last executing test programs: 10m46.291781712s ago: executing program 0 (id=1): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a00000008000200050000000800040003000000140006"], 0x78}, 0x1, 0x2000000}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x10) 10m44.943848832s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000340)={0xfff, 0x9, 0x0, 'queue1\x00', 0x6}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6erspan0\x00', 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) fallocate(r1, 0x8, 0x100000000, 0x1000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x14, 0x0, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000200)={0xf, 0x7, 0xff, 0x5, 0xb307, 0xffff0000}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0090000180c2000003afb6c0634e4e86dd694fd2cd00503aff20010000000000000000000000000002ff020000e3ffffffffffffff0000000102009078000000016af9b3e700082b00fc010000000000000000000000000041fe8000000000000000000000000000aa3a02000000000000c91000000000000000000000ffffac1414aa000000000000"], 0x8a) 10m44.094791988s ago: executing program 0 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback={0x5f0000000000003a, 0x2e}, 0x7f2a}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x767a, 0x1f, 0x7ffffffe, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x3, 0x144, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) 10m43.502456923s ago: executing program 1 (id=6): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) setns(r1, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async, rerun: 64) chdir(&(0x7f0000000180)='./file1\x00') (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) write$binfmt_format(r4, &(0x7f0000000140)='0\x00', 0x2) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x8, 0x3, 0x6, 0x3, 0x1, 0x7, 0x7fffffff}) (async) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x3, 0x1, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x0, 0x2}) 10m43.315553466s ago: executing program 1 (id=7): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x97}}}, 0x80, 0x0}, 0x200477e5) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m43.116865427s ago: executing program 0 (id=8): socket(0x2b, 0x1, 0x1) (async) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {0xf90}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {0xf90}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0xfffeffff, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0x1, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x4, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x80000001, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xfffffffd, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={r4, 0x3, r3, 0xffff}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={r4, 0x3, r3, 0xffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c06, 0x4) 10m42.67686344s ago: executing program 32 (id=8): socket(0x2b, 0x1, 0x1) (async) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {0xf90}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {0xf90}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0xfffeffff, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0x1, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x4, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x80000001, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xfffffffd, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={r4, 0x3, r3, 0xffff}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={r4, 0x3, r3, 0xffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c06, 0x4) 10m41.317589741s ago: executing program 1 (id=12): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a00000008000200050000000800040003000000140006"], 0x78}, 0x1, 0x2000000}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x10) 10m35.881202388s ago: executing program 1 (id=16): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4623, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) setresuid(0xee00, 0xee00, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001140)=[@in6={0xa, 0x4e20, 0x9, @private0, 0x1}, @in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000440)=0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setuid(0xee01) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @empty}}, 0x2}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r3, 0x1, 0x0, 0x10001, 0x1, 0x1}, 0x14) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) 10m34.991061686s ago: executing program 1 (id=19): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)={0x1, 0x0, [{0x223000, 0x36, &(0x7f0000002180)=""/54}]}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, 0xfa41eab5, 0x100, 0x9, 0x40, 0x0, 0x2}, 0x9c) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_open_dev$video4linux(&(0x7f0000000240), 0x3ff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r8 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa0000) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000100)="448d7acda0b2", 0x0, 0x20, 0x0, 0x0, 0x0}) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100)={r6, 0x5d, "835863084343a125b14507be5e1bb37b9bca19bee9e027a9fd2e86da34c8db8cbc3c840468e90122481439c90798e2354e7666c7b9c4eac2bffbf1d0c2aa993771b061244739e3856de44b84d08c359fdf2543dd581bcc454c6c23f501"}, &(0x7f0000000180)=0x65) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000040)={r5, 0x401}, 0x8) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000380)={0x4, 0x0, 0x5}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r9, &(0x7f00000012c0)=""/4103, 0x1007) 10m34.653451698s ago: executing program 33 (id=19): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)={0x1, 0x0, [{0x223000, 0x36, &(0x7f0000002180)=""/54}]}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, 0xfa41eab5, 0x100, 0x9, 0x40, 0x0, 0x2}, 0x9c) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_open_dev$video4linux(&(0x7f0000000240), 0x3ff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r8 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa0000) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000100)="448d7acda0b2", 0x0, 0x20, 0x0, 0x0, 0x0}) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100)={r6, 0x5d, "835863084343a125b14507be5e1bb37b9bca19bee9e027a9fd2e86da34c8db8cbc3c840468e90122481439c90798e2354e7666c7b9c4eac2bffbf1d0c2aa993771b061244739e3856de44b84d08c359fdf2543dd581bcc454c6c23f501"}, &(0x7f0000000180)=0x65) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000040)={r5, 0x401}, 0x8) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000380)={0x4, 0x0, 0x5}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r9, &(0x7f00000012c0)=""/4103, 0x1007) 9m46.790455546s ago: executing program 4 (id=133): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x1, 0x80, "98df66552fb8af2b9f10f3d681de96a590d25f27440643cc1e70c317fd815cee"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 9m45.995309984s ago: executing program 4 (id=137): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pread64(r0, &(0x7f00000000c0)=""/162, 0xa2, 0xffffffff) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x8}) (async) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) (async, rerun: 64) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000632000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async, rerun: 32) fcntl$setpipe(r6, 0x407, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0xf043}], 0x1, 0x2000, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000080)=0x40000) 9m45.531718539s ago: executing program 4 (id=138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, "9a"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004040) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async) keyctl$get_persistent(0x16, r5, 0xfffffffffffffffe) (async, rerun: 32) ioctl$sock_bt_hci(r3, 0x800448d2, 0xfffffffffffffffe) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a00000409000100070000000000000008000540000000020900020073797a310000000008000a40fffffffc080008400000000114000000110001000000000000008ec223542b37322f93ac523308964ed5b923a62afa36e901c1662b56d266a1bba5fa1c8ed0c9e46f39109c6b28b296225ac8413132d60d1b6f8a4614fa920991fe14cf81648cb644e59c8d2d1d9a10f9a33b34d04d7f3aeae9b75354f3b77a19a9dfba30a8aab5c14ad6ea34d1c184d63bc06aaf119b83d2715f31d115fa85a97694d8a19775a59f2c18c03d86543bee7dc2e212f95dda152f3d58bcc5f7ff6b8a6e40faf5f6d6f9939d5e188410ed6399526caba9504461ed7336e4ab7aba09ba54edcadc15f3e90447e4ad4ed246f66933c916793d0513ceaff8b56dadf008f4b3627439ded28eca73025bf06d9b2f1992d616b5556aa1ed1540a638a8aa000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f800132403060206030407e9c566649f56f7627d830501000000fe4db3107745ba7d6f334d1dbdb6bafeb82b4cfacf596f7e6d33f2c2395574b6c0a7a7e6a53088d45dc619a64df79f457f"], 0x0) (async, rerun: 64) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f0000001200)=0xd0, 0x4) (async, rerun: 32) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async, rerun: 32) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x7, 0x7}]}, 0x10) (async, rerun: 64) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9m43.742829067s ago: executing program 4 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYRES64], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x841, 0x42) 9m41.972055918s ago: executing program 4 (id=149): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write(r0, &(0x7f0000001000)="297ab1e43954699225a5fec6f822e651503b282869c32a2c9d31bcaf96c79d82758bdad85027b9257f1dc257dd61396d555c30c314e245e99668e9d6c6ff821ff4cd0250509b7029acf5324b7396fb766fa1b39adfd0e0103e90aadb4e66c8522a27618e895bd7a0b44ab6532ee84f839a644d3a72209ac7a8a19d9b8a5ccb4433368d1851a2968252180dfb71bb162432061075bf2fd0e7ab00f552f111a8c882516b0a86fad1d0207ce9eefea826cae249", 0xb2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000001100)={0x8, 0x6, 0x9, 0xe0, 0x7, 0x3}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = fsmount(r2, 0x1, 0x2) fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 9m40.654591502s ago: executing program 4 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x26000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="c4e17c2bb506ccc4d4b9800000c00f3235000400000f300f080f20c035000001000f22c00f381db7000001000fc73b650f7849c70f20c035000001000f22c00f01df0ff3e2", 0x45}], 0x1, 0xe8, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600010324bd1589fa8a7002ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) 9m39.976392292s ago: executing program 34 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x26000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="c4e17c2bb506ccc4d4b9800000c00f3235000400000f300f080f20c035000001000f22c00f381db7000001000fc73b650f7849c70f20c035000001000f22c00f01df0ff3e2", 0x45}], 0x1, 0xe8, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600010324bd1589fa8a7002ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) 4m28.580807802s ago: executing program 3 (id=1270): r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000843000701fefffffffeffffff017c0000040040800c00018006000700800ade8004001480040007806991a200384a2ffc1753a996b3b4900791849520ee63d8c0528be1ff2e49e361ebaa7ca0e2a0a35fb8b3c4cae47f7c7e"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timerfd_create(0x1, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000843000701fefffffffeffffff017c0000040040800c00018006000700800ade8004001480040007806991a200384a2ffc1753a996b3b4900791849520ee63d8c0528be1ff2e49e361ebaa7ca0e2a0a35fb8b3c4cae47f7c7e"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 4m28.498174508s ago: executing program 3 (id=1271): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x1400) sendto$inet(r1, 0x0, 0x0, 0x2000c005, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="18010000140001002dbd7000fcdbdf2508"], 0x118}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r4, 0x1) tee(0xffffffffffffffff, r2, 0x4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x4a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000240)) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 4m27.591703869s ago: executing program 3 (id=1274): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac010203010902", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x44700) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x0, 0x1000000, 0x0}) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 4m26.335529885s ago: executing program 3 (id=1277): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) ioctl$sock_proto_private(r1, 0x89e5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000400007012bad700000000000017c00000400fc800c00000008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050027000000000008000500", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) ioctl$sock_proto_private(r1, 0x89e5, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000400007012bad700000000000017c00000400fc800c00000008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050027000000000008000500", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) (async) 4m26.175588846s ago: executing program 3 (id=1278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) fadvise64(r1, 0xcc, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x7, 0x3, 0x3, 0xbbdd, 0x82f]}, &(0x7f0000000080)=0x54) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x30, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x1c, 0x144, 0x0, 0x1, [@nested={0x18, 0xf3, 0x0, 0x1, [@nested={0x14, 0x28, 0x0, 0x1, [@nested={0x10, 0xa, 0x0, 0x1, [@typed={0xa, 0x110, 0x0, 0x0, @str='{:\'@-\x00'}]}]}]}]}]}, 0x30}}, 0x4000080) 4m25.354119762s ago: executing program 3 (id=1281): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8) (async) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xd}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000500)=0x7) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x40400) (async) read(r2, &(0x7f00000012c0)=""/4079, 0x1051) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 4m24.833718957s ago: executing program 35 (id=1281): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x8) (async) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xd}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000500)=0x7) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x40400) (async) read(r2, &(0x7f00000012c0)=""/4079, 0x1051) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 10.649710596s ago: executing program 6 (id=2280): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}}, 0x20004800) 10.358600802s ago: executing program 6 (id=2282): syz_usb_connect(0x1, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120101020959fc0841039e1bafc90102030109021b00020401000109050768008d0695fa0904f39e00020a"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x0, 0xb5, 0xef, 0xe4, 0x9}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120101020959fc0841039e1bafc90102030109021b00020401000109050768008d0695fa0904f39e00020a"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x0, 0xb5, 0xef, 0xe4, 0x9}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) (async) 8.41812857s ago: executing program 7 (id=2293): r0 = open(&(0x7f0000000000)='./file0\x00', 0x18000, 0x13c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) fallocate(r1, 0x30, 0x7, 0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000ff00b19ab0b0ee83d5b06a8cebb47afa64fa0f55f607f70e21cb36487940cd4827b3f3342762b85478a5b36881e88253f084e2e4e85adee6fd31b327a6ecbc6330835eb204fed4e7de6329f1ff7d85312eb2468a71c11bc9a2c67ebcdc705484e195191319dae69f246ee9e70b960f890e81b9b657114c7be9b24208c14f905fe6ef50153aca213cdbf34e27013f36bbefa35a86d4c3ece59cdaa0df1f41e95f0caea072cad787793579f340925b4fe313ecdf47edc559b483b2026f882385a92be9bcfbb571d767f728d8825a7e9f9d756cf5a2d9ccbbcbea3d1475a4e4d3d97c6e6dd0aee05302", @ANYRES16=r2, @ANYBLOB="100027bd7000fddbdf25430000000c0058006b00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0xc) 8.203293348s ago: executing program 7 (id=2294): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f00000006c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.290163232s ago: executing program 6 (id=2299): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) r1 = userfaultfd(0x80001) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000100)={0x3, "01faf77613e4fd474af842c3efd3ae5162b94b7ac53f4be4bd2351e8ae4452be", 0x2, 0x1, 0x1, 0x3200e0, 0x10000, 0x4}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x1000000, 0x80010, r3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0x2, 0xd, 0x2, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0xc72d, 0x5, 0xf, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0xed, 0x0, 0x8, 0x4, 0x0, 0x7, 0x7, 0xffc, 0x200000, 0xaf, 0xfffffffc, 0x283, 0x8001, 0x4]}) ioctl$COMEDI_POLL(r5, 0x640f) r6 = syz_open_dev$vcsu(&(0x7f0000000480), 0x8000000000000000, 0x101040) write$nci(r6, &(0x7f00000004c0)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x8, {0x1, 0x8}}, 0x5) prlimit64(0x0, 0x8, &(0x7f0000000580)={0x9, 0x8}, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee00, 0xee01, 0x1000) syz_ublk_setup_io_uring(0x5d8b, &(0x7f00000001c0)={0x0, 0xb5be, 0x1, 0x2, 0x2c5}, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) syz_io_uring_submit(0x0, r4, r8, &(0x7f0000000400)=@IORING_OP_READ_MULTISHOT={0x31, 0x51, 0x2000, @fd=r9, 0x1000000040000, 0x0, 0x0, 0x8, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000500)={0x9, 0x2, 0x9d, &(0x7f0000000300)="090671c399deceb08f3096b95bf7a0226b38fcbdc1f420ad8e746634dcc15ee84f58e1247fa290b742287d409fe60917498e3b4fb48451bff1a53c4db76ca2337589903798a213de389f726a2bb5ced378aafe3aa4cd126efda711e0a51f1b923769ed1e488987b037f52b30e812953156bd56d9f9d1d5e02de104aafca0e40d1446996c40300bbb931ec520a5ca7dc85043ac8c88cf1cfc65d7a4e007", 