last executing test programs: 7.076545564s ago: executing program 2 (id=1236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000002c0)=0x201) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010163, 0x0) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f0000000dc0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@uid_lt={'uid<', 0xee01}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}, 0x1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x10004, 0x6, 0xe000, 0x1000, &(0x7f00004c5000/0x1000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254, 0x0, r4}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa43e, 0x400, 0x20fc, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x2034f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70fb, 0x200, 0x2, 0xa3, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.76033038s ago: executing program 2 (id=1237): socket(0xa, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe00000100000000"], 0x28}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0xa0402, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000005c0)) r2 = syz_open_pts(r1, 0x1c3200) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000600)={0x90000010}) close(0x3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f00000007c0)=0x3, 0x4) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000800), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) io_setup(0x8, &(0x7f0000000700)=0x0) io_submit(r6, 0x1, &(0x7f0000000740)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0, 0x0, 0x0, 0x0, 0x1}]) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0xc}) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040d90470a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000680)={0x3, 0x8, 0x1}) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000081805020000000000000109022400d63dca4cfca131ef050203008400092101004001221800090581034000801587753ee93d88521ac50dfb6f08060964ceedbbc2f1f3902b9286bb7a387bbaa90873e75061cf4623b1bee086bc076e03"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 6.652190227s ago: executing program 3 (id=1238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e23, 0xffffffff, @mcast2, 0x96}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000ef01010100000000000000000ffe0000080000002800028005000300010000001c0002800c000180"], 0x60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001a00010035bd700003dcdf2502832001000000000020000005001b003a00000008001900", @ANYBLOB="8332b1"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40400c0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000000)={@empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async) syz_emit_ethernet(0x72, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa0c88a81c008100210008004520005c0000000000000000ac1414bbe00000024e224e20004a90780300000000000000345e89459ff91b1af96c1f7e6d70628d317593f4f2c0ddc838303b027177989ec150800ae496f5b74a0000000000000000fb000000000000"], 0x0) (async) listen(r0, 0x2) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000400), 0x2, 0x80100) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') lseek(r8, 0x1000000, 0x1000000) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x3}}, 0x1c}}, 0x20000804) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f00000002c0)=0x1, 0x4) 5.576296286s ago: executing program 3 (id=1244): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x6000, 0x100000b, 0x8012, r1, 0x200000ffd000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) 5.344000016s ago: executing program 3 (id=1246): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r2, 0x0, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x886c}, @val={0x1, 0x4, 0x7f, 0xff, 0x49e1}, @ipv6=@icmpv6={0x0, 0x6, "84e7cb", 0x130, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@fragment={0x1, 0x0, 0x9, 0x1, 0x0, 0x4, 0x66}, @hopopts={0x4, 0x4, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0x3, [0xfc3]}}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x2}]}, @dstopts={0x3a, 0x9, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x10, [0x10b, 0xb5c, 0x5, 0xffffffffffff0001]}}, @jumbo={0xc2, 0x4, 0x91e}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x31}]}, @srh={0x5e, 0xa, 0x4, 0x5, 0xd, 0x0, 0x2, [@dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}]}, @dstopts={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x868c}, @ra]}], @mlv2_report={0x8f, 0x0, 0x0, 0x3ff, 0x1, [{0x8, 0x3, 0x1, @private2, [@dev={0xfe, 0x80, '\x00', 0x21}], [0x62, 0x7, 0x9]}]}}}}, 0x166) r3 = syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0xfffffffe, 0x40055}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_RECV_ZC={0x3a, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x3ff, 0x0, 0x0, {0x0, 0x0, 0x8000004}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0xf9) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001383b8c100120043aab0f0102030109021b00010304508b0904"], 0x0) 5.264853319s ago: executing program 4 (id=1247): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000d00000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 5.200058731s ago: executing program 4 (id=1248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "bcee2177"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) 4.742285671s ago: executing program 3 (id=1249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x54, 0x12, 0x1, 0x70bd27, 0x25dfdbff, {0x3, 0x9, 0x4, 0xd, {0x4e23, 0x4e22, [0x1000, 0x0, 0xff, 0x60a], [0x10001, 0xfffffff0, 0x0, 0x80000001], 0x0, [0x8, 0xd]}, 0x81, 0x1d8dac21}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x8040) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.552490689s ago: executing program 1 (id=1250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x0, 0x7fff, 0x3, 0xffffffffffffffff, 0x0, 0x0}) madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x16) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000004500)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x2, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000002340)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000043c0)={0x50, 0x0, r8, {0x7, 0x2b, 0x6, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x8}}, 0x50) stat(&(0x7f0000004580)='./file1\x00', &(0x7f00000045c0)) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000006afe07000200020d", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040005000000000010000100000000002000060000000000"], 0x34, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x4, 0x1], 0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.167771748s ago: executing program 0 (id=1251): io_setup(0x1, &(0x7f0000002200)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000002280)=[&(0x7f00000022c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, &(0x7f0000002300)="c292dfb4929a", 0x6, 0x7, 0x0, 0x2}]) r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000021c0)=0x80, 0x4) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa50003d1) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x112) getdents(r6, 0x0, 0x0) r7 = io_uring_setup(0x8, &(0x7f0000002040)={0x0, 0xc93d, 0x0, 0x0, 0x2b1}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000020c0)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000002100)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000002140)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000002180)={0x1, 0xd}, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x10b000, 0x115) getdents64(r8, &(0x7f0000000180)=""/4096, 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000001c80)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000001cc0)={0xffffffffffffffff, &(0x7f0000001d00)='(\x00', 0x400240, &(0x7f0000001d40)={@align=0x9, {0x1, 0x4, 0x1, 0x9}}, 0x69, &(0x7f0000001d80), &(0x7f0000001dc0)}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e00)={@cgroup=r11, 0x5, 0x1, 0x7fffffff, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001e80)=[0x0], &(0x7f0000001ec0)=[0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001f40)={'ip6gre0\x00', &(0x7f0000001f80)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xa, 0x4, 0x14, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x7, 0x6}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002000)=ANY=[@ANYRES32=r13, @ANYRES32=r9, @ANYBLOB="0f976c4eaf008a3d9a790000", @ANYRES32=r9, @ANYBLOB, @ANYRES64=r12], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value, @void, @void, r12}, 0x20) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl(r14, 0x89b1, &(0x7f0000000000)='veth0:') 3.283777315s ago: executing program 4 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000006c0001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1040000020004df3fbe38471", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x3, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) socket$netlink(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x101101, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0xfffffffffffffffd) ioctl$TCSBRKP(r3, 0x5425, 0x80000000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c0000000307050000000000000000000a0000020c00064000000000000000070c00034000000000000000022400078008000140fffffff10800014000000003080002400000000d080001400000008608000540000000020c0003400000000000000004000640ffffffffffffffff00"/124], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x404c004) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x698, 0x5, 0x498, 0x320, 0x0, 0xffffffff, 0x0, 0x1d0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1d0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd89286ae9b13d39b99407a9b6abe75a728baa18da576811985de44110b8602005e1298ea55f1c5087ab16f67b18ca90ac6040b3d6a068f727f7d23ab794d9ba59a5da2ff7f000000000000ae63e26b6fe772493180cfda2c9d49412e9469d85abdb467ba000000000000000000000000deffffff00", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wg0\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @gre_key=0xe, @port=0x4e24}}}}, {{@ip={@empty, @private=0xa010101, 0xffffffff, 0xff, 'wlan1\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @loopback, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYRES32=0x0, @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.25878098s ago: executing program 2 (id=1253): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x22883, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000004c0)={0x8, 0x0, [{0x4, 0x0, 0x0, 0x6, 0x9e}, {0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x5e2796afef1a2f31, 0xffffffff, 0xd, 0x9, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x4000003}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x62d9, 0x9, 0x3, 0x8000}, {0xc0000000, 0x0, 0x2, 0x6b2, 0x823, 0xa5, 0x8000}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x3}]}) 2.222908911s ago: executing program 4 (id=1254): getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@initdev, @empty, @empty}, &(0x7f0000000040)=0xc) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x8021, 0x5}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x40, 0x57, 0x1, {{0x2c, 0x4, 0x0, 0x2, 0xb0, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @empty, {[@timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0x0, [{@local, 0x3be8}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @noop, @timestamp={0x44, 0xc, 0xa, 0x0, 0x3, [0x7, 0x6]}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xc8, 0x0, 0x6, [0x8]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0xf5, 0x3, 0x4, [{@empty, 0x6}, {@loopback, 0x1eb5b21d}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2ec15ac3}, {@local, 0x8}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2}, 0x8}]}, @noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@newqdisc={0x1e4, 0x24, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x7}, {0x9, 0x5}, {0xa, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8408}, @TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x89, 0x6, 0x3, 0x0, 0x4a, 0x3, 0x8}}, {0x14, 0x2, [0x56, 0x6b, 0x8, 0x0, 0x6, 0x623, 0x3ff, 0xf917]}}, {{0x1c, 0x1, {0x1, 0x8, 0x9, 0x2, 0x2, 0x3, 0x10000, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x4, 0xf, 0x6, 0xff, 0x2, 0x0, 0x9, 0x3}}, {0xa, 0x2, [0x105, 0x0, 0x9]}}, {{0x1c, 0x1, {0x5, 0xc, 0x3, 0x0, 0x0, 0x3, 0x4, 0x2}}, {0x8, 0x2, [0x800, 0x3]}}, {{0x1c, 0x1, {0x3, 0x12, 0x4, 0x3ff, 0x2, 0x5af, 0x6, 0x6}}, {0x10, 0x2, [0xddd, 0x5, 0x1ff, 0x8, 0x0, 0x6]}}, {{0x1c, 0x1, {0x7, 0x4, 0x5, 0x3ff, 0x2, 0xafe7, 0x7, 0x8}}, {0x14, 0x2, [0x12, 0x3ff, 0x9, 0x0, 0x6, 0x1, 0xfffd, 0x5]}}, {{0x1c, 0x1, {0x2, 0x3, 0x2, 0x7, 0x1, 0x2, 0x6, 0x4}}, {0xc, 0x2, [0x7, 0x5fe7, 0x80, 0x0]}}, {{0x1c, 0x1, {0x5, 0xa, 0x0, 0xeb, 0x0, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0xfa, 0x81, 0x101, 0x5, 0x0, 0x9, 0x0, 0xa}}, {0x18, 0x2, [0x4, 0xc, 0x7, 0x1, 0x6, 0x5, 0x8, 0x1, 0x1, 0x9]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7, 0x9, 0x0, 0x9, 0x4, 0x3}}, {0xa, 0x2, [0x101, 0x5, 0xff80]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x9c}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x20040800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/uevent_helper', 0x80980, 0x104) statx(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xc00, 0x80, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000001880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f0000000680)={0x1190, 0x3e, 0x20, 0x70bd26, 0x25dfdbff, {0x13}, [@generic="cb62b9e5b9ef16a2f09f5d74e46c9c", @typed={0x4, 0x7c}, @nested={0x1168, 0x15f, 0x0, 0x1, [@generic="0ad1ae3014d5652c8f6e8583201330df6849e2496ed63bdad160829351ed6723ad047e995ba7da90b71064522a9c28669c33fc40f4f7ee55b5148d52f272c9021e983cfb998eeffb87633625c90a054ff53c4cf9905d8d3e820043a4ca3663fa6c125a0ac683c2e2f3420d5793b40f535ba60f755ece897a279947b4ef2766c1c75331a2bfdc0d0d451ef0310a0bdebe801556c8178ad5805a9baeb40166b4aa41f9049cb389caf9154271ad900067c73a", @generic="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", @typed={0x8, 0xae, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="5d96e9c0cc108f8258c3cd3b0edf477755ea884d52d24e66b60d746ddc0dd568c83d4034728c444c489d7eb3ae9fd38712bbf034f02381188ee6fd125a1a4e38bd19c9f6c18a3243eb0be848648834d5a293717544bff5169ad7e2272bc251261c60c1f0ee58e7e3df19b6", @nested={0x4, 0xb4}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic]}]}, 0x1190}, 0x1, 0x0, 0x0, 0x4000080}, 0x4080) syz_genetlink_get_family_id$batadv(&(0x7f00000018c0), r2) r4 = landlock_create_ruleset(&(0x7f0000001900)={0x11178, 0xd, 0x2, 0x20c8, 0x8, 0x2}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_open_dev$audion(&(0x7f0000001940), 0x8, 0x2000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001980)={0x0, "c44fa98d0f58cc111273073b8762c535"}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002980)={r6, "44a3035768be653384c57364558d90a3"}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000003980)={0x1, 0xff, 0x9, 0x0, 0x6}) r7 = semget$private(0x0, 0x1, 0x4ac) semtimedop(r7, &(0x7f0000003a00)=[{0x4, 0x7, 0x1000}, {0x2, 0x8, 0x1000}, {0x3, 0x6, 0x1800}, {0x2, 0x0, 0x1000}, {0x3, 0x200, 0x1800}, {0x3, 0x10, 0x800}, {0x1, 0x1}], 0x7, &(0x7f0000003a40)={0x77359400}) semctl$IPC_INFO(r7, 0x2, 0x3, &(0x7f0000003a80)=""/127) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b40)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x85a8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x303}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xb0}}, 0x80) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000003cc0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000003c80)}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000003d00)={0x8, r9}) open$dir(&(0x7f0000003d40)='./file0\x00', 0x8000, 0x20) sendto$inet(r5, &(0x7f0000003d80)="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", 0xfa, 0x20040001, &(0x7f0000003e80)={0x2, 0x4e24, @broadcast}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000003ec0)={0x30001, 0x0, {[0xaddb, 0x100000001, 0x2, 0xfffffffffffffffc, 0x8, 0x3, 0x6, 0x2]}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003f40)={'ip6tnl0\x00'}) ioctl$VT_WAITACTIVE(r2, 0x5607) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000004040)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2e8e}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2008040) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f00000041c0)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004180)={&(0x7f00000040c0)={0xac, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x3a}}}}, [@NL80211_ATTR_TESTDATA={0x78, 0x45, "84f2a8b8d15bbbe097ccd3db1de0db365c25f45c63f8f1452529c1f3db90107e310c8bd7cfdb40e9ea9310b5527de384538ab7235763b9bd34f0fafde65290383ef78fc72a768275a40990049f45ef456ee0fc10a5e83cc77c4b5ae183aec3cdee86ae6c699e5ce46e43a567a94a0bfb19a67d0d"}, @NL80211_ATTR_TESTDATA={0x11, 0x45, "1ef5193cd987d34c376cef4044"}]}, 0xac}, 0x1, 0x0, 0x0, 0x4002050}, 0x80c0) 2.049859673s ago: executing program 0 (id=1255): epoll_create1(0x0) socket(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000700)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r4 = syz_open_dev$video(&(0x7f0000000500), 0x6, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0x0, 0x10, &(0x7f00000019c0), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x0, 0x5, 0x2, {0x9, @sdr={0x36314d4e, 0xc}}, 