862.409844][T32095] pimreg: entered allmulticast mode [ 2862.464830][T32095] pimreg: left allmulticast mode [ 2862.728729][T32095] syz.1.6842 (32095): drop_caches: 2 [ 2865.190496][T32118] kAFS: unable to lookup cell '' [ 2865.212573][T32124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.213034][T32124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2865.287950][T32124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.288376][T32124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2865.310069][T32124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.310494][T32124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2865.364102][ T31] audit: type=1800 audit(1790596996.711:10270): pid=32123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6849" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2865.397665][T32123] dummy0: Caught tx_queue_len zero misconfig [ 2865.398875][ T31] audit: type=1326 audit(1790596996.741:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.399677][ T31] audit: type=1326 audit(1790596996.741:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.399987][ T31] audit: type=1326 audit(1790596996.741:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.400616][T32123] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6849'. [ 2865.400823][ T31] audit: type=1326 audit(1790596996.741:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.401120][ T31] audit: type=1326 audit(1790596996.741:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.401244][T32123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6849'. [ 2865.401272][ T31] audit: type=1326 audit(1790596996.741:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.402256][T32123] fuse: Bad value for 'fd' [ 2865.413866][ T31] audit: type=1326 audit(1790596996.771:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32115 comm="syz.3.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f270ec code=0x7ffc0000 [ 2865.431938][T32118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.432370][T32118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.457408][T32138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.462630][T32138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2867.133490][T32154] netlink: 'syz.3.6856': attribute type 12 has an invalid length. [ 2867.761467][T32166] syzkaller0: entered promiscuous mode [ 2867.761483][T32166] syzkaller0: entered allmulticast mode [ 2869.166874][T32178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6862'. [ 2869.514854][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 2869.514891][ T31] audit: type=1800 audit(1790597000.871:10291): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6863" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2869.552891][T32185] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6863'. [ 2869.555762][T32185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6863'. [ 2869.559678][T32185] fuse: Bad value for 'fd' [ 2869.563770][ T31] audit: type=1804 audit(1790597000.911:10292): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6863" name="/newroot/1101/file1" dev="fuse" ino=1 res=1 errno=0 [ 2869.616110][T32187] fuse: Unknown parameter '0x0000000000000007' [ 2869.717863][T32187] fuse: Unknown parameter '0x0000000000000008' [ 2870.643029][T32196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2870.644114][T32196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2871.661330][T32209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2871.661761][T32209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2871.924260][T32209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2871.924699][T32209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2873.328074][ T31] audit: type=1326 audit(1790597004.691:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.328438][ T31] audit: type=1326 audit(1790597004.691:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.413890][ T31] audit: type=1326 audit(1790597004.761:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.413940][ T31] audit: type=1326 audit(1790597004.761:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.413979][ T31] audit: type=1326 audit(1790597004.761:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.417082][ T31] audit: type=1326 audit(1790597004.761:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.417132][ T31] audit: type=1326 audit(1790597004.761:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.417171][ T31] audit: type=1326 audit(1790597004.761:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.5.6871" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2873.561113][T32229] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6871'. [ 2875.515751][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'. [ 2875.515793][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'. [ 2875.525415][T32250] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.6876'. [ 2876.703871][T32271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6883'. [ 2876.899320][T32269] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2878.386500][T32287] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 2879.408122][T32292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.408601][T32292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2882.035232][T32318] netlink: 'syz.3.6893': attribute type 5 has an invalid length. [ 2882.035271][T32318] netlink: 'syz.3.6893': attribute type 5 has an invalid length. [ 2882.314162][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 2882.315504][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 2882.315876][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 2882.316130][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 2882.316443][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 2882.316937][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6891'. [ 2882.325665][T32316] 0: reclassify loop, rule prio 0, protocol 800 [ 2882.639128][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6894'. [ 2882.659564][T32328] vlan2: entered allmulticast mode [ 2882.659593][T32328] bond0: entered allmulticast mode [ 2882.659613][T32328] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 2882.676609][T32328] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6894'. [ 2883.163955][T32328] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 2883.186526][T32328] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 2883.290149][T32328] bond0 (unregistering): Released all slaves [ 2883.606739][T25321] hid_parser_main: 8 callbacks suppressed [ 2883.606762][T25321] hid-generic 0005:046E:0007.0055: unknown main item tag 0x1 [ 2883.608932][T32346] netlink: Conntrack attr has 4 unknown bytes [ 2883.608963][T32346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2883.610611][T25321] hid-generic 0005:046E:0007.0055: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 2883.862981][T32353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6898'. [ 2885.328105][T32367] tipc: Enabling of bearer rejected, already enabled [ 2885.407745][T32369] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2885.458995][T32367] tipc: Bearer : already 2 bearers with priority 10 [ 2885.459033][T32367] tipc: Bearer : trying with adjusted priority [ 2885.459721][T32367] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2885.461033][T32367] tipc: Enabled bearer , priority 9 [ 2885.800836][T32366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6901'. [ 2885.864338][T32366] gtp2: entered promiscuous mode [ 2885.864375][T32366] gtp2: entered allmulticast mode [ 2885.893758][T32376] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2885.915148][T32377] netlink: 'syz.0.6905': attribute type 5 has an invalid length. [ 2885.915173][T32377] netlink: 'syz.0.6905': attribute type 5 has an invalid length. [ 2886.203213][T32376] syz.3.6906 (32376): drop_caches: 2 [ 2886.674875][T32399] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 2886.768511][T32397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2886.794702][T32397] qrtr: Invalid version 0 [ 2886.824399][T32397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2886.824836][T32397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2886.985695][T30794] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 2887.158334][T30794] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2887.168528][T30794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2887.168721][T30794] usb 2-1: config 0 has no interfaces? [ 2887.168784][T30794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2887.203081][T30794] usb 2-1: config 0 descriptor?? [ 2887.525893][T32393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2887.526393][T32393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2888.111618][T32406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6912'. [ 2888.135773][T32406] vlan4: entered allmulticast mode [ 2888.135796][T32406] bond0: entered allmulticast mode [ 2888.182836][T32406] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6912'. [ 2888.288312][T32408] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2888.334886][T32406] bond0 (unregistering): Released all slaves [ 2889.282452][T32419] tipc: Enabling of bearer rejected, failed to enable media [ 2889.317778][T32419] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2889.320650][T32419] tipc: Enabled bearer , priority 10 [ 2889.708254][T32423] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 2889.708297][T32423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6916'. [ 2889.751444][T30794] usb 2-1: string descriptor 0 read error: -71 [ 2889.787258][T30794] usb 2-1: USB disconnect, device number 118 [ 2890.402051][T25321] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 2890.754543][T25321] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2890.894478][T25321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2891.176321][T25321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2891.176359][T25321] usb 2-1: Product: syz [ 2891.176374][T25321] usb 2-1: Manufacturer: syz [ 2891.176389][T25321] usb 2-1: SerialNumber: syz [ 2891.181275][T25321] usb 2-1: config 0 descriptor?? [ 2891.250630][T25321] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2891.468339][T32429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2891.468770][T32429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2891.799326][T32435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6918'. [ 2891.820339][T25321] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2891.820428][T25321] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2891.847562][T32435] gtp0: entered promiscuous mode [ 2891.847576][T32435] gtp0: entered allmulticast mode [ 2891.962755][T32447] netlink: 'syz.5.6918': attribute type 3 has an invalid length. [ 2891.973363][T30794] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2892.117518][T30794] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 2892.122836][T30794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.122895][T30794] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2892.132766][T30794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.132825][T30794] usb 1-1: Product: syz [ 2892.132855][T30794] usb 1-1: Manufacturer: syz [ 2892.132886][T30794] usb 1-1: SerialNumber: syz [ 2892.376608][T32446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6920'. [ 2892.659545][T30794] usb 1-1: USB disconnect, device number 90 [ 2893.102192][T32456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2893.102582][T32456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2893.456922][T32464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 2893.751411][T30797] usb 2-1: USB disconnect, device number 119 [ 2894.698152][T32476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2894.769478][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 2894.769496][ T31] audit: type=1804 audit(1790597026.131:10376): pid=32468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6926" name="bus" dev="ramfs" ino=199392 res=1 errno=0 [ 2894.785611][ T31] audit: type=1804 audit(1790597026.151:10377): pid=32468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6926" name="bus" dev="ramfs" ino=199392 res=1 errno=0 [ 2895.059241][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6929'. [ 2896.066269][T32490] syzkaller1: entered allmulticast mode [ 2896.099418][T32490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6930'. [ 2896.187590][T32492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2896.210773][T32492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2897.573957][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.574089][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.662392][T32500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6931'. [ 2897.706430][T30794] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 2897.858099][T30794] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2897.865257][T30794] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2897.865277][T30794] usb 2-1: config 0 has no interface number 0 [ 2897.915862][T30794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.915891][T30794] usb 2-1: Product: syz [ 2897.915899][T30794] usb 2-1: Manufacturer: syz [ 2897.915918][T30794] usb 2-1: SerialNumber: syz [ 2897.951842][T30794] usb 2-1: config 0 descriptor?? [ 2897.978523][T30794] usb 2-1: selecting invalid altsetting 1 [ 2897.978839][T30794] dvb_ttusb_budget: ttusb_init_controller: error [ 2897.978849][T30794] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2898.349559][T30794] DVB: Unable to find symbol stv0299_attach() [ 2898.763827][T30794] DVB: Unable to find symbol tda8083_attach() [ 2898.763850][T30794] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2899.599561][T25321] usb 2-1: USB disconnect, device number 120 [ 2899.617068][T32515] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 2900.352505][T32527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2900.402541][T32527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2900.782626][T32540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 2900.971635][T32543] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 2902.783598][T32557] lo: entered allmulticast mode [ 2902.799067][T32557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2902.860312][T32557] binder: 32553:32557 ioctl c01c5868 80000580 returned -22 [ 2903.584566][T32567] lo: left allmulticast mode [ 2903.612334][T32567] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2903.811473][ T31] audit: type=1400 audit(1790597035.171:10378): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=32559 comm="syz.0.6943" [ 2903.852575][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852615][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852641][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852666][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852691][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852717][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852743][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852778][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852804][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2903.852829][T20324] hid-generic 0002:0004:0009.0056: unknown main item tag 0x0 [ 2904.014278][T20324] hid-generic 0002:0004:0009.0056: hidraw0: HID v0.04 Device [syz0] on syz0 [ 2904.122146][T32577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6947'. [ 2908.936171][T32605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.943223][T32605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2911.155983][T32627] sit0: entered promiscuous mode [ 2911.156005][T32627] sit0: entered allmulticast mode [ 2912.810207][T32643] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2912.936252][T32646] syzkaller0: entered promiscuous mode [ 2912.936277][T32646] syzkaller0: entered allmulticast mode [ 2912.948019][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'. [ 