0x2}, 0x5d}}) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x40, 0xa, 0xc, {0xc, 0x23, "085dfaed1c70d726e6c9"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000980)={0x44, &(0x7f00000006c0)={0x20, 0xe, 0xeb, "c843e9c7484c39c44e41bb72068072179316c2c5500aaf337755663372056c3454536c6c75dd2e01d30f2de9e163e1107d7aac9a9ffe7e01225212e7f6cf98fb22eed221b37477f60849b9e1e37c842d2dedce648dcbaec81729a1536a55b6dd57196ac60fa9f18a188ca43ec36f4a24f574dd4f2b0978fd825dd013c251ba37efe62624fec346f8a153f0e6aa7b11e43a5dcc2654649f1e67d27874a94cc4c66bfb30dcc00366feebdf28395e4fc9cdfbf27f20ed14623d3d923af0e31e73b51d448a8aa89245dc5b93d0e059afb12745a7ee8c69df57d42095128429e04888398525e371666b2d210254"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000840)={0x20, 0x81, 0x3, "025b94"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "5959b3"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "8099"}, &(0x7f0000000900)={0x20, 0x84, 0x2, "47a1"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "791ac9"}}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r10, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x7000}) 6.913299428s ago: executing program 5 (id=2302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0x0, 0xb}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xad7, 0x0, 0x200000}]}) futex(&(0x7f0000000580), 0x189, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x2) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x80) 5.830694449s ago: executing program 5 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000390007012cbd7000fedbdf25047c00000c000180080001009947ce0e"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) 5.647728747s ago: executing program 5 (id=2311): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) fchdir(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = syz_open_dev$video4linux(0x0, 0x308000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0xfcfa, 0x0}, 0x20000818) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() prctl$PR_SET_MM(0x23, 0x8, &(0x7f00003fb000/0x1000)=nil) capset(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0xff, 0xaf26, 0xa0}) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x400002) madvise(&(0x7f00003a3000/0x2000)=nil, 0x2000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 4.999281572s ago: executing program 7 (id=2313): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x5, 0x20, 0x50, 0x10, 0x2304, 0x22e, 0x326b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x5, "", [{{0x9, 0x4, 0xf8, 0x4, 0x2, 0x77, 0x76, 0x4d, 0x0, [], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x1, 0x40, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0x11, 0x1, "b6"}, 0x0, 0x0}) 4.81196255s ago: executing program 2 (id=2315): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x10001, 0x2002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 4.599446458s ago: executing program 5 (id=2316): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) bind$alg(r0, 0x0, 0x0) 4.532190113s ago: executing program 5 (id=2317): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="400127"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil) 3.598080365s ago: executing program 6 (id=2318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0x100) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) 3.392086064s ago: executing program 2 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.058140646s ago: executing program 2 (id=2320): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x16, 0x6, "453678fe51d7"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x1, 0x68, "4aab64499648a1603a87fe1b14ffb1faf1ab0f4ea55481e8ac7760f9b3fdf7314bef8e6d96ca4473cfa6990732b985164b971f65468df8407789e283d5cd064d3d402d8640856f50a53f0b13818b6291570705e6341a49748a4c34ace8a211abe097946c91de67bf"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x20, 0x5, 0x52, {0x52, 0x22, "fc66a0216de6b51a6aa974f86662c07df07be23b84b334a9e7e74e9863b5f879f05b45a2ae2fc6d38fb425e4bfcf956bb08607b5cfb67ecea1bd71a33028cda8f801d1201c9b620e60f3756e0062d562"}}, 0x0}, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.639222968s ago: executing program 6 (id=2321): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000060, 0x0) 2.219260331s ago: executing program 7 (id=2322): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000003c0)={0x77ef, {{0x2, 0x4e21, @broadcast}}, 0x1}, 0x90) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x8, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) writev(r8, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_DELFLOWTABLE={0x80, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8670}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x188, 0x3, 0xa, 0x705, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x86d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x847}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xfa, 0xc, "7782c5c144c505970fb6ab663ad6492cd333c225d33d2516ebe3790da3a8b99bea24d8353d5012a509f0c967266a7db62798d75e541ce87ac86b026612b15d385ccd6b8d7990c66fb191bff4254c6e8d9044ad306aaa55e431ff4aea07354139f3945a99c653708903e76a4669750cbf2a695f0886ba5a5e12c268031ebd63f703ffaac85784bebcef53775ae41113a4ca15efac4e7381af077f5273008ed1998578a7a826f864292a61e91625bc20eec3c98ba6358d14e4b2aa9ff12f93ee00ca05e538e13ecf6040273320698d8bbd82ce0324f31d0513360606647bc7e608a8365830672f714ba23f9b4cf71a08f310f72c6a6315"}]}], {0x14}}, 0x2cc}}, 0x48c0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x7, 0x4, 0x0, {0x0, 0x0, 0xffffffff}, {}, {}, {}, 0x1, 0x100, 0x0, 0x6, 0x1, 0xf79, 0x1, 0x3, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x1, 0x5}) 2.219060975s ago: executing program 2 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) 957.787627ms ago: executing program 2 (id=2324): r0 = syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffffa, 0x100000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0xfffffffe, 0x102, "75ab3b059f3263184d0fdf82a165890713fa6f3431d16439c696572d28eb77e4", 0x800, 0x5, 0x6, 0x3, 0x80000400}) 690.356503ms ago: executing program 7 (id=2325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x453, 0x1, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 587.431761ms ago: executing program 2 (id=2326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x5, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x7, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0xc, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x86, 0x9, 0xfc, 0xe, 0xe, 0x9, 0xc6, 0x6, 0x4}], 0x4}) r3 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080"], 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r4, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount(0x0, 0x0, 0x0, 0x209404, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 317.620937ms ago: executing program 7 (id=2327): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x38, 0x0, "1cdc0dca1d9f68"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}]}, 0x58}, 0x1, 0x7}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d384"]) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000010c0)={0x40, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x850}, 0xc020) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0xf7a, 0xff}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000580)={r1, 0xff}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a", 0x37}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266", 0x13}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b41", 0x2f}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r2, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 243.552399ms ago: executing program 6 (id=2328): syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b7d0510"], 0xe) 0s ago: executing program 5 (id=2329): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0x851, 0x0) kernel console output (not intermixed with test programs): 2CF6.0038: couldn't install mouse [ 627.624809][T11890] pyra 0003:1E7D:2CF6.0038: probe with driver pyra failed with error -71 [ 627.644207][ T6205] usb usb8-port1: unable to enumerate USB device [ 627.681800][T11890] usb 3-1: USB disconnect, device number 36 [ 628.038368][ T39] audit: type=1326 audit(1784196724.589:437): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13740 comm="syz.5.1805" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb056ade59 code=0x0 [ 628.422232][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1809'. [ 628.554448][T13758] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1811'. [ 628.559435][ T6205] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 628.709255][ T6205] usb 3-1: Using ep0 maxpacket: 16 [ 628.732403][ T6205] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 628.732426][ T6205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.732441][ T6205] usb 3-1: Product: syz [ 628.732452][ T6205] usb 3-1: Manufacturer: syz [ 628.732463][ T6205] usb 3-1: SerialNumber: syz [ 629.741999][ T5583] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 629.886889][T13793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.891356][ T5583] usb 8-1: Using ep0 maxpacket: 8 [ 629.897342][T13793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.919927][ T5583] usb 8-1: unable to get BOS descriptor or descriptor too short [ 629.922316][ T5583] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 629.922342][ T5583] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 629.922361][ T5583] usb 8-1: config 4 has no interface number 0 [ 629.922899][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1819'. [ 629.925190][ T5583] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 629.925219][ T5583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.925305][ T5583] usb 8-1: Product: syz [ 629.925321][ T5583] usb 8-1: Manufacturer: syz [ 629.925336][ T5583] usb 8-1: SerialNumber: syz [ 630.018835][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1819'. [ 630.274866][ T5583] uvcvideo 8-1:4.147: Found multiple Units with ID 6 [ 630.274977][ T5583] uvcvideo 8-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 630.275403][ T5583] uvcvideo 8-1:4.147: No streaming interface found for terminal 32774. [ 630.323508][ T5583] usb 8-1: USB disconnect, device number 55 [ 630.439025][ T6205] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.439536][ T6205] usb 3-1: MIDIStreaming interface descriptor not found [ 630.687549][ T5604] block nbd64: NBD_DISCONNECT [ 631.203411][T13804] overlayfs: missing 'lowerdir' [ 631.242506][T13804] overlayfs: missing 'lowerdir' [ 631.667756][ T5583] usb 3-1: USB disconnect, device number 37 [ 631.950570][T13813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.995633][T13813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.024168][T13813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.024924][T13813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.267791][T13818] process '/newroot/362/file0' started with executable stack [ 632.611901][T13783] block nbd5: shutting down sockets [ 632.773328][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.773949][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.775728][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.776414][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.909275][ T5693] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 632.969287][T11890] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 633.073391][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.073431][ T5693] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.073452][ T5693] usb 3-1: config 1 has no interface number 0 [ 633.073495][ T5693] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.076894][ T5693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.076922][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.076942][ T5693] usb 3-1: Product: syz [ 633.076957][ T5693] usb 3-1: Manufacturer: syz [ 633.076972][ T5693] usb 3-1: SerialNumber: syz [ 633.128200][ T5693] usb 3-1: selecting invalid altsetting 1 [ 633.186847][T11890] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 633.186877][T11890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.186898][T11890] usb 6-1: Product: syz [ 633.186914][T11890] usb 6-1: Manufacturer: syz [ 633.186930][T11890] usb 6-1: SerialNumber: syz [ 633.274435][ T5609] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 633.381748][ T5693] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 633.381811][ T5693] cdc_ncm 3-1:1.1: bind() failure [ 633.469821][ T5583] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 633.610227][ T5583] usb 8-1: device descriptor read/64, error -71 [ 633.699675][T13833] Bluetooth: MGMT ver 1.23 [ 633.857592][ T5583] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 633.857648][T13855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.858987][T13855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.989331][ T5583] usb 8-1: device descriptor read/64, error -71 [ 634.101143][ T5583] usb usb8-port1: attempt power cycle [ 634.379462][ T5609] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 634.419707][ T5609] ath9k_htc: Failed to initialize the device [ 634.449230][ T5583] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 634.470290][ T5583] usb 8-1: device descriptor read/8, error -71 [ 634.500320][ T5609] usb 6-1: ath9k_htc: USB layer deinitialized [ 634.720300][ T5583] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 634.740494][ T5583] usb 8-1: device descriptor read/8, error -71 [ 634.849758][ T5583] usb usb8-port1: unable to enumerate USB device [ 634.938739][T13859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.954496][T13859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.684660][T13861] netlink: 'syz.6.1840': attribute type 3 has an invalid length. [ 635.727802][ T10] usb 3-1: USB disconnect, device number 38 [ 635.786321][T13862] tipc: Can't bind to reserved service type 2 [ 636.700781][T13869] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1843'. [ 637.233674][T13876] autofs: Bad value for 'fd' [ 637.787512][T13878] pim6reg: entered allmulticast mode [ 637.794084][T13879] pim6reg: left allmulticast mode [ 637.919422][ T10] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 638.095681][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 638.095768][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 638.095795][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 638.095826][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 638.152637][ T10] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 638.152733][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.152759][ T10] usb 8-1: Product: syz [ 638.152776][ T10] usb 8-1: Manufacturer: syz [ 638.152794][ T10] usb 8-1: SerialNumber: syz [ 638.220244][ T10] usb 8-1: config 0 descriptor?? [ 638.248904][ T10] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 638.519371][ T10] scsi host1: usb-storage 8-1:0.0 [ 638.693141][ T10] usb 8-1: USB disconnect, device number 60 [ 639.500955][ T39] audit: type=1326 audit(1784196736.049:438): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13892 comm="syz.7.1849" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c0e1de59 code=0x0 [ 639.775190][T13861] syz.6.1840 (13861) used greatest stack depth: 19152 bytes left [ 640.244306][T13904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.261734][T13904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.330139][ T5693] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 640.482412][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.482443][ T5693] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.515603][ T5693] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 640.515624][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 640.515639][ T5693] usb 3-1: SerialNumber: syz [ 640.910060][T13903] tipc: Started in network mode [ 640.910098][T13903] tipc: Node identity 36dbf98b742d, cluster identity 4711 [ 640.961438][T13903] tipc: Enabled bearer , priority 0 [ 641.000533][T13903] +: renamed from syzkaller0 [ 641.038200][T13903] tipc: Disabling bearer [ 641.339999][ T5693] usb 3-1: 0:2 : does not exist [ 641.340085][ T5693] usb 3-1: unit 5: unexpected type 0x0a [ 641.564469][ T5693] usb 3-1: USB disconnect, device number 39 [ 641.695858][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.401767][ T5609] usb 6-1: USB disconnect, device number 14 [ 642.550927][ T5693] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 642.702129][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 642.702207][ T5693] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 642.702225][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.738826][ T5693] usb 3-1: config 0 descriptor?? [ 642.744793][T13915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 642.939308][ T5609] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 643.114507][ T5609] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.114545][ T5609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 643.114575][ T5609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 643.151227][ T5609] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 643.151259][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.151281][ T5609] usb 6-1: Product: syz [ 643.151314][ T5609] usb 6-1: Manufacturer: syz [ 643.151329][ T5609] usb 6-1: SerialNumber: syz [ 643.195257][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.207703][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.208987][ T5609] usb 6-1: config 0 descriptor?? [ 