0x10000}) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100003050000000000000000000000002b057a2b67517eff6b15e09ae427687789916f3d25ce9a598ba12c75b64bcffa1ef6585fc7f6e5aabdf030fe266740150d060755c55bea7948b3526490144760398fb8970c3a61bc12837ffa2697da83b36265f0137ace6f4035b28347846cc5ca998d98ce2fafb5e82e6cccab37a62b9ec0c378e11760ebbe4ccc89db82ac044dcc6522dd1849832d8fd440fb59e1cf81c5cdcf67d61825fd59d2f25fb620d1843f3de59bf74576b1237a7992", @ANYRES32=0x0, @ANYBLOB="15030000000000002400128009000100626f6e6400000000140002800500010006000000080014009a000000"], 0x44}}, 0x4800) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000000)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 1.809529838s ago: executing program 4 (id=1256): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x25}}, 0x4008040) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8030c3, 0xc574450d1af3bd84}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x8000000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) (async) get_mempolicy(&(0x7f00000002c0), &(0x7f0000000680), 0x100, &(0x7f000047f000/0x4000)=nil, 0x5) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000000c0)=0x7) (async) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7) syz_usb_disconnect(0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x4000, &(0x7f00000003c0)="18bffb37a99a72ea4f3818dedd694c7e0b577fb7044fc52d944f21415fa4b92977cc112084836f59e0ffc7fa0bd428ac2a60ffb3525198127709fc6909906b5e41026383cf163a084f41e433f7d93a74a9451c02d86a45dbc1c598c27168bcbad5cb5d6a6bc17a67d2bc31aaab732f82ffda9d527bb1c5a937a6fafc1ba7b8e2a56ce656d9234fa35366f0872e804ef994514b6829124f6085e82f6999d0cc310667c6fb11e3310b4827100efb94747226cf913e9d0f920ed5766182eca44f97352abe801ed979eaf554f4b5d9fe107579446d24a2d2fdfb28f2785474d9023faceb6eab53", 0xe5, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="61369e051cb8089eb02f4d661235fc98d14f101d517cd680eaec1a27a0cb731f329f5a87b1483105c0eb7c378cbbd3072a35ed00553776a8ab8aee6094b492c038d5015617c5a3553ce7fe1101fdc2cebf929b") (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000612000/0x2000)=nil, 0x2000, 0x19) 1.807896266s ago: executing program 2 (id=1257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x158, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd29, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write(r1, 0x0, 0x0) 1.694092191s ago: executing program 0 (id=1258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x148) 1.33622174s ago: executing program 0 (id=1259): epoll_create1(0x0) socket(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000700)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r4 = syz_open_dev$video(&(0x7f0000000500), 0x6, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0x0, 0x10, &(0x7f00000019c0), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x0, 0x5, 0x2, {0x9, @sdr={0x36314d4e, 0xc}}, 0x10000}) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 1.171338266s ago: executing program 2 (id=1260): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xb, 0x1, 0x7ffc1002}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x1e, "5c76276f6c86622447091e9940a5f2781ad01612b415e66ee2f69b275061"}}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x862c0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x400, 0x4) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xcc, @empty, 0x5}, {0xa, 0x4e23, 0x10, @loopback, 0x1}, r1, 0x2}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.168366813s ago: executing program 3 (id=1261): epoll_create1(0x0) socket(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000700)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r4 = syz_open_dev$video(&(0x7f0000000500), 0x6, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0x0, 0x10, &(0x7f00000019c0), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x0, 0x5, 0x2, {0x9, @sdr={0x36314d4e, 0xc}}, 0x10000}) socket(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 1.160333239s ago: executing program 1 (id=1262): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip6_vti0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000ac0)={'dummy0\x00'}) 924.274307ms ago: executing program 0 (id=1263): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r0 = socket$inet(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000102050c000000000000000002000006240002801400018007bc706479de41297f4a15141408000200640101020c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x85, 0x0, &(0x7f0000000440)=0xb000) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/ipc\x00') ioctl$BTRFS_IOC_BALANCE(r5, 0x8008b70d, 0x200000000000000) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r4, &(0x7f0000000540)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) accept4$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14, 0x400) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="89000000120081ae08060c000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b310d7a46e3988285dcf21308f868fece01955fed0009d78f0a947e000000000000000000", 0x73}, {&(0x7f0000000580)="11d6cb2e562ddb2c60dec0e85e557c8496a2fe7a81f382", 0x17}], 0x2}, 0x4000000) r7 = syz_open_dev$usbmon(&(0x7f0000000380), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r7, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x49cdee) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000240)={&(0x7f0000000600)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/23, @ANYRES32=0x0, @ANYBLOB="000000005ee7"], 0x28}, 0x1400c8d4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='secret\x00', &(0x7f0000000400)='IQAA7A/AA//+\b/\xc4\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU', 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'dummy0\x00', @multicast}) 696.390818ms ago: executing program 1 (id=1264): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x282001, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=0x0}}) 627.945343ms ago: executing program 0 (id=1265): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000000000) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x60) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x7, 0x30}, &(0x7f0000000580)=0xc) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r4, 0x0) set_mempolicy(0x3, &(0x7f00000005c0)=0xef, 0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000010d3a71c310016000000183d234503cc45093d502a249121f6f47b97b05491b82c21805786f91df8dc933907e9109e97552ce0a4b29762e5cb4b112bbb8e3befcc29a367901233dc2e72db9ebfc68bcb0fe8f5772ad3172d27c875fa7fa4ef122251912f2d3388d44d13bb36d931205413c5d36e5425a77de7b7951ea30d5ea82f07c9222652e77e1abfc5f9fe270e7da3028ad50153b9ee9a1e50b3eb577937934946bf228867bca6e9e2a42c3d6981", @ANYRES32=0x0, @ANYBLOB="60100500042c0400"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000740)={0xfffe}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000007c0)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r9, &(0x7f0000000800), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) preadv(r9, &(0x7f0000000840)=[{&(0x7f0000000880)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000940)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000000b80)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) 617.221833ms ago: executing program 2 (id=1266): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r0, &(0x7f0000000200)=""/209, 0xd1) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (rerun: 32) r3 = userfaultfd(0x801) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="75c6f05982f30f7d483aed5c31e4f8f9", 0x10) (async) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, r3, 0x0) 553.083339ms ago: executing program 3 (id=1267): io_setup(0x8, &(0x7f0000000100)=0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x84, 0x32, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfd4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = dup3(r1, r2, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002440)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000024c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002540), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000002580)=0x2) recvmmsg(r5, &(0x7f00000025c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000002600)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000002640)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000002680)=[{&(0x7f00000026c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mq_unlink(0x0) syz_80211_join_ibss(&(0x7f0000002740)='wlan0\x00', &(0x7f0000002780)=@default_ibss_ssid, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x5, 0x3, &(0x7f0000002880)=ANY=[@ANYBLOB="050000000000565b1d89a779925cfff80000711124000000"], &(0x7f00000028c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7f, r9, 0x0}]) 384.43674ms ago: executing program 1 (id=1268): epoll_create1(0x0) socket(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000700)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r4 = syz_open_dev$video(&(0x7f0000000500), 0x6, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001980), 0x0, 0x10, &(0x7f00000019c0), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x0, 0x5, 0x2, {0x9, @sdr={0x36314d4e, 0xc}}, 0x10000}) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100003050000000000000000000000002b057a2b67517eff6b15e09ae427687789916f3d25ce9a598ba12c75b64bcffa1ef6585fc7f6e5aabdf030fe266740150d060755c55bea7948b3526490144760398fb8970c3a61bc12837ffa2697da83b36265f0137ace6f4035b28347846cc5ca998d98ce2fafb5e82e6cccab37a62b9ec0c378e11760ebbe4ccc89db82ac044dcc6522dd1849832d8fd440fb59e1cf81c5cdcf67d61825fd59d2f25fb620d1843f3de59bf74576b1237a7992", @ANYRES32=0x0, @ANYBLOB="15030000000000002400128009000100626f6e6400000000140002800500010006000000080014009a000000"], 0x44}}, 0x4800) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000000)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 238.888197ms ago: executing program 1 (id=1269): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001002000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 46.922811ms ago: executing program 4 (id=1270): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)) lseek(r0, 0xfffffffffffffffc, 0x1) read$watch_queue(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}]}, 0x7c}}, 0x0) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fallocate(r4, 0x20, 0x200000000000000, 0xffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 1 (id=1271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x54, 0x12, 0x1, 0x70bd27, 0x25dfdbff, {0x3, 0x9, 0x4, 0xd, {0x4e23, 0x4e22, [0x1000, 0x0, 0xff, 0x60a], [0x10001, 0xfffffff0, 0x0, 0x80000001], 0x0, [0x8, 0xd]}, 0x81, 0x1d8dac21}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x8040) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): 1 [ 334.654560][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.656868][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.657819][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.660049][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.699932][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.740723][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.751453][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.751505][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.755075][ T5711] usb 5-1: config 0 descriptor?? [ 334.809511][ T8835] loop4: detected capacity change from 0 to 7 [ 334.810730][ T8835] Dev loop4: unable to read RDB block 7 [ 334.810752][ T8835] loop4: AHDI p3 [ 334.810769][ T8835] loop4: partition table partially beyond EOD, truncated [ 335.274091][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.375965][ T8855] geneve3: entered promiscuous mode [ 335.394050][ T1132] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36272 - 0 [ 335.394135][ T1132] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36272 - 0 [ 335.394176][ T1132] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36272 - 0 [ 335.394215][ T1132] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36272 - 0 [ 335.470559][ T5711] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 335.621156][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 335.643353][ T5711] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 335.644961][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.644988][ T5711] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 335.647807][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.647833][ T5711] usb 3-1: Product: syz [ 335.647850][ T5711] usb 3-1: Manufacturer: syz [ 335.647865][ T5711] usb 3-1: SerialNumber: syz [ 336.015396][ T8860] tipc: Enabling of bearer rejected, failed to enable media [ 336.411615][ T6332] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 336.566648][ T6332] usb 2-1: Using ep0 maxpacket: 32 [ 336.575154][ T6332] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.576638][ T6332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.576671][ T6332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.576736][ T6332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.580259][ T6332] usb 2-1: config 0 descriptor?? [ 336.634970][ T6332] hub 2-1:0.0: USB hub found [ 336.717308][ T8865] syzkaller0: entered promiscuous mode [ 336.717327][ T8865] syzkaller0: entered allmulticast mode [ 336.738348][ T8865] tipc: Enabled bearer , priority 0 [ 336.740155][ T8864] tipc: Resetting bearer [ 336.775663][ T8864] tipc: Disabling bearer [ 336.828019][ T6332] hub 2-1:0.0: 26 ports detected [ 336.828534][ T6332] hub 2-1:0.0: insufficient power available to use all downstream ports [ 336.915459][ T8867] loop4: detected capacity change from 0 to 7 [ 336.921049][ T8867] Dev loop4: unable to read RDB block 7 [ 336.924771][ T8867] loop4: AHDI p3 [ 336.924846][ T8867] loop4: partition table partially beyond EOD, truncated [ 337.053956][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.054532][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.128256][ T8862] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[8873] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[8862] [ 337.149375][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.150041][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.239585][ T6342] usb 5-1: USB disconnect, device number 23 [ 337.423667][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.424455][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.544360][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.550088][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.779775][ T8881] 8021q: adding VLAN 0 to HW filter on device .` [ 337.788911][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.806697][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.858369][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.858560][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.879161][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.879306][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.881399][ T6371] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 337.922119][ T6332] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 337.925488][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.929739][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.957721][ T6332] usbhid 2-1:0.0: can't add hid device: -32 [ 337.957872][ T6332] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 337.990914][ T8881] veth1_macvtap: left promiscuous mode [ 337.998379][ T8881] veth0_macvtap: left promiscuous mode [ 338.007946][ T8881] veth0_macvtap: entered promiscuous mode [ 338.010777][ T8881] veth1_macvtap: entered promiscuous mode [ 338.043032][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.045297][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.050193][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.065941][ T6371] usb 5-1: Using ep0 maxpacket: 16 [ 338.078991][ T6371] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 338.088822][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.100508][ T6371] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 338.100539][ T6371] usb 5-1: config 0 has no interface number 0 [ 338.100608][ T6371] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 338.100637][ T6371] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 338.141951][ T6371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.141983][ T6371] usb 5-1: Product: syz [ 338.142025][ T6371] usb 5-1: Manufacturer: syz [ 338.142050][ T6371] usb 5-1: SerialNumber: syz [ 338.169208][ T6371] usb 5-1: config 0 descriptor?? [ 338.182577][ T8884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 338.182732][ T8884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 338.257681][ T8881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.295784][ T5711] usb 3-1: unit 5 not found! [ 338.295872][ T5711] usb 3-1: unit 16 not found! [ 338.319964][ T8882] validate_nla: 49 callbacks suppressed [ 338.320022][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320117][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320206][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320255][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320329][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320379][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320435][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320509][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320557][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.320631][ T8882] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 