last executing test programs: 37m5.50921199s ago: executing program 1 (id=4255): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = inotify_init() r5 = fsopen(&(0x7f0000000e00)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_usb_control_io$sierra_net(r1, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x20, 0x23, 0x26, {0x26, 0x9, "a209bece5d984fc8b7a9f9e391b6222797dccdfc7cb22b9797d4ffaab715ccd0412f1b7c"}}, &(0x7f0000000800)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "7e9ae4155e5c4b8c71837ce109a671f029cbda52f45d3cace05dc8a58166d481ff91a312834922d344514f311376976ba1bbb773b76886971c1511ddebd9625092e11c07bcf89de12377a5186f679e38293591134d2a909931df1fe0f3670f29d3e00e73e3caa5c76083b82aabc6a2242cd3cfdc43aad614a1ae"}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000900)={0x0, 0x13, 0x37, "a5460fc71cc3b737dcddf8d61c611fa62df26948febc0d4935cdca9d7ec95018564196374949947c46597e6c911c95f8ddc57b3520a291"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "316c0571c4b91f0f77d8f7ac2e17247ab7c35c03c87cb90f02c6e55acb6c429b595b776ac424b7c8c7ac7306a1ae94f97e38e7754d939a488474b65d2331d01cab68dcfa0eeb172b7ce11e00c855f39febd0fb9e44346817c4619919a88aa1018b7e33090dc73f6d040e8715edc9c7e1924489be98fe25408aa537425dbe28a29acec6af0921c9423120048584e404ffbd5f394c0c2eb60d22d40178b4f411588fff0b9325d686f1e36602ca71c1b6088c753e7e91123b49e13f11dfb61f914a36b255efda6e42e949e77c4476935d7cbdd16927d170d56d3401e516d7d49c82f15aadcd13aa2fe1651c2036f39bfca172d0ccb7fff9b26f2f920c856834082383f402726a0386a25c99e1c0a31247b187f9231881b0315c3b455df9cab6691dcf5a2ed60f0640a868fa282b2a9a62ae5bf203694ccd2ff0a8630fbda00d03bf81bd7e204b11bc61b144af4505f5fee4cefdcf69aa97fadb8415772d00581ab89576604b8a052e2a8579c03ef93dcec89bd5e6e2ac17860ecb9c5d4fcd97c3ab724867b05574cc22bc3dd1cfda31bed359af9a97f1393d4676663a90e6037ee9151bbb85d87eb133ef2b7b7268dec0ecaa845c483f06334f9664ccd74c7052591b0fbf6052d5648a7af5b5a84a57da48beee1bdc86f78353c635c1df9408747a8479ca0609f5e77b85a468834e000a2e953e853d6744894fc158833060c77b0a15559b727f5f7c6a99da58aea99408d800c69fd8860bb2da8374313c6cde1332ab9c5fc4bdc8c0f978fffc94d5a8af3f393179d504026f88a624077161f765ff2d25421cc08e646639f1f78b04fa8c6f509d5276fd108cf18254d5c077cea13051d36e9422c9a771b47cc2a64424d3d17bf17929c7431530f06ad48baa3cd828231340aa0763df4dba3ea2fefe629041e359bdb444f0bd5096739bf401aa4e6a3b36a9a8820864ba27946703e5daa369b910b9ffba41957694894524fd0adf4b6bde8e6a0f7f74375d1e7abaa11352e59da4ce585f7815ef30b238126773fa7517849d24fd4f3ab474cbba46c3990832d9bdc6d635bf020950861c1d786058992da1d2ab13ee366cb6c423f5f116d0088053d42c84baa85eaaaab90ecd3bdf3e8b55b57946c8f4fbc1ffb8a8d0c95bd00414c330349335f5fb5e16d469722aa09ae6fe8c7f34e3d5a4c75bfb0c5d99d7cffadd421572fd93f945775fbf0d1d0f63530fbd7a83b3e98b631479d2bf80282975ecf0455425e3b711758c5cad41a32baac8892f07ec7d2a1896fe260ceb341a277d8d77365387b1cafc430c012211ff617a09c600526e9446b8a0eaff8f1c670b9f54407ce4e9cf9fc1675c009339df1a5b4405e86b1bf055c73f62cbd27b2151c03a82968e3fd3bb6e485165bfc52e055423cc2b9ad22c0182124426475324b11b8e5d3a95b01baf5ba04941821d"}, &(0x7f0000000d80)}) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240180d5}, 0x8014) r6 = syz_open_dev$vbi(&(0x7f0000000e40), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000e80)={0x7, @sliced={0x7, [0x9, 0x745, 0x4, 0x400, 0x7, 0x2, 0x101, 0x5, 0x6, 0x4, 0x6, 0x9, 0x2, 0x1, 0x6, 0x1e55, 0x3758, 0x1, 0x1000, 0x5, 0x401, 0xff4c, 0x7, 0x8, 0x6, 0x6, 0xa9, 0x101, 0x8, 0x40, 0xb, 0x1, 0x2, 0x0, 0x1, 0x3, 0x5b3b, 0x8004, 0xfff9, 0x1, 0xff, 0x2, 0x0, 0x400, 0x5, 0x40c, 0xff7f, 0x2], 0x4058}}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000f80)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000001000)=0x0, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000010c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001140)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000001180)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000001200)=0xd) r13 = dup(r12) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r14, 0x89f8, &(0x7f0000001240)="3a7bc3") write$6lowpan_enable(r13, &(0x7f0000001280)='0', 0xfffffd2c) dup(r11) bind$inet(0xffffffffffffffff, 0x0, 0x0) 37m3.952891194s ago: executing program 1 (id=4258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r6 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) fanotify_mark(r3, 0x161, 0x8000000, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 36m59.367235665s ago: executing program 1 (id=4265): syz_emit_ethernet(0x3d, &(0x7f0000000a40)={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x6, 0x1}}, {@generic={0x8906, "2d656e66d32294ba04f865e93f0690a7a690da7b72bd4a24ca0a2f7f97a533410d8d7f82cc8732"}}}, 0x0) 36m58.988219044s ago: executing program 1 (id=4266): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x401, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xee) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001080)={&(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f0000001040), 0x2, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x3, 0x6, 0x0, r9}) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f800400228008000300470000", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000200)=@l2={0x1f, 0x400, @none, 0x1ff, 0x1}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="58000000000000000301000002000000d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1846e06e5340d06870000000010000000000000000801000004000000000000", @ANYRESHEX, @ANYBLOB="d1e1dadf0c73f8d50d9a7b11d096eb8955570aa4ac1b5446701d001ff2e612c382d2f2a4eb3fbe1227e5e7fbeddbe5f97175f7f7ca0f1e77ebb1914031d97d2bc43a7346de2c431c8e0c839e69f93caff1334e00d46dbfa3e4c7179515137eb89d25c6fbbde6452214cfb56b987b3c585affda2538a6c206f2edc61112bd981ca7636aa7046e5d34728a900d0e934d666e106c96111a72b977eeec3be86cdca3c1ecd07b2225caff2035bb6fd9639983df21cc682d"], 0x68}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x40a200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r11 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, 0x0, 0x0) 36m54.090860404s ago: executing program 1 (id=4280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 36m53.564593823s ago: executing program 1 (id=4281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x8000000, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) 36m38.354481451s ago: executing program 32 (id=4281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x8000000, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) 6m14.114181852s ago: executing program 0 (id=10701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x1, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x6, 0xb402}) 6m13.97240754s ago: executing program 0 (id=10702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000240)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m13.697365609s ago: executing program 0 (id=10705): bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003"], 0x48) 6m13.556763389s ago: executing program 0 (id=10708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000000c0)="1400000009000000", 0x8) sendto$inet6(r1, &(0x7f00000001c0)="b0", 0x1, 0x40811, &(0x7f0000000200)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) shutdown(r0, 0x1) 6m13.327389467s ago: executing program 0 (id=10712): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xfffffffc, @local}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x80000000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x2e8}}], 0x2, 0x0) 6m13.235283442s ago: executing program 0 (id=10714): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) listen(r0, 0x80) socket$vsock_stream(0x28, 0x1, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) setrlimit(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5m58.173568866s ago: executing program 33 (id=10714): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) listen(r0, 0x80) socket$vsock_stream(0x28, 0x1, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) setrlimit(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 12.920393167s ago: executing program 2 (id=12013): syz_usb_connect(0x0, 0x3d, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000940)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000980)) read$char_usb(r0, &(0x7f00000009c0)=""/151, 0x97) timer_settime(0x0, 0x0, 0x0, 0x0) close(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x101400, 0x0) 9.628503004s ago: executing program 2 (id=12020): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/21, 0x15}, 0x3}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000100)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) syz_create_resource$binfmt(0x0) socket(0x1, 0x803, 0x0) socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) mlockall(0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_ethernet(0x87a2f, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0x100, 0x103100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 8.241087911s ago: executing program 5 (id=12026): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000100001000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000002000000010000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000200020000000000000000001c001700000000000000000000000000000000000000000004000000"], 0x15c}}, 0x0) 8.000455713s ago: executing program 5 (id=12027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000400001c0002800500030000000000080001400000000c08000240000000050900010073797a30"], 0xe0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = syz_usb_connect(0x5, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x6, 0x5, "d15b89f2"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x805, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x7c1f1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000001100)=ANY=[@ANYBLOB="400808000000fde61e0ee4a63b9e5e288fdbb29f962c6c193b24e4cc75a52889323c85fb2ee39b40057ce1853e91af5863ee61e800cac9c8f9c81d765c4e38d4a6273e34184ef4e5"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800c0001006d616376746170006400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x8854) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7.962884753s ago: executing program 6 (id=12028): syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x40200) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000380)="070000000000000001000000ffffffff0100"/71) ioctl(r2, 0x4048aec9, &(0x7f0000000400)="0100"/72) ioctl(r3, 0xc048aeca, &(0x7f0000000480)='\a\x00'/72) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000100)=0xa, 0x4) syz_open_dev$dri(0x0, 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000001040)) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20f}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) 7.47159928s ago: executing program 2 (id=12030): syz_usb_connect(0x0, 0x3d, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000940)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000980)) read$char_usb(r0, &(0x7f00000009c0)=""/151, 0x97) timer_settime(0x0, 0x0, 0x0, 0x0) close(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x101400, 0x0) 7.068533291s ago: executing program 6 (id=12031): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000600)=0x8, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)="a6", 0x1}], 0x1, &(0x7f0000000740)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, 0xa0cd, 0x4, 0x3ff, 0x6, 0x1, 0x3, 0x2}, &(0x7f0000000840)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000880)={0x10, 0x8007, 0x238, 0x5f, r3}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000580)="2700000014000707030e0000120f0a00110001926c7be920c72e0c7000f5fe0012ff000000078a", 0x27) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x9, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0xb}) 6.964608118s ago: executing program 4 (id=12032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r0, &(0x7f0000000380), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='yeah', 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) recvfrom$inet(r0, &(0x7f0000000400)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.767417579s ago: executing program 4 (id=12033): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="c36100001001000061107e000000000004000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0xa, 0xfd90, &(0x7f00000008c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x366, 0x10, &(0x7f0000000a00), 0x2b2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000019000000", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 5.220742898s ago: executing program 4 (id=12034): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.379522667s ago: executing program 5 (id=12036): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xc, 0x3, "06275c8527702267"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "f3263873"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0xe00008da) (async) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./bus\x00') (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) (async) write(r3, &(0x7f00000001c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0xa13a504, r4}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f0000000240)) (async) bind$packet(r5, &(0x7f0000001180)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) socket$packet(0x11, 0x2, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000011c0)=[{&(0x7f0000001200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000001280)=[{&(0x7f00000012c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000004c0)={0x4, 0x1000}, 0x4) 3.857111316s ago: executing program 3 (id=12037): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$uac1(0x3, 0xe7, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x763, 0x150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0xd7, 0xc0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3d}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x6, 0x9, 0x1, 0xfb, 0x6}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0xff, "0a3bc1"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0xfb, "fd32e05995"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x2, 0x8, "a6af91b118"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x4, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x6, 0x3, "1c957a", "e9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x5, 0xb, {0x7, 0x25, 0x1, 0xc, 0x7f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5d, 0x3, 0xfc, 0x74, "35b5313cb3ce"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0xf4, 0x7}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x519c, 0x10, "0a6caeb4f718"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0x87, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x3, 0x0, {0x7, 0x25, 0x1, 0x8, 0x8, 0xd7}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x7, 0x4, 0x1, 0x10, 0x9}, 0x29, &(0x7f0000000400)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0xf, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x62, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0x2a}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1007}}, {0x44, &(0x7f0000000480)=@string={0x44, 0x3, "3b167ee08bf35edc1493812315a2eb46bdbf742a7db7a779f12c82cfcc9834698dceae39fbb323e9b114022ad0318f30c063206e203a5a935429ee6defe9b7d3f65f"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x20, 0xd, 0xdf, {0xdf, 0x23, "6591ffad3d9f2343eb90ecd490129be7a73d02d7c11c862d99cc7a3bef267f7d2a67743f0422dcf478c9064c5ed49d5c11928ef1cc70cb5bb12bf42b9726cf1cb61ceff55a2ebf555bd2c56c6f457b4c7cc48f979c3859deb6ba67875293b6295996462df30b09ca4935e197fd05704dbd9401eea20e0be524a8f69c7336d268b218414e92e0c0497e95b9360242f6f67dade2b49a860f2ed90ed6cbeba47f8047d3b2b2c52536e5caac72a957fb2215ea0d7740d0c893d643ecbbeabc3b9618efb0179ea44a342fc527cf0e134658205d15db78787477ea0d012c56ec"}}, &(0x7f0000000680)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x7, 0xdf, "26a5674b7c5a0328933eadaf0321a48b56bf38d31645359b4271fb27d087be9cee7418606c294e342cb68142df95a46e0e394d33b30ec6d25c7bc1c3bec815576981ef7aeb58f9c9f22df5d7782342b4e6001568d31ddd4360008b1636bb079700873b95fa6208e3b76e40dc35ddd550030297452e95aa44cdeaa08e65af483ee2f8567187b73a7aad2b2fdb9460dd4145d45e01d4427a9d711580eb1b7916a2314175b1bb136b599df774f4ee114583f940e3044395a4f93e1e887239efc1ed1894936d29cc97ff0988f5f6efb0b8b2731a81974a0949478c3a2e4834a9a4"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x81, 0x3, "1f2f22"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, '*'}, &(0x7f0000000900)={0x20, 0x83, 0x2, 'tL'}, &(0x7f0000000940)={0x20, 0x84, 0x1, 'l'}, &(0x7f0000000980)={0x20, 0x85, 0x3, "e07d10"}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\"&'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000dc0)={0x3, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '#'}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x12, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000d40)={{'\x00', 0x1}, {}, 0x0, 0x0, 0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)="e4f8a092dc03dbf07cf5037f568310641d65433f87367ce9e2fe195c6a8057eedf64a32cef291eee39f2543e34de9dbc468f622be5b32c5fe19f1d7840fc9287e9d399854ccf475a146c4878bdf840056e074b1cd8de9a64dc7d8c2ec568496d9575a9932ff276317b3a69fe3a53d76250ce440dd54e9c0a", 0x78, 0x0, &(0x7f0000000b40)={0x2, 0x11c, {0x0, 0xc, 0x4e, "316b0bead3c1b470bce064338d9100becf7ba07bef82b0f8860fc5cda5ea47aedbc16135d662483f698df3f5200670081b6f3959142f6c3530cbbc6a7b0d315605d0a4c056f7960a575e1a79ec67", 0xc1, "01e4bc2e00962938cf6a441cf3cdef9f758231f8d2d6568cf0b962389e2eb7a0820905924537832bcc09f6def816a7d0ef81f2c035bbb88186aa8d25d0210dde4cbc5d6d187ce904074668e2faae10e1408618c31d218de0ecbdbd6a028210e7a36b3968cbbf2dd7cef15b96e095f41771d28bc4fd6d56af542f685eb967b514f2f31221ceb10250893aa911b686f64574b97dcd1e78539f5e23a593e3984658c459ed6f73865de74eaa9f7c1de43b6840366dab886ed5dab241678ad849ba95e3"}, 