643.224433][T13920] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 643.239908][ T5693] hid (null): unknown global tag 0xc [ 643.239938][ T5693] hid (null): unknown global tag 0xc [ 643.239964][ T5693] hid (null): unknown global tag 0xc [ 643.239987][ T5693] hid (null): unknown global tag 0xc [ 643.240011][ T5693] hid (null): unknown global tag 0xc [ 643.240034][ T5693] hid (null): unknown global tag 0xc [ 643.240057][ T5693] hid (null): unknown global tag 0xc [ 643.240080][ T5693] hid (null): unknown global tag 0xc [ 643.240103][ T5693] hid (null): unknown global tag 0xc [ 643.240126][ T5693] hid (null): unknown global tag 0xc [ 643.240149][ T5693] hid (null): unknown global tag 0xc [ 643.240172][ T5693] hid (null): unknown global tag 0xc [ 643.240195][ T5693] hid (null): unknown global tag 0xc [ 643.240232][ T5693] hid (null): unknown global tag 0xc [ 643.240255][ T5693] hid (null): unknown global tag 0xc [ 643.240278][ T5693] hid (null): unknown global tag 0xc [ 643.240301][ T5693] hid (null): unknown global tag 0xc [ 643.240324][ T5693] hid (null): unknown global tag 0xc [ 643.240347][ T5693] hid (null): unknown global tag 0xc [ 643.240370][ T5693] hid (null): unknown global tag 0xc [ 643.240392][ T5693] hid (null): unknown global tag 0xc [ 643.240414][ T5693] hid (null): unknown global tag 0xc [ 643.240437][ T5693] hid (null): unknown global tag 0xc [ 643.240459][ T5693] hid (null): unknown global tag 0xc [ 643.240482][ T5693] hid (null): unknown global tag 0xc [ 643.240504][ T5693] hid (null): unknown global tag 0xc [ 643.240526][ T5693] hid (null): unknown global tag 0xc [ 643.240548][ T5693] hid (null): unknown global tag 0xc [ 643.240570][ T5693] hid (null): unknown global tag 0xc [ 643.240592][ T5693] hid (null): unknown global tag 0xc [ 643.240615][ T5693] hid (null): unknown global tag 0xc [ 643.240637][ T5693] hid (null): unknown global tag 0xc [ 643.240659][ T5693] hid (null): unknown global tag 0xc [ 643.240679][ T5693] hid (null): unknown global tag 0xc [ 643.240703][ T5693] hid (null): unknown global tag 0xc [ 643.244408][ T5693] hid (null): unknown global tag 0xc [ 643.244436][ T5693] hid (null): unknown global tag 0xc [ 643.244459][ T5693] hid (null): unknown global tag 0xc [ 643.244481][ T5693] hid (null): unknown global tag 0xc [ 643.244502][ T5693] hid (null): unknown global tag 0xc [ 643.244524][ T5693] hid (null): unknown global tag 0xc [ 643.244546][ T5693] hid (null): unknown global tag 0xc [ 643.244567][ T5693] hid (null): unknown global tag 0xc [ 643.246138][ T5693] hid (null): unknown global tag 0xc [ 643.246157][ T5693] hid (null): unknown global tag 0xc [ 643.246186][ T5693] hid (null): unknown global tag 0xc [ 643.246200][ T5693] hid (null): unknown global tag 0xc [ 643.246215][ T5693] hid (null): unknown global tag 0xc [ 643.246276][ T5693] hid (null): unknown global tag 0xc [ 643.246294][ T5693] hid (null): unknown global tag 0xc [ 643.246309][ T5693] hid (null): unknown global tag 0xc [ 643.246323][ T5693] hid (null): unknown global tag 0xc [ 643.246338][ T5693] hid (null): unknown global tag 0xc [ 643.428657][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.428744][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.428810][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.428877][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.428943][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.429009][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.429068][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.429229][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.429258][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.429285][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown main item tag 0x0 [ 643.435180][ T5693] logitech-djreceiver 0003:046D:C71F.0039: unknown global tag 0xc [ 643.435248][ T5693] logitech-djreceiver 0003:046D:C71F.0039: item 0 0 1 12 parsing failed [ 643.446226][ T5693] logitech-djreceiver 0003:046D:C71F.0039: logi_dj_probe: parse failed [ 643.446427][ T5693] logitech-djreceiver 0003:046D:C71F.0039: probe with driver logitech-djreceiver failed with error -22 [ 643.499317][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 643.689357][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 643.715378][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 643.715407][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.715427][ T10] usb 8-1: Product: syz [ 643.715442][ T10] usb 8-1: Manufacturer: syz [ 643.715457][ T10] usb 8-1: SerialNumber: syz [ 643.718125][ T5693] usb 3-1: USB disconnect, device number 40 [ 643.796825][ T10] usb 8-1: config 0 descriptor?? [ 643.821850][ T5609] rc_core: IR keymap rc-streamzap not found [ 643.821869][ T5609] Registered IR keymap rc-empty [ 643.844994][ T5609] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 643.867917][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.880090][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.882283][ T5609] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59 [ 643.911049][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.913160][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.943036][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.947087][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.004088][ T10] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 644.004318][ T5609] usb 6-1: USB disconnect, device number 15 [ 644.279693][ T10] usb write operation failed. (-71) [ 644.315737][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 644.316740][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 644.316794][ T10] usb 8-1: media controller created [ 644.328962][ T39] audit: type=1326 audit(1784196740.875:439): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13936 comm="syz.7.1862" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c0e1de59 code=0x0 [ 644.365162][ T10] usb read operation failed. (-71) [ 644.365544][ T10] usb write operation failed. (-71) [ 644.384147][ T10] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 644.399341][ T10] usb 8-1: USB disconnect, device number 61 [ 644.459294][ T824] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 644.613133][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 644.613350][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 644.617184][ T824] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 644.617213][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.617233][ T824] usb 3-1: Product: syz [ 644.617247][ T824] usb 3-1: Manufacturer: syz [ 644.617261][ T824] usb 3-1: SerialNumber: syz [ 644.665790][ T824] usb 3-1: config 0 descriptor?? [ 644.718698][ T824] hub 3-1:0.0: bad descriptor, ignoring hub [ 644.718736][ T824] hub 3-1:0.0: probe with driver hub failed with error -5 [ 644.771761][ T824] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input60 [ 644.819723][ T5583] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 645.002245][ T5583] usb 6-1: Using ep0 maxpacket: 8 [ 645.004264][ T5583] usb 6-1: config 105 has an invalid interface number: 223 but max is 0 [ 645.004290][ T5583] usb 6-1: config 105 has no interface number 0 [ 645.004332][ T5583] usb 6-1: config 105 interface 223 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 645.004359][ T5583] usb 6-1: config 105 interface 223 has no altsetting 0 [ 645.006540][ T5583] usb 6-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice=57.9f [ 645.006567][ T5583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.006589][ T5583] usb 6-1: Product: syz [ 645.006604][ T5583] usb 6-1: Manufacturer: syz [ 645.006626][ T5583] usb 6-1: SerialNumber: syz [ 645.205138][ T6205] usb 3-1: USB disconnect, device number 41 [ 645.336289][ T5583] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 645.604694][ T5583] snd-usb-audio 6-1:105.223: probe with driver snd-usb-audio failed with error -2 [ 645.647941][ T5583] usb 6-1: USB disconnect, device number 16 [ 645.702345][T13955] futex_wake_op: syz.7.1867 tries to shift op by 32; fix this program [ 645.726501][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:105.223/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.884920][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.885499][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.220842][T11890] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 646.394745][T11890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.394777][T11890] usb 6-1: config 0 has no interfaces? [ 646.394808][T11890] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 646.394833][T11890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.438618][T11890] usb 6-1: config 0 descriptor?? [ 646.630015][T13975] netlink: 'syz.6.1873': attribute type 1 has an invalid length. [ 646.659821][T11890] usb 6-1: USB disconnect, device number 17 [ 646.849217][ T5583] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 647.012138][ T6205] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 647.013197][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 647.013228][ T5583] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 647.045998][ T5583] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 647.046027][ T5583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.046048][ T5583] usb 3-1: Product: syz [ 647.046069][ T5583] usb 3-1: Manufacturer: syz [ 647.046084][ T5583] usb 3-1: SerialNumber: syz [ 647.057972][ T5583] usb 3-1: config 0 descriptor?? [ 647.070921][ T5583] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 647.113790][T13986] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 647.171097][ T6205] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.173948][ T6205] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 647.173981][ T6205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 647.174040][ T6205] usb 8-1: Product: syz [ 647.174052][ T6205] usb 8-1: Manufacturer: syz [ 647.174063][ T6205] usb 8-1: SerialNumber: syz [ 647.362031][ T39] audit: type=1326 audit(1784196743.915:440): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13972 comm="syz.2.1872" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2be460de59 code=0x0 [ 647.501849][T13996] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1877'. [ 647.574803][ T6205] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 647.653509][T13980] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 647.657003][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.657562][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.759433][ T6205] usb 8-1: USB disconnect, device number 62 [ 647.775721][T11890] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 647.804662][ T6205] usblp1: removed [ 647.944032][T11890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 647.944065][T11890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 647.946963][T11890] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 647.946996][T11890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.947015][T11890] usb 6-1: Product: syz [ 647.947029][T11890] usb 6-1: Manufacturer: syz [ 647.947044][T11890] usb 6-1: SerialNumber: syz [ 648.007861][T11890] usb 6-1: config 0 descriptor?? [ 648.017636][T11890] hub 6-1:0.0: bad descriptor, ignoring hub [ 648.017670][T11890] hub 6-1:0.0: probe with driver hub failed with error -5 [ 648.046068][T11890] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input61 [ 648.669285][ T5693] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 648.821356][ T5693] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 648.821382][ T5693] usb 8-1: config 1 has no interface number 0 [ 648.821427][ T5693] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 648.821481][ T5693] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 648.821498][ T5693] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.823976][ T5693] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 648.824004][ T5693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.824074][ T5693] usb 8-1: Product: syz [ 648.824085][ T5693] usb 8-1: Manufacturer: syz [ 648.824096][ T5693] usb 8-1: SerialNumber: syz [ 648.912687][T14004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 649.120213][T14004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 649.436649][ T5693] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 649.492652][T14013] netlink: 'syz.5.1884': attribute type 10 has an invalid length. [ 649.519896][T14013] veth1_macvtap: left promiscuous mode [ 649.543470][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.544033][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.549051][ T5693] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 649.554830][ T5693] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 649.585727][ T5693] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 649.586270][ T5693] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 649.622044][ T5693] usb 8-1: USB disconnect, device number 63 [ 649.651806][ T5693] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 649.714340][ T5583] scsi host1: usb-storage 3-1:0.0 [ 649.767588][ T5583] usb 3-1: USB disconnect, device number 42 [ 650.053371][ T5693] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 650.388425][T14024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.479301][ T5693] usb 8-1: new low-speed USB device number 64 using dummy_hcd [ 650.632073][ T5693] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 650.632106][ T5693] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 650.632161][ T5693] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 650.634804][ T5693] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.634835][ T5693] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 650.634883][ T5693] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.634908][ T5693] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.659537][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.724167][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.739812][ T5693] usbtmc 8-1:16.0: bulk endpoints not found [ 650.749404][ T5583] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 650.800879][ T6205] usb 6-1: USB disconnect, device number 18 [ 650.911926][ T5583] usb 3-1: Using ep0 maxpacket: 16 [ 650.916386][ T5583] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 650.916414][ T5583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.916434][ T5583] usb 3-1: Product: syz [ 650.916450][ T5583] usb 3-1: Manufacturer: syz [ 650.916467][ T5583] usb 3-1: SerialNumber: syz [ 650.935813][ T5583] usb 3-1: config 0 descriptor?? [ 651.034821][ T5609] usb 8-1: USB disconnect, device number 64 [ 651.129270][ T6205] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 651.279216][ T6205] usb 6-1: Using ep0 maxpacket: 16 [ 651.291711][ T6205] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 651.291730][ T6205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.291743][ T6205] usb 6-1: Product: syz [ 651.291753][ T6205] usb 6-1: Manufacturer: syz [ 651.291762][ T6205] usb 6-1: SerialNumber: syz [ 651.372350][ T5583] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 651.415067][ T5583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 651.443222][ T5583] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 651.443308][ T5583] usb 3-1: media controller created [ 651.564925][ T5583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.886888][ T5583] zl10353_read_register: readreg error (reg=127, ret==0) [ 651.886943][ T5583] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 651.887089][ T5583] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 651.936674][ T5583] usb 3-1: USB disconnect, device number 43 [ 652.073360][T14049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.075332][T14049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.151351][ T5583] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 652.229395][ T5609] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 652.389289][ T5609] usb 8-1: Using ep0 maxpacket: 32 [ 652.395786][ T5609] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 652.395830][ T5609] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 652.395894][ T5609] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 652.395924][ T5609] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 652.395970][ T5609] usb 8-1: config 0 interface 0 has no altsetting 0 [ 652.433733][ T5609] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 652.433766][ T5609] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 652.433830][ T5609] usb 8-1: Product: syz [ 652.433886][ T5609] usb 8-1: Manufacturer: syz [ 652.433904][ T5609] usb 8-1: SerialNumber: syz [ 652.476619][ T5609] usb 8-1: config 0 descriptor?? [ 652.514164][ T5609] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 652.526980][ T5609] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 652.709664][T14048] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 652.837916][ T6205] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.837969][ T6205] usb 6-1: MIDIStreaming interface descriptor not found [ 653.105476][T14061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'. [ 653.106357][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'. [ 653.150851][T14059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.151447][T14059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.372006][ T6205] usb 6-1: USB disconnect, device number 19 [ 653.562456][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 654.379585][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.380732][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.070044][ T6205] usb 8-1: USB disconnect, device number 65 [ 655.098377][ T6205] ldusb 8-1:0.0: LD USB Device #1 now disconnected [ 655.232638][T14099] bpf: Bad value for 'mode' [ 655.236166][T14099] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 655.333933][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.334552][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.379824][ T5583] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 655.422362][T14114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.426307][T14114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.457028][T14099] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 655.463995][T14110] netdevsim netdevsim6 30: renamed from netdevsim0 (while UP) [ 655.534259][ T5583] usb 6-1: unable to get BOS descriptor or descriptor too short [ 655.547170][ T5583] usb 6-1: language id specifier not provided by device, defaulting to English [ 655.569594][ T5583] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 655.569623][ T5583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.569643][ T5583] usb 6-1: Product: syz [ 655.569657][ T5583] usb 6-1: Manufacturer: သ [ 655.569672][ T5583] usb 6-1: SerialNumber: syz [ 655.571173][ T6205] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 655.755203][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.757971][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.836807][T14118] netlink: 'syz.2.1912': attribute type 2 has an invalid length. [ 655.836828][T14118] netlink: 'syz.2.1912': attribute type 2 has an invalid length. [ 655.912106][ T5583] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.912161][ T5583] usb 6-1: MIDIStreaming interface descriptor not found [ 656.131431][ T5583] usb 6-1: USB disconnect, device number 20 [ 656.295696][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.540356][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.540892][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.599279][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.599879][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.739340][ T6205] usb 8-1: device descriptor read/64, error -71 [ 656.931831][T14142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.935009][T14142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.979226][ T6205] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 657.026736][T14145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.027334][T14145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.158564][ T6205] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 657.158591][ T6205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.158609][ T6205] usb 8-1: Product: syz [ 657.158622][ T6205] usb 8-1: Manufacturer: syz [ 657.158636][ T6205] usb 8-1: SerialNumber: syz [ 657.265300][T14009] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 657.449287][ T5609] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 657.621697][ T5609] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.621725][ T5609] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 657.621746][ T5609] usb 6-1: config 1 has no interface number 0 [ 657.621840][ T5609] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.625084][ T5609] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.625110][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.625128][ T5609] usb 6-1: Product: syz [ 657.625140][ T5609] usb 6-1: Manufacturer: syz [ 657.625158][ T5609] usb 6-1: SerialNumber: syz [ 657.720750][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.728258][ T5609] usb 6-1: selecting invalid altsetting 1 [ 657.773035][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.773657][T14123] netlink: 'syz.7.1913': attribute type 10 has an invalid length. [ 657.773674][T14123] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1913'. [ 657.791864][T14153] netlink: 'syz.7.1913': attribute type 10 has an invalid length. [ 657.791896][T14153] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1913'. [ 657.851931][T14123] bond0: entered promiscuous mode [ 657.851952][T14123] bond_slave_0: entered promiscuous mode [ 657.862893][T14123] bond_slave_1: entered promiscuous mode [ 657.930197][T14123] bridge0: port 3(bond0) entered blocking state [ 657.935769][T14123] bridge0: port 3(bond0) entered disabled state [ 657.942962][T14123] bond0: entered allmulticast mode [ 657.944025][T14123] bond_slave_0: entered allmulticast mode [ 657.944055][T14123] bond_slave_1: entered allmulticast mode [ 658.101675][T14156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.106180][T14156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.231540][ T5608] usb 8-1: USB disconnect, device number 67 [ 658.258120][T14158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.285063][T14158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.304827][T14160] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1925'. [ 658.316997][T14160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.355931][ T5609] cdc_ncm 6-1:1.1: SET_CRC_MODE failed [ 658.358891][ T5609] cdc_ncm 6-1:1.1: SET_NTB_FORMAT failed [ 658.382136][ T5609] usb 6-1: selecting invalid altsetting 1 [ 658.382184][ T5609] cdc_ncm 6-1:1.1: bind() failure [ 658.420700][T14165] netlink: 'syz.2.1923': attribute type 2 has an invalid length. [ 658.420724][T14165] netlink: 'syz.2.1923': attribute type 2 has an invalid length. [ 658.455765][ T5609] usb 6-1: USB disconnect, device number 21 [ 658.539627][T14009] usb 8-1: Service connection timeout for: 256 [ 658.539663][T14009] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 658.685535][T14009] ath9k_htc: Failed to initialize the device [ 658.685816][ T5608] usb 8-1: ath9k_htc: USB layer deinitialized [ 658.812850][ T10] usb 3-1: device descriptor read/64, error -110 [ 658.926529][T14179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1928'. [ 659.025659][T14182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.026327][T14182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.059272][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 659.121482][T14179] team0: Port device team_slave_1 removed [ 659.154151][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1928'. [ 659.154167][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1928'. [ 659.199281][ T10] usb 3-1: device descriptor read/64, error -32 [ 659.199345][ T5608] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 659.309631][ T10] usb usb3-port1: attempt power cycle [ 659.363190][ T5608] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 659.363224][ T5608] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 659.363239][ T5608] usb 8-1: Product: syz [ 659.363250][ T5608] usb 8-1: SerialNumber: syz [ 659.369009][ T5608] usb 8-1: config 0 descriptor?? [ 659.670569][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 659.689696][ T10] usb 3-1: device descriptor read/8, error -32 [ 659.709047][ T5608] usb 8-1: USB disconnect, device number 68 [ 659.781706][T14192] netlink: 'syz.2.1931': attribute type 4 has an invalid length. [ 659.787608][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.799270][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.799651][ T10] raw-gadget.7 gadget.2: failed to queue suspend event [ 659.849694][ T10] raw-gadget.7 gadget.2: failed to queue reset event [ 659.889357][ T6205] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 659.919484][ T10] raw-gadget.7 gadget.2: failed to queue resume event [ 659.979252][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 660.009566][ C0] raw-gadget.7 gadget.2: ignoring, device is not running [ 660.009673][ T10] usb 3-1: device descriptor read/8, error -32 [ 660.041626][ T6205] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 660.041654][ T6205] usb 6-1: config 220 has an invalid descriptor of length 64, skipping remainder of the config [ 660.041673][ T6205] usb 6-1: config 220 has no interface number 2 [ 660.041741][ T6205] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 660.041766][ T6205] usb 6-1: config 220 interface 0 has no altsetting 0 [ 660.041779][ T6205] usb 6-1: config 220 interface 76 has no altsetting 0 [ 660.041792][ T6205] usb 6-1: config 220 interface 1 has no altsetting 0 [ 660.044179][ T6205] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 660.044203][ T6205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.044221][ T6205] usb 6-1: Product: syz [ 660.044233][ T6205] usb 6-1: Manufacturer: syz [ 660.044250][ T6205] usb 6-1: SerialNumber: syz [ 660.119664][ T10] raw-gadget.7 gadget.2: failed to queue suspend event [ 660.137622][ T10] usb usb3-port1: unable to enumerate USB device [ 660.309372][ T6205] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 660.309395][ T6205] uvcvideo 6-1:220.0: No valid video chain found. [ 660.309434][ T6205] usb 6-1: selecting invalid altsetting 0 [ 660.388957][ T6205] usb 6-1: selecting invalid altsetting 0 [ 660.388995][ T6205] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 660.413665][ T6205] usb 6-1: USB disconnect, device number 22 [ 660.492498][ T39] audit: type=1326 audit(1784196757.045:441): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14193 comm="syz.7.1932" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c0e1de59 code=0x0 [ 660.535188][T14196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.536011][T14196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.296908][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.308292][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.333839][T14206] netlink: 'syz.2.1937': attribute type 2 has an invalid length. [ 661.333861][T14206] netlink: 'syz.2.1937': attribute type 2 has an invalid length. [ 661.364524][T14209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.366212][T14209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.388913][T14209] sg_write: data in/out 425948/136 bytes for SCSI command 0x0-- guessing data in; [ 661.388913][T14209] program syz.6.1938 not setting count and/or reply_len properly [ 661.976628][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.977522][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.008300][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.008930][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.028407][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'. [ 662.028534][T14217] openvswitch: netlink: EtherType 0 is less than min 600 [ 662.045740][T14217] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 662.161155][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'. [ 662.650692][ T5583] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 662.678398][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.688636][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.709964][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.736429][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.829326][ T5583] usb 6-1: Using ep0 maxpacket: 32 [ 662.831613][ T5583] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.831640][ T5583] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 662.831665][ T5583] usb 6-1: config 0 interface 0 has no altsetting 0 [ 662.834759][ T5583] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 662.834806][ T5583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.834830][ T5583] usb 6-1: Product: syz [ 662.834848][ T5583] usb 6-1: Manufacturer: syz [ 662.834863][ T5583] usb 6-1: SerialNumber: syz [ 662.841727][ T5583] usb 6-1: config 0 descriptor?? [ 662.869262][ T6205] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 663.042322][ T6205] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 663.042583][ T6205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.074105][ T6205] usb 8-1: config 0 descriptor?? [ 663.120284][ T6205] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 663.246233][ T5583] gs_usb 6-1:0.0: Configuring for 15 interfaces [ 663.498762][ T5583] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 663.533729][T14247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.550675][T14247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.594628][ T5583] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 663.618340][T14239] netlink: 'syz.7.1948': attribute type 2 has an invalid length. [ 663.627637][T14239] netlink: 'syz.7.1948': attribute type 2 has an invalid length. [ 663.765006][ T5608] usb 6-1: USB disconnect, device number 23 [ 663.940303][T14256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.941050][T14256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.549215][ T5608] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 664.714785][ T5608] usb 6-1: unable to get BOS descriptor or descriptor too short [ 664.715319][ T5608] usb 6-1: not running at top speed; connect to a high speed hub [ 664.734392][ T5608] usb 6-1: config 1 has an invalid interface number: 93 but max is 0 [ 664.734419][ T5608] usb 6-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 664.734439][ T5608] usb 6-1: config 1 has no interface number 0 [ 664.734483][ T5608] usb 6-1: config 1 interface 93 altsetting 185 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.734556][ T5608] usb 6-1: config 1 interface 93 has no altsetting 0 [ 664.737775][ T5608] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 664.737802][ T5608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 664.737822][ T5608] usb 6-1: Product: syz [ 664.737837][ T5608] usb 6-1: Manufacturer: syz [ 664.737851][ T5608] usb 6-1: SerialNumber: syz [ 664.893365][ T6205] usb 8-1: USB disconnect, device number 69 [ 664.963045][T14268] 9p: Bad value for 'wfdno' [ 665.272889][ T5608] peak_usb 6-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 665.272924][ T5608] peak_usb 6-1:1.93: unable to read PCAN-USB serial number (err -22) [ 665.369702][ T5608] peak_usb 6-1:1.93: probe with driver peak_usb failed with error -22 [ 665.385735][ T5608] usb 6-1: USB disconnect, device number 24 [ 665.398348][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.414569][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.099394][ T5608] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 666.261135][ T5608] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 666.261158][ T5608] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 666.261175][ T5608] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 666.263592][ T5608] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 666.263622][ T5608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.263645][ T5608] usb 6-1: Product: syz [ 666.263659][ T5608] usb 6-1: Manufacturer: syz [ 666.263675][ T5608] usb 6-1: SerialNumber: syz [ 666.272014][ T5608] usb 6-1: config 0 descriptor?? [ 666.295649][T14281] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 666.295878][T14281] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 666.358052][ T5608] usb 6-1: ucan: probing device on interface #0 [ 666.410134][T14009] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 666.499970][ T5608] usb 6-1: ucan: could not read protocol version, ret=-32 [ 666.499994][ T5608] usb 6-1: ucan: probe failed; try to update the device firmware [ 666.564254][T14009] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 666.564287][T14009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.564300][T14009] usb 8-1: Product: syz [ 666.564309][T14009] usb 8-1: Manufacturer: syz [ 666.564319][T14009] usb 8-1: SerialNumber: syz [ 666.582244][T14009] usb 8-1: config 0 descriptor?? [ 666.610738][T14009] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 666.817966][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1964'. [ 666.861762][T14294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.862947][T14294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.047974][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.048933][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.107872][T14298] netlink: 'syz.6.1966': attribute type 2 has an invalid length. [ 667.107937][T14298] netlink: 'syz.6.1966': attribute type 2 has an invalid length. [ 667.305216][T14303] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 667.360637][T14303] team0: Port device vlan0 added [ 667.556679][T14304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.557296][T14304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.635194][ T10] usb 8-1: USB disconnect, device number 70 [ 667.762101][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.762871][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.770882][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.771807][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.773303][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.774558][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.655755][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.657152][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.878364][T14009] usb 6-1: USB disconnect, device number 25 [ 669.004176][T14339] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 669.043149][T14339] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.043534][T14339] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.071467][T14339] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.071696][T14339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.072054][T14339] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.072194][T14339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.126150][T14339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 669.279268][T14009] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 