338.502833][ T5711] usb 3-1: USB disconnect, device number 39 [ 338.613723][ T13] ip6_tunnel: M xmit: Local address not yet configured! [ 338.614759][ T13] openvswitch: cpu_id mismatch with handler threads [ 338.619008][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.803758][ T8880] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 338.803912][ T8880] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 339.008923][ T6371] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 339.009155][ T6371] asix 5-1:0.34: probe with driver asix failed with error -61 [ 339.101416][ T5711] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 339.251895][ T5711] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 339.252920][ T8898] syzkaller0: entered promiscuous mode [ 339.252942][ T8898] syzkaller0: entered allmulticast mode [ 339.255663][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.255692][ T5711] usb 3-1: Product: syz [ 339.255708][ T5711] usb 3-1: Manufacturer: syz [ 339.255723][ T5711] usb 3-1: SerialNumber: syz [ 339.284262][ T6332] usb 2-1: USB disconnect, device number 37 [ 339.517254][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 339.540900][ T8908] syzkaller0: entered promiscuous mode [ 339.540922][ T8908] syzkaller0: entered allmulticast mode [ 339.575965][ T8908] tipc: Enabled bearer , priority 0 [ 339.593136][ T8907] tipc: Resetting bearer [ 339.621538][ T8907] tipc: Disabling bearer [ 339.723253][ T5711] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 339.723334][ T5711] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 340.106083][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.107403][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.177020][ T8920] loop4: detected capacity change from 0 to 7 [ 340.178145][ T8920] Dev loop4: unable to read RDB block 7 [ 340.178175][ T8920] loop4: AHDI p3 [ 340.178196][ T8920] loop4: partition table partially beyond EOD, truncated [ 340.347705][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.350472][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.384639][ T5711] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 340.384705][ T5711] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 340.415230][ T5711] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 340.430850][ T5711] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 340.454533][ T5711] usb 3-1: USB disconnect, device number 40 [ 340.456950][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.456975][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.490264][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.490291][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.005754][ T6332] usb 5-1: USB disconnect, device number 24 [ 341.152574][ T8938] syzkaller0: entered promiscuous mode [ 341.152594][ T8938] syzkaller0: entered allmulticast mode [ 341.221432][ T8940] syzkaller0: entered promiscuous mode [ 341.221461][ T8940] syzkaller0: entered allmulticast mode [ 341.230789][ T8940] tipc: Enabled bearer , priority 0 [ 341.254981][ T8939] tipc: Resetting bearer [ 341.293644][ T8939] tipc: Disabling bearer [ 341.375973][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.376614][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.446612][ T8943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.450287][ T8943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.573783][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.575364][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.599515][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.674000][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.674127][ T8944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.690165][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.690562][ T8944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.748831][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.760982][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.798612][ T8944] veth1_vlan: left promiscuous mode [ 341.808009][ T8944] veth0_vlan: left promiscuous mode [ 341.820238][ T8944] veth0_vlan: entered promiscuous mode [ 341.832535][ T8944] veth1_vlan: entered promiscuous mode [ 341.854004][ T8944] veth1_macvtap: left promiscuous mode [ 341.855256][ T8944] veth0_macvtap: left promiscuous mode [ 341.857519][ T8944] veth0_macvtap: entered promiscuous mode [ 341.860179][ T8944] veth1_macvtap: entered promiscuous mode [ 341.898738][ T8944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.900206][ T8944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.903738][ T5718] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 341.909715][ T8944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.916491][ T8944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.071463][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 342.072342][ T5718] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 342.074701][ T5718] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 342.074730][ T5718] usb 3-1: config 0 has no interface number 0 [ 342.074771][ T5718] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 342.074799][ T5718] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 342.078700][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.078728][ T5718] usb 3-1: Product: syz [ 342.078745][ T5718] usb 3-1: Manufacturer: syz [ 342.078761][ T5718] usb 3-1: SerialNumber: syz [ 342.119836][ T5718] usb 3-1: config 0 descriptor?? [ 342.137215][ T8943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.146160][ T8943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.361576][ C1] openvswitch: cpu_id mismatch with handler threads [ 342.421245][ T5350] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 342.572969][ T5350] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 342.573046][ T5350] usb 2-1: too many configurations: 153, using maximum allowed: 8 [ 342.574402][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.576475][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.578030][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.579412][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.580885][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.632349][ T8943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.655777][ T8943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.663471][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.678411][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.696216][ T5350] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.696266][ T5350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.721857][ T5350] usb 2-1: config 0 descriptor?? [ 342.841939][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 342.868092][ T5718] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 342.869013][ T5718] asix 3-1:0.34: probe with driver asix failed with error -61 [ 342.974254][ T8959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.227798][ T8970] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 343.311502][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.311964][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.318137][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 343.531404][ T8978] syzkaller0: entered promiscuous mode [ 343.531430][ T8978] syzkaller0: entered allmulticast mode [ 343.709371][ T8980] syzkaller0: entered promiscuous mode [ 343.709399][ T8980] syzkaller0: entered allmulticast mode [ 343.723684][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.947'. [ 343.940294][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.940936][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.124673][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.148948][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.335978][ T5766] usb 3-1: USB disconnect, device number 41 [ 344.414267][ T6370] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 344.432499][ T8986] 8021q: adding VLAN 0 to HW filter on device .` [ 344.434683][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.458706][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.507707][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.507836][ T8986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.531937][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.532078][ T8986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.562618][ T6370] usb 5-1: Using ep0 maxpacket: 16 [ 344.565544][ T6370] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 344.566845][ T6370] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 344.566874][ T6370] usb 5-1: config 0 has no interface number 0 [ 344.566917][ T6370] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 344.566975][ T6370] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 344.569929][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.586934][ T6370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.586963][ T6370] usb 5-1: Product: syz [ 344.586978][ T6370] usb 5-1: Manufacturer: syz [ 344.586994][ T6370] usb 5-1: SerialNumber: syz [ 344.624142][ T6370] usb 5-1: config 0 descriptor?? [ 344.634923][ T8994] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 344.649918][ T8994] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 344.682811][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.710020][ T8986] veth1_macvtap: left promiscuous mode [ 344.719148][ T8986] veth0_macvtap: left promiscuous mode [ 344.728705][ T8986] veth0_macvtap: entered promiscuous mode [ 344.739706][ T8986] veth1_macvtap: entered promiscuous mode [ 344.758714][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.760406][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.779261][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.780810][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.868991][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.910919][ T8984] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 344.914055][ T8984] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 344.970732][ T8990] validate_nla: 94 callbacks suppressed [ 344.970754][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.970817][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.970888][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.970933][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.970976][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.971037][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.971706][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.971760][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.971846][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 344.971904][ T8990] netlink: 'syz.4.948': attribute type 3 has an invalid length. [ 345.096073][ T1220] usb 2-1: USB disconnect, device number 38 [ 345.183112][ T6370] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 345.183366][ T6370] asix 5-1:0.34: probe with driver asix failed with error -61 [ 345.310394][ T9012] FAULT_INJECTION: forcing a failure. [ 345.310394][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 345.310438][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.3.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.310471][ T9012] Tainted: [L]=SOFTLOCKUP [ 345.310480][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 345.310494][ T9012] Call Trace: [ 345.310503][ T9012] [ 345.310513][ T9012] dump_stack_lvl+0xe8/0x150 [ 345.310553][ T9012] should_fail_ex+0x410/0x560 [ 345.310592][ T9012] should_failslab+0xa8/0x100 [ 345.310625][ T9012] ? skb_clone+0x212/0x3a0 [ 345.310652][ T9012] kmem_cache_alloc_noprof+0xa1/0x600 [ 345.310681][ T9012] ? skb_clone+0x212/0x3a0 [ 345.310714][ T9012] skb_clone+0x212/0x3a0 [ 345.310744][ T9012] __netlink_deliver_tap+0x413/0x860 [ 345.310787][ T9012] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.310819][ T9012] netlink_deliver_tap+0x19c/0x1b0 [ 345.310849][ T9012] netlink_unicast+0x781/0x940 [ 345.310887][ T9012] netlink_sendmsg+0x813/0xb40 [ 345.310927][ T9012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.310968][ T9012] ? apparmor_socket_sendmsg+0x98/0x360 [ 345.311004][ T9012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.311032][ T9012] sock_sendmsg_nosec+0x13a/0x180 [ 345.311067][ T9012] ____sys_sendmsg+0x54e/0x850 [ 345.311095][ T9012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.311128][ T9012] ? import_iovec+0x73/0xa0 [ 345.311165][ T9012] ___sys_sendmsg+0x2a5/0x360 [ 345.311188][ T9012] ? __lock_acquire+0x747/0x2de0 [ 345.311218][ T9012] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.311281][ T9012] ? __fget_files+0x2a/0x420 [ 345.311301][ T9012] ? __fget_files+0x3a2/0x420 [ 345.311340][ T9012] __x64_sys_sendmsg+0x1b1/0x290 [ 345.311368][ T9012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.311417][ T9012] do_syscall_64+0x166/0x520 [ 345.311441][ T9012] ? trace_irq_disable+0x3b/0x140 [ 345.311466][ T9012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.311489][ T9012] ? clear_bhb_loop+0x70/0xc0 [ 345.311516][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.311539][ T9012] RIP: 0033:0x7fc484d9e559 [ 345.311560][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.311580][ T9012] RSP: 002b:00007fc485caa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.311604][ T9012] RAX: ffffffffffffffda RBX: 00007fc485025fa0 RCX: 00007fc484d9e559 [ 345.311621][ T9012] RDX: 0000000000000080 RSI: 0000200000000740 RDI: 0000000000000012 [ 345.311636][ T9012] RBP: 00007fc485caa090 R08: 0000000000000000 R09: 0000000000000000 [ 345.311650][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.311664][ T9012] R13: 00007fc485026038 R14: 00007fc485025fa0 R15: 00007fc48514fa48 [ 345.311701][ T9012] [ 345.324890][ T59] ip6_tunnel: M xmit: Local address not yet configured! [ 345.771536][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.776080][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.521850][ T6344] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 346.619722][ T9024] syzkaller0: entered promiscuous mode [ 346.619742][ T9024] syzkaller0: entered allmulticast mode [ 346.675238][ T6344] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 346.676623][ T6344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.676657][ T6344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.676698][ T6344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.682122][ T6344] usb 2-1: config 0 descriptor?? [ 346.832540][ T9026] syzkaller0: entered promiscuous mode [ 346.832568][ T9026] syzkaller0: entered allmulticast mode [ 346.839613][ T9026] tipc: Enabled bearer , priority 0 [ 346.861735][ T9025] tipc: Resetting bearer [ 346.890741][ T9025] tipc: Disabling bearer [ 346.945064][ T5615] usb 5-1: USB disconnect, device number 25 [ 347.143640][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.146264][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.187576][ T6344] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 347.190740][ T6344] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 347.218055][ T6344] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0018/input/input28 [ 347.277120][ T6344] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 347.815493][ T9052] loop4: detected capacity change from 0 to 7 [ 347.828632][ T9052] Dev loop4: unable to read RDB block 7 [ 347.828666][ T9052] loop4: AHDI p3 [ 347.828689][ T9052] loop4: partition table partially beyond EOD, truncated [ 348.080414][ T9057] syzkaller0: entered promiscuous mode [ 348.080444][ T9057] syzkaller0: entered allmulticast mode [ 348.120002][ T5615] usb 2-1: USB disconnect, device number 39 [ 348.219977][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 348.277244][ T9064] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [7c!=40, 4,40] [ 348.841919][ T7040] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 348.943741][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.946559][ T9065] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.995821][ T7040] usb 2-1: Using ep0 maxpacket: 16 [ 348.997003][ T7040] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 348.999845][ T7040] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 348.999873][ T7040] usb 2-1: config 0 has no interface number 0 [ 348.999951][ T7040] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 348.999980][ T7040] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 349.062862][ T7040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.062898][ T7040] usb 2-1: Product: syz [ 349.062914][ T7040] usb 2-1: Manufacturer: syz [ 349.062930][ T7040] usb 2-1: SerialNumber: syz [ 349.095022][ T7040] usb 2-1: config 0 descriptor?? [ 349.096336][ T9083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.096483][ T9083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.241944][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 349.285597][ T9065] veth1_vlan: left promiscuous mode [ 349.286757][ T9065] veth0_vlan: left promiscuous mode [ 349.289282][ T9065] veth0_vlan: entered promiscuous mode [ 349.342279][ T9065] veth1_vlan: entered promiscuous mode [ 349.348579][ T9065] veth1_macvtap: left promiscuous mode [ 349.349664][ T9065] veth0_macvtap: left promiscuous mode [ 349.406745][ T9062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.406876][ T9062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.407642][ T9065] veth0_macvtap: entered promiscuous mode [ 349.416870][ T9065] veth1_macvtap: entered promiscuous mode [ 349.483203][ T9065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.502916][ T9065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.513306][ T9065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.518088][ T9065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.639358][ T7040] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 349.639634][ T7040] asix 2-1:0.34: probe with driver asix failed with error -61 [ 349.717759][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.718421][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.819073][ T9078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.829973][ T9078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.123113][ T9081] 8021q: adding VLAN 0 to HW filter on device .