0xcd, "14cd8a2ff54cf2be398391949703fe104bbfbc6c5187ebbf0d0b87e39d1f62799baf838d781afeeed13665dacf09f0b2b3f78644ec204b45d20dac4ea607c1e41019f3ef0aff45705ffce6a7c8c5447960283fb5b2ab085a050a0b62820d9e4fc9f7dc5e4c83df6a1beb12483837cd134fdad271b27401b39a5c35db29e2cf17a0d8aa59df99bda0fe8ce4403c00f3aec5bd4274895d7fbbb58ac670e14d1321094ffe9f9eea2939d637948ed91d6d1d9aa80ad04c107253594e006dd765e7d316b65724f22932a7690e82d7f9"}, 0x1f5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtaction={0x4c, 0x1e, 0x109, 0x1, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000040)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) dup2(r7, r6) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)='c', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.856202682s ago: executing program 4 (id=12038): syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x40200) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0xffff, @remote, 0x401}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="be", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000004c0)='S', 0x1}, {&(0x7f0000000700)="b84e0edba9837292396c188edda783b933f1c7f82312b3a24d742b56786c66fcaa8a11f18a0da831f181566d0f2911af3baca4925227d9110fcd366f2ce8a16308ad3b2858e699c18b17228ece812487baf1f95b09188a75d3241fb9c6f3c7957f8a442e", 0x64}, {&(0x7f0000000780)="c259f42f959b04d681e98f5ca494d8b112844db1ea71297b454010ad5946ba77a74b6d46e54c475c1b03d01a165a26ce33702f1572e6d127ebc3371bd75e6f5f353d746e853b704d59ce94efa997b94981b3fbb9c6b22b034f543d6816777af57cb3e27f06ef6504ae6384c53147fc3ce03fb37701002878a35ff452ae85f6403575b5bf9311b1b0c5f276bd02b8aaf5cef4c9f539de752cfc46cf038c9219e8659af9ac90568d22c40f758d12b4f61766bf714fba61b05ea0748b306bdc75e86e499dd8a57a4d43622987d3e6ad71bd63b225d015ba9a8a1f3d88efab5a8d2a144dab60", 0xe4}], 0x3}}], 0x2, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{&(0x7f0000000600)={0xa, 0x4e1f, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000680)="a4", 0x1}], 0x1}}], 0x1, 0x4041) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000100)=0xa, 0x4) syz_open_dev$dri(0x0, 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000001040)) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20f}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a000100000000000000000081140000000000001f000000"], 0x1c}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) 3.752603436s ago: executing program 6 (id=12039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000640)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x14, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}, 0x0) 3.727855744s ago: executing program 2 (id=12040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000bc0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x64}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000e40)='\xe6\xdf\xf4X\xd6\xca&\x9dP\x9e\xd7#\xc8\xa1\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00<\x92\x8e\x00\x00\x00\x00\x00\x00\x00`\x9eM\xcd\xc5\x93\xf6?\xbc\xc3yw:\x00\x00\x00\x00\x12l\x18\n%D\x13\x13\\\x02\x01:r\xd0S\xe7\xb0C\xb9\x18\x86.sX\xda\xaa\xe5\xcd\xc9}o2\xd3,q\x90\x10{\xaf\x8f\xcf\xf2\xe8\xf5\xea1r\x83\xdb\x9a\xdd\xc5\xb5\x808j\xde}^wM\xd6\xd0\x8c\xf9 \xdc\xab\x06e%\xfa;7\xbc\xf2\x03\xadb\xda\x86[j\r \xcc\xec\xd2\xfe\x00\xfdh\xfc\xe27\x86\xda\xf5\x90\xe5$\x1eX\xdc\x8e\x10\xd1F9\xd3=;\x85\xdd\xe6P\x00\x99\x89#\xe2|7\x86j\xfb\xad\x99\b\xd03\xf5\xf7hr\xf3\xdf&k^J6\xde\xb6\xd4\x81\xcc\xff4)\x81\x9e\xff\x9b6T\x9e\x8c\x94\xf3\xcc\x80\xf6\x94.F\x97\x0f\xe8\x90\xa2\x1c\x163oG\xa90p3\x056\xeb6\xddqkQN\x16S\xa6\xf3\x8c\x8cyU\n:/\xf8\xb9aU\xb2\x97\x84\xb7\x1b.l3E\x12^\xaa0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.541613683s ago: executing program 6 (id=12041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.792863501s ago: executing program 4 (id=12042): syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x40200) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000380)="070000000000000001000000ffffffff0100"/71) ioctl(r2, 0x4048aec9, &(0x7f0000000400)="0100"/72) ioctl(r3, 0xc048aeca, &(0x7f0000000480)='\a\x00'/72) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000100)=0xa, 0x4) syz_open_dev$dri(0x0, 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000001040)) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20f}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) 2.727967013s ago: executing program 6 (id=12043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 2.595541354s ago: executing program 3 (id=12044): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="c36100001001000061107e000000000004000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0xa, 0xfd90, &(0x7f00000008c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x366, 0x10, &(0x7f0000000a00), 0x2b2}, 0x48) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000019000000", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 2.520846849s ago: executing program 6 (id=12045): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000d40)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000d80)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) 2.139832607s ago: executing program 3 (id=12046): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000002280)={0x1, &(0x7f00000022c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchdir(0xffffffffffffffff) (fail_nth: 2) 1.368719634s ago: executing program 3 (id=12047): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x23, &(0x7f00000003c0), &(0x7f0000000400)=0x38) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000240), 0x4) sendmsg$tipc(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x1) r9 = dup3(r7, r8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) dup2(r7, r9) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.360608434s ago: executing program 5 (id=12048): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 1.10150195s ago: executing program 5 (id=12049): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 975.300713ms ago: executing program 4 (id=12050): syz_usb_connect(0x0, 0x3d, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000940)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000980)) read$char_usb(r0, &(0x7f00000009c0)=""/151, 0x97) timer_settime(0x0, 0x0, 0x0, 0x0) close(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x101400, 0x0) 748.306141ms ago: executing program 3 (id=12051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 662.661622ms ago: executing program 2 (id=12052): set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYBLOB], 0x78}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000480)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000004c0)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000001140)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000001180)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.net/devices.allow\x00', 0x41, 0x48) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001240), 0x440, 0x0) write$rfkill(r5, 0x0, 0xfffffeac) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000001280)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000001300)=0x0, 0x0, &(0x7f0000001380)=0x0) r9 = syz_open_dev$sg(&(0x7f00000013c0), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="00000000ff0f00040a000000"]) syz_ublk_add_dev(r6, r7, 0x0, r8, &(0x7f0000001440)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000014c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000001500)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001540)={r12}) syz_ublk_setup_queues(r12, r10, &(0x7f0000001580)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c, 0x0, r4}, &(0x7f0000001600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1006, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x288}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd, 0x0, r12}}], 0x1, &(0x7f0000001880)={0x2e, 0x54, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x826, 0x0, 0x0}}, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000001900)={0x80000000}, 0x19a) sendmsg$nl_route(r13, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c0005001a0001002abd707e37ffffffffffff4105665600030002c8"], 0x1c}}, 0x0) 368.495628ms ago: executing program 3 (id=12053): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000002c0)={0x0, 0x280, 0x1e0, 0x34325241, 0x1, [0x2], [0x80ffff, 0x800, 0x2, 0x4002], [0x8, 0x0, 0x40000000, 0x2], [0x7]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580), 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) chdir(&(0x7f0000000480)='./cgroup\x00') r6 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 142.901375ms ago: executing program 2 (id=12054): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x149040, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) fcntl$setsig(r2, 0xa, 0x13) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(r3, &(0x7f00000001c0)="e7b6d8ba336c7bc36384284d1931456414ad6c1864ffef6abab9", 0x1a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x7, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x54, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) timer_create(0x0, &(0x7f0000000640)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000680)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000700)='./file0\x00', 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x7, &(0x7f0000000840)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) fcntl$setlease(r2, 0x400, 0x2) r7 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0x4c) setresuid(0x0, r8, r8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd27, 0x25dfdbfe, {0x1c, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040004) 0s ago: executing program 5 (id=12055): syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x40200) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000380)="070000000000000001000000ffffffff0100"/72) ioctl(r2, 0x4048aec9, 0x0) ioctl(r3, 0xc048aeca, &(0x7f0000000480)='\a\x00'/72) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000100)=0xa, 0x4) syz_open_dev$dri(0x0, 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000001040)) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20f}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 10256] vhci_hcd vhci_hcd.0: Device attached [ 2899.991240][T10257] vhci_hcd: connection closed [ 2899.993097][ T5899] vhci_hcd vhci_hcd.3: stop threads [ 2899.993124][ T5899] vhci_hcd vhci_hcd.3: release socket [ 2899.993144][ T5899] vhci_hcd vhci_hcd.3: disconnect device [ 2900.075391][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10767'. [ 2900.370915][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10770'. [ 2900.391625][T10272] ip_tables: iptables: counters copy to user failed while replacing table [ 2900.625815][T10278] binder: 10277:10278 ioctl c0306201 0 returned -14 [ 2900.630804][T10278] binder: 10277:10278 ioctl c0306201 200000000380 returned -14 [ 2901.265403][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10783'. [ 2902.667271][T10349] xt_hashlimit: size too large, truncated to 1048576 [ 2903.769556][ T1077] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2903.943706][ T1077] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2903.944341][ T1077] usb 4-1: not running at top speed; connect to a high speed hub [ 2903.944372][ T1077] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 2903.946739][ T1077] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2903.946761][ T1077] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2903.946798][ T1077] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2904.004220][ T1077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2904.004246][ T1077] usb 4-1: Product: syz [ 2904.004259][ T1077] usb 4-1: Manufacturer: syz [ 2904.004273][ T1077] usb 4-1: SerialNumber: syz [ 2904.142763][T10400] ip_tables: iptables: counters copy to user failed while replacing table [ 2904.316900][ T1077] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2904.316954][ T1077] usb 4-1: selecting invalid altsetting 0 [ 2904.401362][ T1077] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2904.408595][ T1077] usb 4-1: USB disconnect, device number 39 [ 2904.410104][T10405] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10830'. [ 2904.775244][T10214] udevd[10214]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2905.180420][ T8418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2905.197147][ T8418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2905.198277][ T8418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2905.200178][ T8418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2905.200761][ T8418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2905.443877][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10845'. [ 2905.732506][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 2905.734828][T10435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2905.736459][T10435] bridge_slave_0: entered allmulticast mode [ 2905.769400][T10435] bridge_slave_0: entered promiscuous mode [ 2905.789411][T10435] bridge0: port 2(bridge_slave_1) entered blocking state [ 2905.789515][T10435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2905.789668][T10435] bridge_slave_1: entered allmulticast mode [ 2905.794573][T10435] bridge_slave_1: entered promiscuous mode [ 2905.928772][T10435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2905.945550][T10435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2906.063259][T10464] bond0: (slave bond_slave_1): Releasing backup interface [ 2906.164410][T10435] team0: Port device team_slave_0 added [ 2906.182024][T10435] team0: Port device team_slave_1 added [ 2906.222967][T10435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2906.222984][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2906.223006][T10435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2906.225502][T10435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2906.225518][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2906.225541][T10435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2906.436179][T10435] hsr_slave_0: entered promiscuous mode [ 2906.436844][T10435] hsr_slave_1: entered promiscuous mode [ 2906.437429][T10435] debugfs: 'hsr0' already exists in 'hsr' [ 2906.437449][T10435] Cannot create hsr debugfs directory [ 2907.075436][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10870'. [ 2907.094462][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10872'. [ 2907.094485][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10872'. [ 2907.319181][ T8418] Bluetooth: hci1: command tx timeout [ 2907.351762][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10872'. [ 2907.655893][T10435] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2907.680601][T10435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2907.681443][T10435] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2907.713837][T10435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2907.715301][T10435] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2907.727637][T10435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2907.732020][T10435] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2907.763816][T10435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2908.151737][T10435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2908.220528][T10435] 8021q: adding VLAN 0 to HW filter on device team0 [ 2908.245059][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 2908.245161][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2908.266725][T32442] bridge0: port 2(bridge_slave_1) entered blocking state [ 2908.266830][T32442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2908.613710][T10435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2908.811579][T10435] veth0_vlan: entered promiscuous mode [ 2908.870719][T10435] veth1_vlan: entered promiscuous mode [ 2909.002904][T10435] veth0_macvtap: entered promiscuous mode [ 2909.016316][T10435] veth1_macvtap: entered promiscuous mode [ 2909.088474][T10435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2909.123247][T10435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2909.191488][ T5899] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.192360][ T5899] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.225058][ T5914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.284120][ T5903] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.399428][ T8418] Bluetooth: hci1: command tx timeout [ 2909.560121][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2909.561039][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2909.688017][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2909.688039][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2910.670487][T10602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10911'. [ 2911.480467][ T8418] Bluetooth: hci1: command tx timeout [ 2911.871316][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10927'. [ 2911.964548][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10930'. [ 2912.746569][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10942'. [ 2913.436165][T10697] syzkaller0: entered promiscuous mode [ 2913.436188][T10697] syzkaller0: entered allmulticast mode [ 2913.559247][ T8418] Bluetooth: hci1: command tx timeout [ 2914.369611][T10723] ip_tables: iptables: counters copy to user failed while replacing table [ 2914.797008][T10735] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2914.916403][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10969'. [ 2915.087375][ T8418] Bluetooth: hci0: command 0x0406 tx timeout [ 2915.302214][T10749] tun0: tun_chr_ioctl cmd 1074025677 [ 2915.302338][T10749] tun0: linktype set to 778 [ 2915.647127][T10760] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 2915.812367][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10981'. [ 2916.470110][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10994'. [ 2917.920239][T10847] 8021q: adding VLAN 0 to HW filter on device .