669.442927][T14009] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 669.442961][T14009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.479449][T14009] usb 6-1: config 0 descriptor?? [ 669.499665][ T6205] usb 7-1: USB disconnect, device number 44 [ 669.520204][T14009] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 669.676586][ T6205] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 669.931948][T14337] netlink: 'syz.5.1977': attribute type 2 has an invalid length. [ 669.931976][T14337] netlink: 'syz.5.1977': attribute type 2 has an invalid length. [ 670.014327][ T39] audit: type=1326 audit(1784196766.565:442): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14351 comm="syz.2.1984" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be460de59 code=0x0 [ 670.423483][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.487538][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.494905][T14009] usb 6-1: USB disconnect, device number 26 [ 670.502645][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.521163][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 670.527569][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 670.822751][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.872086][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.886267][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.893601][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 670.897855][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.529337][ T5608] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 671.682591][ T5608] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 671.682654][ T5608] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.682685][ T5608] usb 8-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 671.685187][ T5608] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 671.685226][ T5608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.685247][ T5608] usb 8-1: Product: syz [ 671.685262][ T5608] usb 8-1: Manufacturer: syz [ 671.685277][ T5608] usb 8-1: SerialNumber: syz [ 671.895538][T14381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1988'. [ 672.437982][T14390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.517674][T14352] lo speed is unknown, defaulting to 1000 [ 673.071540][ T5608] cdc_ncm 8-1:1.0: bind() failure [ 673.184170][ T5612] Bluetooth: hci4: command tx timeout [ 673.226629][ T5608] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 673.240899][ T5608] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 673.242765][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.246576][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.246750][ T5608] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 673.316054][ T5608] usb 8-1: USB disconnect, device number 71 [ 673.789245][ T5812] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 673.789431][ T5608] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 673.893439][ T160] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.969331][ T5608] usb 8-1: Using ep0 maxpacket: 8 [ 673.976467][ T5608] usb 8-1: unable to get BOS descriptor or descriptor too short [ 673.977996][ T5608] usb 8-1: config 1 has an invalid interface number: 211 but max is 0 [ 673.978020][ T5608] usb 8-1: config 1 has no interface number 0 [ 673.978050][ T5608] usb 8-1: config 1 interface 211 has no altsetting 0 [ 673.988621][ T5812] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 673.988646][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.028695][ T5608] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 674.028717][ T5608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.028732][ T5608] usb 8-1: Product: syz [ 674.028743][ T5608] usb 8-1: Manufacturer: syz [ 674.028754][ T5608] usb 8-1: SerialNumber: syz [ 674.118624][ T5812] usb 6-1: config 0 descriptor?? [ 674.176981][ T5812] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 674.284815][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.301175][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.378048][T14403] netlink: 'syz.5.1994': attribute type 2 has an invalid length. [ 674.378073][T14403] netlink: 'syz.5.1994': attribute type 2 has an invalid length. [ 674.419526][ T5608] usb 8-1: USB disconnect, device number 72 [ 674.564237][ T160] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.816125][ T5812] usb 6-1: USB disconnect, device number 27 [ 674.828344][T14417] loop5: detected capacity change from 0 to 7 [ 674.931090][T14417] Dev loop5: unable to read RDB block 7 [ 674.931144][T14417] loop5: unable to read partition table [ 674.931359][T14417] loop5: partition table beyond EOD, truncated [ 674.931395][T14417] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 675.004531][ T5622] Flush: task=udevd[5622] dev=loop5 state=2 [ 675.164750][ T5622] Teardown: task=udevd[5622] dev=loop5 state=2 [ 675.199703][ T160] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.259785][ T5612] Bluetooth: hci4: command tx timeout [ 676.186359][T14451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.186936][T14451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.324499][T14455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.325058][T14455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.616903][T14464] netlink: 516 bytes leftover after parsing attributes in process `syz.7.2008'. [ 676.631801][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.632426][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.818428][T14352] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.818726][T14352] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.818906][T14352] bridge_slave_0: entered allmulticast mode [ 676.842544][T14352] bridge_slave_0: entered promiscuous mode [ 676.859677][ T6205] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 676.860974][T14352] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.863144][T14352] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.865054][T14352] bridge_slave_1: entered allmulticast mode [ 676.888734][T14352] bridge_slave_1: entered promiscuous mode [ 676.939309][ T5812] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 677.009272][ T6205] usb 8-1: Using ep0 maxpacket: 8 [ 677.011907][ T6205] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 677.011937][ T6205] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.011958][ T6205] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.011981][ T6205] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 677.012016][ T6205] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 677.012039][ T6205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.102130][ T5812] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 677.102161][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.111096][ T6205] usb 8-1: config 0 descriptor?? [ 677.133907][ T5812] usb 6-1: config 0 descriptor?? [ 677.151024][T14463] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 677.212564][ T5812] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 677.244459][T14352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.315158][T14352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.339852][ T5612] Bluetooth: hci4: command tx timeout [ 677.448483][T14468] netlink: 'syz.5.2009': attribute type 2 has an invalid length. [ 677.448505][T14468] netlink: 'syz.5.2009': attribute type 2 has an invalid length. [ 677.905475][ T5612] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 677.947748][ T5812] usb 6-1: USB disconnect, device number 28 [ 677.988495][ T6205] usb 8-1: USB disconnect, device number 73 [ 678.122096][T14352] team0: Port device team_slave_0 added [ 678.145533][T14352] team0: Port device team_slave_1 added [ 678.269806][ T160] bridge_slave_1: left allmulticast mode [ 678.271006][ T160] bridge_slave_1: left promiscuous mode [ 678.271290][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.460664][ T160] bridge_slave_0: left allmulticast mode [ 678.460722][ T160] bridge_slave_0: left promiscuous mode [ 678.460934][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.623015][ T160] dvmrp0: left allmulticast mode [ 678.623126][ T160] pimreg: left allmulticast mode [ 678.746624][T14478] netlink: 46 bytes leftover after parsing attributes in process `syz.5.2012'. [ 679.419311][ T5612] Bluetooth: hci4: command tx timeout [ 679.475293][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 679.663892][ T160] team0: Port device geneve1 removed [ 679.990208][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.073039][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.117884][ T160] bond0 (unregistering): Released all slaves [ 680.291720][T14352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.291732][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.291751][T14352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.303593][T14352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.303632][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.303697][T14352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.789452][ T5608] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 680.864580][T14352] hsr_slave_0: entered promiscuous mode [ 680.866862][T14352] hsr_slave_1: entered promiscuous mode [ 680.868622][T14352] debugfs: 'hsr0' already exists in 'hsr' [ 680.868645][T14352] Cannot create hsr debugfs directory [ 681.011756][ T5608] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 681.011789][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.017045][ T5608] usb 6-1: config 0 descriptor?? [ 681.045227][ T5608] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 681.475927][T14499] netlink: 'syz.5.2018': attribute type 2 has an invalid length. [ 681.476352][T14499] netlink: 'syz.5.2018': attribute type 2 has an invalid length. [ 681.662500][T14517] netlink: 'syz.7.2017': attribute type 4 has an invalid length. [ 681.833865][T14519] vlan0: entered promiscuous mode [ 681.915779][ T5608] usb 6-1: USB disconnect, device number 29 [ 682.114270][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 682.134662][T14518] vlan0: left promiscuous mode [ 682.763384][T14547] binder: 14540:14547 ioctl c0306201 200000000640 returned -22 [ 682.787337][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.787900][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.805371][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 683.835878][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.864775][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.131760][ T39] audit: type=1326 audit(1784196780.675:443): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14583 comm="syz.2.2033" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be460de59 code=0x0 [ 684.239408][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 684.332866][ T5608] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 684.391874][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 684.391905][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.424993][ T10] usb 6-1: config 0 descriptor?? [ 684.437791][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 684.489204][ T5608] usb 8-1: Using ep0 maxpacket: 8 [ 684.513071][ T5608] usb 8-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 684.513103][ T5608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.513193][ T5608] usb 8-1: Product: syz [ 684.513211][ T5608] usb 8-1: Manufacturer: syz [ 684.513228][ T5608] usb 8-1: SerialNumber: syz [ 684.550455][ T160] hsr_slave_0: left promiscuous mode [ 684.618443][ T5608] usb 8-1: config 0 descriptor?? [ 684.624493][ T160] hsr_slave_1: left promiscuous mode [ 684.634122][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.634147][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.662588][ T5608] radio-usb-si4713 8-1:0.0: Si4713 development board discovered: (10C4:8244) [ 684.690683][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.698456][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.752224][T14578] netlink: 'syz.5.2031': attribute type 2 has an invalid length. [ 684.752245][T14578] netlink: 'syz.5.2031': attribute type 2 has an invalid length. [ 684.851886][ T160] veth1_macvtap: left promiscuous mode [ 684.860944][ T160] veth0_macvtap: left promiscuous mode [ 684.872447][ T160] veth1_vlan: left promiscuous mode [ 684.881753][ T160] veth0_vlan: left promiscuous mode [ 685.231353][ T10] usb 6-1: USB disconnect, device number 30 [ 685.309654][ T5608] radio-usb-si4713 8-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 685.311165][ T5608] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 685.358546][ T5608] usb 8-1: USB disconnect, device number 74 [ 685.748251][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.748379][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.099281][T14009] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 686.251798][T14009] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 686.251855][T14009] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.251886][T14009] usb 6-1: config 2 interface 0 has no altsetting 0 [ 686.255373][T14009] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 686.255420][T14009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.255442][T14009] usb 6-1: Product: syz [ 686.255465][T14009] usb 6-1: Manufacturer: syz [ 686.255481][T14009] usb 6-1: SerialNumber: syz [ 686.500805][ T160] team0 (unregistering): Port device team_slave_1 removed [ 686.579852][ T160] team0 (unregistering): Port device team_slave_0 removed [ 686.653551][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.654210][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.363928][T14611] syzkaller1: entered promiscuous mode [ 687.363954][T14611] syzkaller1: entered allmulticast mode [ 688.169598][T14624] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2040'. [ 688.251411][T14009] usb 6-1: USB disconnect, device number 31 [ 688.303497][T14631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.304117][T14631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.358900][T14631] netlink: 'syz.2.2042': attribute type 2 has an invalid length. [ 688.358917][T14631] netlink: 'syz.2.2042': attribute type 2 has an invalid length. [ 688.969698][T14009] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 689.193036][T14009] usb 8-1: Using ep0 maxpacket: 16 [ 689.196410][T14009] usb 8-1: unable to get BOS descriptor or descriptor too short [ 689.196482][T14009] usb 8-1: too many configurations: 226, using maximum allowed: 8 [ 689.198070][T14009] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 689.198105][T14009] usb 8-1: can't read configurations, error -61 [ 689.319276][ T5693] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 689.336811][T14009] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 689.483111][ T5693] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.483141][ T5693] usb 6-1: config 0 has no interface number 0 [ 689.483190][ T5693] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.483220][ T5693] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.483246][ T5693] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.483292][ T5693] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 689.483319][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.526495][ T5693] usb 6-1: config 0 descriptor?? [ 689.545198][T14009] usb 8-1: Using ep0 maxpacket: 16 [ 689.553195][T14009] usb 8-1: unable to get BOS descriptor or descriptor too short [ 689.553437][T14009] usb 8-1: too many configurations: 226, using maximum allowed: 8 [ 689.567851][T14009] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 689.567931][T14009] usb 8-1: can't read configurations, error -61 [ 689.569631][T14009] usb usb8-port1: attempt power cycle [ 689.845623][ T160] IPVS: stop unused estimator thread 0... [ 689.890084][T14663] usb usb5: check_ctrlrecip: process 14663 (syz.2.2047) requesting ep 01 but needs 81 [ 689.890178][T14663] usb usb5: usbfs: process 14663 (syz.2.2047) did not claim interface 0 before use [ 689.919246][T14009] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 689.940154][T14009] usb 8-1: Using ep0 maxpacket: 16 [ 689.944186][T14009] usb 8-1: unable to get BOS descriptor or descriptor too short [ 689.944307][T14009] usb 8-1: too many configurations: 226, using maximum allowed: 8 [ 689.946627][T14009] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 689.946658][T14009] usb 8-1: can't read configurations, error -61 [ 690.015933][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.016985][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.017858][T14664] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2045'. [ 690.110031][T14009] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 690.130009][T14009] usb 8-1: Using ep0 maxpacket: 16 [ 690.136681][T14009] usb 8-1: unable to get BOS descriptor or descriptor too short [ 690.136822][T14009] usb 8-1: too many configurations: 226, using maximum allowed: 8 [ 690.173597][T14009] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 690.173632][T14009] usb 8-1: can't read configurations, error -61 [ 690.174065][T14009] usb usb8-port1: unable to enumerate USB device [ 691.491135][T14665] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2045'. [ 691.832067][ T5693] uclogic 0003:28BD:0042.003A: failed retrieving string descriptor #100: -71 [ 691.832205][ T5693] uclogic 0003:28BD:0042.003A: failed retrieving pen parameters: -71 [ 691.832251][ T5693] uclogic 0003:28BD:0042.003A: pen probing failed: -71 [ 691.832301][ T5693] uclogic 0003:28BD:0042.003A: failed probing parameters: -71 [ 691.832419][ T5693] uclogic 