` [ 350.127041][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.154427][ T9081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.228626][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.228788][ T9081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.250270][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.250397][ T9081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.301006][ T9081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.320488][ T9081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.386585][ T9081] veth1_macvtap: left promiscuous mode [ 350.390431][ T9081] veth0_macvtap: left promiscuous mode [ 350.412896][ T9081] veth0_macvtap: entered promiscuous mode [ 350.420173][ T9081] veth1_macvtap: entered promiscuous mode [ 350.474001][ T9081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.477816][ T9081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.487600][ T9081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.503274][ T9081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.645492][ T9081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.668732][ T9084] validate_nla: 149 callbacks suppressed [ 350.668755][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.668817][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.668854][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.668893][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.668930][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.668968][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.669008][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.669064][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.669105][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 350.669145][ T9084] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 351.033155][ T1132] ip6_tunnel: M xmit: Local address not yet configured! [ 351.157938][ T9104] loop4: detected capacity change from 0 to 7 [ 351.171436][ T9104] Dev loop4: unable to read RDB block 7 [ 351.171469][ T9104] loop4: AHDI p3 [ 351.171491][ T9104] loop4: partition table partially beyond EOD, truncated [ 351.216825][ T1132] ip6_tunnel: M xmit: Local address not yet configured! [ 351.389785][ T9106] bond1: Unable to set down delay as MII monitoring is disabled [ 351.407241][ T9106] bond1 (unregistering): Released all slaves [ 351.467486][ T5615] usb 2-1: USB disconnect, device number 40 [ 351.615400][ T9112] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [8c!=40, 4,50] [ 351.655976][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 351.814195][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 351.820647][ T9126] x_tables: duplicate underflow at hook 4 [ 353.092130][ T6342] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 353.122731][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.123369][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.131482][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 353.136315][ T9155] key id 00000001 not found [ 353.242316][ T6342] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 353.243031][ T6342] usb 3-1: config 0 has no interfaces? [ 353.243075][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.246226][ T6342] usb 3-1: config 0 descriptor?? [ 353.334233][ T1220] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 353.373667][ T9157] syzkaller0: entered promiscuous mode [ 353.373690][ T9157] syzkaller0: entered allmulticast mode [ 353.378652][ T9157] tipc: Enabled bearer , priority 0 [ 353.402516][ T9157] tipc: Resetting bearer [ 353.438504][ T9157] tipc: Resetting bearer [ 353.474566][ T9157] tipc: Disabling bearer [ 353.488247][ T1220] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 353.490965][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.491003][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.519917][ T1220] usb 5-1: config 0 descriptor?? [ 353.574325][ T9148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.788685][ T9161] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [8c!=40, 4,50] [ 353.865315][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 353.945109][ T1220] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 353.964118][ T1220] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input29 [ 354.075483][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 354.117953][ T1220] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 354.144564][ T9169] x_tables: duplicate underflow at hook 4 [ 354.557814][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.581508][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.621344][ T6371] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 354.681292][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 354.745349][ T1220] usb 5-1: USB disconnect, device number 26 [ 354.794814][ T6371] usb 2-1: New USB device found, idVendor=046d, idProduct=8825, bcdDevice= 1.00 [ 354.796569][ T6371] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.796600][ T6371] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 354.796652][ T6371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.884598][ T6371] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:8825) [ 354.884638][ T6371] uvcvideo 2-1:1.0: No valid video chain found. [ 355.002608][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 355.081067][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.113157][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.113599][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.116539][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.187529][ T6371] usb 2-1: USB disconnect, device number 41 [ 355.252006][ T1220] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 355.411506][ T1220] usb 5-1: Using ep0 maxpacket: 32 [ 355.413089][ T1220] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 355.421305][ T1220] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 355.421336][ T1220] usb 5-1: config 0 has no interface number 0 [ 355.421378][ T1220] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 355.464789][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.464821][ T1220] usb 5-1: Product: syz [ 355.464868][ T1220] usb 5-1: Manufacturer: syz [ 355.464885][ T1220] usb 5-1: SerialNumber: syz [ 355.518834][ T1220] usb 5-1: config 0 descriptor?? [ 355.536832][ T1220] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 355.536895][ T1220] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 355.539528][ T9194] tipc: Enabling of bearer rejected, already enabled [ 355.659098][ T6371] usb 3-1: USB disconnect, device number 42 [ 355.738134][ T1220] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 355.900465][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.900618][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.900756][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.900886][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.901015][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.905394][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.922681][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.923169][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.923586][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.923952][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.928229][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.928740][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.929107][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.929564][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.944126][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.944645][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.945174][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.945621][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.967303][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.967817][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.968304][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.968698][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.979797][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.980123][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.995802][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.995955][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.996357][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 355.996887][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.014831][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.015375][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.015818][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.016199][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.026724][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.026846][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.026963][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.027072][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.027437][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.028313][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.084427][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.085134][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.085638][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.086258][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.115841][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.116399][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.116911][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.117318][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.149315][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.150177][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.150609][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.150985][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.206449][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.206955][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.207335][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.207809][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.232906][ T9188] trusted_key: encrypted_key: insufficient parameters specified [ 356.259652][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.260232][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.260621][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.266038][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.315276][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.315763][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.316070][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.316192][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.316558][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.316954][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.366842][ T9201] binder: 9198:9201 ioctl 4018f514 200000002940 returned -22 [ 356.376924][ T9203] binder: 9198:9203 ioctl c0306201 200000002a40 returned -14 [ 356.390367][ T9188] trusted_key: encrypted_key: insufficient parameters specified [ 356.406495][ T9201] binder: 9198:9201 ioctl c020aa00 200000002ac0 returned -22 [ 356.429562][ T6371] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 356.572344][ T6371] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.574410][ T6371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.574466][ T6371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.581000][ T6371] usb 3-1: config 0 descriptor?? [ 356.860249][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 356.996971][ T1220] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 357.048794][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1011'. [ 357.069072][ T6371] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 357.084767][ T6371] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input30 [ 357.121334][ T9214] x_tables: duplicate underflow at hook 4 [ 357.158102][ T1220] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 357.189023][ T1220] usb 5-1: USB disconnect, device number 27 [ 357.212070][ T1220] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 357.279152][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.303761][ T6371] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 357.342870][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.363068][ T9200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1007'. [ 357.450019][ T9224] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 357.506390][ T9224] tipc: Enabled bearer , priority 10 [ 358.422602][ T6371] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 358.572422][ T6371] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.592954][ T6371] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.592986][ T6371] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.593056][ T6371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.878688][ T6371] usb 5-1: usb_control_msg returned -32 [ 358.878785][ T6371] usbtmc 5-1:16.0: can't read capabilities [ 358.912139][ T9241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.946112][ T9241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.135153][ T6342] usb 3-1: USB disconnect, device number 43 [ 359.376680][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 359.446823][ T114] IPVS: starting estimator thread 0... [ 359.449954][ T9263] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 359.531265][ T9265] IPVS: using max 26 ests per chain, 62400 per kthread [ 359.546990][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 359.548536][ T9267] x_tables: duplicate underflow at hook 4 [ 359.832251][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.833888][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.158803][ T6342] usb 5-1: USB disconnect, device number 28 [ 360.211636][ T9281] tipc: Enabling of bearer rejected, already enabled [ 360.651860][ T6342] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 360.802417][ T6342] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 360.804710][ T6342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.804765][ T6342] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.804802][ T6342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.495975][ T6342] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -71 [ 361.527340][ T6342] usb 5-1: USB disconnect, device number 29 [ 361.971629][ T6371] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 362.041872][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 362.042691][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.072918][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 362.123823][ T6371] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.125156][ T6371] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.125189][ T6371] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.125219][ T6371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.412902][ T6371] usb 2-1: usb_control_msg returned -32 [ 362.412956][ T6371] usbtmc 2-1:16.0: can't read capabilities [ 362.446565][ T9307] syzkaller0: entered promiscuous mode [ 362.446592][ T9307] syzkaller0: entered allmulticast mode [ 362.465930][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.466544][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.521604][ C0] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 362.563692][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'. [ 362.596405][ T9308] x_tables: duplicate underflow at hook 4 [ 362.684166][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 362.712452][ T6371] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 362.865521][ T6371] usb 5-1: Using ep0 maxpacket: 8 [ 362.869423][ T6371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.869479][ T6371] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 362.897291][ T6371] usb 5-1: config 6 interface 0 has no altsetting 0 [ 362.910295][ T6371] usb 5-1: string descriptor 0 read error: -22 [ 362.910539][ T6371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.963162][ T6371] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 363.148787][ T6371] pwc: Failed to set LED on/off time (-71) [ 363.149450][ T6371] pwc: send_video_command error -71 [ 363.149468][ T6371] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 363.149574][ T6371] Philips webcam 5-1:6.0: probe with driver Philips webcam failed with error -71 [ 363.189374][ T6371] usb 5-1: USB disconnect, device number 30 [ 363.663672][ T9316] nvme_fabrics: missing parameter 'traddr=%s' [ 363.850713][ T6342] usb 2-1: USB disconnect, device number 42 [ 364.257663][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 