` [ 2918.086832][T10856] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2918.086864][T10856] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2918.086946][T10856] vhci_hcd vhci_hcd.0: Device attached [ 2918.163199][T10856] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2918.163228][T10856] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2918.165364][T10856] vhci_hcd vhci_hcd.0: Device attached [ 2918.166847][T10857] vhci_hcd: connection closed [ 2918.170329][ T5895] vhci_hcd vhci_hcd.3: stop threads [ 2918.170353][ T5895] vhci_hcd vhci_hcd.3: release socket [ 2918.170370][ T5895] vhci_hcd vhci_hcd.3: disconnect device [ 2918.170450][T10859] vhci_hcd: connection closed [ 2918.172534][ T5895] vhci_hcd vhci_hcd.3: stop threads [ 2918.172552][ T5895] vhci_hcd vhci_hcd.3: release socket [ 2918.172569][ T5895] vhci_hcd vhci_hcd.3: disconnect device [ 2918.790693][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 2918.790715][ T30] audit: type=1326 audit(1792416558.613:59137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02ed9e559 code=0x7ffc0000 [ 2918.790762][ T30] audit: type=1326 audit(1792416558.613:59138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02ed9e559 code=0x7ffc0000 [ 2918.795948][ T30] audit: type=1326 audit(1792416558.623:59139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa02ed9e559 code=0x7ffc0000 [ 2918.796069][ T30] audit: type=1326 audit(1792416558.623:59140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02ed9e559 code=0x7ffc0000 [ 2918.796200][ T30] audit: type=1326 audit(1792416558.623:59141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.11032" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02ed9e559 code=0x7ffc0000 [ 2919.240697][T10909] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 2919.240724][T10909] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2919.240797][T10909] vhci_hcd vhci_hcd.0: Device attached [ 2919.275721][T10911] vhci_hcd: connection closed [ 2919.277482][ T5903] vhci_hcd vhci_hcd.6: stop threads [ 2919.277509][ T5903] vhci_hcd vhci_hcd.6: release socket [ 2919.277528][ T5903] vhci_hcd vhci_hcd.6: disconnect device [ 2920.394659][ T30] audit: type=1326 audit(1792416560.223:59142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.6.11069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173b9e559 code=0x7ffc0000 [ 2920.394786][ T30] audit: type=1326 audit(1792416560.223:59143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.6.11069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173b9e559 code=0x7ffc0000 [ 2920.397181][ T30] audit: type=1326 audit(1792416560.223:59144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.6.11069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f5173b9e559 code=0x7ffc0000 [ 2920.397286][ T30] audit: type=1326 audit(1792416560.223:59145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.6.11069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173b9e559 code=0x7ffc0000 [ 2920.397428][ T30] audit: type=1326 audit(1792416560.223:59146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.6.11069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173b9e559 code=0x7ffc0000 [ 2920.643605][T10968] xt_bpf: check failed: parse error [ 2922.106651][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2923.833027][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11154'. [ 2924.970260][T11173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11166'. [ 2925.137454][ T1077] sony 0005:054C:03D5.00A6: UNIQ does not contain a MAC address; duplicate check skipped [ 2925.187837][ T1077] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.00A6/input/input464 [ 2925.206581][ T1077] sony 0005:054C:03D5.00A6: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 2925.252560][ T8418] Bluetooth: Frame is too long (len 10, expected len 4) [ 2925.274270][ T8418] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2925.329446][T23068] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2925.489494][T23068] usb 4-1: Using ep0 maxpacket: 32 [ 2925.495065][T23068] usb 4-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=25.5c [ 2925.503949][T23068] usb 4-1: config 1 has an invalid interface number: 20 but max is 0 [ 2925.503976][T23068] usb 4-1: config 1 has no interface number 0 [ 2925.504014][T23068] usb 4-1: config 1 interface 20 has no altsetting 0 [ 2925.510378][T23068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.510405][T23068] usb 4-1: Product: syz [ 2925.510419][T23068] usb 4-1: Manufacturer: syz [ 2925.510432][T23068] usb 4-1: SerialNumber: syz [ 2925.759871][T23068] usb 4-1: USB disconnect, device number 40 [ 2925.904967][T11182] fido_id[11182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2926.066775][T11202] netlink: 'syz.6.11176': attribute type 2 has an invalid length. [ 2926.545163][T11223] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.11183'. [ 2926.827201][T11236] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 2926.827229][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2926.829780][T11236] vhci_hcd vhci_hcd.0: Device attached [ 2926.835407][T11237] vhci_hcd: connection closed [ 2926.837731][ T5914] vhci_hcd vhci_hcd.4: stop threads [ 2926.837757][ T5914] vhci_hcd vhci_hcd.4: release socket [ 2926.837777][ T5914] vhci_hcd vhci_hcd.4: disconnect device [ 2926.882081][T11242] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11188'. [ 2927.033732][T11249] usb usb8: usbfs: process 11249 (syz.5.11193) did not claim interface 0 before use [ 2927.687219][T11269] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11202'. [ 2927.886699][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11208'. [ 2927.982796][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11212'. [ 2928.088454][T11291] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11213'. [ 2928.632110][T11324] bridge0: port 3(syz_tun) entered blocking state [ 2928.632225][T11324] bridge0: port 3(syz_tun) entered disabled state [ 2928.632426][T11324] syz_tun: entered allmulticast mode [ 2928.635904][T11324] syz_tun: entered promiscuous mode [ 2928.636840][T11324] bridge0: port 3(syz_tun) entered blocking state [ 2928.636955][T11324] bridge0: port 3(syz_tun) entered forwarding state [ 2929.399627][ T8418] Bluetooth: hci2: command 0x2016 tx timeout [ 2930.879682][ T5903] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2930.880973][T32442] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2930.881023][T32442] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2930.881056][T32442] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2931.498937][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11267'. [ 2932.155720][T11450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2932.156292][T11450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2933.066810][T11495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2933.081894][T11495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2933.147268][ T5913] IPVS: starting estimator thread 0... [ 2933.229509][T11504] IPVS: using max 35 ests per chain, 84000 per kthread [ 2933.699618][T11366] hid_parser_main: 5 callbacks suppressed [ 2933.699641][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699669][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699693][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699719][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699742][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699765][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699788][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699811][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699833][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.699857][T11366] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2933.706444][T11366] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.04 Device [syz1] on syz1 [ 2934.479356][T11366] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2934.505186][T11577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2934.630788][T11366] usb 6-1: Using ep0 maxpacket: 8 [ 2934.631631][T11366] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2934.632585][T11366] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.632606][T11366] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2934.632627][T11366] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2934.632640][T11366] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2934.632653][T11366] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2934.633599][T11366] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.633619][T11366] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2934.633638][T11366] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2934.633651][T11366] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2934.633664][T11366] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2934.634569][T11366] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.634589][T11366] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2934.634612][T11366] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2934.634625][T11366] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2934.634638][T11366] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2934.636537][T11366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.636551][T11366] usb 6-1: Product: syz [ 2934.636559][T11366] usb 6-1: Manufacturer: syz [ 2934.636566][T11366] usb 6-1: SerialNumber: syz [ 2935.004113][T11366] adutux 6-1:168.0: interrupt endpoints not found [ 2935.011550][T11366] usb 6-1: USB disconnect, device number 61 [ 2935.548871][T11609] netlink: 'syz.2.11343': attribute type 17 has an invalid length. [ 2935.548893][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11343'. [ 2935.613612][T11609] macvtap1: entered allmulticast mode [ 2935.613634][T11609] dummy0: entered allmulticast mode [ 2935.613704][T11609] dummy0: entered promiscuous mode [ 2935.622153][T11604] netlink: 'syz.2.11343': attribute type 17 has an invalid length. [ 2935.622175][T11604] netlink: 47 bytes leftover after parsing attributes in process `syz.2.11343'. [ 2935.622189][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11343'. [ 2935.645588][T11604] macvtap2: entered allmulticast mode [ 2935.719610][T11617] sctp: [Deprecated]: syz.5.11348 (pid 11617) Use of int in max_burst socket option deprecated. [ 2935.719610][T11617] Use struct sctp_assoc_value instead [ 2936.049218][ T6380] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2936.201434][ T6380] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2936.202410][ T6380] usb 6-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 2936.202454][ T6380] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2936.202493][ T6380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2936.244880][ T6380] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2936.797107][T11645] sctp: [Deprecated]: syz.2.11359 (pid 11645) Use of int in max_burst socket option deprecated. [ 2936.797107][T11645] Use struct sctp_assoc_value instead [ 2937.034658][T11652] netlink: 'syz.6.11361': attribute type 17 has an invalid length. [ 2937.034680][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11361'. [ 2937.079749][T11652] macvtap1: entered allmulticast mode [ 2937.079775][T11652] dummy0: entered allmulticast mode [ 2937.079999][T11652] dummy0: entered promiscuous mode [ 2937.107820][T11652] netlink: 'syz.6.11361': attribute type 17 has an invalid length. [ 2937.107835][T11652] netlink: 47 bytes leftover after parsing attributes in process `syz.6.11361'. [ 2937.107843][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11361'. [ 2937.168832][T11652] macvtap2: entered allmulticast mode [ 2937.911078][ T6380] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2938.059813][ T6380] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2938.061499][ T6380] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2938.061525][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2938.061538][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2938.061549][ T6380] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2938.063089][ T6380] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2938.063104][ T6380] usb 3-1: Manufacturer: syz [ 2938.067920][ T6380] usb 3-1: config 0 descriptor?? [ 2938.386638][T11675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11372'. [ 2938.423575][T11675] x_tables: duplicate underflow at hook 1 [ 2938.570315][ T6380] appleir 0003:05AC:8243.00A8: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2938.680027][T11368] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2938.861388][T11368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2938.861443][T11368] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2938.862611][T11368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2938.862634][T11368] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2938.862674][T11368] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2938.865114][ T6380] usb 6-1: USB disconnect, device number 62 [ 2938.868335][T11368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2938.868359][T11368] usb 4-1: Product: syz [ 2938.868374][T11368] usb 4-1: Manufacturer: syz [ 2938.993064][T11363] usb 3-1: USB disconnect, device number 104 [ 2939.005190][T11368] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 2939.231914][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2939.233784][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2939.308405][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 2939.317827][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 2939.319109][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 2939.319916][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 2939.334118][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 2939.335713][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 2939.336818][T11368] uvcvideo 4-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 2939.339685][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 2939.340779][T11368] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 2939.344170][T11368] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 2939.425204][T11368] usb 4-1: USB disconnect, device number 41 [ 2940.259384][ T6380] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2940.411528][ T6380] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2940.414648][ T6380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2940.414664][ T6380] usb 3-1: Product: syz [ 2940.414681][ T6380] usb 3-1: Manufacturer: syz [ 2940.414689][ T6380] usb 3-1: SerialNumber: syz [ 2940.553040][T11719] bridge0: port 1(bridge_slave_0) entered learning state [ 2940.891939][T11731] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11396'. [ 2940.906396][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2940.906432][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2940.907154][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11397'. [ 2940.969355][T11733] x_tables: duplicate underflow at hook 1 [ 2941.243077][T11363] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2941.412440][T11363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2941.412494][T11363] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2941.413501][T11363] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2941.413522][T11363] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2941.413563][T11363] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2941.416338][T11363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2941.416360][T11363] usb 6-1: Product: syz [ 2941.416375][T11363] usb 6-1: Manufacturer: syz [ 2941.488950][T11363] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 2941.552505][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2941.552558][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2941.553936][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2941.594169][ T6380] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2941.612853][ T6380] usb 3-1: USB disconnect, device number 105 [ 2941.655336][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2941.655856][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2941.686937][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 2941.687779][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 2941.688301][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 2941.688759][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 2941.689337][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 2941.689778][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 2941.703655][T11363] uvcvideo 6-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 2941.705060][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 2941.710079][T11363] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 2941.710288][T11363] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 2941.794596][T11363] usb 6-1: USB disconnect, device number 63 [ 2942.295670][T11749] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11404'. [ 2942.354622][T11750] process 'memfd:-BÕN4¦EyÛѧ±Sñ:)' started with executable stack [ 2942.837175][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11415'. [ 2942.847825][T11774] x_tables: duplicate underflow at hook 1 [ 2943.041960][T11778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11416'. [ 2943.109399][T11365] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2943.276473][T11365] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2943.276524][T11365] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2943.277514][T11365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2943.277536][T11365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2943.277578][T11365] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2943.280087][T11365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2943.280109][T11365] usb 3-1: Product: syz [ 2943.280123][T11365] usb 3-1: Manufacturer: syz [ 2943.356017][T11365] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 2943.389711][T11786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11421'. [ 