0003:28BD:0042.003A: probe with driver uclogic failed with error -71 [ 691.896820][ T5693] usb 6-1: USB disconnect, device number 32 [ 691.970125][T14690] netlink: 10224 bytes leftover after parsing attributes in process `syz.7.2049'. [ 692.360079][T14352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 692.460746][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.465108][T14352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 692.576476][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.595074][T14352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 692.647731][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.658118][T14352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 692.681387][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.681914][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.708731][ T6205] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 692.731609][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.774750][T14705] netlink: 'syz.2.2053': attribute type 2 has an invalid length. [ 692.774771][T14705] netlink: 'syz.2.2053': attribute type 2 has an invalid length. [ 692.859378][ T6205] usb 8-1: Using ep0 maxpacket: 32 [ 692.861654][ T6205] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 692.861681][ T6205] usb 8-1: config 0 has no interface number 0 [ 693.060636][ T6205] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 693.060684][ T6205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.060705][ T6205] usb 8-1: Product: syz [ 693.060721][ T6205] usb 8-1: Manufacturer: syz [ 693.060736][ T6205] usb 8-1: SerialNumber: syz [ 693.064576][ T39] audit: type=1326 audit(1784196789.615:444): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14714 comm="syz.5.2054" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb056ade59 code=0x0 [ 693.068951][ T6205] usb 8-1: config 0 descriptor?? [ 693.132825][ T6205] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 693.468400][ T6205] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 693.574197][T14698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.690920][T14698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.720958][ T6205] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 693.820686][T14352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.961115][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 693.978098][ T6205] usb 8-1: USB disconnect, device number 79 [ 694.032050][ T6205] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 694.072033][ T6205] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 694.072989][ T6205] quatech2 8-1:0.51: device disconnected [ 694.139674][T14352] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.318320][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.331012][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.454437][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.456278][ T2158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.027263][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.045858][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.305768][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.306755][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.514444][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.515305][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.519321][ T5608] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 695.649692][T14009] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 695.674334][T14352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.689389][ T5608] usb 6-1: Using ep0 maxpacket: 32 [ 695.691824][ T5608] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 695.691871][ T5608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.691901][ T5608] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 695.691946][ T5608] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 695.691971][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.739375][ T5608] usb 6-1: config 0 descriptor?? [ 695.817522][T14009] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 695.817554][T14009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.846915][T14009] usb 8-1: config 0 descriptor?? [ 695.894061][T14009] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 695.968950][ T5608] hid_parser_main: 46 callbacks suppressed [ 695.968978][ T5608] pyra 0003:1E7D:2C24.003B: unknown main item tag 0x1 [ 696.026550][ T5608] pyra 0003:1E7D:2C24.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.5-1/input0 [ 696.177198][T14763] netlink: 'syz.7.2062': attribute type 2 has an invalid length. [ 696.177221][T14763] netlink: 'syz.7.2062': attribute type 2 has an invalid length. [ 696.277164][T14774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.278184][T14774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.465788][ T6205] usb 6-1: USB disconnect, device number 33 [ 696.692343][T14009] usb 8-1: USB disconnect, device number 80 [ 696.941432][ T39] audit: type=1326 audit(1784196793.495:445): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14791 comm="syz.5.2065" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb056ade59 code=0x0 [ 697.006292][T14352] veth0_vlan: entered promiscuous mode [ 697.057316][T14352] veth1_vlan: entered promiscuous mode [ 697.250220][T14352] veth0_macvtap: entered promiscuous mode [ 697.336153][T14352] veth1_macvtap: entered promiscuous mode [ 697.474942][T14352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.502582][T14352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.613998][ T34] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.621003][ T34] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.622187][ T34] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.624234][ T34] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.714521][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.715098][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.811880][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.830181][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.916605][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.934204][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.408300][T14812] input: syz1 as /devices/virtual/input/input63 [ 699.107830][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.107851][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.198868][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.241882][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.306620][T12596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.306640][T12596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.415434][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.418217][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.437970][T14009] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 699.464272][T14825] netlink: 'syz.2.2074': attribute type 2 has an invalid length. [ 699.464287][T14825] netlink: 'syz.2.2074': attribute type 2 has an invalid length. [ 699.491769][ T5783] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 699.598518][T14009] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.598547][T14009] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.619320][T14009] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 699.619350][T14009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 699.619373][T14009] usb 8-1: SerialNumber: syz [ 699.654019][ T5783] usb 6-1: unable to get BOS descriptor or descriptor too short [ 699.655280][ T5783] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 699.655304][ T5783] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 699.655324][ T5783] usb 6-1: config 63 has no interface number 0 [ 699.655413][ T5783] usb 6-1: config 63 interface 66 has no altsetting 0 [ 699.706413][ T5783] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 699.706445][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.706466][ T5783] usb 6-1: Product: syz [ 699.706541][ T5783] usb 6-1: Manufacturer: syz [ 699.706556][ T5783] usb 6-1: SerialNumber: syz [ 699.844128][T14009] usb 8-1: 0:2 : does not exist [ 699.895209][T14009] usb 8-1: USB disconnect, device number 81 [ 699.982934][ T5783] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 699.982997][ T5783] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 699.983256][ T5783] uvcvideo 6-1:63.66: No valid video chain found. [ 700.018206][ T5783] usb 6-1: USB disconnect, device number 34 [ 700.032644][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.134552][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.136155][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.204470][T14832] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2076'. [ 700.204487][T14832] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2076'. [ 700.204497][T14832] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2076'. [ 700.536854][ T39] audit: type=1326 audit(1784196797.085:446): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14839 comm="syz.6.2079" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81ab7de59 code=0x0 [ 700.800701][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2082'. [ 700.879328][ T10] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 701.054662][ T10] usb 6-1: config 71 has too many interfaces: 252, using maximum allowed: 32 [ 701.054691][ T10] usb 6-1: config 71 has an invalid descriptor of length 40, skipping remainder of the config [ 701.054711][ T10] usb 6-1: config 71 has 0 interfaces, different from the descriptor's value: 252 [ 701.088666][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=c748, bcdDevice=2d.ea [ 701.088697][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.088718][ T10] usb 6-1: Product: syz [ 701.088736][ T10] usb 6-1: Manufacturer: syz [ 701.088752][ T10] usb 6-1: SerialNumber: syz [ 701.128106][T14851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.156076][T14851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.389739][ T5783] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 701.457109][T14009] usb 6-1: USB disconnect, device number 35 [ 701.522443][ T5783] usb 8-1: device descriptor read/64, error -71 [ 701.759221][ T5783] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 701.889257][ T5783] usb 8-1: device descriptor read/64, error -71 [ 701.909320][T14009] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 701.999544][ T5783] usb usb8-port1: attempt power cycle [ 702.062475][T14009] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 702.062509][T14009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.066990][T14009] usb 6-1: config 0 descriptor?? [ 702.086200][T14009] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 702.294410][T14861] netlink: 'syz.5.2085': attribute type 2 has an invalid length. [ 702.294464][T14861] netlink: 'syz.5.2085': attribute type 2 has an invalid length. [ 702.339635][ T5783] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 702.364523][ T5783] usb 8-1: device descriptor read/8, error -71 [ 702.599266][ T5783] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 702.629780][ T5783] usb 8-1: device descriptor read/8, error -71 [ 702.720065][T14009] usb 6-1: USB disconnect, device number 36 [ 702.740654][ T5783] usb usb8-port1: unable to enumerate USB device [ 703.509314][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 703.664471][ T10] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 703.664503][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.664522][ T10] usb 6-1: Product: syz [ 703.664536][ T10] usb 6-1: Manufacturer: syz [ 703.664551][ T10] usb 6-1: SerialNumber: syz [ 703.668964][ T10] usb 6-1: config 0 descriptor?? [ 703.708558][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 703.708597][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 703.897089][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 703.913720][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 703.915245][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 703.915285][ T10] usb 6-1: media controller created [ 703.943765][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.018208][ T10] DVB: Unable to find symbol dib7000p_attach() [ 704.018219][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 704.098292][T14865] dib0700: tx buffer length is larger than 4. Not supported. [ 704.110441][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 704.110460][ T10] Registered IR keymap rc-empty [ 704.110790][ T10] dvb-usb: could not initialize remote control. [ 704.110800][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 704.111132][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 704.179062][ T10] usb 6-1: USB disconnect, device number 37 [ 704.336573][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 704.443402][T14883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.444084][T14883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.359211][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 705.521540][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 705.526023][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 528, setting to 64 [ 705.526048][ T10] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 705.526064][ T10] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.528465][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 705.528495][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.528509][ T10] usb 6-1: Product: syz [ 705.528520][ T10] usb 6-1: Manufacturer: syz [ 705.528531][ T10] usb 6-1: SerialNumber: syz [ 705.695384][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.697231][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.941332][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2100'. [ 706.040150][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 706.187743][ T10] usb 6-1: USB disconnect, device number 38 [ 706.402615][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.279321][ T5783] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 707.439295][ T5783] usb 8-1: Using ep0 maxpacket: 32 [ 707.449042][ T5783] usb 8-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 707.450932][ T5783] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.450957][ T5783] usb 8-1: Product: syz [ 707.450973][ T5783] usb 8-1: Manufacturer: syz [ 707.450988][ T5783] usb 8-1: SerialNumber: syz [ 707.535262][ T5783] empeg 8-1:1.0: empeg converter detected [ 707.746146][ T5783] empeg 8-1:1.0: probe with driver empeg failed with error -71 [ 707.775433][ T5783] usb 8-1: USB disconnect, device number 86 [ 708.682555][T14969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.683155][T14969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.769795][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2114'. [ 709.489247][ T6205] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 709.641503][ T6205] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 709.641533][ T6205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.645887][ T6205] usb 8-1: config 0 descriptor?? [ 709.671291][ T6205] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 709.863120][T14975] netlink: 'syz.7.2117': attribute type 2 has an invalid length. [ 709.863146][T14975] netlink: 'syz.7.2117': attribute type 2 has an invalid length. [ 710.320768][ T6205] usb 8-1: USB disconnect, device number 87 [ 711.474422][T14995] netlink: ct family unspecified [ 711.474447][T14995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.039187][ T6205] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 712.063610][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.065345][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.084464][T15007] cgroup: noprefix used incorrectly [ 712.189369][ T6205] usb 8-1: Using ep0 maxpacket: 16 [ 712.192122][ T6205] usb 8-1: unable to get BOS descriptor or descriptor too short [ 712.193341][ T6205] usb 8-1: config 4 has an invalid interface number: 55 but max is 0 [ 712.193368][ T6205] usb 8-1: config 4 has no interface number 0 [ 712.193398][ T6205] usb 8-1: config 4 interface 55 has no altsetting 0 [ 712.195686][ T6205] usb 8-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 712.195712][ T6205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.195732][ T6205] usb 8-1: Product: syz [ 712.195742][ T6205] usb 8-1: Manufacturer: syz [ 712.195752][ T6205] usb 8-1: SerialNumber: syz [ 712.461495][ T6205] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 712.461583][ T6205] gspca_mr97310a: reg write [21] error -22 [ 712.461637][ T6205] mr97310a 8-1:4.55: probe with driver mr97310a failed with error -22 [ 712.473286][ T6205] usb 8-1: USB disconnect, device number 88 [ 712.789225][T14009] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 712.949177][T14009] usb 6-1: Using ep0 maxpacket: 8 [ 712.956994][T14009] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 712.957019][T14009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 712.957040][T14009] usb 6-1: Product: syz [ 712.957050][T14009] usb 6-1: Manufacturer: syz [ 712.957059][T14009] usb 6-1: SerialNumber: syz [ 712.985185][T14009] usb 6-1: config 0 descriptor?? [ 713.013971][T14009] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 713.205266][T14009] gspca_sn9c2028: read1 error -32 [ 713.377622][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2130'. [ 713.393652][T15022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.394617][T15022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.451563][T14009] gspca_sn9c2028: read1 error -71 [ 713.451654][T14009] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 