364.289585][ T9326] syzkaller0: entered promiscuous mode [ 364.289612][ T9326] syzkaller0: entered allmulticast mode [ 364.381166][ T6342] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 364.445640][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.446283][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.553049][ T6342] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 364.558759][ T6342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.585688][ T6342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.585721][ T6342] usb 2-1: Product: syz [ 364.585738][ T6342] usb 2-1: Manufacturer: syz [ 364.585754][ T6342] usb 2-1: SerialNumber: syz [ 364.652581][ T6342] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 365.751213][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 365.911150][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.915439][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.915466][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.915500][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.915547][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.945211][ T6342] gspca_mr97310a: reg read [21] error -110 [ 365.945300][ T6342] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 365.997174][ T9] usb 3-1: config 0 descriptor?? [ 366.085957][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 366.355325][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1048'. [ 366.385791][ T9361] x_tables: duplicate underflow at hook 4 [ 366.568263][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 366.625845][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 366.625868][ T31] audit: type=1326 audit(1792107256.990:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.626008][ T31] audit: type=1326 audit(1792107256.990:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.694109][ T31] audit: type=1326 audit(1792107257.030:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.694205][ T31] audit: type=1326 audit(1792107257.030:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.694253][ T31] audit: type=1326 audit(1792107257.050:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.700828][ T31] audit: type=1326 audit(1792107257.060:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc484d9e2c2 code=0x7ffc0000 [ 366.800651][ T31] audit: type=1326 audit(1792107257.080:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc484d9e2c2 code=0x7ffc0000 [ 366.829195][ T31] audit: type=1326 audit(1792107257.190:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.829372][ T31] audit: type=1326 audit(1792107257.190:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 366.883154][ T31] audit: type=1326 audit(1792107257.250:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.3.1049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 367.375299][ T1220] usb 2-1: USB disconnect, device number 43 [ 368.420378][ T9381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.420966][ T9381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.571536][ T1220] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 368.727909][ T1220] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 368.741962][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.742021][ T1220] usb 2-1: Product: syz [ 368.742034][ T1220] usb 2-1: Manufacturer: syz [ 368.742044][ T1220] usb 2-1: SerialNumber: syz [ 369.257463][ T1220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 369.257562][ T1220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 369.480323][ T9392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.772850][ T7701] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 369.898582][ T1220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 369.898674][ T1220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 369.927800][ T7701] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.938683][ T7701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.004470][ T1220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 370.033691][ T7701] usb 5-1: config 0 descriptor?? [ 370.058621][ T1220] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 370.066393][ T7701] cp210x 5-1:0.0: cp210x converter detected [ 370.111763][ T1220] usb 2-1: USB disconnect, device number 44 [ 370.253459][ T9395] syzkaller0: entered promiscuous mode [ 370.253517][ T9395] syzkaller0: entered allmulticast mode [ 370.289036][ T9395] tipc: Enabled bearer , priority 0 [ 370.322813][ T9394] tipc: Resetting bearer [ 370.417347][ T9394] tipc: Disabling bearer [ 370.758489][ T7701] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 370.758524][ T7701] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 370.783931][ T7701] usb 5-1: cp210x converter now attached to ttyUSB0 [ 370.844458][ T7701] usb 5-1: USB disconnect, device number 31 [ 370.886548][ T7701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 370.887282][ T7701] cp210x 5-1:0.0: device disconnected [ 371.035185][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 371.035301][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 371.058798][ T9] usb 3-1: USB disconnect, device number 44 [ 371.209004][ T9408] bond1: entered allmulticast mode [ 371.209565][ T9408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.276147][ T9410] ip6gretap0: entered promiscuous mode [ 371.393375][ T9415] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 371.559974][ T9418] tipc: Enabling of bearer rejected, already enabled [ 371.661162][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 371.791260][ T9] usb 2-1: device descriptor read/64, error -71 [ 372.031234][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 372.162437][ T9] usb 2-1: device descriptor read/64, error -71 [ 372.261302][ T6371] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 372.280199][ T9] usb usb2-port1: attempt power cycle [ 372.412012][ T6371] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 372.416227][ T6371] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 372.416266][ T6371] usb 3-1: Product: syz [ 372.416283][ T6371] usb 3-1: SerialNumber: syz [ 372.450810][ T6371] usb 3-1: config 0 descriptor?? [ 372.631172][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 372.652196][ T9] usb 2-1: device descriptor read/8, error -71 [ 372.670385][ T6371] hso 3-1:0.0: Failed to find BULK eps [ 372.713606][ T9435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 372.871487][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.872818][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.876532][ T6371] usb 3-1: USB disconnect, device number 45 [ 372.906137][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 372.933157][ T9] usb 2-1: device descriptor read/8, error -71 [ 373.046417][ T9] usb usb2-port1: unable to enumerate USB device [ 374.168877][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 374.168899][ T31] audit: type=1326 audit(1792107264.530:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.170037][ T31] audit: type=1326 audit(1792107264.530:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.170093][ T31] audit: type=1326 audit(1792107264.530:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.170164][ T31] audit: type=1326 audit(1792107264.530:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.170210][ T31] audit: type=1326 audit(1792107264.530:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.170287][ T31] audit: type=1326 audit(1792107264.530:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.170333][ T31] audit: type=1326 audit(1792107264.530:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.227776][ T31] audit: type=1326 audit(1792107264.590:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x7ffc0000 [ 374.230830][ T31] audit: type=1326 audit(1792107264.590:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc484d9e2c2 code=0x7ffc0000 [ 374.246231][ T31] audit: type=1326 audit(1792107264.610:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.3.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc484d9e357 code=0x7ffc0000 [ 374.855177][ T9476] ======================================================= [ 374.855177][ T9476] WARNING: The mand mount option has been deprecated and [ 374.855177][ T9476] and is ignored by this kernel. Remove the mand [ 374.855177][ T9476] option from the mount to silence this warning. [ 374.855177][ T9476] ======================================================= [ 374.855319][ T9476] fuse: fd is not a fuse device [ 375.201682][ T9482] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 376.761290][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 377.072101][ T9513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1092'. [ 377.076080][ T9515] tipc: Enabling of bearer rejected, failed to enable media [ 377.077789][ T9514] tipc: Enabling of bearer rejected, failed to enable media [ 377.107238][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.111618][ T7701] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 377.126262][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.242603][ T7701] usb 5-1: device descriptor read/64, error -71 [ 377.481875][ T7701] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 377.487534][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.494159][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.611587][ T7701] usb 5-1: device descriptor read/64, error -71 [ 377.711391][ T6371] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 377.726187][ T7701] usb usb5-port1: attempt power cycle [ 377.797496][ T9522] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1091'. [ 377.842035][ T6371] usb 2-1: device descriptor read/64, error -71 [ 377.948903][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 378.081676][ T7701] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 378.099725][ T6371] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 378.114182][ T7701] usb 5-1: device descriptor read/8, error -71 [ 378.231237][ T6371] usb 2-1: device descriptor read/64, error -71 [ 378.259087][ T9532] ip_tables: iptables: counters copy to user failed while replacing table [ 378.341541][ T6371] usb usb2-port1: attempt power cycle [ 378.356835][ T7701] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 378.372657][ T7701] usb 5-1: device descriptor read/8, error -71 [ 378.482332][ T7701] usb usb5-port1: unable to enumerate USB device [ 378.684733][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 378.688070][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.688138][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.690189][ T6371] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 378.723925][ T6371] usb 2-1: device descriptor read/8, error -71 [ 378.971816][ T6371] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 378.994935][ T6371] usb 2-1: device descriptor read/8, error -71 [ 379.102449][ T6371] usb usb2-port1: unable to enumerate USB device [ 379.566528][ T9543] vivid-000: disconnect [ 379.664107][ T6342] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 379.812571][ T6342] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 379.814089][ T6342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.814155][ T6342] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.814181][ T6342] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 379.818598][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.818626][ T6342] usb 3-1: Product: syz [ 379.818643][ T6342] usb 3-1: Manufacturer: syz [ 379.818669][ T6342] usb 3-1: SerialNumber: syz [ 380.095825][ T6342] snd-usb-caiaq 3-1:1.0: invalid EPs [ 380.095853][ T6342] usb 3-1: unable to init card! (ret=-22) [ 380.100286][ T6342] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 380.261720][ T9540] vivid-000: reconnect [ 380.390751][ T6342] usb 3-1: USB disconnect, device number 46 [ 381.276821][ T9558] validate_nla: 94 callbacks suppressed [ 381.276848][ T9558] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 382.917224][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.917939][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.020300][ T31] kauditd_printk_skb: 240 callbacks suppressed [ 383.020324][ T31] audit: type=1326 audit(1792107273.380:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.1110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc484d9e559 code=0x0 [ 383.181729][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.191684][ T6341] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 383.239961][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.362433][ T6341] usb 5-1: Using ep0 maxpacket: 16 [ 383.363190][ T6341] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 383.375409][ T6341] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 383.375495][ T6341] usb 5-1: config 0 has no interface number 0 [ 383.375603][ T6341] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 383.375677][ T6341] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 383.422230][ T6341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.422316][ T6341] usb 5-1: Product: syz [ 383.422354][ T6341] usb 5-1: Manufacturer: syz [ 383.422403][ T6341] usb 5-1: SerialNumber: syz [ 383.454230][ T6341] usb 5-1: config 0 descriptor?? [ 383.456436][ T9592] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.456584][ T9592] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.704608][ T9592] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.705387][ T9592] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.831294][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.831336][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.835363][ T114] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.835443][ T114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.835489][ T114] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.835519][ T114] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.835546][ T114] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.835606][ T114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.987214][ T6341] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 383.987463][ T6341] asix 5-1:0.34: probe with driver asix failed with error -61 [ 384.067341][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 384.112558][ T9587] 8021q: adding VLAN 0 to HW filter on device .` [ 384.114923][ T9587] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.140716][ T9587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.183004][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.183137][ T9587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.213062][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.213225][ T9587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.250939][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.267615][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.308653][ T9587] veth1_macvtap: left promiscuous mode [ 384.310165][ T9587] veth0_macvtap: left promiscuous mode [ 384.328374][ T9587] veth0_macvtap: entered promiscuous mode [ 384.340438][ T9587] veth1_macvtap: entered promiscuous mode [ 384.368380][ T9587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.382626][ T9587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.384538][ T9587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.387252][ T9587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.537489][ T9587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.627694][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 384.796819][ T12] ip6_tunnel: M xmit: Local address not yet configured! [ 384.882153][ T1010] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.882194][ T1010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.882234][ T1010] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.882262][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.882299][ T1010] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.882326][ T1010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.882379][ T1010] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.882406][ T1010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.370990][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.371750][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.667250][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.694498][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.840341][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1118'. [ 386.408753][ T9617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.425632][ T9617] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.469307][ T9617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.536995][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.537140][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.567383][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.567537][ T9617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.660191][ T6341] usb 5-1: USB disconnect, device number 36 [ 386.717966][ T9617] batadv_slave_0: left promiscuous mode [ 386.730663][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.765234][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.832854][ T9645] fuse: Unknown parameter '0x0000000000000003' [ 386.836014][ T9617] veth1_vlan: left promiscuous mode [ 386.837656][ T9617] veth0_vlan: left promiscuous mode [ 386.859592][ T9617] veth0_vlan: entered promiscuous mode [ 386.870818][ T9617] veth1_vlan: entered promiscuous mode [ 386.890119][ T9617] veth1_macvtap: left promiscuous mode [ 386.899631][ T9617] veth0_macvtap: left promiscuous mode [ 386.908866][ T9617] veth0_macvtap: entered promiscuous mode [ 386.920296][ T9617] veth1_macvtap: entered promiscuous mode [ 386.943107][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.945335][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.947005][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.948737][ T9617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.987609][ T9617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.988667][ T9617] batadv_slave_0: entered promiscuous mode [ 387.032734][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 387.228074][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 387.246912][ T1010] ip6_tunnel: K xmit: Local address not yet configured! [ 387.274514][ T6371] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 387.435760][ T6371] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 387.435815][ T6371] usb 2-1: no configurations [ 387.435832][ T6371] usb 2-1: can't read configurations, error -22 [ 387.561880][ T6371] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 387.613203][ T9649] fuse: Unknown parameter 'grop_id' [ 387.684388][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.684869][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.733297][ T6371] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 387.733352][ T6371] usb 2-1: no configurations [ 387.733381][ T6371] usb 2-1: can't read configurations, error -22 [ 387.733650][ T6371] usb usb2-port1: attempt power cycle [ 388.068900][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 388.068998][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 388.071451][ T6371] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 388.110392][ T6371] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 388.110450][ T6371] usb 2-1: no configurations [ 388.110465][ T6371] usb 2-1: can't read configurations, error -22 [ 388.267281][ T6371] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 388.284944][ T6371] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 388.284988][ T6371] usb 2-1: no configurations [ 388.284998][ T6371] usb 2-1: can't read configurations, error -22 [ 388.285362][ T6371] usb usb2-port1: unable to enumerate USB device [ 388.395813][ T9677] netlink: 'syz.2.1131': attribute type 44 has an invalid length. [ 388.514459][ T9687] openvswitch: netlink: nsh attribute has 12 unknown bytes. [ 388.538121][ T9688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.592515][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 388.599569][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1133'. [ 388.761542][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 388.876941][ T9696] netlink: 'syz.4.1135': attribute type 32 has an invalid length. [ 389.152329][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152368][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152397][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152416][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152451][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152479][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152504][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152537][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152556][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.152575][ T6371] hid-generic 0547:0009:0007.001B: unknown main item tag 0x0 [ 389.272033][ T6370] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 389.397931][ T6371] hid-generic 0547:0009:0007.001B: hidraw0: HID v19.50 Device [syz1] on syz0 [ 389.437030][ T6370] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.437851][ T6370] usb 3-1: not running at top speed; connect to a high speed hub [ 389.437904][ T6370] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 389.439216][ T6370] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.439246][ T6370] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 389.439279][ T6370] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.455012][ T6370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 389.455106][ T6370] usb 3-1: Product: syz [ 389.455157][ T6370] usb 3-1: Manufacturer: syz [ 389.565209][ T6370] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 389.687493][ T9700] fido_id[9700]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 389.777442][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 390.216717][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 391.162825][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 391.562294][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.638851][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 391.653671][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 391.657405][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1). [ 391.666971][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 391.671514][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1). [ 391.701929][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1). [ 391.702755][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 391.707093][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 391.741479][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 391.742027][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1). [ 391.745235][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 391.747076][ T6370] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 391.747257][ T6370] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 391.821724][ T9721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1140'. [ 391.858303][ T6370] usb 3-1: USB disconnect, device number 47 [ 392.351524][ T7039] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 392.402706][ T9735] loop5: detected capacity change from 0 to 7 [ 392.428979][ T9735] Dev loop5: unable to read RDB block 7 [ 392.429027][ T9735] loop5: unable to read partition table [ 392.429237][ T9735] loop5: partition table beyond EOD, truncated [ 392.429277][ T9735] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.502319][ T7039] usb 5-1: Using ep0 maxpacket: 32 [ 392.503774][ T7039] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 392.506416][ T7039] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 392.506446][ T7039] usb 5-1: config 0 has no interface number 0 [ 392.510857][ T7039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.510886][ T7039] usb 5-1: Product: syz [ 392.510904][ T7039] usb 5-1: Manufacturer: syz [ 392.510942][ T7039] usb 5-1: SerialNumber: syz [ 392.597913][ T7039] usb 5-1: config 0 descriptor?? [ 392.939278][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 393.051523][ T5682] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 393.154757][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 393.178832][ T9751] x_tables: duplicate underflow at hook 4 [ 393.206945][ T5682] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 393.211602][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.236610][ T5682] usb 2-1: config 0 descriptor?? [ 393.252363][ T5682] cp210x 2-1:0.0: cp210x converter detected [ 393.423458][ T7039] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 393.423483][ T7039] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 393.564362][ T9760] xt_TPROXY: Can be used only with -p tcp or -p udp [ 393.687777][ T5682] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 393.738886][ T5682] usb 2-1: cp210x converter now attached to ttyUSB0 [ 394.063896][ T9765] tipc: Enabling of bearer rejected, already enabled [ 394.305683][ T9775] fuse: fd is not a fuse device [ 395.823620][ T7039] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 395.826888][ T7039] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 395.878546][ T7039] usb 5-1: USB disconnect, device number 37 [ 395.973681][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 396.009799][ T9784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.153958][ T7039] usb 2-1: USB disconnect, device number 57 [ 396.193098][ T7039] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.193729][ T7039] cp210x 2-1:0.0: device disconnected [ 396.215149][ T6370] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 396.379000][ T6370] usb 3-1: unable to get BOS descriptor or descriptor too short [ 396.382323][ T6370] usb 3-1: not running at top speed; connect to a high speed hub [ 396.382421][ T6370] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 396.395234][ T6370] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.433725][ T6370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.433759][ T6370] usb 3-1: Product: syz [ 396.433777][ T6370] usb 3-1: Manufacturer: syz [ 396.433793][ T6370] usb 3-1: SerialNumber: syz [ 396.601689][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 396.872168][ T9789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.875968][ T9789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.931856][ T9810] usb usb7: usbfs: process 9810 (syz.4.1159) did not claim interface 0 before use [ 397.049177][ T6370] usb 3-1: unit 255 not found! [ 397.094788][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 397.247855][ T6370] snd_usb_variax 3-1:1.1: Line 6 PODxt Live found [ 397.249861][ T6370] snd_usb_variax 3-1:1.1: set_interface failed [ 397.250087][ T6370] snd_usb_variax 3-1:1.1: Line 6 PODxt Live now disconnected [ 397.250272][ T6370] snd_usb_variax 3-1:1.1: probe with driver snd_usb_variax failed with error -71 [ 397.301005][ T6370] usb 3-1: USB disconnect, device number 48 [ 397.371244][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 397.406651][ T9821] x_tables: duplicate underflow at hook 4 [ 397.722698][ T9828] ALSA: mixer_oss: invalid OSS volume 'tunl0' [ 397.975182][ T9838] program syz.1.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.266770][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.291467][ T6342] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 398.299540][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.453355][ T6342] usb 2-1: Using ep0 maxpacket: 8 [ 398.454311][ T6342] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.484769][ T6342] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 398.484855][ T6342] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.484873][ T6342] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.484927][ T6342] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.484952][ T6342] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.484998][ T6342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.162899][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 399.441112][ T9863] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1167'. [ 399.466264][ T9840] tipc: Enabled bearer , priority 10 [ 399.510847][ T9865] cgroup: fork rejected by pids controller in /syz4 [ 399.548766][ T1010] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.548860][ T1010] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.548904][ T1010] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.548937][ T1010] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.898046][ T9872] netlink: 'syz.0.1168': attribute type 19 has an invalid length. [ 399.898074][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 399.999232][ T9872] netlink: 'syz.0.1168': attribute type 19 has an invalid length. [ 399.999257][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 400.009247][ T6342] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 400.019538][ T1147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.019588][ T1147] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.019626][ T1147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.019691][ T1147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.171952][ T6342] usb 3-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 400.176158][ T6342] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 400.176187][ T6342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.176343][ T6342] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 400.223548][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.223582][ T6342] usb 3-1: Product: syz [ 400.223599][ T6342] usb 3-1: Manufacturer: syz [ 400.223616][ T6342] usb 3-1: SerialNumber: syz [ 400.441536][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.446190][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.446762][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.531889][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.532540][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.581344][ T6371] tipc: Node number set to 2264282426 [ 400.759575][ T6342] usb 3-1: USB disconnect, device number 49 [ 401.027030][ T9888] macvlan0: entered promiscuous mode [ 401.027470][ T9888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1173'. [ 401.093287][ T6371] usb 2-1: USB disconnect, device number 58 [ 401.438133][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.438178][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.647048][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 401.695492][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 401.821387][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 401.823819][ T9908] x_tables: duplicate underflow at hook 4 [ 402.075494][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.097313][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.112763][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.112793][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.547558][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.547602][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.721344][ T6370] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 402.769995][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.770037][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.873469][ T6370] usb 2-1: unable to get BOS descriptor or descriptor too short [ 402.874001][ T6370] usb 2-1: not running at top speed; connect to a high speed hub [ 402.874034][ T6370] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 402.875594][ T6370] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.879165][ T6370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 402.879194][ T6370] usb 2-1: Product: syz [ 402.879212][ T6370] usb 2-1: Manufacturer: syz [ 402.983711][ T6370] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 402.983787][ T6370] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 403.009298][ T6371] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 403.173207][ T6371] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 403.174613][ T6371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.174664][ T6371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.223326][ T6371] usb 3-1: config 0 descriptor?? [ 403.632472][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.633068][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.676089][ T6371] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 403.715973][ T6371] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input31 [ 403.939266][ T6371] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 404.171311][ T7039] usb 2-1: USB disconnect, device number 59 [ 404.300750][ T9964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.659391][ T6371] usb 3-1: USB disconnect, device number 50 [ 404.748422][ T45] bridge_slave_1: left allmulticast mode [ 404.764149][ T45] bridge_slave_1: left promiscuous mode [ 404.769020][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.926499][ T45] bridge_slave_0: left allmulticast mode [ 404.926542][ T45] bridge_slave_0: left promiscuous mode [ 404.926728][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.064991][ T45] pimreg: left allmulticast mode [ 405.491200][ T6371] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 405.642721][ T6371] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 405.644199][ T6371] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.644227][ T6371] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.644274][ T6371] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.644319][ T6371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.708937][ T6371] ims_pcu 3-1:1.0: Missing CDC union descriptor [ 405.709001][ T6371] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 406.683505][ T9949] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 407.083423][ T45] bond1 (unregistering): (slave .`): Releasing backup interface [ 407.178811][ T45] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.211763][ T45] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.246649][ T45] .