2943.513398][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2943.513675][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2943.566512][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 2943.567026][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 2943.567526][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 2943.571697][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 2943.591690][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 2943.619853][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 2943.630952][T11365] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 2943.635683][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 2943.636224][T11365] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 2943.636420][T11365] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 2943.692180][T11365] usb 3-1: USB disconnect, device number 106 [ 2944.118793][T11807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11429'. [ 2944.431614][T11817] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11434'. [ 2944.709542][T11365] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2944.870062][T11365] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2944.871139][T11365] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2944.873337][T11365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2944.873362][T11365] usb 3-1: Product: syz [ 2944.873375][T11365] usb 3-1: Manufacturer: syz [ 2944.873390][T11365] usb 3-1: SerialNumber: syz [ 2944.936476][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11441'. [ 2944.961527][T11836] x_tables: duplicate underflow at hook 1 [ 2945.020447][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11443'. [ 2945.131363][T11841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11444'. [ 2945.309293][T11843] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[11844] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[11843] [ 2945.326285][T11843] netlink: 'syz.5.11445': attribute type 21 has an invalid length. [ 2945.326346][T11843] netlink: 120 bytes leftover after parsing attributes in process `syz.5.11445'. [ 2945.326370][T11843] netlink: 'syz.5.11445': attribute type 1 has an invalid length. [ 2945.977826][T11365] cdc_ncm 3-1:1.0: failed to get mac address [ 2946.179849][T11365] cdc_ncm 3-1:1.0: bind() failure [ 2946.198066][T11365] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2946.208188][T11365] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2946.228299][T11365] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2946.263588][T11365] usb 3-1: USB disconnect, device number 107 [ 2946.319731][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2946.319751][ T30] audit: type=1326 audit(1792416586.153:59195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.327836][ T30] audit: type=1326 audit(1792416586.153:59196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.362557][ T30] audit: type=1326 audit(1792416586.193:59197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.413555][ T30] audit: type=1326 audit(1792416586.223:59198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.442574][ T30] audit: type=1326 audit(1792416586.243:59199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.444840][ T30] audit: type=1326 audit(1792416586.273:59200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.445804][ T30] audit: type=1326 audit(1792416586.273:59201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.448016][ T30] audit: type=1326 audit(1792416586.273:59202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.524215][ T30] audit: type=1326 audit(1792416586.283:59203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2946.585658][ T30] audit: type=1326 audit(1792416586.413:59204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.3.11446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 2948.156911][T11899] netlink: 'syz.4.11466': attribute type 1 has an invalid length. [ 2948.205247][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2948.285391][T11899] bond0: (slave geneve2): making interface the new active one [ 2948.298388][T11899] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 2948.302576][T13634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2948.429216][ T5903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2948.429263][ T5903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2948.429295][ T5903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2949.073442][T11919] __nla_validate_parse: 3 callbacks suppressed [ 2949.073457][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11473'. [ 2949.258843][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11475'. [ 2949.285992][T11925] x_tables: duplicate underflow at hook 1 [ 2949.539255][T11368] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2949.703428][T11368] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2949.703481][T11368] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2949.705364][T11368] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.705389][T11368] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2949.705448][T11368] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2949.761149][T11368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2949.761184][T11368] usb 6-1: Product: syz [ 2949.761199][T11368] usb 6-1: Manufacturer: syz [ 2949.816381][T11368] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 2950.022517][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.025217][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.057325][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 2950.057658][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 2950.057977][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 2950.062417][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 2950.063694][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 2950.072554][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 2950.073494][T11368] uvcvideo 6-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 2950.075450][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 2950.076904][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 2950.077105][T11368] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 2950.093789][T11368] usb 6-1: USB disconnect, device number 64 [ 2950.595735][ T6380] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2950.751624][ T6380] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2950.752146][ T6380] usb 4-1: not running at top speed; connect to a high speed hub [ 2950.752175][ T6380] usb 4-1: New USB device found, idVendor=10c4, idProduct=f002, bcdDevice=a9.0a [ 2950.754856][ T6380] usb 4-1: config 64 has an invalid interface number: 70 but max is 0 [ 2950.754881][ T6380] usb 4-1: config 64 has no interface number 0 [ 2950.754921][ T6380] usb 4-1: config 64 interface 70 has no altsetting 0 [ 2950.842356][ T6380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.842384][ T6380] usb 4-1: Product: syz [ 2950.842398][ T6380] usb 4-1: Manufacturer: syz [ 2950.842412][ T6380] usb 4-1: SerialNumber: syz [ 2950.926016][T19922] Bluetooth: hci2: command 0x2016 tx timeout [ 2951.162658][T11940] netlink: 'syz.3.11480': attribute type 12 has an invalid length. [ 2951.166555][T11940] netlink: 'syz.3.11480': attribute type 10 has an invalid length. [ 2951.218473][T11955] netlink: 'syz.3.11480': attribute type 10 has an invalid length. [ 2951.224631][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2951.250794][T11940] team0: Port device netdevsim1 added [ 2951.306309][T11954] netlink: 'syz.4.11485': attribute type 1 has an invalid length. [ 2951.380147][ T772] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2951.386451][T11954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2951.511083][ T6380] cp210x 4-1:64.70: cp210x converter detected [ 2951.513121][ T6380] cp210x 4-1:64.70: failed to get vendor val 0x370b size 1: -71 [ 2951.513141][ T6380] cp210x 4-1:64.70: querying part number failed [ 2951.544053][ T6380] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2951.559983][ T772] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2951.565254][ T772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.565269][ T772] usb 3-1: Product: syz [ 2951.565277][ T772] usb 3-1: Manufacturer: syz [ 2951.565284][ T772] usb 3-1: SerialNumber: syz [ 2951.604663][ T6380] usb 4-1: USB disconnect, device number 42 [ 2951.626578][ T6380] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2951.637314][ T6380] cp210x 4-1:64.70: device disconnected [ 2951.919157][T11368] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2952.060399][ T772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2952.077566][ T772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2952.083923][T11368] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2952.083971][T11368] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e [ 2952.085610][T11368] usb 6-1: config 4 has an invalid interface number: 17 but max is 0 [ 2952.085633][T11368] usb 6-1: config 4 has no interface number 0 [ 2952.085670][T11368] usb 6-1: config 4 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 2952.085694][T11368] usb 6-1: config 4 interface 17 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2952.085716][T11368] usb 6-1: config 4 interface 17 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2952.085739][T11368] usb 6-1: config 4 interface 17 has no altsetting 0 [ 2952.092875][T11368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.092899][T11368] usb 6-1: Product: syz [ 2952.092912][T11368] usb 6-1: Manufacturer: syz [ 2952.092926][T11368] usb 6-1: SerialNumber: syz [ 2952.098933][T11964] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2952.697353][ T772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2952.697411][ T772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2952.698091][ T772] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2952.740436][ T772] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2952.762322][ T772] usb 3-1: USB disconnect, device number 108 [ 2952.861875][T11368] kvaser_usb 6-1:4.17: error -ENODEV: Cannot get usb endpoint(s) [ 2952.891345][T11368] usb 6-1: USB disconnect, device number 65 [ 2953.475405][T11985] fuse: Bad value for 'fd' [ 2953.523120][T11363] wacom 0003:056A:0042.00A9: Unknown device_type for 'syz0'. Assuming pen. [ 2953.528615][T11363] wacom 0003:056A:0042.00A9: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 2953.570930][T11363] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.00A9/input/input466 [ 2953.788122][T11990] fido_id[11990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2953.839192][T11363] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2954.001601][T11363] usb 4-1: Using ep0 maxpacket: 16 [ 2954.004066][T11363] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2954.007209][T11363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2954.007235][T11363] usb 4-1: Product: syz [ 2954.007249][T11363] usb 4-1: Manufacturer: syz [ 2954.007263][T11363] usb 4-1: SerialNumber: syz [ 2954.034293][T11363] usb 4-1: config 0 descriptor?? [ 2954.052090][T11363] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2954.061385][T11363] usb 4-1: Detected FT-X [ 2954.278701][T11363] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2954.285983][T11363] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2954.288397][T11363] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2954.306235][T11363] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2954.317528][T11363] usb 4-1: USB disconnect, device number 43 [ 2954.331721][T11363] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2954.334308][T11363] ftdi_sio 4-1:0.0: device disconnected [ 2955.049236][T11368] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2955.089298][ T6380] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2955.222294][T11368] usb 6-1: Using ep0 maxpacket: 16 [ 2955.223247][T11368] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2955.228929][T11368] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2955.228976][T11368] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2955.237048][T11368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.237074][T11368] usb 6-1: Product: syz [ 2955.237088][T11368] usb 6-1: Manufacturer: syz [ 2955.237102][T11368] usb 6-1: SerialNumber: syz [ 2955.273753][T11368] usb 6-1: config 0 descriptor?? [ 2955.280932][T11368] mcba_usb 6-1:0.0: Can't find endpoints [ 2955.304147][ T6380] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2955.323524][ T6380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.323552][ T6380] usb 3-1: Product: syz [ 2955.323565][ T6380] usb 3-1: Manufacturer: syz [ 2955.323580][ T6380] usb 3-1: SerialNumber: syz [ 2955.494978][T11368] usb 6-1: USB disconnect, device number 66 [ 2955.764824][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2955.764887][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2956.376482][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2956.376537][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2956.377309][ T6380] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2956.380875][ T6380] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2956.447337][ T6380] usb 3-1: USB disconnect, device number 109 [ 2957.093211][T12031] bridge0: port 3(syz_tun) entered disabled state [ 2957.138023][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 2957.138387][T12031] bridge0: port 1(bridge_slave_0) entered disabled state [ 2957.776111][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2957.847723][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2958.729937][ T5914] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2958.729990][ T5914] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2958.730025][ T5914] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2958.730059][ T5914] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2958.803894][T12053] syzkaller0: entered promiscuous mode [ 2958.803918][T12053] syz_tun: entered promiscuous mode [ 2958.804105][T12053] syzkaller0: entered allmulticast mode [ 2958.804118][T12053] syz_tun: entered allmulticast mode [ 2959.082233][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.082291][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.409483][T12076] netlink: 'syz.5.11529': attribute type 1 has an invalid length. [ 2959.449206][ T6380] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2959.464631][T12076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2959.543510][T12076] bond2: (slave geneve2): making interface the new active one [ 2959.546301][T12076] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2959.549473][ T5903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.549517][ T5903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.549550][ T5903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.549583][ T5903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.679240][ T6380] usb 3-1: Using ep0 maxpacket: 16 [ 2959.679729][ T6380] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2959.680549][ T6380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2959.680576][ T6380] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2959.682246][ T6380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.682261][ T6380] usb 3-1: Product: syz [ 2959.682269][ T6380] usb 3-1: Manufacturer: syz [ 2959.682276][ T6380] usb 3-1: SerialNumber: syz [ 2959.720681][ T6380] usb 3-1: config 0 descriptor?? [ 2959.767308][ T6380] mcba_usb 3-1:0.0: Can't find endpoints [ 2959.835027][T11367] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2959.955852][ T6380] usb 3-1: USB disconnect, device number 110 [ 2960.021183][T11367] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 2960.035230][T11367] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 2960.035248][T11367] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2960.035259][T11367] usb 4-1: config 0 has no interface number 0 [ 2960.035276][T11367] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2960.035302][T11367] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2960.035315][T11367] usb 4-1: config 0 interface 255 has no altsetting 0 [ 2960.035334][T11367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.046819][T11367] usb 4-1: config 0 descriptor?? [ 2960.057382][T11367] ftdi_sio 4-1:0.255: FTDI USB Serial Device converter detected [ 2960.106307][T11367] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 2960.306203][T11367] usb 4-1: USB disconnect, device number 44 [ 2960.308818][T11367] ftdi_sio 4-1:0.255: device disconnected [ 2960.751994][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11537'. [ 2960.785623][T12103] tipc: Started in network mode [ 2960.785644][T12103] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 2960.785869][T12103] tipc: Enabled bearer , priority 0 [ 2961.050144][ T6380] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2961.163425][T19922] Bluetooth: hci5: command 0x0406 tx timeout [ 2961.221929][ T6380] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2961.224828][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2961.224846][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2961.224858][ T6380] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2961.224880][ T6380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.226868][ T6380] usb 3-1: config 0 descriptor?? [ 2961.735141][T12103] netlink: 'syz.2.11538': attribute type 9 has an invalid length. [ 2961.879925][ T6380] usbhid 3-1:0.0: can't add hid device: -71 [ 2961.880032][ T6380] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2961.906604][ T6380] usb 3-1: USB disconnect, device number 111 [ 2961.907094][T22327] tipc: Node number set to 43690 [ 2962.370096][T11367] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2962.542059][T11367] usb 6-1: Using