713.467213][T14009] usb 6-1: USB disconnect, device number 39 [ 713.569358][ T5812] usb 8-1: new low-speed USB device number 89 using dummy_hcd [ 713.699440][ T5812] usb 8-1: device descriptor read/64, error -71 [ 713.939374][ T5812] usb 8-1: new low-speed USB device number 90 using dummy_hcd [ 714.069300][ T5812] usb 8-1: device descriptor read/64, error -71 [ 714.145111][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.145794][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.202715][ T5812] usb usb8-port1: attempt power cycle [ 714.215788][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.216447][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.559613][ T5812] usb 8-1: new low-speed USB device number 91 using dummy_hcd [ 714.580080][ T5812] usb 8-1: device descriptor read/8, error -71 [ 714.602074][T15036] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.2137' sets config #0 [ 714.829385][ T5812] usb 8-1: new low-speed USB device number 92 using dummy_hcd [ 714.852044][ T5812] usb 8-1: device descriptor read/8, error -71 [ 714.961099][ T5812] usb usb8-port1: unable to enumerate USB device [ 716.266640][T15073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.268746][T15073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.297348][T15073] netlink: 'syz.2.2152': attribute type 2 has an invalid length. [ 716.297377][T15073] netlink: 'syz.2.2152': attribute type 2 has an invalid length. [ 716.689264][ T5609] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 716.841875][ T5609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 716.841913][ T5609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 716.878155][ T5609] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 716.878186][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.878207][ T5609] usb 6-1: Product: syz [ 716.878220][ T5609] usb 6-1: Manufacturer: syz [ 716.878234][ T5609] usb 6-1: SerialNumber: syz [ 716.922491][ T5609] usb 6-1: config 0 descriptor?? [ 716.927396][ T5609] hub 6-1:0.0: bad descriptor, ignoring hub [ 716.927437][ T5609] hub 6-1:0.0: probe with driver hub failed with error -5 [ 716.955119][ T5609] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input65 [ 716.968132][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.986307][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.999207][ T6205] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 717.150574][ T6205] usb 8-1: Using ep0 maxpacket: 8 [ 717.179277][ T6205] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 717.179307][ T6205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.179329][ T6205] usb 8-1: Product: syz [ 717.179344][ T6205] usb 8-1: Manufacturer: syz [ 717.179360][ T6205] usb 8-1: SerialNumber: syz [ 717.222365][ T6205] usb 8-1: config 0 descriptor?? [ 717.442359][ T6205] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 717.655251][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.655821][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.131657][ T5608] usb 6-1: USB disconnect, device number 40 [ 719.237228][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.238251][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.283240][T15116] netlink: 'syz.2.2163': attribute type 2 has an invalid length. [ 719.283264][T15116] netlink: 'syz.2.2163': attribute type 2 has an invalid length. [ 719.284746][ T6205] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 719.285468][ T6205] dvbdev: DVB: registering new adapter (Terratec H7) [ 719.285518][ T6205] usb 8-1: media controller created [ 719.495327][ T6205] usb 8-1: dvb_usb_v2: MAC address: 09:e3:1a:64:00:00 [ 719.515421][ T6205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.567885][ T6205] DVB: Unable to find symbol drxk_attach() [ 719.602027][T15118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3823921855 (61182749680 ns) > initial count (46710079120 ns). Using initial count to start timer. [ 719.635817][ T6205] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 719.886177][T15126] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2166'. [ 719.919447][ T6205] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 720.074525][ T6205] usb 6-1: Using ep0 maxpacket: 8 [ 720.087715][ T6205] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 720.087738][ T6205] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 720.087756][ T6205] usb 6-1: config 3 has an invalid interface descriptor of length 7, skipping [ 720.087773][ T6205] usb 6-1: config 3 has no interface number 0 [ 720.087815][ T6205] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.087841][ T6205] usb 6-1: config 3 interface 45 has no altsetting 0 [ 720.143560][ T6205] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 720.143581][ T6205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.143596][ T6205] usb 6-1: Product: syz [ 720.143607][ T6205] usb 6-1: Manufacturer: syz [ 720.143617][ T6205] usb 6-1: SerialNumber: syz [ 720.524323][ T6205] usb 6-1: USB disconnect, device number 41 [ 720.596610][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.728908][ T5700] usb 8-1: USB disconnect, device number 93 [ 720.799992][T15142] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2169'. [ 721.461066][T15164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.461676][T15164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.809211][ T6205] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 721.959215][ T6205] usb 8-1: Using ep0 maxpacket: 32 [ 721.960217][ T6205] usb 8-1: too many configurations: 11, using maximum allowed: 8 [ 721.961419][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.961449][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.962750][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.962773][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.964079][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.964113][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.965309][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.965342][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.966514][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.966549][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.968232][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.968262][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.971365][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.971459][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 722.036525][ T6205] usb 8-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 722.036559][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 722.036591][ T6205] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 722.036613][ T6205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.198400][ T6205] usb 8-1: config 0 descriptor?? [ 722.815738][ T6205] usbhid 8-1:0.0: can't add hid device: -71 [ 722.815907][ T6205] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 722.831336][ T6205] usb 8-1: USB disconnect, device number 94 [ 723.473115][T15135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.482702][T15169] netlink: 'syz.2.2173': attribute type 2 has an invalid length. [ 723.482729][T15169] netlink: 'syz.2.2173': attribute type 2 has an invalid length. [ 723.741229][ T6205] usb 8-1: new low-speed USB device number 95 using dummy_hcd [ 723.898985][ T6205] usb 8-1: config 0 interface 0 altsetting 67 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 723.899012][ T6205] usb 8-1: config 0 interface 0 has no altsetting 0 [ 723.899036][ T6205] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 723.905746][ T6205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.939780][ T6205] usb 8-1: config 0 descriptor?? [ 723.962351][ T6205] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 724.504191][T15202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.504767][T15202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.859193][ T5693] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 724.903016][T15213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.903751][T15213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.009245][ T5693] usb 6-1: Using ep0 maxpacket: 16 [ 725.015458][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.015489][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.015528][ T5693] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 725.015572][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.038241][ T5693] usb 6-1: config 0 descriptor?? [ 725.164481][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.165608][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.276482][T15209] netlink: 'syz.5.2186': attribute type 10 has an invalid length. [ 725.276979][T15209] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.288650][T15209] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.303278][T15209] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.303489][T15209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.303883][T15209] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.304073][T15209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.326562][T15209] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 725.367517][T15209] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2186'. [ 725.385016][ T5693] usbhid 6-1:0.0: can't add hid device: -71 [ 725.385126][ T5693] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 725.405809][ T5693] usb 6-1: USB disconnect, device number 42 [ 725.938733][T15222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.948707][T15222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.249213][ T5608] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 726.401161][ T5608] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 726.401191][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.406521][ T5608] usb 6-1: config 0 descriptor?? [ 726.432611][ T5608] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 726.464939][ T5693] usb 8-1: USB disconnect, device number 95 [ 726.652441][T15229] xt_socket: unknown flags 0x4 [ 726.658354][T15224] netlink: 'syz.5.2192': attribute type 2 has an invalid length. [ 726.658383][T15224] netlink: 'syz.5.2192': attribute type 2 has an invalid length. [ 726.979164][ T5693] usb 8-1: new full-speed USB device number 96 using dummy_hcd [ 727.096145][ T5608] usb 6-1: USB disconnect, device number 43 [ 727.133863][ T5693] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 727.133904][ T5693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.133927][ T5693] usb 8-1: Product: syz [ 727.133943][ T5693] usb 8-1: Manufacturer: syz [ 727.133958][ T5693] usb 8-1: SerialNumber: syz [ 727.137550][ T5693] usb 8-1: config 0 descriptor?? [ 727.194171][ T5693] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 728.347319][T15252] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2201'. [ 728.768539][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.780073][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.529234][ T5700] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 729.680954][ T5700] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 729.680987][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.704200][ T5700] usb 6-1: config 0 descriptor?? [ 729.736963][ T5700] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 730.381980][ T5700] usb 6-1: USB disconnect, device number 44 [ 730.423804][ T5693] gspca_stk1135: reg_w 0x353 err -71 [ 730.427074][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427089][ T5693] gspca_stk1135: Sensor write failed [ 730.427148][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427160][ T5693] gspca_stk1135: Sensor write failed [ 730.427192][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427203][ T5693] gspca_stk1135: Sensor read failed [ 730.427236][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427247][ T5693] gspca_stk1135: Sensor read failed [ 730.427255][ T5693] gspca_stk1135: Detected sensor type unknown (0x0) [ 730.427292][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427302][ T5693] gspca_stk1135: Sensor read failed [ 730.427334][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427344][ T5693] gspca_stk1135: Sensor read failed [ 730.427375][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427385][ T5693] gspca_stk1135: Sensor write failed [ 730.427417][ T5693] gspca_stk1135: serial bus timeout: status=0x00 [ 730.427427][ T5693] gspca_stk1135: Sensor write failed [ 730.427506][ T5693] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 730.584712][ T5693] usb 8-1: USB disconnect, device number 96 [ 730.743571][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.744122][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.290348][ T39] audit: type=1326 audit(1784196827.845:447): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15296 comm="syz.6.2211" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81ab7de59 code=0x0 [ 732.329936][ T5609] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 732.489206][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 732.504601][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 732.525222][ T5609] usb 6-1: config index 0 descriptor too short (expected 65282, got 43) [ 732.525251][ T5609] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 732.525293][ T5609] usb 6-1: can't read configurations, error -22 [ 732.689394][ T5609] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 732.849220][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 732.851530][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 732.853164][ T5609] usb 6-1: config index 0 descriptor too short (expected 65282, got 43) [ 732.853191][ T5609] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 732.853225][ T5609] usb 6-1: can't read configurations, error -22 [ 732.853826][ T5609] usb usb6-port1: attempt power cycle [ 733.269220][ T5609] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 733.289837][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 733.292334][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 733.293689][ T5609] usb 6-1: config index 0 descriptor too short (expected 65282, got 43) [ 733.293715][ T5609] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 733.293744][ T5609] usb 6-1: can't read configurations, error -22 [ 733.439206][ T5609] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 733.459998][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 733.469417][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 733.470753][ T5609] usb 6-1: config index 0 descriptor too short (expected 65282, got 43) [ 733.470776][ T5609] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 171 [ 733.470804][ T5609] usb 6-1: can't read configurations, error -22 [ 733.471242][ T5609] usb usb6-port1: unable to enumerate USB device [ 733.734466][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2221'. [ 734.201623][ T39] audit: type=1326 audit(1784196830.755:448): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15345 comm="syz.7.2225" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c0e1de59 code=0x0 [ 734.390775][T15354] raw_sendmsg: syz.2.2227 forgot to set AF_INET. Fix it! [ 734.393594][T15353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.395816][T15353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.424571][T15353] loop7: detected capacity change from 0 to 7 [ 734.449613][T15353] Dev loop7: unable to read RDB block 7 [ 734.449656][T15353] loop7: unable to read partition table [ 734.449863][T15353] loop7: partition table beyond EOD, truncated [ 734.449904][T15353] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 734.521585][ T5622] Flush: task=udevd[5622] dev=loop7 state=2 [ 734.579814][ T5622] Teardown: task=udevd[5622] dev=loop7 state=2 [ 735.663892][T15369] overlay: Unknown parameter 'obj_user' [ 736.070935][T15394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.071726][T15394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.103482][T15394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.104064][T15394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.104733][T15394] netlink: 'syz.2.2238': attribute type 10 has an invalid length. [ 736.104748][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2238'. [ 736.150984][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2236'. [ 736.199253][T15394] bridge0: port 3(team0) entered blocking state [ 736.199642][T15394] bridge0: port 3(team0) entered disabled state [ 736.199946][T15394] team0: entered allmulticast mode [ 736.199974][T15394] team_slave_0: entered allmulticast mode [ 736.199999][T15394] team_slave_1: entered allmulticast mode [ 736.200035][T15394] vlan0: entered allmulticast mode [ 736.246216][T15394] team0: entered promiscuous mode [ 736.246235][T15394] team_slave_0: entered promiscuous mode [ 736.246467][T15394] team_slave_1: entered promiscuous mode [ 736.246664][T15394] vlan0: entered promiscuous mode [ 736.248780][T15394] bridge0: port 3(team0) entered blocking state [ 736.248958][T15394] bridge0: port 3(team0) entered forwarding state [ 736.286830][T15397] overlay: ./file0 is not a directory [ 736.452100][ T39] audit: type=1326 audit(1784196833.005:449): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15400 comm="syz.7.2241" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c0e1de59 code=0x0 [ 736.799195][ T5700] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 736.949169][ T5700] usb 6-1: Using ep0 maxpacket: 32 [ 736.975715][ T5700] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 736.975745][ T5700] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 