2912.950669][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'. [ 2912.951164][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'. [ 2912.951482][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'. [ 2912.951880][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'. [ 2912.952169][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'. [ 2912.955151][T32646] 0: reclassify loop, rule prio 0, protocol 800 [ 2913.298190][T32649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2913.298619][T32649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2913.348427][T32651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6961'. [ 2913.591068][T32658] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2913.804500][T32649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2913.819746][T32649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2914.180296][T32669] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2914.256308][T32669] syz.4.6966 (32669): drop_caches: 2 [ 2914.584408][T32675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2914.584832][T32675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2914.835047][T32678] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5633] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[32678] [ 2915.178341][T32670] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2915.847709][T32685] netlink: 'syz.5.6969': attribute type 12 has an invalid length. [ 2916.120725][T32692] tipc: Enabling of bearer rejected, failed to enable media [ 2917.926504][T32710] fuse: Unknown parameter '0x0000000000000007' [ 2917.950463][T32710] fuse: Unknown parameter '0x0000000000000008' [ 2918.944212][T32721] syzkaller0: entered promiscuous mode [ 2918.944238][T32721] syzkaller0: entered allmulticast mode [ 2918.958594][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6977'. [ 2918.960729][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6977'. [ 2918.961486][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6977'. [ 2918.962044][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6977'. [ 2918.963161][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6977'. [ 2918.978496][T32721] 0: reclassify loop, rule prio 0, protocol 800 [ 2919.045620][T30797] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2919.213141][T30797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2919.213248][T30797] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2919.243938][T30797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.243956][T30797] usb 1-1: Product: syz [ 2919.243976][T30797] usb 1-1: Manufacturer: syz [ 2919.243984][T30797] usb 1-1: SerialNumber: syz [ 2919.517333][T30797] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2919.520676][T30797] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 2919.817435][T30797] usb 1-1: USB disconnect, device number 91 [ 2919.894295][T32074] udevd[32074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2920.819180][T30797] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2920.864479][T32742] netlink: 'syz.4.6981': attribute type 2 has an invalid length. [ 2920.915304][T32742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2920.916720][T32742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2921.056602][T32742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2921.065680][T30797] usb 1-1: Using ep0 maxpacket: 8 [ 2921.154942][T32742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2921.157886][T30797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2921.157983][T30797] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 2921.159403][T30797] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 2921.159457][T30797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2921.170533][T30797] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 2921.170574][T30797] usb 1-1: Manufacturer: syz [ 2921.780766][T30797] usb 1-1: 0:1 : does not exist [ 2922.004610][T32732] IPVS: Unknown mcast interface: pim6reg [ 2922.154487][T30797] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2922.191950][T30797] usb 1-1: USB disconnect, device number 92 [ 2922.288647][T32748] sit0: left promiscuous mode [ 2922.288671][T32748] sit0: left allmulticast mode [ 2922.299428][T32074] udevd[32074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2922.336318][T32748] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2925.781517][ T5709] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2926.236756][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 2926.974263][ T5709] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2927.148825][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2927.148897][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2927.148920][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2927.923916][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.923945][ T5709] usb 1-1: Product: syz [ 2927.923962][ T5709] usb 1-1: Manufacturer: syz [ 2927.923976][ T5709] usb 1-1: SerialNumber: syz [ 2927.927132][ T5709] usb 1-1: config 0 descriptor?? [ 2928.001161][ T5709] mcba_usb 1-1:0.0: Can't find endpoints [ 2928.358810][ T6160] usb 1-1: USB disconnect, device number 93 [ 2929.165809][ T6160] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2929.317200][ T6160] usb 1-1: Using ep0 maxpacket: 8 [ 2929.330707][ T347] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2929.436210][ T6160] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2929.436271][ T6160] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 2929.437763][ T6160] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 2929.437821][ T6160] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2929.492000][ T6160] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 2929.492018][ T6160] usb 1-1: Manufacturer: syz [ 2929.877103][ T6160] usb 1-1: 0:1 : does not exist [ 2929.978854][ T6160] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2929.982463][ T6160] usb 1-1: USB disconnect, device number 94 [ 2930.023175][T32074] udevd[32074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2930.681453][ T373] tipc: Enabling of bearer rejected, already enabled [ 2930.805162][ T373] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2930.805765][ T373] tipc: Enabled bearer , priority 10 [ 2932.681437][T10127] hid_parser_main: 7 callbacks suppressed [ 2932.681461][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681491][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681519][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681545][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681569][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681596][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681622][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681649][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681674][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.681699][T10127] hid-generic 0002:0004:0009.0057: unknown main item tag 0x0 [ 2932.686136][T10127] hid-generic 0002:0004:0009.0057: hidraw0: HID v0.04 Device [syz0] on syz0 [ 2932.827193][ T31] audit: type=1400 audit(1790597064.001:10379): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=387 comm="syz.4.7009" [ 2935.099938][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7012'. [ 2936.066405][ T426] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2936.177322][ T412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2936.202538][ T412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2936.308297][ T428] netlink: 12286 bytes leftover after parsing attributes in process `syz.1.7013'. [ 2936.311799][ T428] netlink: 12286 bytes leftover after parsing attributes in process `syz.1.7013'. [ 2937.875349][ T435] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2939.000999][ T447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2940.212795][ T463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7021'. [ 2940.324760][ T463] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7021'. [ 2940.336744][ T456] kAFS: unable to lookup cell '' [ 2941.917605][ T473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7023'. [ 2942.236401][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2942.236855][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2943.049287][ T480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7026'. [ 2943.050672][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7026'. [ 2945.446624][ T498] tipc: Enabling of bearer rejected, already enabled [ 2945.511503][ T498] tipc: Bearer : already 2 bearers with priority 10 [ 2945.511639][ T498] tipc: Bearer : trying with adjusted priority [ 2945.512521][ T498] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2945.514624][ T498] tipc: Enabled bearer , priority 9 [ 2946.099592][ T508] tipc: Enabling of bearer rejected, already enabled [ 2946.378581][ T508] tipc: Enabling of bearer rejected, already enabled [ 2946.707899][ T512] libceph: resolve '0..' (ret=-3): failed [ 2947.281337][ T526] netlink: 'syz.3.7034': attribute type 2 has an invalid length. [ 2947.295599][ T526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2947.296444][ T526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2947.339949][ T526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2947.343205][ T526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2947.897243][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2947.898912][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2947.958390][ T533] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7036'. [ 2947.958901][ T533] netlink: 'syz.4.7036': attribute type 1 has an invalid length. [ 2948.118429][ T538] program syz.1.7047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2950.986871][ T557] netlink: 12286 bytes leftover after parsing attributes in process `syz.3.7038'. [ 2950.989395][ T557] netlink: 12286 bytes leftover after parsing attributes in process `syz.3.7038'. [ 2951.145939][T30794] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2951.297527][T30794] usb 2-1: Using ep0 maxpacket: 8 [ 2951.298992][T30794] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2951.301093][T30794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2951.340096][T30794] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2951.340160][T30794] usb 2-1: Product: syz [ 2951.340192][T30794] usb 2-1: Manufacturer: syz [ 2951.340223][T30794] usb 2-1: SerialNumber: syz [ 2951.640646][T30794] usb 2-1: Invalid connection information received from device [ 2951.834760][ T569] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436452479/1436452481 [ 2951.834794][ T569] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436452479/1436452480 [ 2951.835290][ T569] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436452479/1436452481 [ 2951.835316][ T569] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1436452479/1436452480 [ 2952.069812][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7046'. [ 2952.310331][ T582] libceph: resolve '0..' (ret=-3): failed [ 2954.182793][ T598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2954.183234][ T598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2954.356098][ T600] netlink: 'syz.5.7053': attribute type 2 has an invalid length. [ 2954.378847][ T600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2954.379277][ T600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2954.443286][ T600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2954.455680][ T600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2957.025651][ T6160] usb 2-1: USB disconnect, device number 121 [ 2958.300865][ T613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7055'. [ 2958.315477][ T613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7055'. [ 2959.007084][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.007144][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.137143][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7058'. [ 2960.137160][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7058'. [ 2960.205811][T10127] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2960.356278][T10127] usb 1-1: Using ep0 maxpacket: 8 [ 2960.358873][T10127] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2960.379310][T10127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2960.379390][T10127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.410503][T10127] usb 1-1: config 0 descriptor?? [ 2960.731755][T10127] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2961.109004][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2961.109460][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2961.383945][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2961.384379][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2961.387813][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2961.388244][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2961.742017][ T661] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5633] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[661] [ 2963.593009][ T676] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[9604] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[676] [ 2964.090355][T25321] usb 1-1: USB disconnect, device number 95 [ 2965.963347][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2965.963778][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.651329][ T709] fuse: Bad value for 'fd' [ 2968.396646][ T728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7082'. [ 2968.456742][ T728] gtp1: entered promiscuous mode [ 2968.456766][ T728] gtp1: entered allmulticast mode [ 2969.100587][ T734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7081'. [ 2969.201009][ T740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7085'. [ 2969.679387][T10127] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2969.726380][ T743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7084'. [ 2969.731325][ T743] gtp0: entered promiscuous mode [ 2969.731349][ T743] gtp0: entered allmulticast mode [ 2969.897107][ T746] netlink: 'syz.3.7084': attribute type 3 has an invalid length. [ 2969.966740][T10127] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2969.966860][T10127] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2970.023491][T10127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.023522][T10127] usb 1-1: Product: syz [ 2970.023531][T10127] usb 1-1: Manufacturer: 濚ヱ㑷䢁㇗暻猁鐧ʤ꬝ж食萜㋴ᘧ偱幾鸲ᅞ椣麸켛톍惡肣㇃幜玊ႈ鑊ࢠ㆒က砨⡜樶䕠ケ䨬툿巭륫䴫验ቔ෮䚑볅洖䉤嚽賈ʿ༔פּꛌ䑁៽敯ꉏ騬䭿芮ⳍ⏶⡫륄󣀃 [ 2970.023557][T10127] usb 1-1: SerialNumber: syz [ 2970.429008][T30797] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2970.587876][T30797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2970.588039][T30797] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 2970.597599][T30797] usb 2-1: config 12 has an invalid interface number: 99 but max is 0 [ 2970.597676][T30797] usb 2-1: config 12 has no interface number 0 [ 2970.597763][T30797] usb 2-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 2970.597828][T30797] usb 2-1: config 12 interface 99 has no altsetting 0 [ 2970.633387][T30797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.633456][T30797] usb 2-1: Product: syz [ 2970.633488][T30797] usb 2-1: Manufacturer: syz [ 2970.633519][T30797] usb 2-1: SerialNumber: syz [ 2970.771711][ T765] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[11204] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[765] [ 2972.170131][T10127] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2972.201644][T10127] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2972.544347][T10127] usb 1-1: USB disconnect, device number 96 [ 2972.575271][ T770] udevd[770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2973.074528][ T778] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7088'. [ 2973.208513][T30797] usb 2-1: no audio or video endpoints found [ 2973.225868][T30797] usb 2-1: USB disconnect, device number 122 [ 2975.440075][ T790] 8021q: VLANs not supported on vxcan1 [ 2976.807652][ T807] sctp: [Deprecated]: syz.5.7094 (pid 