ep0 maxpacket: 32 [ 2962.542723][T11367] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2962.543628][T11367] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2962.543654][T11367] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2962.545058][T11367] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2962.545081][T11367] usb 6-1: Product: syz [ 2962.545094][T11367] usb 6-1: Manufacturer: syz [ 2962.630693][T11367] hub 6-1:4.0: USB hub found [ 2962.813932][T11367] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 2962.890545][T11367] usb 6-1: USB disconnect, device number 67 [ 2963.040091][T22327] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2963.204835][T22327] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 2963.225692][T22327] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 2963.225717][T22327] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 2963.225735][T22327] usb 3-1: config 0 has no interface number 0 [ 2963.225764][T22327] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2963.225797][T22327] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2963.225820][T22327] usb 3-1: config 0 interface 255 has no altsetting 0 [ 2963.225852][T22327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.228588][T22327] usb 3-1: config 0 descriptor?? [ 2963.292748][T22327] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 2963.332396][T22327] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 2963.352680][T11367] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 2963.463070][T22327] usb 3-1: USB disconnect, device number 112 [ 2963.464170][T22327] ftdi_sio 3-1:0.255: device disconnected [ 2963.529892][T11367] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2963.531658][T11367] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2963.531685][T11367] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2963.570609][T11367] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2963.570634][T11367] usb 6-1: Product: syz [ 2963.570648][T11367] usb 6-1: Manufacturer: syz [ 2963.600282][T11367] hub 6-1:4.0: USB hub found [ 2963.817894][T11367] hub 6-1:4.0: 1 port detected [ 2964.019956][T11367] hub 6-1:4.0: config failed, can't get hub status (err -5) [ 2964.144757][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11556'. [ 2964.431380][ T5895] IPVS: starting estimator thread 0... [ 2964.435521][T12154] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 2964.579204][T12155] IPVS: using max 54 ests per chain, 129600 per kthread [ 2965.399781][T11367] usb 6-1: USB disconnect, device number 68 [ 2965.816640][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11570'. [ 2965.878400][T12185] fuse: Unknown parameter 'default_p' [ 2968.637411][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2968.637431][ T30] audit: type=1326 audit(1792416608.443:59209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.2.11580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 2968.637473][ T30] audit: type=1326 audit(1792416608.453:59210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.2.11580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 2968.704398][ T30] audit: type=1326 audit(1792416608.473:59211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.2.11580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 2968.707960][ T30] audit: type=1326 audit(1792416608.533:59212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.2.11580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 2968.758504][ T30] audit: type=1326 audit(1792416608.553:59213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.2.11580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 2969.321040][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 2970.348545][ T5903] IPVS: starting estimator thread 0... [ 2970.429986][T12263] IPVS: using max 54 ests per chain, 129600 per kthread [ 2970.884376][T12273] netlink: 'syz.5.11603': attribute type 1 has an invalid length. [ 2970.989299][T22327] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2971.053997][T12273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2971.150041][T22327] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 2971.161297][T22327] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 2971.161324][T22327] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2971.161342][T22327] usb 4-1: config 0 has no interface number 0 [ 2971.161368][T22327] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2971.161406][T22327] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2971.161431][T22327] usb 4-1: config 0 interface 255 has no altsetting 0 [ 2971.161461][T22327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2971.186128][T22327] usb 4-1: config 0 descriptor?? [ 2971.265463][T22327] ftdi_sio 4-1:0.255: FTDI USB Serial Device converter detected [ 2971.305098][T22327] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 2971.503334][T22327] usb 4-1: USB disconnect, device number 45 [ 2971.505098][T22327] ftdi_sio 4-1:0.255: device disconnected [ 2971.641032][T12292] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11609'. [ 2972.510075][T12313] ip_tables: iptables: counters copy to user failed while replacing table [ 2972.784266][T12319] bond0: (slave bond_slave_0): Releasing backup interface [ 2972.836189][T12319] bond0: option mode: unable to set because the bond device has slaves [ 2974.959282][T22327] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2975.111890][T22327] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2975.111928][T22327] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e [ 2975.112787][T22327] usb 6-1: config 4 has an invalid interface number: 17 but max is 0 [ 2975.112801][T22327] usb 6-1: config 4 has no interface number 0 [ 2975.112831][T22327] usb 6-1: config 4 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 2975.112845][T22327] usb 6-1: config 4 interface 17 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 2975.112858][T22327] usb 6-1: config 4 interface 17 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2975.112870][T22327] usb 6-1: config 4 interface 17 has no altsetting 0 [ 2975.114541][T22327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2975.114558][T22327] usb 6-1: Product: syz [ 2975.114566][T22327] usb 6-1: Manufacturer: syz [ 2975.114573][T22327] usb 6-1: SerialNumber: syz [ 2975.128790][T12348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2975.692006][T12360] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11638'. [ 2975.926466][T22327] kvaser_usb 6-1:4.17: error -ENODEV: Cannot get usb endpoint(s) [ 2975.999885][T22327] usb 6-1: USB disconnect, device number 69 [ 2976.535579][ T8418] Bluetooth: hci4: command 0x0406 tx timeout [ 2977.222260][T12409] xt_IDLETIMER: timeout value is zero [ 2977.499209][T11368] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2977.669969][T11368] usb 3-1: Using ep0 maxpacket: 16 [ 2977.671860][T11368] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2977.672746][T11368] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2977.672774][T11368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2977.678015][T11368] usb 3-1: config 0 descriptor?? [ 2978.079248][ T5724] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2978.123149][T11368] hid_parser_main: 22 callbacks suppressed [ 2978.123165][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123183][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123198][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123212][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123226][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123241][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123255][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123269][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123283][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.123297][T11368] lua 0003:1E7D:2C2E.00AA: unknown main item tag 0x0 [ 2978.209300][T11368] lua 0003:1E7D:2C2E.00AA: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 2978.230567][ T5724] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2978.249482][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.249509][ T5724] usb 4-1: Product: syz [ 2978.249523][ T5724] usb 4-1: Manufacturer: syz [ 2978.249535][ T5724] usb 4-1: SerialNumber: syz [ 2978.322634][T11368] usb 3-1: USB disconnect, device number 113 [ 2978.461419][T12429] fido_id[12429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2978.726863][ T5724] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2978.726904][ T5724] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2979.216094][T12442] fuse: Bad value for 'fd' [ 2979.240793][ T6380] wacom 0003:056A:0042.00AB: Unknown device_type for 'syz0'. Assuming pen. [ 2979.244528][ T6380] wacom 0003:056A:0042.00AB: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 2979.248023][ T6380] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.00AB/input/input469 [ 2979.355318][ T5724] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2979.355354][ T5724] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2979.355745][ T5724] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2979.402217][ T5724] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2979.446306][ T5724] usb 4-1: USB disconnect, device number 46 [ 2979.479995][T12446] fido_id[12446]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2979.539657][ T6380] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2979.699235][ T6380] usb 3-1: Using ep0 maxpacket: 16 [ 2979.699913][ T6380] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2979.703000][ T6380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2979.703020][ T6380] usb 3-1: Product: syz [ 2979.703028][ T6380] usb 3-1: Manufacturer: syz [ 2979.703035][ T6380] usb 3-1: SerialNumber: syz [ 2979.705273][ T6380] usb 3-1: config 0 descriptor?? [ 2979.746495][ T6380] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2979.747695][ T6380] usb 3-1: Detected FT-X [ 2979.930311][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11676'. [ 2980.051491][ T6380] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2980.053338][ T6380] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2980.053938][ T6380] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2980.082309][ T6380] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2980.107708][ T6380] usb 3-1: USB disconnect, device number 114 [ 2980.144744][ T6380] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2980.145270][ T6380] ftdi_sio 3-1:0.0: device disconnected [ 2980.618914][T12473] input: syz0 as /devices/virtual/input/input472 [ 2981.218997][T12496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11694'. [ 2981.263173][T12496] x_tables: duplicate underflow at hook 1 [ 2981.332887][T12500] fuse: Bad value for 'fd' [ 2981.346461][T11367] wacom 0003:056A:0042.00AC: Unknown device_type for 'syz0'. Assuming pen. [ 2981.359989][T11367] wacom 0003:056A:0042.00AC: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 2981.362111][T11367] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.00AC/input/input473 [ 2981.495758][T12502] fido_id[12502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2981.518024][T22327] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2981.650924][ T6380] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2981.672811][T22327] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2981.672865][T22327] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2981.674034][T22327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2981.674058][T22327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2981.674180][T22327] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2981.676520][T22327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2981.676545][T22327] usb 3-1: Product: syz [ 2981.676559][T22327] usb 3-1: Manufacturer: syz [ 2981.769716][T22327] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 2981.800242][ T6380] usb 6-1: Using ep0 maxpacket: 16 [ 2981.801150][ T6380] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2981.814385][ T6380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.814432][ T6380] usb 6-1: Product: syz [ 2981.814446][ T6380] usb 6-1: Manufacturer: syz [ 2981.814458][ T6380] usb 6-1: SerialNumber: syz [ 2981.848226][ T6380] usb 6-1: config 0 descriptor?? [ 2981.858431][ T6380] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2981.868641][ T6380] usb 6-1: Detected FT-X [ 2981.981149][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2981.993086][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2982.013075][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 2982.029300][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 2982.032667][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 2982.034290][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 2982.034828][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 2982.036886][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 2982.037242][T22327] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 2982.039434][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 2982.039977][T22327] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 2982.040192][T22327] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 2982.103261][T22327] usb 3-1: USB disconnect, device number 115 [ 2982.197619][ T6380] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2982.210275][ T6380] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2982.212363][ T6380] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2982.217521][ T6380] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2982.250147][ T6380] usb 6-1: USB disconnect, device number 70 [ 2982.269824][ T6380] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2982.270300][ T6380] ftdi_sio 6-1:0.0: device disconnected [ 2982.646219][T12512] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.11700'. [ 2984.508297][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11714'. [ 2984.804198][T12553] syzkaller0: entered promiscuous mode [ 2984.804224][T12553] syzkaller0: entered allmulticast mode [ 2985.072302][T11367] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2985.220725][T11367] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2985.222057][T11367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2985.222081][T11367] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2985.224743][T11367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.224768][T11367] usb 3-1: Product: syz [ 2985.224783][T11367] usb 3-1: Manufacturer: syz [ 2985.224798][T11367] usb 3-1: SerialNumber: syz [ 2985.228617][T11367] usb 3-1: config 0 descriptor?? [ 2985.369243][T11368] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2985.529534][T11368] usb 4-1: Using ep0 maxpacket: 8 [ 2985.530329][T11368] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2985.531622][T11368] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2985.531647][T11368] usb 4-1: config 0 has no interface number 0 [ 2985.531685][T11368] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2985.531709][T11368] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2985.531733][T11368] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2985.531758][T11368] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2985.531799][T11368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2985.535136][T11368] usb 4-1: config 0 descriptor?? [ 2985.657398][T11368] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2988.161583][ T6380] usb 4-1: USB disconnect, device number 47 [ 2988.217724][ T6380] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2991.803404][T12562] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2991.854862][ T5724] usb 3-1: USB disconnect, device number 116 [ 2992.239174][T11363] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2992.390628][T11363] usb 6-1: Using ep0 maxpacket: 8 [ 2992.391428][T11363] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2992.392668][T11363] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2992.392692][T11363] usb 6-1: config 0 has no interface number 0 [ 2992.392729][T11363] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2992.392750][T11363] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2992.392773][T11363] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2992.392798][T11363] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2992.392868][T11363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2992.395895][T11363] usb 6-1: config 0 descriptor?? [ 2992.492168][T11363] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2992.555576][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11754'. [ 2992.571615][T12653] ip_tables: iptables: counters copy to user failed while replacing table [ 2993.576162][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11761'. [ 2993.773337][T12686] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 2995.026776][T11363] usb 6-1: USB disconnect, device number 71 [ 2995.055447][T11363] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2995.436026][T12736] xt_IDLETIMER: timeout value is zero [ 2996.188243][T12746] kvm: pic: single mode not supported [ 2996.188506][T12746] kvm: pic: single mode not supported [ 2996.213260][T12746] kvm: pic: level sensitive irq not supported [ 2996.227844][T12746] kvm: pic: single mode not supported [ 2996.227869][T12746] kvm: pic: level sensitive irq not supported [ 2996.242800][T12746] kvm: pic: single mode not supported [ 2996.242818][T12746] kvm: pic: level sensitive irq not supported [ 2996.243136][T12746] kvm: pic: single mode not supported [ 2996.243145][T12746] kvm: pic: level sensitive irq not supported [ 2996.243202][T12746] kvm: pic: level sensitive irq not supported [ 2996.243306][T12746] kvm: pic: level sensitive irq not supported [ 2996.244586][T12746] kvm: pic: single mode not supported [ 2996.245731][T12746] kvm: pic: single mode not supported [ 2996.245742][T12746] kvm: pic: level sensitive irq not supported [ 2996.245896][T12746] kvm: pic: level sensitive irq not supported [ 2996.246462][T12746] kvm: pic: level sensitive irq not supported [ 2996.329775][T12746] kvm: pic: level sensitive irq not supported [ 2996.330809][T12746] kvm: pic: single mode not supported [ 2996.335965][T12746] kvm: pic: single mode not supported [ 2996.448793][T12761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11788'. [ 2996.740697][T12746] kvm: pic: single mode not supported [ 2997.209271][ T5724] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 2997.363600][ T5724] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2997.366313][ T5724] usb 6-1: not running at top speed; connect to a high speed hub [ 2997.366358][ T5724] usb 6-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 2997.368844][ T5724] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 208, changing to 4 [ 2997.372536][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2997.372559][ T5724] usb 6-1: Product: syz [ 2997.372573][ T5724] usb 6-1: Manufacturer: syz [ 2997.372587][ T5724] usb 6-1: SerialNumber: syz [ 2997.567584][T12792] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11800'. [ 2997.808610][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2997.810253][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.816195][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2997.819765][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.825980][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2997.828971][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2998.137713][ T5903] pimreg: left allmulticast mode [ 2998.137840][ T5903] lo: left allmulticast mode [ 2998.614958][ T5903] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2998.776575][ T5903] bond0 (unregistering): (slave geneve2): Releasing active interface [ 2998.920826][ T5903] .