` (unregistering): Released all slaves [ 407.304314][ T45] bond1 (unregistering): Released all slaves [ 407.423453][ T9977] tipc: Enabling of bearer rejected, already enabled [ 407.570838][ T45] : left promiscuous mode [ 407.754158][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 407.871545][ T45] tipc: Disabling bearer [ 407.871839][ T45] tipc: Left network mode [ 408.020445][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1190'. [ 408.080266][T10008] x_tables: duplicate underflow at hook 4 [ 408.243905][ T5682] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 408.391957][ T5682] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 408.400904][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.400944][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.450409][ T5682] usb 2-1: config 0 descriptor?? [ 408.499062][ T6370] usb 3-1: USB disconnect, device number 51 [ 408.976103][ T45] hsr_slave_0: left promiscuous mode [ 408.983456][ T45] hsr_slave_1: left promiscuous mode [ 409.004104][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.006074][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.029022][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.029054][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.108392][ T45] veth1_macvtap: left promiscuous mode [ 409.108520][ T45] veth0_macvtap: left promiscuous mode [ 409.330514][T10036] CUSE: DEVNAME unspecified [ 409.713418][ T5682] usbhid 2-1:0.0: can't add hid device: -71 [ 409.713529][ T5682] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 409.739278][ T5682] usb 2-1: USB disconnect, device number 60 [ 409.967627][T10049] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 410.172205][ T45] team0 (unregistering): Port device team_slave_1 removed [ 410.208557][ T45] team0 (unregistering): Port device team_slave_0 removed [ 410.502690][ T7039] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 410.545154][T10048] tipc: Enabling of bearer rejected, failed to enable media [ 410.549431][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 410.667016][ T7039] usb 2-1: Using ep0 maxpacket: 16 [ 410.672861][ T7039] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 410.689589][ T7039] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 16512, setting to 64 [ 410.689630][ T7039] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.689687][ T7039] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.689726][ T7039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.748025][ T7039] usb 2-1: config 0 descriptor?? [ 410.769794][ T7039] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 411.000920][T10057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1200'. [ 411.102427][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.104751][ T4933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.106334][ T4933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.109340][ T4933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.109979][ T4933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.258730][T10071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1200'. [ 411.611857][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 411.776891][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.804927][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.893510][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'. [ 411.902150][T10092] x_tables: duplicate underflow at hook 4 [ 412.053428][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.053996][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.078609][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 412.122922][T10100] tipc: Enabling of bearer rejected, already enabled [ 412.274826][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.275023][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.275248][T10070] bridge_slave_0: entered allmulticast mode [ 412.277401][T10070] bridge_slave_0: entered promiscuous mode [ 412.289189][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.289685][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.290107][T10070] bridge_slave_1: entered allmulticast mode [ 412.298132][T10070] bridge_slave_1: entered promiscuous mode [ 412.361571][ T7039] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 412.414596][T10070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.420539][T10070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.511189][ T7039] usb 3-1: Using ep0 maxpacket: 16 [ 412.512155][ T7039] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.513984][T10070] team0: Port device team_slave_0 added [ 412.515251][ T7039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.515284][ T7039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.515335][ T7039] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.515382][ T7039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.518623][T10070] team0: Port device team_slave_1 added [ 412.580278][ T7039] usb 3-1: config 0 descriptor?? [ 412.689252][T10070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.689274][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.689303][T10070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.738330][T10070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.738352][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.738384][T10070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.881774][T10070] hsr_slave_0: entered promiscuous mode [ 412.883210][T10070] hsr_slave_1: entered promiscuous mode [ 412.884217][T10070] debugfs: 'hsr0' already exists in 'hsr' [ 412.884240][T10070] Cannot create hsr debugfs directory [ 413.089812][ T7039] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input32 [ 413.124979][ T7039] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 413.242981][ T4933] Bluetooth: hci2: command tx timeout [ 413.279040][ T6341] usb 3-1: USB disconnect, device number 52 [ 413.414123][ T7039] usb 2-1: USB disconnect, device number 61 [ 413.493319][T10116] fido_id[10116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 413.705185][T10120] syzkaller0: entered promiscuous mode [ 413.705226][T10120] syzkaller0: entered allmulticast mode [ 413.929692][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 414.182607][T10131] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 414.521470][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 414.732139][T10141] tipc: Enabled bearer , priority 0 [ 414.802549][T10140] tipc: Disabling bearer [ 415.322114][ T4933] Bluetooth: hci2: command tx timeout [ 415.561919][T10070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.625912][T10070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.630125][T10070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.673337][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 415.750682][T10070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.766299][T10148] could not allocate digest TFM handle michael_mic [ 415.801278][ T7039] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 415.857691][T10136] macsec2: entered allmulticast mode [ 415.857729][T10136] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 415.858721][T10136] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 415.886091][T10136] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 415.897725][T10070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.930099][T10070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.971719][ T7039] usb 2-1: Using ep0 maxpacket: 32 [ 415.972512][ T7039] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 415.975004][ T7039] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 415.975031][ T7039] usb 2-1: config 0 has no interface number 0 [ 415.993674][T10070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.026700][ T7039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.026724][ T7039] usb 2-1: Product: syz [ 416.026735][ T7039] usb 2-1: Manufacturer: syz [ 416.026745][ T7039] usb 2-1: SerialNumber: syz [ 416.060788][ T7039] usb 2-1: config 0 descriptor?? [ 416.089859][T10070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.090252][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 416.385034][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1215'. [ 416.390869][T10177] x_tables: duplicate underflow at hook 4 [ 416.507855][ T7039] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 416.507892][ T7039] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 416.509884][ T7039] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 416.510201][ T7039] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 416.565241][ T7039] usb 2-1: USB disconnect, device number 62 [ 416.609380][T10070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.757478][T10070] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.807544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.807663][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.877266][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.877382][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.240128][T10070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.402144][ T4933] Bluetooth: hci2: command tx timeout [ 417.487006][T10070] veth0_vlan: entered promiscuous mode [ 417.548677][T10070] veth1_vlan: entered promiscuous mode [ 417.709272][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 417.709373][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 417.746738][T10070] veth0_macvtap: entered promiscuous mode [ 417.784283][T10070] veth1_macvtap: entered promiscuous mode [ 417.842545][T10070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.883282][T10070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.990686][ T1132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.990743][ T1132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.052159][ T1132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.091224][ T1132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.349050][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.349080][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.650046][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.656305][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.021467][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.190602][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 419.280405][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.280892][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.367651][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.374751][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.405317][ T31] audit: type=1326 audit(1792107309.770:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.407630][ T31] audit: type=1326 audit(1792107309.770:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.436572][ T31] audit: type=1326 audit(1792107309.780:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.436631][ T31] audit: type=1326 audit(1792107309.780:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.436706][ T31] audit: type=1326 audit(1792107309.780:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.436750][ T31] audit: type=1326 audit(1792107309.780:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.491622][ T4933] Bluetooth: hci2: command tx timeout [ 419.542265][ T31] audit: type=1326 audit(1792107309.880:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.542329][ T31] audit: type=1326 audit(1792107309.880:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.628407][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'. [ 419.629669][ T31] audit: type=1326 audit(1792107309.990:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.629974][ T31] audit: type=1326 audit(1792107309.990:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.1228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba139e559 code=0x7ffc0000 [ 419.644297][T10242] x_tables: duplicate underflow at hook 4 [ 419.958949][ T6371] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 420.102908][ T6371] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 420.104123][ T6371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.104174][ T6371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.146359][T10268] netlink: 'syz.1.1231': attribute type 16 has an invalid length. [ 420.146386][T10268] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1231'. [ 420.177851][ T6371] usb 5-1: config 0 descriptor?? [ 420.411801][ T6370] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 420.551264][ T6370] usb 2-1: device descriptor read/64, error -71 [ 420.601974][ T6371] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 420.632839][ T6371] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001E/input/input34 [ 420.801962][ T6370] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 420.808968][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.809511][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.819611][T10257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.820179][T10257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.881957][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.882627][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.926752][ T6371] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 420.938747][ T6370] usb 2-1: device descriptor read/64, error -71 [ 421.043821][ T6370] usb usb2-port1: attempt power cycle [ 421.334307][T10273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.339485][T10273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.402165][ T6370] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 421.424452][ T6370] usb 2-1: device descriptor read/8, error -71 [ 421.512696][T10273] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 421.515118][T10273] batman_adv: batadv0: Interface deactivated: gretap1 [ 421.662313][ T6370] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 421.683633][ T6370] usb 2-1: device descriptor read/8, error -71 [ 421.740333][ T6329] usb 5-1: USB disconnect, device number 38 [ 421.789253][T10274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.795633][ T6370] usb usb2-port1: unable to enumerate USB device [ 421.810652][T10274] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.852547][T10274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.978797][T10274] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.978927][T10274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.007664][T10274] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.007842][T10274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.095512][T10274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.125445][T10274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.167510][T10274] veth1_vlan: left promiscuous mode [ 422.169075][T10274] veth0_vlan: left promiscuous mode [ 422.186382][T10274] veth0_vlan: entered promiscuous mode [ 422.189914][T10274] veth1_vlan: entered promiscuous mode [ 422.216559][T10274] veth1_macvtap: left promiscuous mode [ 422.218185][T10274] veth0_macvtap: left promiscuous mode [ 422.220782][T10274] veth0_macvtap: entered promiscuous mode [ 422.230559][T10274] veth1_macvtap: entered promiscuous mode [ 422.259903][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.269435][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.280494][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.297385][T10274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.335509][T10274] batman_adv: batadv0: Interface activated: ipvlan2 [ 422.339653][T10274] batman_adv: batadv0: Interface activated: gretap1 [ 422.360335][T10274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.377694][T10274] geneve3: left promiscuous mode [ 422.406115][T10274] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 422.408698][T10274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.409613][T10274] veth0_to_team: entered promiscuous mode [ 422.501462][ T1147] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 36272 - 0 [ 422.501503][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 33650 - 0 [ 422.501549][ T1147] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 36272 - 0 [ 422.501578][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 33650 - 0 [ 422.501618][ T1147] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 36272 - 0 [ 422.501646][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 33650 - 0 [ 422.599609][T10285] tipc: Enabling of bearer rejected, failed to enable media [ 422.715116][ T114] ip6_tunnel: M xmit: Local address not yet configured! [ 422.813605][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 36272 - 0 [ 422.813656][ T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 33650 - 0 [ 422.901990][T10305] fuse: Bad value for 'fd' [ 422.978760][T10294] tipc: Started in network mode [ 422.978801][T10294] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 422.981018][T10294] tipc: Enabled bearer , priority 10 [ 423.069221][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 423.277776][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 423.421676][ T6328] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 423.574794][ T6328] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 423.576606][ T6328] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.576635][ T6328] usb 3-1: config 0 has no interface number 0 [ 423.576703][ T6328] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.576734][ T6328] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.576774][ T6328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.605607][ T6328] usb 3-1: config 0 descriptor?? [ 423.726248][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 423.877530][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'. [ 423.878988][T10326] x_tables: duplicate underflow at hook 4 [ 424.046389][ T6328] hid_parser_main: 4086 callbacks suppressed [ 424.046410][ T6328] holtek_mouse 0003:04D9:A070.001F: unknown main item tag 0x0 [ 