736.975864][ T5700] usb 6-1: config 0 interface 0 has no altsetting 0 [ 737.009269][ T5700] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 737.009314][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.009336][ T5700] usb 6-1: Product: syz [ 737.009351][ T5700] usb 6-1: Manufacturer: syz [ 737.009366][ T5700] usb 6-1: SerialNumber: syz [ 737.014587][ T5700] usb 6-1: config 0 descriptor?? [ 737.362840][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.368116][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.424958][ T5700] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 737.467770][T15424] netlink: 'syz.2.2248': attribute type 11 has an invalid length. [ 737.695556][ T5700] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 737.695815][ T5700] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 737.783599][ T5700] usb 6-1: USB disconnect, device number 49 [ 738.164940][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.168416][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.300078][ T5609] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 738.451367][ T5609] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 738.451400][ T5609] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.455664][ T5609] usb 8-1: config 0 descriptor?? [ 738.639254][ T5608] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 738.761264][T15448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.763074][T15448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.822235][ T5608] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 738.822259][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.834763][ T5608] usb 6-1: config 0 descriptor?? [ 738.864931][ T5608] cp210x 6-1:0.0: cp210x converter detected [ 739.258385][ T5608] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 739.378206][ T5608] usb 6-1: cp210x converter now attached to ttyUSB0 [ 739.464388][ T5700] usb 6-1: USB disconnect, device number 50 [ 739.495198][ T5700] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 739.627932][ T39] audit: type=1326 audit(1784196836.175:450): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15452 comm="syz.2.2257" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be460de59 code=0x0 [ 739.693437][T15457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.694046][T15457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.718968][ T5700] cp210x 6-1:0.0: device disconnected [ 739.915376][ T5609] usb 8-1: Cannot set autoneg [ 739.915913][ T5609] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 739.946164][ T5609] usb 8-1: USB disconnect, device number 97 [ 740.724414][ T5609] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 740.886108][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 740.907499][ T5609] usb 6-1: not running at top speed; connect to a high speed hub [ 740.927226][ T5609] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 740.927273][ T5609] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 740.963001][ T5609] usb 6-1: string descriptor 0 read error: -22 [ 740.963139][ T5609] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 740.963165][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.104542][T15474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.133723][T15474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.196370][T15480] openvswitch: netlink: Actions may not be safe on all matching packets [ 741.201658][T15480] netlink: 468 bytes leftover after parsing attributes in process `syz.7.2266'. [ 741.628961][ T5609] usb 6-1: USB disconnect, device number 51 [ 741.913594][ T39] audit: type=1326 audit(1784196838.465:451): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15495 comm="syz.2.2272" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be460de59 code=0x0 [ 741.949319][ T5693] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 742.100144][ T5693] usb 8-1: device descriptor read/64, error -71 [ 742.193248][T15499] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 742.193268][T15499] overlayfs: missing 'lowerdir' [ 742.365712][ T5693] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 742.509361][ T5693] usb 8-1: device descriptor read/64, error -71 [ 742.621356][ T5693] usb usb8-port1: attempt power cycle [ 742.962352][ T5693] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 742.988311][ T5693] usb 8-1: device descriptor read/8, error -71 [ 743.220793][ T5693] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 743.240178][ T5693] usb 8-1: device descriptor read/8, error -71 [ 743.354729][ T5693] usb usb8-port1: unable to enumerate USB device [ 743.370870][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.372654][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.378554][T15527] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2284'. [ 743.435045][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 743.450265][T15527] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 743.450283][T15527] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2284'. [ 743.616412][T15532] kvm [15529]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb3 [ 743.659787][ T39] audit: type=1326 audit(1784196840.215:452): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15529 comm="syz.5.2285" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb056ade59 code=0x0 [ 744.247391][T15531] netlink: 'syz.2.2284': attribute type 12 has an invalid length. [ 744.247416][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 744.988241][ T39] audit: type=1326 audit(1784196841.535:453): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15546 comm="syz.2.2289" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be460de59 code=0x0 [ 745.640509][ T5700] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 745.769347][ T5700] usb 8-1: device descriptor read/64, error -71 [ 746.010676][ T5700] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 746.139371][ T5700] usb 8-1: device descriptor read/64, error -71 [ 746.250866][ T5700] usb usb8-port1: attempt power cycle [ 746.600949][ T5700] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 746.627446][ T5700] usb 8-1: device descriptor read/8, error -71 [ 746.812504][T15587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.813128][T15587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.861367][ T5700] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 746.880680][ T5700] usb 8-1: device descriptor read/8, error -71 [ 746.990675][ T5700] usb usb8-port1: unable to enumerate USB device [ 747.184127][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.397411][ T39] audit: type=1804 audit(1784196843.935:454): pid=15591 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.2.2304" name="/newroot/537/file1" dev="tmpfs" ino=2795 res=1 errno=0 [ 747.551429][T15595] tmpfs: Bad value for 'mpol' [ 747.622388][T15597] sg_write: data in/out 1836017931/74 bytes for SCSI command 0x0-- guessing data in; [ 747.622388][T15597] program syz.2.2307 not setting count and/or reply_len properly [ 747.785413][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.786014][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.615127][T15614] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 748.615144][T15614] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2314'. [ 748.615155][T15614] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 748.899287][ T5609] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 750.065260][ T5609] usb 8-1: Using ep0 maxpacket: 16 [ 750.077203][ T5609] usb 8-1: unable to get BOS descriptor or descriptor too short [ 750.096057][ T5609] usb 8-1: config 5 has an invalid interface number: 248 but max is 0 [ 750.096082][ T5609] usb 8-1: config 5 has no interface number 0 [ 750.096124][ T5609] usb 8-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 750.096151][ T5609] usb 8-1: config 5 interface 248 has no altsetting 0 [ 750.111097][ T5609] usb 8-1: string descriptor 0 read error: -22 [ 750.111236][ T5609] usb 8-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 750.111255][ T5609] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.161292][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 750.329164][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 750.332108][ T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 750.332135][ T10] usb 6-1: config 0 has no interface number 0 [ 750.332233][ T10] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 750.335850][ T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 750.335881][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.335903][ T10] usb 6-1: Product: syz [ 750.335919][ T10] usb 6-1: Manufacturer: syz [ 750.335935][ T10] usb 6-1: SerialNumber: syz [ 750.421133][ T10] usb 6-1: config 0 descriptor?? [ 750.422816][ T5609] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 750.454432][ T5609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 750.456400][ T5609] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 750.456453][ T5609] usb 8-1: media controller created [ 750.486645][ T10] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 750.486682][ T10] em28xx 6-1:0.132: Video interface 132 found: [ 750.614452][T15631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.615271][T15631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.729821][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.891823][ T5609] DVB: Unable to find symbol dib7000p_attach() [ 750.891840][ T5609] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 750.893857][ T10] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 751.031050][ T5609] rc_core: IR keymap rc-dib0700-rc5 not found [ 751.031075][ T5609] Registered IR keymap rc-empty [ 751.031399][ T5609] dvb-usb: could not initialize remote control. [ 751.031410][ T5609] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 751.103888][ T9283] Bluetooth: hci3: Frame reassembly failed (-84) [ 751.138107][ T5609] usb 8-1: USB disconnect, device number 106 [ 751.375503][ T5609] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 752.189403][T15645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 752.193168][T15645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 752.608386][ T10] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 752.608532][ T10] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 752.839173][ T10] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 752.839325][ T10] em28xx 6-1:0.132: analog set to bulk mode. [ 752.840648][ T5812] em28xx 6-1:0.132: Registering V4L2 extension [ 752.925881][ T10] usb 6-1: USB disconnect, device number 52 [ 752.947800][ T10] em28xx 6-1:0.132: Disconnecting em28xx [ 753.051114][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.092475][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.099490][ T5612] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 753.349975][ T5812] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 753.349997][ T5812] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 753.350010][ T5812] em28xx 6-1:0.132: No AC97 audio processor [ 753.729512][ T5812] usb 6-1: Decoder not found [ 753.729564][ T5812] em28xx 6-1:0.132: failed to create media graph [ 753.729677][ T5812] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 753.826260][ T5812] INFO: trying to register non-static key. [ 753.826303][ T5812] The code is fine but needs lockdep annotation, or maybe [ 753.826311][ T5812] you didn't initialize this object before use? [ 753.826345][ T5812] turning off the locking correctness validator. [ 753.826392][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 753.826422][ T5812] Tainted: [L]=SOFTLOCKUP [ 753.826430][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 753.826444][ T5812] Workqueue: events request_module_async [ 753.826537][ T5812] Call Trace: [ 753.826545][ T5812] [ 753.826555][ T5812] dump_stack_lvl+0xe8/0x150 [ 753.826585][ T5812] assign_lock_key+0x133/0x150 [ 753.826609][ T5812] register_lock_class+0xcc/0x2e0 [ 753.826652][ T5812] __lock_acquire+0xaf/0x2e40 [ 753.826673][ T5812] ? ret_from_fork_asm+0x1a/0x30 [ 753.826704][ T5812] ? stack_trace_save+0xa9/0x100 [ 753.826790][ T5812] ? __pfx_stack_trace_save+0x10/0x10 [ 753.826826][ T5812] lock_acquire+0x115/0x350 [ 753.826858][ T5812] ? __wake_up_common_lock+0x2f/0x1f0 [ 753.826946][ T5812] rt_spin_lock+0x83/0x400 [ 753.826974][ T5812] ? __wake_up_common_lock+0x2f/0x1f0 [ 753.827009][ T5812] ? __pfx_rt_spin_lock+0x10/0x10 [ 753.827034][ T5812] __wake_up_common_lock+0x2f/0x1f0 [ 753.827058][ T5812] __vb2_queue_cancel+0x2de/0xdc0 [ 753.827114][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 753.827129][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.827146][ T5812] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 753.827171][ T5812] vb2_core_queue_release+0x2f/0x150 [ 753.827197][ T5812] vb2_video_unregister_device+0x15b/0x200 [ 753.827242][ T5812] em28xx_v4l2_init+0x1c60/0x3140 [ 753.827264][ T5812] em28xx_init_extension+0x120/0x1d0 [ 753.827307][ T5812] ? process_one_work+0x7fd/0x1480 [ 753.827324][ T5812] process_one_work+0xaaf/0x1480 [ 753.827364][ T5812] ? __pfx_process_one_work+0x10/0x10 [ 753.827379][ T5812] ? do_raw_spin_lock+0x12b/0x2f0 [ 753.827433][ T5812] ? assign_work+0x3cf/0x5d0 [ 753.827457][ T5812] worker_thread+0xb05/0x10d0 [ 753.827491][ T5812] kthread+0x388/0x470 [ 753.827520][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 753.827543][ T5812] ? __pfx_kthread+0x10/0x10 [ 753.827572][ T5812] ret_from_fork+0x514/0xb70 [ 753.827603][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 753.827640][ T5812] ? __switch_to+0xc89/0x1420 [ 753.827660][ T5812] ? __pfx_kthread+0x10/0x10 [ 753.827681][ T5812] ret_from_fork_asm+0x1a/0x30 [ 753.827709][ T5812] [ 753.827762][ T5812] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 753.827860][ T5812] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 753.827879][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 753.827901][ T5812] Tainted: [L]=SOFTLOCKUP [ 753.827907][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 753.827918][ T5812] Workqueue: events request_module_async [ 753.827936][ T5812] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 753.827960][ T5812] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 753.827975][ T5812] RSP: 0018:ffffc90005b77908 EFLAGS: 00010246 [ 753.827989][ T5812] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 753.827998][ T5812] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 753.828010][ T5812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.828019][ T5812] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff888057761b14 [ 753.828032][ T5812] R13: ffff888057761c28 R14: 0000000000000000 R15: 0000000000000000 [ 753.828042][ T5812] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 753.828056][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.828066][ T5812] CR2: 00007fbb038e5d58 CR3: 0000000060baa000 CR4: 00000000003526f0 [ 753.828080][ T5812] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 753.828091][ T5812] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 753.828102][ T5812] Call Trace: [ 753.828107][ T5812] [ 753.828116][ T5812] __vb2_queue_cancel+0x2de/0xdc0 [ 753.828143][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 753.828159][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.828174][ T5812] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 753.828200][ T5812] vb2_core_queue_release+0x2f/0x150 [ 753.828227][ T5812] vb2_video_unregister_device+0x15b/0x200 [ 753.828253][ T5812] em28xx_v4l2_init+0x1c60/0x3140 [ 753.828276][ T5812] em28xx_init_extension+0x120/0x1d0 [ 753.828302][ T5812] ? process_one_work+0x7fd/0x1480 [ 753.828317][ T5812] process_one_work+0xaaf/0x1480 [ 753.828340][ T5812] ? __pfx_process_one_work+0x10/0x10 [ 753.828354][ T5812] ? do_raw_spin_lock+0x12b/0x2f0 [ 753.828379][ T5812] ? assign_work+0x3cf/0x5d0 [ 753.828395][ T5812] worker_thread+0xb05/0x10d0 [ 753.828420][ T5812] kthread+0x388/0x470 [ 753.828440][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 753.828457][ T5812] ? __pfx_kthread+0x10/0x10 [ 753.828478][ T5812] ret_from_fork+0x514/0xb70 [ 753.828500][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 753.828521][ T5812] ? __switch_to+0xc89/0x1420 [ 753.828540][ T5812] ? __pfx_kthread+0x10/0x10 [ 753.828572][ T5812] ret_from_fork_asm+0x1a/0x30 [ 753.828599][ T5812] [ 753.828608][ T5812] Modules linked in: [ 753.828624][ T5812] ---[ end trace 0000000000000000 ]--- [ 753.828675][ T5812] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 753.828705][ T5812] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 753.828741][ T5812] RSP: 0018:ffffc90005b77908 EFLAGS: 00010246 [ 753.828762][ T5812] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 753.828777][ T5812] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 753.828789][ T5812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.828798][ T5812] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff888057761b14 [ 753.828809][ T5812] R13: ffff888057761c28 R14: 0000000000000000 R15: 0000000000000000 [ 753.828820][ T5812] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 753.828832][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.828843][ T5812] CR2: 00007fbb038e5d58 CR3: 0000000060baa000 CR4: 00000000003526f0 [ 753.828856][ T5812] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 753.828867][ T5812] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 753.828903][ T5812] Kernel panic - not syncing: Fatal exception [ 753.829612][ T5812] Kernel Offset: disabled