` (unregistering): Released all slaves [ 2998.937014][ T5903] bond1 (unregistering): Released all slaves [ 2998.967512][ T5903] bond2 (unregistering): Released all slaves [ 2998.986926][ T5903] bond3 (unregistering): Released all slaves [ 2999.008126][ T5903] bond4 (unregistering): Released all slaves [ 2999.047365][ T5903] bond5 (unregistering): Released all slaves [ 2999.088987][ T5903] bond0 (unregistering): Released all slaves [ 2999.128026][ T5903] bond6 (unregistering): Released all slaves [ 2999.157983][ T5903] bond7 (unregistering): Released all slaves [ 2999.192814][ T5903] bond8 (unregistering): Released all slaves [ 2999.215296][ T5903] bond9 (unregistering): Released all slaves [ 2999.243288][T12828] bridge0: port 3(syz_tun) entered blocking state [ 2999.245760][T12828] bridge0: port 3(syz_tun) entered disabled state [ 2999.245971][T12828] syz_tun: entered allmulticast mode [ 2999.249807][T12828] syz_tun: entered promiscuous mode [ 2999.250568][T12828] bridge0: port 3(syz_tun) entered blocking state [ 2999.250681][T12828] bridge0: port 3(syz_tun) entered forwarding state [ 2999.452701][ T5903] tipc: Disabling bearer [ 2999.455512][ T5903] tipc: Disabling bearer [ 2999.457289][ T5903] tipc: Left network mode [ 2999.655378][ T5903] IPVS: stopping backup sync thread 7454 ... [ 3000.158637][ T5724] usb 6-1: unit 255 not found! [ 3000.159382][T12853] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 3000.332286][ T5724] snd_usb_variax 6-1:1.1: Line 6 PODxt Live found [ 3000.332981][ T5724] snd_usb_variax 6-1:1.1: set_interface failed [ 3000.333262][ T5724] snd_usb_variax 6-1:1.1: Line 6 PODxt Live now disconnected [ 3000.333422][ T5724] snd_usb_variax 6-1:1.1: probe with driver snd_usb_variax failed with error -71 [ 3000.370410][ T5724] usb 6-1: USB disconnect, device number 72 [ 3000.518706][T11185] udevd[11185]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3000.787924][ T5903] hsr_slave_0: left promiscuous mode [ 3000.794837][ T5903] hsr_slave_1: left promiscuous mode [ 3000.824414][ T5903] dummy0: left allmulticast mode [ 3002.516582][T12898] bridge0: port 1(bridge_slave_0) entered learning state [ 3002.621893][T12909] ip_tables: iptables: counters copy to user failed while replacing table [ 3002.637819][T11363] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3002.789164][T11363] usb 3-1: Using ep0 maxpacket: 8 [ 3002.790010][T11363] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3002.791604][T11363] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3002.791649][T11363] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3002.791674][T11363] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3002.791704][T11363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3002.796347][T11363] usb 3-1: config 0 descriptor?? [ 3002.866782][T11363] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3003.018370][ T5724] usb 3-1: USB disconnect, device number 117 [ 3003.282620][T12928] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11847'. [ 3003.373785][ T5903] IPVS: stop unused estimator thread 0... [ 3004.050160][T12956] ip_tables: iptables: counters copy to user failed while replacing table [ 3004.057295][ T5903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3004.383115][ T5903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3004.555326][ T5903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3004.724368][ T5903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3004.997884][ T5903] bridge_slave_1: left allmulticast mode [ 3004.997910][ T5903] bridge_slave_1: left promiscuous mode [ 3005.000757][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 3005.033170][ T5903] bridge_slave_0: left allmulticast mode [ 3005.033196][ T5903] bridge_slave_0: left promiscuous mode [ 3005.033397][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 3005.275662][ T5903] bond0 (unregistering): Released all slaves [ 3005.945298][ T5903] hsr_slave_0: left promiscuous mode [ 3005.958833][ T5903] hsr_slave_1: left promiscuous mode [ 3005.967845][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3005.967925][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3005.984311][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3005.984333][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3005.992828][T13010] ip_tables: iptables: counters copy to user failed while replacing table [ 3005.999229][T22327] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 3006.077252][ T5903] dummy0: left allmulticast mode [ 3006.077324][ T5903] veth1_macvtap: left promiscuous mode [ 3006.077340][ T5903] veth0_macvtap: left promiscuous mode [ 3006.077397][ T5903] veth1_vlan: left promiscuous mode [ 3006.106583][ T5903] veth0_vlan: left promiscuous mode [ 3006.149206][T22327] usb 6-1: Using ep0 maxpacket: 16 [ 3006.149920][T22327] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3006.150890][T22327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3006.150934][T22327] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3006.161275][T22327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.161300][T22327] usb 6-1: Product: syz [ 3006.161314][T22327] usb 6-1: Manufacturer: syz [ 3006.161328][T22327] usb 6-1: SerialNumber: syz [ 3006.231167][T22327] usb 6-1: config 0 descriptor?? [ 3006.252245][T22327] mcba_usb 6-1:0.0: Can't find endpoints [ 3006.454209][T22327] usb 6-1: USB disconnect, device number 73 [ 3006.865135][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11880'. [ 3007.390900][T11363] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 3007.434906][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 3007.462209][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 3007.550358][T11363] usb 6-1: Using ep0 maxpacket: 8 [ 3007.552884][T11363] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3007.554132][T11363] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 3007.554156][T11363] usb 6-1: config 0 has no interface number 0 [ 3007.554191][T11363] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3007.554211][T11363] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3007.554234][T11363] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3007.554254][T11363] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3007.554291][T11363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.557396][T11363] usb 6-1: config 0 descriptor?? [ 3007.654281][T11363] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3007.834122][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3007.992211][T11363] usb 6-1: USB disconnect, device number 74 [ 3008.017567][T11363] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 3008.171763][T13057] ip_tables: iptables: counters copy to user failed while replacing table [ 3008.620824][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11892'. [ 3009.189244][T22327] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3009.340054][T22327] usb 4-1: Using ep0 maxpacket: 16 [ 3009.348003][T22327] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3009.352797][T22327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3009.352845][T22327] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3009.356430][T22327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.356455][T22327] usb 4-1: Product: syz [ 3009.356469][T22327] usb 4-1: Manufacturer: syz [ 3009.356482][T22327] usb 4-1: SerialNumber: syz [ 3009.360301][T22327] usb 4-1: config 0 descriptor?? [ 3009.362465][T22327] mcba_usb 4-1:0.0: Can't find endpoints [ 3009.501367][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3009.602522][T11368] usb 4-1: USB disconnect, device number 48 [ 3010.000051][T13103] ip_tables: iptables: counters copy to user failed while replacing table [ 3010.295622][T13119] xt_IDLETIMER: timeout value is zero [ 3010.566195][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3010.589176][ T6380] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3010.739643][ T6380] usb 4-1: Using ep0 maxpacket: 16 [ 3010.740550][ T6380] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3010.742016][ T6380] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3010.742042][ T6380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.747254][ T6380] usb 4-1: config 0 descriptor?? [ 3011.303184][ T6380] usbhid 4-1:0.0: can't add hid device: -71 [ 3011.303255][ T6380] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3011.320158][ T6380] usb 4-1: USB disconnect, device number 49 [ 3011.428741][T13145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11904'. [ 3011.477804][T13145] x_tables: duplicate underflow at hook 1 [ 3011.719949][T22327] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 3011.871414][T22327] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3011.871466][T22327] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 3011.884919][T22327] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3011.884945][T22327] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3011.884985][T22327] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3011.905212][T22327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3011.905238][T22327] usb 6-1: Product: syz [ 3011.905251][T22327] usb 6-1: Manufacturer: syz [ 3011.964599][T22327] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 3012.095380][T13167] ip_tables: iptables: counters copy to user failed while replacing table [ 3012.164716][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3012.172986][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3012.208296][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 3012.208855][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 3012.210272][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 3012.219540][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 3012.220315][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 3012.220902][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 3012.222801][T22327] uvcvideo 6-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 3012.224537][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 3012.226477][T22327] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 3012.226675][T22327] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 3012.234386][T22327] usb 6-1: USB disconnect, device number 75 [ 3012.339433][T11368] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3012.402389][T13175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3012.436221][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3012.489187][T11368] usb 4-1: Using ep0 maxpacket: 16 [ 3012.489931][T11368] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3012.491242][T11368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3012.491288][T11368] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3012.514033][T11368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3012.514059][T11368] usb 4-1: Product: syz [ 3012.514073][T11368] usb 4-1: Manufacturer: syz [ 3012.514087][T11368] usb 4-1: SerialNumber: syz [ 3012.570561][T11368] usb 4-1: config 0 descriptor?? [ 3012.577086][T11368] mcba_usb 4-1:0.0: Can't find endpoints [ 3012.689306][T11363] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3012.788526][T11368] usb 4-1: USB disconnect, device number 50 [ 3012.852113][T11363] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 3012.853345][T11363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3012.853395][T11363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3012.853418][T11363] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3012.853440][T11363] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3012.853479][T11363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.228917][T13197] xt_IDLETIMER: timeout value is zero [ 3013.702079][T11363] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3013.706306][ T30] audit: type=1326 audit(1792416653.533:59214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.708868][ T30] audit: type=1326 audit(1792416653.533:59215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.717633][ T30] audit: type=1326 audit(1792416653.543:59216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.717682][ T30] audit: type=1326 audit(1792416653.543:59217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.743835][ T30] audit: type=1326 audit(1792416653.543:59218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.743867][ T30] audit: type=1326 audit(1792416653.553:59219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.743889][ T30] audit: type=1326 audit(1792416653.553:59220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.743910][ T30] audit: type=1326 audit(1792416653.553:59221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.849220][ T30] audit: type=1326 audit(1792416653.623:59222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.849279][ T30] audit: type=1326 audit(1792416653.623:59223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.2.11914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ad9e559 code=0x7ffc0000 [ 3013.974735][T11363] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3013.986669][T11363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3013.986713][T11363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.010718][T11363] usb 4-1: config 0 descriptor?? [ 3014.235487][T11363] usbhid 4-1:0.0: can't add hid device: -71 [ 3014.235585][T11363] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3014.266356][T11363] usb 4-1: USB disconnect, device number 51 [ 3014.302733][T13213] x_tables: duplicate underflow at hook 1 [ 3014.539187][T11368] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 3014.693000][T11368] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3014.693053][T11368] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 3014.694721][T11368] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3014.694735][T11368] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3014.694759][T11368] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3014.736903][T11363] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3014.737178][T11368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3014.737199][T11368] usb 6-1: Product: syz [ 3014.737213][T11368] usb 6-1: Manufacturer: syz [ 3014.785414][T11368] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 3014.910944][T11363] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3014.912215][T11363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3014.912242][T11363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.928700][T11363] usb 4-1: config 0 descriptor?? [ 3014.985254][T13213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3014.989450][T13213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.008190][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 3015.021085][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 3015.022374][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 3015.022788][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 3015.023165][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 3015.023524][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 3015.023955][T11368] uvcvideo 6-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 3015.024851][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 3015.025758][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 3015.025993][T11368] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 3015.133220][T11368] usb 6-1: USB disconnect, device number 76 [ 3015.402041][T11368] usb 3-1: USB disconnect, device number 118 [ 3015.686277][T13238] fuse: Bad value for 'fd' [ 3015.769988][T11363] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 3015.773431][T11363] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input476 [ 3015.819215][T11368] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3015.969105][T11368] usb 3-1: Using ep0 maxpacket: 16 [ 