424.046432][ T6328] holtek_mouse 0003:04D9:A070.001F: unknown main item tag 0x0 [ 424.046451][ T6328] holtek_mouse 0003:04D9:A070.001F: unknown main item tag 0x0 [ 424.046470][ T6328] holtek_mouse 0003:04D9:A070.001F: unknown main item tag 0x0 [ 424.046489][ T6328] holtek_mouse 0003:04D9:A070.001F: unknown main item tag 0x0 [ 424.059447][ T6328] holtek_mouse 0003:04D9:A070.001F: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.2-1/input1 [ 424.109493][ T6343] tipc: Node number set to 10070698 [ 424.259278][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.266371][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.402394][T10345] Invalid argument reading file caps for ./file0 [ 424.523725][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.525129][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.559905][T10356] loop4: detected capacity change from 0 to 7 [ 424.568038][T10356] Dev loop4: unable to read RDB block 7 [ 424.568062][T10356] loop4: AHDI p3 [ 424.568076][T10356] loop4: partition table partially beyond EOD, truncated [ 424.892331][ T6852] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 425.042607][ T6852] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 425.044000][ T6852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.044079][ T6852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.049956][ T6852] usb 5-1: config 0 descriptor?? [ 425.254118][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.254739][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.319186][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.320798][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.471824][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.497289][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.498688][ T6852] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 425.536248][ T6852] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input35 [ 425.750950][ T6852] keytouch 0003:0926:3333.0020: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 425.805346][ T6852] usb 5-1: USB disconnect, device number 39 [ 426.110432][T10360] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 426.119880][T10360] batman_adv: batadv0: Interface deactivated: gretap1 [ 426.227187][T10374] fido_id[10374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 426.292533][ T45] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.292563][ T45] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.292627][ T45] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 33650 - 0 [ 426.292677][ T45] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.292706][ T45] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.292755][ T45] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 33650 - 0 [ 426.292791][ T45] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.292811][ T45] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.292830][ T45] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 33650 - 0 [ 426.292857][ T45] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.292896][ T45] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.292915][ T45] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 33650 - 0 [ 426.324117][ T6328] usb 3-1: USB disconnect, device number 53 [ 426.672710][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.680802][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.730777][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.814204][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.814340][T10361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.858836][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.858923][T10361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.903064][T10361] veth0_to_team: left promiscuous mode [ 426.952665][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 426.953931][T10381] x_tables: duplicate underflow at hook 4 [ 426.990080][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.019357][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.098695][T10361] veth1_vlan: left promiscuous mode [ 427.110830][T10361] veth0_vlan: left promiscuous mode [ 427.128864][T10361] veth0_vlan: entered promiscuous mode [ 427.142379][T10361] veth1_vlan: entered promiscuous mode [ 427.176466][T10361] veth1_macvtap: left promiscuous mode [ 427.178463][T10361] veth0_macvtap: left promiscuous mode [ 427.184026][T10361] veth0_macvtap: entered promiscuous mode [ 427.204563][T10361] veth1_macvtap: entered promiscuous mode [ 427.227891][T10361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.239951][T10361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.256949][T10361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.260946][T10361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.286443][T10361] batman_adv: batadv0: Interface activated: ipvlan2 [ 427.287858][T10361] batman_adv: batadv0: Interface activated: gretap1 [ 427.288715][T10361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.342045][T10361] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 427.344287][T10361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.344994][T10361] veth0_to_team: entered promiscuous mode [ 427.473440][ T1010] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.473480][ T1010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.473508][ T1010] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 50535 - 0 [ 427.477187][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 427.515548][ T1147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.515720][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.515799][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 50535 - 0 [ 427.601705][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.601747][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.601775][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 50535 - 0 [ 427.641993][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.642051][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.642081][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 50535 - 0 [ 427.701754][ T1147] ip6_tunnel: M xmit: Local address not yet configured! [ 428.117588][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 428.770913][ T31] kauditd_printk_skb: 303 callbacks suppressed [ 428.770936][ T31] audit: type=1326 audit(1792107319.130:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.770989][ T31] audit: type=1326 audit(1792107319.130:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.812571][ T31] audit: type=1326 audit(1792107319.170:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.860060][ T31] audit: type=1326 audit(1792107319.220:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.860163][ T31] audit: type=1326 audit(1792107319.220:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.930178][ T31] audit: type=1326 audit(1792107319.290:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.930241][ T31] audit: type=1326 audit(1792107319.290:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.930316][ T31] audit: type=1326 audit(1792107319.290:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.947055][ T31] audit: type=1326 audit(1792107319.300:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 428.956112][ T31] audit: type=1326 audit(1792107319.320:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ba79e559 code=0x7ffc0000 [ 429.081213][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 429.081238][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'. [ 429.634094][T10439] loop4: detected capacity change from 0 to 7 [ 429.637292][T10439] Dev loop4: unable to read RDB block 7 [ 429.637450][T10439] loop4: AHDI p3 [ 429.637468][T10439] loop4: partition table partially beyond EOD, truncated [ 429.883823][ T32] INFO: task kworker/1:8:6327 blocked for more than 143 seconds. [ 429.883857][ T32] Tainted: G L syzkaller #0 [ 429.883870][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.883880][ T32] task:kworker/1:8 state:D stack:23656 pid:6327 tgid:6327 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 429.883934][ T32] Workqueue: events_freezable usb_stor_scan_dwork [ 429.883996][ T32] Call Trace: [ 429.884008][ T32] [ 429.884023][ T32] __schedule+0x17db/0x58f0 [ 429.884066][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.884096][ T32] ? __pfx___schedule+0x10/0x10 [ 429.884138][ T32] ? schedule+0x90/0x2b0 [ 429.884164][ T32] schedule+0x164/0x2b0 [ 429.884189][ T32] schedule_preempt_disabled+0x13/0x30 [ 429.884213][ T32] __mutex_lock+0x7c1/0x1550 [ 429.884236][ T32] ? __mutex_lock+0x5d4/0x1550 [ 429.884258][ T32] ? usb_stor_scan_dwork+0xec/0x2c0 [ 429.884305][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 429.884338][ T32] ? lock_acquire+0x115/0x350 [ 429.884373][ T32] usb_stor_scan_dwork+0xec/0x2c0 [ 429.884397][ T32] ? process_scheduled_works+0x97a/0x1630 [ 429.884434][ T32] process_scheduled_works+0xc3d/0x1630 [ 429.884500][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.884536][ T32] ? assign_work+0x3cf/0x5d0 [ 429.884562][ T32] worker_thread+0xa47/0xfb0 [ 429.884617][ T32] ? __kthread_parkme+0x71/0x1f0 [ 429.884661][ T32] kthread+0x38b/0x480 [ 429.884685][ T32] ? __pfx_worker_thread+0x10/0x10 [ 429.884706][ T32] ? __pfx_kthread+0x10/0x10 [ 429.884724][ T32] ret_from_fork+0x514/0xb70 [ 429.884760][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 429.884784][ T32] ? __switch_to+0xc89/0x1420 [ 429.884818][ T32] ? __pfx_kthread+0x10/0x10 [ 429.884842][ T32] ret_from_fork_asm+0x1a/0x30 [ 429.884870][ T32] [ 429.884920][ T32] [ 429.884920][ T32] Showing all locks held in the system: [ 429.884932][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 429.885186][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 429.885281][ T32] locks held by getty/5378: 2, on CPU#1: [ 429.885300][ T32] #0: ffff8880373da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 429.885342][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 429.885420][ T32] locks held by kworker/1:4/5681: 3, on CPU#1: [ 429.885436][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.885490][ T32] #1: ffffc90004a57c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.885558][ T32] #2: ffff88802bd81250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 429.885620][ T32] locks held by udevd/5827: 4, on CPU#0: [ 429.885631][ T32] #0: ffff8880740673f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 429.885689][ T32] #1: ffff8880794a1c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 429.885761][ T32] #2: ffff888037578788 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 429.885812][ T32] #3: ffff88802b3621d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 429.885893][ T32] locks held by kworker/1:8/6327: 3, on CPU#1: [ 429.885908][ T32] #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.885961][ T32] #1: ffffc9000576fc40 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.886042][ T32] #2: ffff888027f0cef0 (&us_interface_key[i]){+.+.}-{4:4}, at: usb_stor_scan_dwork+0xec/0x2c0 [ 429.886102][ T32] locks held by kworker/0:10/6336: 3, on CPU#0: [ 429.886113][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.886178][ T32] #1: ffffc900058afc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.886241][ T32] #2: ffff88802c51b250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 429.886283][ T32] locks held by kworker/1:15/6917: 6, on CPU#1: [ 429.886307][ T32] #0: ffff888021a87540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.886369][ T32] #1: ffffc90003297c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.886422][ T32] #2: ffff88802b7da1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 429.886488][ T32] #3: ffff88802b3621d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 429.886547][ T32] #4: ffff88802ad961a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 429.886619][ T32] #5: ffff888027f0cef0 (&us_interface_key[i]){+.+.}-{4:4}, at: ene_ub6250_probe+0x34e/0x5f0 [ 429.886677][ T32] locks held by syz-executor/10070: 4, last CPU#1: [ 429.886697][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 429.886741][ T32] #1: ffff88807b527180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 429.886802][ T32] #2: ffff88804f8dc080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 429.886862][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 429.886909][ T32] locks held by syz.4.1256/10400: 2, last CPU#1: [ 429.886936][ T32] #0: ffff888073d1a460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 429.887013][ T32] #1: ffff888026f10e98 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 429.887078][ T32] locks held by syz.2.1266/10424: 1, on CPU#1: [ 429.887095][ T32] #0: ffff888055aad180 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_ioctl+0x26d/0x490 [ 429.887154][ T32] locks held by syz.2.1266/10425: 1, on CPU#0: [ 429.887171][ T32] #0: ffff888055aad180 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_ioctl+0x26d/0x490 [ 429.887212][ T32] locks held by syz.3.1267/10432: 1, on CPU#0: [ 429.887237][ T32] #0: ffff88804f8d8f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 429.887298][ T32] locks held by syz.3.1267/10436: 2, last CPU#1: [ 429.887318][ T32] #0: ffff88804f8d8f80 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 429.887362][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 429.887434][ T32] locks held by syz.1.1271/10442: 1, last CPU#0: [ 429.887450][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 429.887501][ T32] [ 429.887505][ T32] ============================================= [ 429.887505][ T32] [ 429.887513][ T32] NMI backtrace for cpu 0 [ 429.887547][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 429.887577][ T32] Tainted: [L]=SOFTLOCKUP [ 429.887585][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.887597][ T32] Call Trace: [ 429.887606][ T32] [ 429.887615][ T32] dump_stack_lvl+0xe8/0x150 [ 429.887647][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 429.887671][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.887720][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 429.887756][ T32] sys_info+0x135/0x170 [ 429.887787][ T32] watchdog+0xfd7/0x1030 [ 429.887811][ T32] ? watchdog+0x1c7/0x1030 [ 429.887833][ T32] kthread+0x38b/0x480 [ 429.887863][ T32] ? __pfx_watchdog+0x10/0x10 [ 429.887886][ T32] ? __pfx_kthread+0x10/0x10 [ 429.887909][ T32] ret_from_fork+0x514/0xb70 [ 429.887937][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 429.887953][ T32] ? __switch_to+0xc89/0x1420 [ 429.887977][ T32] ? __pfx_kthread+0x10/0x10 [ 429.888012][ T32] ret_from_fork_asm+0x1a/0x30 [ 429.888050][ T32] [ 429.888059][ T32] Sending NMI from CPU 0 to CPUs 1: [ 429.888088][ C1] NMI backtrace for cpu 1 [ 429.888105][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.888130][ C1] Tainted: [L]=SOFTLOCKUP [ 429.888136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.888151][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 429.888174][ C1] Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 d5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 429.888190][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 429.888207][ C1] RAX: 0000000000d90fd7 RBX: ffffffff819bed10 RCX: 8000000000000001 [ 429.888221][ C1] RDX: 0000000000000001 RSI: ffffffff8e469795 RDI: ffffffff8c6ddb80 [ 429.888234][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 429.888249][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 429.888262][ C1] R13: 1ffff11003ed1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 429.888277][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 429.888292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.888305][ C1] CR2: 00007fbae05556c8 CR3: 00000000533e6000 CR4: 00000000003526f0 [ 429.888322][ C1] Call Trace: [ 429.888329][ C1] [ 429.888336][ C1] default_idle+0x9/0x20 [ 429.888359][ C1] default_idle_call+0x72/0xb0 [ 429.888383][ C1] do_idle+0x2e0/0x540 [ 429.888404][ C1] ? __pfx_do_idle+0x10/0x10 [ 429.888428][ C1] cpu_startup_entry+0x43/0x60 [ 429.888446][ C1] start_secondary+0x101/0x110 [ 429.888475][ C1] common_startup_64+0x13e/0x157 [ 429.888514][ C1] [ 429.889092][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 430.801903][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 430.812609][ T32] Tainted: [L]=SOFTLOCKUP [ 430.816952][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 430.827038][ T32] Call Trace: [ 430.830375][ T32] [ 430.833364][ T32] vpanic+0x56d/0xa60 [ 430.837388][ T32] ? __pfx_vpanic+0x10/0x10 [ 430.841965][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 430.847528][ T32] panic+0xc5/0xd0 [ 430.851268][ T32] ? __pfx_panic+0x10/0x10 [ 430.855734][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 430.860804][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 430.867006][ T32] watchdog+0x1030/0x1030 [ 430.871373][ T32] ? watchdog+0x1c7/0x1030 [ 430.875825][ T32] kthread+0x38b/0x480 [ 430.879929][ T32] ? __pfx_watchdog+0x10/0x10 [ 430.884631][ T32] ? __pfx_kthread+0x10/0x10 [ 430.889249][ T32] ret_from_fork+0x514/0xb70 [ 430.893864][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 430.898999][ T32] ? __switch_to+0xc89/0x1420 [ 430.903720][ T32] ? __pfx_kthread+0x10/0x10 [ 430.908331][ T32] ret_from_fork_asm+0x1a/0x30 [ 430.913170][ T32] [ 430.916829][ T32] Kernel Offset: disabled [ 430.921174][ T32] Rebooting in 86400 seconds..