807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2976.807652][ T807] Use struct sctp_sack_info instead [ 2977.406975][ T790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2978.009884][ T820] fuse: Bad value for 'fd' [ 2978.126011][T30797] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2978.276325][T30797] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2978.277626][T30797] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2978.277645][T30797] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2978.277678][T30797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2978.343502][ T818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2978.429033][T30797] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2978.758872][T30797] usb 1-1: USB disconnect, device number 97 [ 2980.550773][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7102'. [ 2982.291879][ T865] fuse: Unknown parameter 'd/)fd' [ 2982.314043][ T860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2982.314492][ T860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2989.692075][ T31] audit: type=1804 audit(1790597121.041:10380): pid=937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7122" name="bus" dev="ramfs" ino=206398 res=1 errno=0 [ 2989.735506][ T31] audit: type=1804 audit(1790597121.081:10381): pid=937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7122" name="bus" dev="ramfs" ino=206398 res=1 errno=0 [ 2990.817701][ T968] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 2990.817731][ T968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7126'. [ 2991.241739][ T970] fuse: Bad value for 'fd' [ 2991.933681][ T980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7129'. [ 2992.202968][ T982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7129'. [ 2992.222186][ T991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7130'. [ 2994.178717][ T1009] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2997.121231][ T1025] fuse: Bad value for 'group_id' [ 2997.121252][ T1025] fuse: Bad value for 'group_id' [ 2997.351582][ T6160] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2997.633320][ T6160] usb 2-1: Using ep0 maxpacket: 16 [ 2997.703050][ T6160] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2997.844223][ T6160] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2997.844275][ T6160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2997.844302][ T6160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2997.844324][ T6160] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2997.844346][ T6160] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2997.986335][ T6160] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2997.986363][ T6160] usb 2-1: Manufacturer: syz [ 2997.992605][ T6160] usb 2-1: config 0 descriptor?? [ 2998.064766][ T1048] vivid-000: ================= START STATUS ================= [ 2998.064889][ T1048] vivid-000: Radio HW Seek Mode: Bounded [ 2998.064916][ T1048] vivid-000: Radio Programmable HW Seek: false [ 2998.064937][ T1048] vivid-000: RDS Rx I/O Mode: Block I/O [ 2998.064978][ T1048] vivid-000: Generate RBDS Instead of RDS: false [ 2998.065000][ T1048] vivid-000: RDS Reception: true [ 2998.065019][ T1048] vivid-000: RDS Program Type: 0 inactive [ 2998.065044][ T1048] vivid-000: RDS PS Name: inactive [ 2998.065068][ T1048] vivid-000: RDS Radio Text: inactive [ 2998.065091][ T1048] vivid-000: RDS Traffic Announcement: false inactive [ 2998.065115][ T1048] vivid-000: RDS Traffic Program: false inactive [ 2998.065139][ T1048] vivid-000: RDS Music: false inactive [ 2998.065185][ T1048] vivid-000: ================== END STATUS ================== [ 2998.668942][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7142'. [ 2998.701981][ T1046] gtp1: entered promiscuous mode [ 2998.702004][ T1046] gtp1: entered allmulticast mode [ 2998.829722][ T6160] rc_core: IR keymap rc-hauppauge not found [ 2998.829748][ T6160] Registered IR keymap rc-empty [ 2998.829888][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2998.846040][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2998.869409][ T6160] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2998.871344][ T6160] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input154 [ 2998.936669][ T1046] netlink: 'syz.0.7142': attribute type 3 has an invalid length. [ 2998.942747][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2998.961453][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2998.974295][ T1056] input: syz0 as /devices/virtual/input/input153 [ 2998.976234][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.001498][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.015587][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.036300][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.055896][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.075838][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.097579][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.116218][ T6160] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2999.143717][ T6160] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2999.143787][ T6160] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2999.593586][ T1068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2999.599023][ T1068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2999.683786][T30797] usb 2-1: USB disconnect, device number 123 [ 2999.788832][ T1070] tipc: Enabling of bearer rejected, already enabled [ 3000.084420][ T1070] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 3000.503285][ T1084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7145'. [ 3001.465687][ T1101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 3005.504654][ T1137] netlink: 'syz.5.7157': attribute type 1 has an invalid length. [ 3005.612151][ T1137] bond0: entered promiscuous mode [ 3005.612760][ T1137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3005.741874][ T1141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3005.742177][ T1141] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 3005.742200][ T1141] bond0: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 3005.793588][ T1144] fuse: Bad value for 'fd' [ 3005.794679][ T1141] bond0: (slave ipip0): making interface the new active one [ 3005.794732][ T1141] ipip0: entered promiscuous mode [ 3005.919393][ T1141] bond0: (slave ipip0): Enslaving as an active interface with an up link [ 3007.508413][ T1158] tipc: Enabling of bearer rejected, failed to enable media [ 3007.645689][T25321] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 3007.836927][ T1158] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 3007.946669][T25321] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3008.052548][T25321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3008.052619][T25321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3008.052678][T25321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3008.052754][T25321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.069987][T25321] usb 1-1: config 0 descriptor?? [ 3008.217380][T30797] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3008.386926][T30797] usb 2-1: Using ep0 maxpacket: 32 [ 3008.401633][T30797] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 3008.403170][T30797] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3008.403189][T30797] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3008.403214][T30797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3008.403244][T30797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.405946][T30797] usb 2-1: config 0 descriptor?? [ 3008.876705][T30797] input: HID 04e7:0009 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04E7:0009.0058/input/input155 [ 3009.065352][T30797] elo 0003:04E7:0009.0058: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 3009.174709][T25321] hid_parser_main: 7 callbacks suppressed [ 