3015.969825][T11368] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3015.970777][T11368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3015.970820][T11368] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3015.972951][T11368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3015.972973][T11368] usb 3-1: Product: syz [ 3015.972986][T11368] usb 3-1: Manufacturer: syz [ 3015.973001][T11368] usb 3-1: SerialNumber: syz [ 3015.976090][T11368] usb 3-1: config 0 descriptor?? [ 3015.981639][ T5724] usb 4-1: USB disconnect, device number 52 [ 3015.984330][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3016.017938][T11368] mcba_usb 3-1:0.0: Can't find endpoints [ 3016.183467][T22327] usb 3-1: USB disconnect, device number 119 [ 3016.320887][T13244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3016.626061][T13255] x_tables: duplicate underflow at hook 1 [ 3016.859142][T11368] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 3016.972504][T13269] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11952'. [ 3017.011074][T11368] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3017.011122][T11368] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 3017.012078][T11368] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3017.012101][T11368] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3017.012142][T11368] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3017.013752][T11368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3017.013775][T11368] usb 6-1: Product: syz [ 3017.013789][T11368] usb 6-1: Manufacturer: syz [ 3017.090261][T11368] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 3017.247044][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3017.247320][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.277924][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 3017.289233][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 3017.289726][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 3017.310414][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 3017.320874][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 3017.322986][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 3017.323421][T11368] uvcvideo 6-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 3017.359979][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 3017.360364][T11368] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 3017.360474][T11368] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 3017.369312][T22327] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3017.407098][T11368] usb 6-1: USB disconnect, device number 77 [ 3017.530262][T22327] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3017.531507][T22327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3017.531543][T22327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3017.533277][T22327] usb 4-1: config 0 descriptor?? [ 3017.750206][T22327] usbhid 4-1:0.0: can't add hid device: -71 [ 3017.750293][T22327] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3017.759545][T22327] usb 4-1: USB disconnect, device number 53 [ 3018.269546][T22327] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3018.443209][T22327] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3018.445137][T22327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3018.445174][T22327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.446848][T22327] usb 4-1: config 0 descriptor?? [ 3018.994403][T13301] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11964'. [ 3019.095817][T13303] input: syz0 as /devices/virtual/input/input478 [ 3019.299939][T22327] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 3019.301510][T22327] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input477 [ 3019.535686][T22327] usb 4-1: USB disconnect, device number 54 [ 3019.535781][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3020.460508][T13336] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11976'. [ 3020.522729][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.522766][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.109285][T11363] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 3021.259329][T11363] usb 6-1: Using ep0 maxpacket: 32 [ 3021.265446][T11363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3021.265496][T11363] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3021.266614][T11363] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 3021.266638][T11363] usb 6-1: config 14 has no interface number 0 [ 3021.266675][T11363] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 3021.266702][T11363] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 3021.266723][T11363] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 3021.266746][T11363] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3021.266762][T11363] usb 6-1: config 14 interface 228 has no altsetting 0 [ 3021.334583][T11363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3021.334609][T11363] usb 6-1: Product: syz [ 3021.334624][T11363] usb 6-1: Manufacturer: syz [ 3021.334637][T11363] usb 6-1: SerialNumber: syz [ 3021.924263][T11363] legousbtower 6-1:14.228: interrupt endpoints not found [ 3022.486188][T13361] netlink: 'syz.5.11980': attribute type 17 has an invalid length. [ 3022.486210][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11980'. [ 3022.537088][T13361] macvtap1: entered allmulticast mode [ 3022.537104][T13361] dummy0: entered allmulticast mode [ 3022.552052][T13363] netlink: 'syz.5.11980': attribute type 17 has an invalid length. [ 3022.552065][T13363] netlink: 47 bytes leftover after parsing attributes in process `syz.5.11980'. [ 3022.552073][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11980'. [ 3022.622263][T13363] macvtap2: entered allmulticast mode [ 3022.958833][T13375] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11988'. [ 3023.910183][T22327] usb 6-1: USB disconnect, device number 78 [ 3027.719205][T19922] Bluetooth: hci1: command 0x0406 tx timeout [ 3081.961911][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.962005][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.400431][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.400491][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 3168.999224][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 3204.840624][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.840702][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 3245.977017][T13478] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[13487] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[13478] [ 3246.001393][T13478] netlink: 'syz.6.11995': attribute type 21 has an invalid length. [ 3246.023488][T13478] netlink: 120 bytes leftover after parsing attributes in process `syz.6.11995'. [ 3246.023516][T13478] netlink: 'syz.6.11995': attribute type 1 has an invalid length. [ 3246.023524][T13478] netlink: 9 bytes leftover after parsing attributes in process `syz.6.11995'. [ 3246.274933][T13486] syzkaller0: entered promiscuous mode [ 3246.274948][T13486] syzkaller0: entered allmulticast mode [ 3246.292005][T32442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.299122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.322698][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.322712][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.816663][T13522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3249.100144][ T5724] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3249.249252][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 3249.251132][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3249.251163][ T5724] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3249.251991][ T5724] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 3249.252006][ T5724] usb 4-1: config 14 has no interface number 0 [ 3249.252030][ T5724] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 3249.252045][ T5724] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 3249.252057][ T5724] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 3249.252070][ T5724] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3249.252083][ T5724] usb 4-1: config 14 interface 228 has no altsetting 0 [ 3249.253781][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.253796][ T5724] usb 4-1: Product: syz [ 3249.253805][ T5724] usb 4-1: Manufacturer: syz [ 3249.253812][ T5724] usb 4-1: SerialNumber: syz [ 3249.712551][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 3249.712571][ T30] audit: type=1326 audit(1792416889.543:59246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.6.12011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5173b9e559 code=0x0 [ 3249.891657][ T5724] legousbtower 4-1:14.228: interrupt endpoints not found [ 3250.399056][ T5724] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3250.441711][T13558] netlink: 'syz.3.12008': attribute type 17 has an invalid length. [ 3250.441726][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12008'. [ 3250.488814][T13558] macvtap0: entered allmulticast mode [ 3250.501142][T13573] netlink: 'syz.3.12008': attribute type 17 has an invalid length. [ 3250.501157][T13573] netlink: 47 bytes leftover after parsing attributes in process `syz.3.12008'. [ 3250.501165][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12008'. [ 3250.559265][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 3250.567077][ T5724] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3250.579988][ T5724] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3250.580015][ T5724] usb 3-1: config 0 has no interface number 0 [ 3250.580053][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3250.580074][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3250.580096][ T5724] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3250.580119][ T5724] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3250.580157][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3250.593371][ T5724] usb 3-1: config 0 descriptor?? [ 3250.650690][T13573] macvtap3: entered allmulticast mode [ 3250.657723][ T5724] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3251.926239][ T5724] usb 4-1: USB disconnect, device number 55 [ 3252.615815][T13585] netlink: 'syz.3.12017': attribute type 2 has an invalid length. [ 3252.615840][T13585] netlink: 'syz.3.12017': attribute type 8 has an invalid length. [ 3252.615853][T13585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12017'. [ 3253.167854][T11363] usb 3-1: USB disconnect, device number 120 [ 3253.189453][T11363] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3254.024453][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12023'. [ 3254.133463][ T5724] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3254.299780][ T5724] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3254.348703][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3254.348730][ T5724] usb 3-1: Product: syz [ 3254.348745][ T5724] usb 3-1: Manufacturer: syz [ 3254.348757][ T5724] usb 3-1: SerialNumber: syz [ 3254.782833][T13615] netlink: 80 bytes leftover after parsing attributes in process `syz.5.12026'. [ 3254.840231][ T5724] rtl8150 3-1:1.0: couldn't reset the device [ 3254.840548][ T5724] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 3254.912183][ T5724] usb 3-1: USB disconnect, device number 121 [ 3255.319152][T11363] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 3255.458847][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12029'. [ 3255.490847][T11363] usb 6-1: Using ep0 maxpacket: 32 [ 3255.493265][T11363] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3255.493342][T11363] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3255.495741][T11363] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 3255.495769][T11363] usb 6-1: config 14 has no interface number 0 [ 3255.495808][T11363] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 3255.495830][T11363] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 3255.495841][T11363] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 3255.495855][T11363] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3255.495868][T11363] usb 6-1: config 14 interface 228 has no altsetting 0 [ 3255.596802][T11363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.596819][T11363] usb 6-1: Product: syz [ 3255.596827][T11363] usb 6-1: Manufacturer: syz [ 3255.596835][T11363] usb 6-1: SerialNumber: syz [ 3255.962435][T11367] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3256.129393][T11367] usb 3-1: Using ep0 maxpacket: 8 [ 3256.162505][T11367] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3256.164049][T11367] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3256.164065][T11367] usb 3-1: config 0 has no interface number 0 [ 3256.164086][T11367] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3256.164099][T11367] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3256.164111][T11367] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3256.164124][T11367] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3256.164165][T11367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3256.254049][T11367] usb 3-1: config 0 descriptor?? [ 3256.272538][T11367] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3256.301878][T11363] legousbtower 6-1:14.228: interrupt endpoints not found [ 3256.937608][T13640] netlink: 'syz.5.12027': attribute type 17 has an invalid length. [ 3256.937632][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12027'. [ 3257.038036][T13641] netlink: 'syz.5.12027': attribute type 17 has an invalid length. [ 3257.038060][T13641] netlink: 47 bytes leftover after parsing attributes in process `syz.5.12027'. [ 3257.038074][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12027'. [ 3257.071296][T13640] macvtap3: entered allmulticast mode [ 3257.148622][T13641] macvtap4: entered allmulticast mode [ 3258.398727][ T5724] usb 6-1: USB disconnect, device number 79 [ 3258.549713][T13649] FAULT_INJECTION: forcing a failure. [ 3258.549713][T13649] name failslab, interval 1, probability 0, space 0, times 0 [ 3258.554855][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.3.12035 Tainted: G L syzkaller #0 PREEMPT(full) [ 3258.554884][T13649] Tainted: [L]=SOFTLOCKUP [ 3258.554891][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 3258.554902][T13649] Call Trace: [ 3258.554913][T13649] [ 3258.554923][T13649] dump_stack_lvl+0xe8/0x150 [ 3258.554971][T13649] should_fail_ex+0x410/0x560 [ 3258.555002][T13649] should_failslab+0xa8/0x100 [ 3258.555030][T13649] __kmalloc_cache_noprof+0xa3/0x600 [ 3258.555053][T13649] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 3258.555072][T13649] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 3258.555092][T13649] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 3258.555114][T13649] tcp_sendmsg_locked+0x4b02/0x5400 [ 3258.555156][T13649] ? __lock_acquire+0x747/0x2de0 [ 3258.555185][T13649] ? __lock_acquire+0x747/0x2de0 [ 3258.555213][T13649] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 3258.555238][T13649] ? tcp_sendmsg+0x21/0x50 [ 3258.555256][T13649] ? __local_bh_enable_ip+0xd6/0x140 [ 3258.555285][T13649] tcp_sendmsg+0x2f/0x50 [ 3258.555302][T13649] ? __pfx_inet_sendmsg+0x10/0x10 [ 3258.555327][T13649] sock_sendmsg_nosec+0x10e/0x180 [ 3258.555357][T13649] ____sys_sendmsg+0x54e/0x850 [ 3258.555382][T13649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3258.555412][T13649] ? import_iovec+0x73/0xa0 [ 3258.555436][T13649] ___sys_sendmsg+0x2a5/0x360 [ 3258.555456][T13649] ? __lock_acquire+0x747/0x2de0 [ 3258.555481][T13649] ? __pfx____sys_sendmsg+0x10/0x10 [ 3258.555507][T13649] ? kstrtouint+0x6e/0xe0 [ 3258.555567][T13649] ? __fget_files+0x2a/0x420 [ 3258.555586][T13649] ? __fget_files+0x3a2/0x420 [ 3258.555613][T13649] __sys_sendmmsg+0x273/0x4d0 [ 3258.555639][T13649] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3258.555670][T13649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3258.555709][T13649] ? ksys_write+0x242/0x270 [ 3258.555732][T13649] ? __pfx_ksys_write+0x10/0x10 [ 3258.555756][T13649] __x64_sys_sendmmsg+0xa0/0xc0 [ 3258.555779][T13649] do_syscall_64+0x166/0x520 [ 3258.555800][T13649] ? trace_irq_disable+0x3b/0x140 [ 3258.555820][T13649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3258.555840][T13649] ? clear_bhb_loop+0x70/0xc0 [ 3258.555862][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3258.555879][T13649] RIP: 0033:0x7f762ed9e559 [ 3258.555908][T13649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3258.555927][T13649] RSP: 002b:00007f762fbd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3258.555950][T13649] RAX: ffffffffffffffda RBX: 00007f762f025fa0 RCX: 00007f762ed9e559 [ 3258.555963][T13649] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 3258.555978][T13649] RBP: 00007f762fbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3258.555989][T13649] R10: 00000000240068c0 R11: 0000000000000246 R12: 0000000000000001 [ 3258.556001][T13649] R13: 00007f762f026038 R14: 00007f762f025fa0 R15: 00007f762f14fa48 [ 3258.556028][T13649] [ 3259.110835][ T5724] usb 3-1: USB disconnect, device number 122 [ 3259.131882][ T5724] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 3259.169764][T11363] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 3259.281439][T11367] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3259.319883][T11363] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 3259.322947][T11363] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 3259.323003][T11363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3259.364137][T11363] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 3259.439077][T11367] usb 4-1: Using ep0 maxpacket: 16 [ 3259.455983][T13653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.456720][T13653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.481710][T13653] netlink: 'syz.3.12037': attribute type 9 has an invalid length. [ 3259.481755][T13653] netlink: 'syz.3.12037': attribute type 7 has an invalid length. [ 3259.481768][T13653] netlink: 'syz.3.12037': attribute type 8 has an invalid length. [ 3259.517199][T11367] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3259.517234][T11367] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 3259.518437][T11367] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 3259.518470][T11367] usb 4-1: can't read configurations, error -71 [ 3259.588637][T13662] netlink: 'syz.5.12036': attribute type 4 has an invalid length. [ 3259.626880][T13662] netlink: 'syz.5.12036': attribute type 4 has an invalid length. [ 3259.729051][ T5724] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3259.881944][ T5724] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3259.886697][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3259.886731][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3259.886751][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3259.886803][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3259.955610][ T5724] usb 3-1: config 0 descriptor?? [ 3260.414273][ T5724] hid_parser_main: 28 callbacks suppressed [ 3260.414290][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.414311][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.414326][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.414341][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.414356][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.414392][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.416103][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.416142][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.416168][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.417362][ T5724] plantronics 0003:047F:FFFF.00AD: unknown main item tag 0x0 [ 3260.439879][ T5724] plantronics 0003:047F:FFFF.00AD: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3260.528833][T11363] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 3260.772319][T11363] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 3260.772343][T11363] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 3260.802690][T11363] usb 6-1: USB disconnect, device number 80 [ 3260.903312][T13685] input: syz1 as /devices/virtual/input/input480 [ 3260.904222][ T30] audit: type=1326 audit(1792416900.723:59247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 3260.910750][T13687] FAULT_INJECTION: forcing a failure. [ 3260.910750][T13687] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.910782][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.3.12046 Tainted: G L syzkaller #0 PREEMPT(full) [ 3260.910806][T13687] Tainted: [L]=SOFTLOCKUP [ 3260.910812][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 3260.910824][T13687] Call Trace: [ 3260.910832][T13687] [ 3260.910840][T13687] dump_stack_lvl+0xe8/0x150 [ 3260.910873][T13687] should_fail_ex+0x410/0x560 [ 3260.910903][T13687] ? __alloc_skb+0x1db/0x7a0 [ 3260.910921][T13687] should_failslab+0xa8/0x100 [ 3260.910948][T13687] ? __alloc_skb+0x1db/0x7a0 [ 3260.910963][T13687] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 3260.910985][T13687] ? __alloc_skb+0x18d/0x7a0 [ 3260.911002][T13687] ? __alloc_skb+0x1db/0x7a0 [ 3260.911024][T13687] __alloc_skb+0x1db/0x7a0 [ 3260.911045][T13687] audit_log_start+0x1b3/0xa10 [ 3260.911078][T13687] ? __pfx_audit_log_start+0x10/0x10 [ 3260.911106][T13687] ? get_pid_task+0x20/0x1f0 [ 3260.911124][T13687] ? get_pid_task+0x20/0x1f0 [ 3260.911140][T13687] ? get_pid_task+0x20/0x1f0 [ 3260.911165][T13687] audit_seccomp+0x63/0x190 [ 3260.911187][T13687] ? clear_bhb_loop+0x70/0xc0 [ 3260.911206][T13687] ? clear_bhb_loop+0xe/0xc0 [ 3260.911228][T13687] __seccomp_filter+0xd14/0x1de0 [ 3260.911268][T13687] ? __pfx___seccomp_filter+0x10/0x10 [ 3260.911290][T13687] ? __mutex_unlock_slowpath+0x731/0x900 [ 3260.911315][T13687] ? __fget_files+0x2a/0x420 [ 3260.911334][T13687] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3260.911356][T13687] ? __fget_files+0x3a2/0x420 [ 3260.911380][T13687] ? fput+0xa0/0xd0 [ 3260.911409][T13687] ? __pfx_ksys_write+0x10/0x10 [ 3260.911432][T13687] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 3260.911460][T13687] do_syscall_64+0x11f/0x520 [ 3260.911480][T13687] ? trace_irq_disable+0x3b/0x140 [ 3260.911503][T13687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.911521][T13687] ? clear_bhb_loop+0x70/0xc0 [ 3260.911542][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.911560][T13687] RIP: 0033:0x7f762ed9e559 [ 3260.911577][T13687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3260.911591][T13687] RSP: 002b:00007f762fbd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000051 [ 3260.911611][T13687] RAX: ffffffffffffffda RBX: 00007f762f025fa0 RCX: 00007f762ed9e559 [ 3260.911624][T13687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3260.911636][T13687] RBP: 00007f762fbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 3260.911647][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3260.911658][T13687] R13: 00007f762f026038 R14: 00007f762f025fa0 R15: 00007f762f14fa48 [ 3260.911686][T13687] [ 3260.923443][T13687] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 3260.923464][T13687] audit: out of memory in audit_log_start [ 3260.941950][ T30] audit: type=1326 audit(1792416900.743:59248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 3260.941997][ T30] audit: type=1326 audit(1792416900.743:59249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 3260.942026][ T30] audit: type=1326 audit(1792416900.743:59250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ed9e559 code=0x7ffc0000 [ 3260.942074][ T30] audit: type=1326 audit(1792416900.743:59251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f762ed5ed8e code=0x7ffc0000 [ 3260.942104][ T30] audit: type=1326 audit(1792416900.743:59252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f762ed5ed8e code=0x7ffc0000 [ 3260.942132][ T30] audit: type=1326 audit(1792416900.753:59253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f762ed5ed8e code=0x7ffc0000 [ 3260.942161][ T30] audit: type=1326 audit(1792416900.753:59254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13686 comm="syz.3.12046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f762ed5ed8e code=0x7ffc0000 [ 3261.320270][T22327] usb 3-1: USB disconnect, device number 123 [ 3262.860250][T11363] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3263.040240][T11363] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3263.041488][T11363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3263.069588][T11363] usb 4-1: config 0 descriptor?? [ 3263.267755][T13710] ------------[ cut here ]------------ [ 3263.267770][T13710] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 3263.267784][T13710] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#1: syz.5.12055/13710 [ 3263.292544][T13710] Modules linked in: [ 3263.296486][T13710] CPU: 1 UID: 0 PID: 13710 Comm: syz.5.12055 Tainted: G L syzkaller #0 PREEMPT(full) [ 3263.307595][T13710] Tainted: [L]=SOFTLOCKUP [ 3263.312217][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 3263.322699][T13710] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 3263.329523][T13710] Code: c6 05 7b 00 23 10 01 48 c7 c7 0f fe 44 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 1b e0 62 00 e9 81 ee ff ff e8 31 3d 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 3263.349550][T13710] RSP: 0018:ffffc9000676f360 EFLAGS: 00010283 [ 3263.355650][T13710] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: 0000000000080000 [ 3263.363858][T13710] RDX: ffffc90017346000 RSI: 00000000000003e9 RDI: 00000000000003ea [ 3263.371931][T13710] RBP: ffffc9000676f4e8 R08: ffffffff917a757f R09: 1ffffffff22f4eaf [ 3263.380197][T13710] R10: dffffc0000000000 R11: fffffbfff22f4eb0 R12: 1ffff92000cede80 [ 3263.388191][T13710] R13: ffff88804e449b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 3263.396314][T13710] FS: 00007fecf28226c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 3263.405492][T13710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3263.412154][T13710] CR2: 0000000000000000 CR3: 000000007a338000 CR4: 00000000003526f0 [ 3263.420256][T13710] Call Trace: [ 3263.423623][T13710] [ 3263.426561][T13710] ? lock_acquire+0x115/0x350 [ 3263.431443][T13710] ? kvm_gpc_refresh+0x31/0x110 [ 3263.436322][T13710] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 3263.441883][T13710] kvm_gpc_refresh+0xe1/0x110 [ 3263.446569][T13710] ? kvm_xen_set_evtchn+0x11e/0x220 [ 3263.451841][T13710] kvm_xen_set_evtchn+0x14f/0x220 [ 3263.456890][T13710] kvm_xen_vcpu_get_attr+0x5b0/0xb20 [ 3263.462297][T13710] kvm_arch_vcpu_ioctl+0x1552/0x23a0 [ 3263.467634][T13710] ? lock_acquire+0x115/0x350 [ 3263.472439][T13710] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 3263.478095][T13710] ? lock_acquire+0x115/0x350 [ 3263.482941][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 3263.488146][T13710] ? is_bpf_text_address+0x292/0x2b0 [ 3263.493546][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 3263.498772][T13710] ? kernel_text_address+0xa5/0xe0 [ 3263.503917][T13710] ? __kernel_text_address+0xd/0x30 [ 3263.509182][T13710] ? unwind_get_return_address+0x4d/0x90 [ 3263.514818][T13710] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3263.521044][T13710] ? arch_stack_walk+0xfb/0x150 [ 3263.525925][T13710] ? stack_trace_save+0xa9/0x100 [ 3263.530901][T13710] ? __pfx_stack_trace_save+0x10/0x10 [ 3263.536272][T13710] ? stack_depot_save_flags+0x33/0x7f0 [ 3263.541782][T13710] ? __lock_acquire+0x747/0x2de0 [ 3263.546738][T13710] ? kfree+0x1c5/0x650 [ 3263.550849][T13710] ? __se_sys_ioctl+0x47/0x170 [ 3263.555604][T13710] ? do_syscall_64+0x166/0x520 [ 3263.560511][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3263.566610][T13710] ? __mutex_trylock_common+0x15f/0x270 [ 3263.572208][T13710] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3263.578129][T13710] ? rcu_is_watching+0x16/0xb0 [ 3263.583130][T13710] ? trace_contention_end+0x3d/0x140 [ 3263.588448][T13710] ? __mutex_lock+0x30b/0x1550 [ 3263.593299][T13710] ? kasan_quarantine_put+0xbb/0x1f0 [ 3263.598602][T13710] ? __pfx___mutex_lock+0x10/0x10 [ 3263.603723][T13710] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3263.609423][T13710] ? do_vfs_ioctl+0x116f/0x1530 [ 3263.614294][T13710] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3263.619422][T13710] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 3263.624108][T13710] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3263.629362][T13710] ? hook_file_ioctl+0x1f2/0x600 [ 3263.634327][T13710] ? __fget_files+0x2a/0x420 [ 3263.639329][T13710] ? __fget_files+0x2a/0x420 [ 3263.643995][T13710] ? __fget_files+0x3a2/0x420 [ 3263.648698][T13710] ? __fget_files+0x2a/0x420 [ 3263.653368][T13710] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3263.658317][T13710] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3263.663598][T13710] __se_sys_ioctl+0xfc/0x170 [ 3263.668213][T13710] do_syscall_64+0x166/0x520 [ 3263.672866][T13710] ? trace_irq_disable+0x3b/0x140 [ 3263.677904][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3263.684098][T13710] ? clear_bhb_loop+0x70/0xc0 [ 3263.688802][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3263.694808][T13710] RIP: 0033:0x7fecf199e559 [ 3263.699309][T13710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3263.719059][T13710] RSP: 002b:00007fecf2822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3263.727486][T13710] RAX: ffffffffffffffda RBX: 00007fecf1c25fa0 RCX: 00007fecf199e559 [ 3263.735526][T13710] RDX: 0000200000000480 RSI: 00000000c048aeca RDI: 0000000000000007 [ 3263.743555][T13710] RBP: 00007fecf1a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 3263.751579][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3263.759597][T13710] R13: 00007fecf1c26038 R14: 00007fecf1c25fa0 R15: 00007fecf1d4fa48 [ 3263.767604][T13710] [ 3263.770679][T13710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3263.777968][T13710] CPU: 1 UID: 0 PID: 13710 Comm: syz.5.12055 Tainted: G L syzkaller #0 PREEMPT(full) [ 3263.788995][T13710] Tainted: [L]=SOFTLOCKUP [ 3263.793348][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 3263.803406][T13710] Call Trace: [ 3263.806693][T13710] [ 3263.809632][T13710] vpanic+0x56d/0xa60 [ 3263.813618][T13710] ? __pfx__printk+0x10/0x10 [ 3263.818214][T13710] ? __pfx_vpanic+0x10/0x10 [ 3263.822734][T13710] ? is_bpf_text_address+0x292/0x2b0 [ 3263.828034][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 3263.833280][T13710] panic+0xc5/0xd0 [ 3263.837020][T13710] ? __pfx_panic+0x10/0x10 [ 3263.841450][T13710] __warn+0x315/0x4c0 [ 3263.845435][T13710] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3263.850742][T13710] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3263.856046][T13710] __report_bug+0x276/0x570 [ 3263.860656][T13710] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3263.865947][T13710] ? __pfx___report_bug+0x10/0x10 [ 3263.870981][T13710] ? __lock_acquire+0x747/0x2de0 [ 3263.875922][T13710] ? __lock_acquire+0x747/0x2de0 [ 3263.880868][T13710] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3263.886178][T13710] report_bug+0x16b/0x220 [ 3263.890525][T13710] ? __kvm_gpc_refresh+0x1510/0x1710 [ 3263.895821][T13710] ? __kvm_gpc_refresh+0x1512/0x1710 [ 3263.901101][T13710] handle_bug+0x9c/0x200 [ 3263.905353][T13710] exc_invalid_op+0x1a/0x50 [ 3263.909868][T13710] asm_exc_invalid_op+0x1a/0x20 [ 3263.914721][T13710] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 3263.920657][T13710] Code: c6 05 7b 00 23 10 01 48 c7 c7 0f fe 44 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 1b e0 62 00 e9 81 ee ff ff e8 31 3d 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 3263.940276][T13710] RSP: 0018:ffffc9000676f360 EFLAGS: 00010283 [ 3263.946361][T13710] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: 0000000000080000 [ 3263.954333][T13710] RDX: ffffc90017346000 RSI: 00000000000003e9 RDI: 00000000000003ea [ 3263.962305][T13710] RBP: ffffc9000676f4e8 R08: ffffffff917a757f R09: 1ffffffff22f4eaf [ 3263.970278][T13710] R10: dffffc0000000000 R11: fffffbfff22f4eb0 R12: 1ffff92000cede80 [ 3263.978252][T13710] R13: ffff88804e449b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 3263.986225][T13710] ? __kvm_gpc_refresh+0x150f/0x1710 [ 3263.991547][T13710] ? lock_acquire+0x115/0x350 [ 3263.996241][T13710] ? kvm_gpc_refresh+0x31/0x110 [ 3264.001091][T13710] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 3264.006581][T13710] kvm_gpc_refresh+0xe1/0x110 [ 3264.011271][T13710] ? kvm_xen_set_evtchn+0x11e/0x220 [ 3264.016469][T13710] kvm_xen_set_evtchn+0x14f/0x220 [ 3264.021522][T13710] kvm_xen_vcpu_get_attr+0x5b0/0xb20 [ 3264.026821][T13710] kvm_arch_vcpu_ioctl+0x1552/0x23a0 [ 3264.032108][T13710] ? lock_acquire+0x115/0x350 [ 3264.036779][T13710] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 3264.042414][T13710] ? lock_acquire+0x115/0x350 [ 3264.047107][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 3264.052307][T13710] ? is_bpf_text_address+0x292/0x2b0 [ 3264.057592][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 3264.062797][T13710] ? kernel_text_address+0xa5/0xe0 [ 3264.067896][T13710] ? __kernel_text_address+0xd/0x30 [ 3264.073081][T13710] ? unwind_get_return_address+0x4d/0x90 [ 3264.078711][T13710] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3264.084874][T13710] ? arch_stack_walk+0xfb/0x150 [ 3264.089731][T13710] ? stack_trace_save+0xa9/0x100 [ 3264.094704][T13710] ? __pfx_stack_trace_save+0x10/0x10 [ 3264.100084][T13710] ? stack_depot_save_flags+0x33/0x7f0 [ 3264.105553][T13710] ? __lock_acquire+0x747/0x2de0 [ 3264.110531][T13710] ? kfree+0x1c5/0x650 [ 3264.114613][T13710] ? __se_sys_ioctl+0x47/0x170 [ 3264.119369][T13710] ? do_syscall_64+0x166/0x520 [ 3264.124132][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.130220][T13710] ? __mutex_trylock_common+0x15f/0x270 [ 3264.135773][T13710] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3264.141666][T13710] ? rcu_is_watching+0x16/0xb0 [ 3264.146441][T13710] ? trace_contention_end+0x3d/0x140 [ 3264.151739][T13710] ? __mutex_lock+0x30b/0x1550 [ 3264.156508][T13710] ? kasan_quarantine_put+0xbb/0x1f0 [ 3264.161789][T13710] ? __pfx___mutex_lock+0x10/0x10 [ 3264.166809][T13710] ? tomoyo_path_number_perm+0x219/0x5f0 [ 3264.172458][T13710] ? do_vfs_ioctl+0x116f/0x1530 [ 3264.177308][T13710] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3264.182538][T13710] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 3264.187210][T13710] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3264.192402][T13710] ? hook_file_ioctl+0x1f2/0x600 [ 3264.197444][T13710] ? __fget_files+0x2a/0x420 [ 3264.202041][T13710] ? __fget_files+0x2a/0x420 [ 3264.206626][T13710] ? __fget_files+0x3a2/0x420 [ 3264.211296][T13710] ? __fget_files+0x2a/0x420 [ 3264.215894][T13710] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3264.220827][T13710] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 3264.226026][T13710] __se_sys_ioctl+0xfc/0x170 [ 3264.230623][T13710] do_syscall_64+0x166/0x520 [ 3264.235210][T13710] ? trace_irq_disable+0x3b/0x140 [ 3264.240271][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.246355][T13710] ? clear_bhb_loop+0x70/0xc0 [ 3264.251058][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.256965][T13710] RIP: 0033:0x7fecf199e559 [ 3264.261369][T13710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3264.280976][T13710] RSP: 002b:00007fecf2822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3264.289403][T13710] RAX: ffffffffffffffda RBX: 00007fecf1c25fa0 RCX: 00007fecf199e559 [ 3264.297378][T13710] RDX: 0000200000000480 RSI: 00000000c048aeca RDI: 0000000000000007 [ 3264.305378][T13710] RBP: 00007fecf1a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 3264.313357][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3264.321351][T13710] R13: 00007fecf1c26038 R14: 00007fecf1c25fa0 R15: 00007fecf1d4fa48 [ 3264.329354][T13710] [ 3264.332702][T13710] Kernel Offset: disabled [ 3264.337033][T13710] Rebooting in 86400 seconds..