3009.174734][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174765][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174794][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174821][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174848][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174875][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174901][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174929][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174956][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.174983][T25321] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 3009.275363][ T1170] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 3009.307750][T25321] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3011.058288][ T1200] binder: BINDER_SET_CONTEXT_MGR already set [ 3011.058348][ T1200] binder: 1191:1200 ioctl 4018620d 80000040 returned -16 [ 3011.440273][ T1203] usb 1-1: string descriptor 0 read error: -108 [ 3011.575838][ T5709] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 3011.740798][ T5709] usb 1-1: device descriptor read/64, error -32 [ 3012.005602][ T5709] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 3012.137275][ T5709] usb 1-1: device descriptor read/64, error -32 [ 3012.392996][ T5709] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 3012.496064][ T5709] usb 1-1: device descriptor read/8, error -32 [ 3012.735771][ T5709] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 3012.756704][ T5709] usb 1-1: device descriptor read/8, error -32 [ 3012.800426][ T1170] geneve1: left promiscuous mode [ 3012.800602][ T1170] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 3012.800806][ T1170] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 3012.800930][ T1170] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 3012.801053][ T1170] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 3012.801174][ T1170] syztnl2: left promiscuous mode [ 3012.801329][ T1170] ip6tnl1: left promiscuous mode [ 3012.801445][ T1170] veth2: left promiscuous mode [ 3012.801598][ T1170] veth3: left promiscuous mode [ 3012.801742][ T1170] bond1: left promiscuous mode [ 3012.802012][ T1170] gretap1: left promiscuous mode [ 3012.802261][ T1170] vlan2: left promiscuous mode [ 3012.832052][ T1170] l: left promiscuous mode [ 3012.832255][ T1170] gre1: left promiscuous mode [ 3012.832370][ T1170] bond2: left promiscuous mode [ 3012.832488][ T1170] ipip0: left promiscuous mode [ 3012.832630][ T1170] macvlan2: left promiscuous mode [ 3012.832809][ T1170] bond3: left promiscuous mode [ 3012.833044][ T1170] bridge1: left promiscuous mode [ 3012.833159][ T1170] geneve2: left promiscuous mode [ 3012.833334][ T1170] bond4: left promiscuous mode [ 3012.833550][ T1170] geneve3: left promiscuous mode [ 3012.833655][ T1170] bond5: left promiscuous mode [ 3012.833794][ T1170] bond6: left promiscuous mode [ 3012.833905][ T1170] sit1: left promiscuous mode [ 3012.834013][ T1170] ipip1: left promiscuous mode [ 3012.834156][ T1170] mac80211_hwsim hwsim27 wlan1: left promiscuous mode [ 3012.834336][ T1170] bond7: left promiscuous mode [ 3012.834447][ T1170] sit2: left promiscuous mode [ 3012.834551][ T1170] ip6gretap1: left promiscuous mode [ 3012.834662][ T1170] mac80211_hwsim hwsim32 wlan2: left promiscuous mode [ 3012.834838][ T1170] mac80211_hwsim hwsim33 wlan3: left promiscuous mode [ 3012.834990][ T1170] mac80211_hwsim hwsim34 wlan4: left promiscuous mode [ 3012.835131][ T1170] bond8: left promiscuous mode [ 3012.835248][ T1170] bridge0: left promiscuous mode [ 3012.835389][ T1170] dvmrp8: left promiscuous mode [ 3012.835490][ T1170] vxlan0: left promiscuous mode [ 3012.835697][ T1170] syztnl1: left promiscuous mode [ 3012.835803][ T1170] sit3: left promiscuous mode [ 3012.835909][ T1170] bond9: left promiscuous mode [ 3012.836208][ T1170] bridge2: left promiscuous mode [ 3012.836448][ T1170] gtp0: left promiscuous mode [ 3012.836585][ T1170] vlan1: left promiscuous mode [ 3012.836895][ T1170] vxlan1: left promiscuous mode [ 3012.837006][ T1170] mac80211_hwsim hwsim44 wlan5: left promiscuous mode [ 3012.837149][ T1170] mac80211_hwsim hwsim47 wlan6: left promiscuous mode [ 3012.838128][ T1170] gtp2: left promiscuous mode [ 3012.880390][ T5709] raw-gadget.0 gadget.0: failed to queue suspend event [ 3012.882898][T20324] usb 1-1: USB disconnect, device number 98 [ 3013.137666][T20324] raw-gadget.0 gadget.0: failed to queue reset event [ 3013.187483][T20324] raw-gadget.0 gadget.0: failed to queue resume event [ 3013.259158][T20324] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3013.292453][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 3013.292719][T20324] raw-gadget.0 gadget.0: failed to queue reset event [ 3013.339832][ T1201] raw-gadget.0 gadget.0: failed to queue disconnect event [ 3013.477093][T25321] usb 2-1: USB disconnect, device number 124 [ 3013.770382][ T1222] netlink: 'syz.3.7172': attribute type 1 has an invalid length. [ 3013.863065][ T1239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7171'. [ 3013.941293][ T1234] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5636] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[1234] [ 3013.953314][ T1222] bond0: entered promiscuous mode [ 3014.015989][ T1222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3014.307993][ T1238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3014.308310][ T1238] bond0: (slave ipip1): The slave device specified does not support setting the MAC address [ 3014.308322][ T1238] bond0: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 3014.350457][ T1238] bond0: (slave ipip1): making interface the new active one [ 3014.350488][ T1238] ipip1: entered promiscuous mode [ 3014.357467][ T1238] bond0: (slave ipip1): Enslaving as an active interface with an up link [ 3014.866471][ T1247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7180'. [ 3015.225721][ T1216] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3015.417548][ T1216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3015.417607][ T1216] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3015.423938][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3015.423965][ T1216] usb 2-1: Product: syz [ 3015.423975][ T1216] usb 2-1: Manufacturer: 濚ヱ㑷䢁㇗暻猁鐧ʤ꬝ж食萜㋴ᘧ偱幾鸲ᅞ椣麸켛톍惡肣㇃幜玊ႈ鑊ࢠ㆒က砨⡜樶䕠ケ䨬툿巭륫䴫验ቔ෮䚑볅洖䉤嚽賈ʿ༔פּꛌ䑁៽敯ꉏ騬䭿芮ⳍ⏶⡫륄󣀃 [ 3015.424000][ T1216] usb 2-1: SerialNumber: syz [ 3016.284611][ T1252] fuse: Bad value for 'fd' [ 3016.589396][ T1261] fuse: Bad value for 'fd' [ 3017.857792][ T1216] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3017.886123][ T1216] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3018.248237][ T1216] usb 2-1: USB disconnect, device number 125 [ 3018.519868][ T1177] udevd[1177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3019.106308][ T1276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7178'. [ 3019.106350][ T1276] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7178'. [ 3019.111572][ T1276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7178'. [ 3019.111613][ T1276] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7178'. [ 3019.324069][ T1274] xt_IDLETIMER: Adding/Replacing rule with same label and different timer type is not allowed [ 3019.692203][ T1286] kAFS: unable to lookup cell '' [ 3020.440861][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.440970][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 3022.163793][ T1302] netlink: 'syz.1.7186': attribute type 1 has an invalid length. [ 3022.274833][ T1302] bond0: entered promiscuous mode [ 3022.276265][ T1302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3022.399175][ T1307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3022.399565][ T1307] bond0: (slave ipip2): The slave device specified does not support setting the MAC address [ 3022.399586][ T1307] bond0: (slave ipip2): Setting fail_over_mac to active for active-backup mode [ 3022.460877][ T1307] bond0: (slave ipip2): making interface the new active one [ 3022.460911][ T1307] ipip2: entered promiscuous mode [ 3022.498534][ T1307] bond0: (slave ipip2): Enslaving as an active interface with an up link [ 3022.969181][ T1319] fuse: Bad value for 'fd' [ 3025.067893][ T1351] fuse: Bad value for 'fd' [ 3025.101757][ T1349] tipc: Enabling of bearer rejected, already enabled [ 3026.232028][ T1352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7194'. [ 3026.232204][ T1352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7194'. [ 3027.528376][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3027.528835][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3030.051422][ T1405] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7207'. [ 3030.366456][ T1213] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 3030.521589][ T1213] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3030.529296][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.529353][ T1213] usb 1-1: Product: syz [ 3030.529383][ T1213] usb 1-1: Manufacturer: syz [ 3030.529399][ T1213] usb 1-1: SerialNumber: syz [ 3031.059356][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3031.059464][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3031.288545][ T1407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7207'. [ 3031.707627][ T1416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3031.976023][ T1416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.002446][ T1419] usb usb8: usbfs: process 1419 (syz.3.7209) did not claim interface 0 before use [ 3035.934592][ T1421] netlink: 'syz.3.7210': attribute type 2 has an invalid length. [ 3035.934619][ T1421] netlink: 'syz.3.7210': attribute type 2 has an invalid length. [ 3036.311404][ T1426] fuse: Bad value for 'fd' [ 3037.717260][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -ETIMEDOUT [ 3037.719262][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 3037.719853][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 3037.719952][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3037.721264][ T1213] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3037.738930][ T1213] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 3038.238289][ T1384] syzkaller0: entered promiscuous mode [ 3038.238315][ T1384] syzkaller0: entered allmulticast mode [ 3038.323495][T20324] usb 1-1: USB disconnect, device number 100 [ 3038.495107][ T1428] tipc: Resetting bearer [ 3038.800180][ T1432] tipc: Enabling of bearer rejected, already enabled [ 3038.934928][ T1437] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 3039.484373][ T1442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7215'. [ 3039.484432][ T1442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7215'. [ 3039.554855][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7216'. [ 3041.645225][ T1465] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3042.075506][ T1213] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3042.225678][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 3042.226483][ T1213] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3042.227725][ T1213] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3042.227755][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3042.230679][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.230705][ T1213] usb 2-1: Product: syz [ 3042.230724][ T1213] usb 2-1: Manufacturer: syz [ 3042.230733][ T1213] usb 2-1: SerialNumber: syz [ 3042.235062][ T1213] usb 2-1: config 0 descriptor?? [ 3042.265316][ T1213] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3042.285629][ T1213] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 3043.168211][ T1477] netlink: 'syz.4.7222': attribute type 1 has an invalid length. [ 3043.215583][ T1477] bond0: entered promiscuous mode [ 3043.216005][ T1477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3043.310371][ T1483] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3043.389258][ T1477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3043.389638][ T1477] bond0: (slave ipip1): The slave device specified does not support setting the MAC address [ 3043.389651][ T1477] bond0: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 3043.433160][ T1477] bond0: (slave ipip1): making interface the new active one [ 3043.433223][ T1477] ipip1: entered promiscuous mode [ 3043.479009][ T1477] bond0: (slave ipip1): Enslaving as an active interface with an up link [ 3043.796441][ T1213] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 3043.804895][ T1213] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 3043.823214][ T1213] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 3043.823268][ T1213] em28xx 2-1:0.0: No AC97 audio processor [ 3044.746090][ T1491] fuse: Bad value for 'fd' [ 3045.144552][ T1215] usb 2-1: USB disconnect, device number 126 [ 3045.146236][ T1215] em28xx 2-1:0.0: Disconnecting em28xx [ 3045.195565][ T1495] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3045.654315][ T1215] em28xx: Freeing device [ 3045.713390][ T1506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7225'. [ 3045.785870][ T1503] batman_adv: batadv0: Adding interface: veth0 [ 3045.785889][ T1503] batman_adv: batadv0: The MTU of interface veth0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3045.785918][ T1503] batman_adv: batadv0: Interface activated: veth0 [ 3045.803431][ T1503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3045.921986][ T1503] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 3045.922005][ T1503] batman_adv: batadv0: Removing interface: syzkaller0 [ 3045.971908][ T1503] batman_adv: batadv0: Interface deactivated: veth0 [ 3045.971943][ T1503] batman_adv: batadv0: Removing interface: veth0 [ 3046.493028][ T1516] syzkaller0: entered promiscuous mode [ 3046.493070][ T1516] syzkaller0: entered allmulticast mode [ 3046.565529][ T1519] xt_l2tp: missing protocol rule (udp|l2tpip) [ 3046.572316][ T1514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3046.572746][ T1514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.593387][ T1540] tipc: Enabling of bearer rejected, already enabled [ 3048.662870][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3048.668631][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.864571][ T1540] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 3049.014552][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7234'. [ 3051.101265][ T1562] netlink: 'syz.0.7236': attribute type 1 has an invalid length. [ 3051.173157][ T1562] bond0: entered promiscuous mode [ 3051.173640][ T1562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3051.482174][ T1562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3051.483166][ T1562] bond0: (slave ipip1): The slave device specified does not support setting the MAC address [ 3051.483222][ T1562] bond0: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 3051.517631][ T1562] bond0: (slave ipip1): making interface the new active one [ 3051.517687][ T1562] ipip1: entered promiscuous mode [ 3051.545951][ T1562] bond0: (slave ipip1): Enslaving as an active interface with an up link [ 3052.155405][ T1568] IPVS: stopping master sync thread 23485 ... [ 3052.931686][ T1585] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3053.386555][ T1592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7243'. [ 3055.112120][ T1607] syzkaller0: entered promiscuous mode [ 3055.112143][ T1607] syzkaller0: entered allmulticast mode [ 3055.134217][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3055.134652][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3057.024073][ T1618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3057.069530][ T1618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3058.805319][ T1631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7252'. [ 3059.779126][ T31] audit: type=1804 audit(1790597191.141:10382): pid=1634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7263" name="bus" dev="ramfs" ino=210317 res=1 errno=0 [ 3059.782686][ T31] audit: type=1804 audit(1790597191.141:10383): pid=1626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7263" name="bus" dev="ramfs" ino=210317 res=1 errno=0 [ 3060.568521][ T1645] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3060.769552][ T1654] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7254'. [ 3060.771889][ T1648] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3061.673225][ T1662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7257'. [ 3061.673268][ T1662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7257'. [ 3081.882574][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.887730][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.318853][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.318952][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 3202.195583][ T32] INFO: task kworker/0:2:50 blocked for more than 143 seconds. [ 3202.195620][ T32] Tainted: G L syzkaller #0 [ 3202.195627][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3202.195645][ T32] task:kworker/0:2 state:D stack:20576 pid:50 tgid:50 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3202.195690][ T32] Workqueue: usb_hub_wq hub_event [ 3202.195809][ T32] Call Trace: [ 3202.195814][ T32] [ 3202.195822][ T32] __schedule+0x17db/0x58f0 [ 3202.195878][ T32] ? __pfx___schedule+0x10/0x10 [ 3202.195908][ T32] ? schedule+0x90/0x2b0 [ 3202.195935][ T32] schedule+0x164/0x2b0 [ 3202.195951][ T32] usb_kill_urb+0x1cf/0x2f0 [ 3202.196003][ T32] ? __pfx_usb_kill_urb+0x10/0x10 [ 3202.196016][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3202.196052][ T32] usb_start_wait_urb+0x22a/0x5b0 [ 3202.196079][ T32] ? rcu_is_watching+0x16/0xb0 [ 3202.196105][ T32] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3202.196140][ T32] usb_control_msg+0x234/0x3e0 [ 3202.196167][ T32] hub_port_init+0x1266/0x28c0 [ 3202.196203][ T32] hub_event+0x24e8/0x4d30 [ 3202.196218][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 3202.196284][ T32] ? __pfx_hub_event+0x10/0x10 [ 3202.196313][ T32] ? rcu_is_watching+0x16/0xb0 [ 3202.196338][ T32] ? process_scheduled_works+0x97a/0x1630 [ 3202.196365][ T32] process_scheduled_works+0xc3d/0x1630 [ 3202.196406][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 3202.196435][ T32] ? assign_work+0x3cf/0x5d0 [ 3202.196463][ T32] worker_thread+0xa47/0xfb0 [ 3202.196497][ T32] ? __kthread_parkme+0x71/0x1f0 [ 3202.196528][ T32] kthread+0x38b/0x480 [ 3202.196540][ T32] ? __pfx_worker_thread+0x10/0x10 [ 3202.196565][ T32] ? __pfx_kthread+0x10/0x10 [ 3202.196577][ T32] ret_from_fork+0x514/0xb70 [ 3202.196601][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3202.196622][ T32] ? __switch_to+0xc89/0x1420 [ 3202.196641][ T32] ? __pfx_kthread+0x10/0x10 [ 3202.196663][ T32] ret_from_fork_asm+0x1a/0x30 [ 3202.196699][ T32] [ 3202.196953][ T32] [ 3202.196953][ T32] Showing all locks held in the system: [ 3202.196961][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 3202.197026][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3202.197156][ T32] locks held by kworker/0:2/50: 5, on CPU#0: [ 3202.197164][ T32] #0: ffff88802229d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3202.197215][ T32] #1: ffffc90000bb7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3202.197351][ T32] #2: ffff88802aead1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 3202.197393][ T32] #3: ffff88802af00568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 3202.197443][ T32] #4: ffff88802adce160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 3202.197509][ T32] locks held by getty/5376: 2, on CPU#0: [ 3202.197517][ T32] #0: ffff888035ced0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3202.197556][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 3202.197647][ T32] locks held by kworker/u8:5/32745: 2, on CPU#1: [ 3202.197655][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3202.197705][ T32] #1: ffffc900183d7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 3202.197748][ T32] [ 3202.197752][ T32] ============================================= [ 3202.197752][ T32] [ 3202.197760][ T32] NMI backtrace for cpu 0 [ 3202.197774][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3202.197789][ T32] Tainted: [L]=SOFTLOCKUP [ 3202.197793][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3202.197800][ T32] Call Trace: [ 3202.197805][ T32] [ 3202.197810][ T32] dump_stack_lvl+0xe8/0x150 [ 3202.197827][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 3202.197869][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3202.197887][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 3202.197901][ T32] sys_info+0x135/0x170 [ 3202.197912][ T32] watchdog+0xfd7/0x1030 [ 3202.197928][ T32] ? watchdog+0x1c7/0x1030 [ 3202.197942][ T32] kthread+0x38b/0x480 [ 3202.197953][ T32] ? __pfx_watchdog+0x10/0x10 [ 3202.197963][ T32] ? __pfx_kthread+0x10/0x10 [ 3202.197974][ T32] ret_from_fork+0x514/0xb70 [ 3202.197986][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3202.197997][ T32] ? __switch_to+0xc89/0x1420 [ 3202.198012][ T32] ? __pfx_kthread+0x10/0x10 [ 3202.198023][ T32] ret_from_fork_asm+0x1a/0x30 [ 3202.198046][ T32] [ 3202.198077][ T32] Sending NMI from CPU 0 to CPUs 1: [ 3202.198169][ C1] NMI backtrace for cpu 1 [ 3202.198185][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 3202.198211][ C1] Tainted: [L]=SOFTLOCKUP [ 3202.198218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3202.198229][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3202.198257][ C1] Code: fb 87 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 22 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 3202.198274][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 3202.198291][ C1] RAX: 00000000129357c5 RBX: ffffffff819bcc30 RCX: 8000000000000001 [ 3202.198306][ C1] RDX: 0000000000000001 RSI: ffffffff8e415ef6 RDI: ffffffff8c6dad80 [ 3202.198320][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 3202.198335][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 3202.198348][ C1] R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 3202.198363][ C1] FS: 0000000000000000(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 3202.198378][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3202.198392][ C1] CR2: 0000559bdb6de168 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 3202.198408][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 3202.198422][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3202.198436][ C1] Call Trace: [ 3202.198443][ C1] [ 3202.198451][ C1] default_idle+0x9/0x20 [ 3202.198477][ C1] default_idle_call+0x72/0xb0 [ 3202.198503][ C1] do_idle+0x2e0/0x540 [ 3202.198523][ C1] ? __pfx_do_idle+0x10/0x10 [ 3202.198546][ C1] cpu_startup_entry+0x43/0x60 [ 3202.198565][ C1] start_secondary+0x101/0x110 [ 3202.198592][ C1] common_startup_64+0x13e/0x157 [ 3202.198621][ C1] [ 3202.199123][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 3202.842554][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3202.853230][ T32] Tainted: [L]=SOFTLOCKUP [ 3202.857556][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3202.867605][ T32] Call Trace: [ 3202.870881][ T32] [ 3202.873803][ T32] vpanic+0x56d/0xa60 [ 3202.877786][ T32] ? __pfx___schedule+0x10/0x10 [ 3202.882637][ T32] ? __pfx_vpanic+0x10/0x10 [ 3202.887154][ T32] panic+0xc5/0xd0 [ 3202.890886][ T32] ? __pfx_panic+0x10/0x10 [ 3202.895299][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 3202.900754][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 3202.906120][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 3202.912265][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 3202.918411][ T32] watchdog+0x1030/0x1030 [ 3202.922739][ T32] ? watchdog+0x1c7/0x1030 [ 3202.927160][ T32] kthread+0x38b/0x480 [ 3202.931225][ T32] ? __pfx_watchdog+0x10/0x10 [ 3202.935887][ T32] ? __pfx_kthread+0x10/0x10 [ 3202.940466][ T32] ret_from_fork+0x514/0xb70 [ 3202.945043][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 3202.950142][ T32] ? __switch_to+0xc89/0x1420 [ 3202.954818][ T32] ? __pfx_kthread+0x10/0x10 [ 3202.959401][ T32] ret_from_fork_asm+0x1a/0x30 [ 3202.964183][ T32] [ 3202.967464][ T32] Kernel Offset: disabled [ 3202.971785][ T32] Rebooting in 86400 seconds..