last executing test programs: 7.403610014s ago: executing program 0 (id=2492): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000020000000000000000000000000000000000000000000000fffc000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000000000002000000010000000000000000000000060000000000000075b4ffffffffffffffffffffffffffff0400000000000000030000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) 7.215732802s ago: executing program 0 (id=2494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000102) 7.150059771s ago: executing program 0 (id=2496): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x6828, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000008c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x27}, 0x1, 0x6, 0x0, 0x700, 0x4, 0x540000}) ppoll(&(0x7f0000000940), 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_80211_join_ibss(&(0x7f0000000d40)='wlan0\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x113, &(0x7f00000002c0)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0xd9, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0x9, "5170a63689ef34"}, @fastopen={0x22, 0xa, "3f9c69cf89b03cfd"}]}}, {"c4ee18c1437d0b3a11239d343bafa0dcedd42ebe2fccd13bf57e7b248454b40a02c21602000000000000008eef2760065cc97b130b305443eae98a3c3d7aec843f1139587e72e1a0d40523081bf21cf3d77ddbbad32a2b7a687ee40ea5b0ccda9cef7ef6d305da09c16b9ee88dc09bd62462bd01ec6e21f3b4953f2a6dc541351d1336ad86f19791905283d385096f6464d50821d4cf204a3c2f55130964d2b990dc0f71c5319ba363d8f28700245033a3"}}}}}}}, 0x0) syz_usb_connect$midi(0x4, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x3, 0x10, 0x4c, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x8, 0xc9, 0x8b, {0x8, 0x25, 0x1, 0x4, "10c88eaa"}}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x4, 0x81, 0xa7, {0xf, 0x25, 0x1, 0xb, "029749bcb3b2e581f131bf"}}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x7, 0xff, 0x7, {0x5, 0x25, 0x1, 0x1, "a9"}}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x2, 0x7d, 0x4, {0xd, 0x25, 0x1, 0x9, "846d8159e278a8a0e0"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xff, 0x6, 0x2, {0xf, 0x25, 0x1, 0xb, "7b1f77201c85fd146d4459"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x5, 0x8, 0xe, 0x10, 0x4}, 0x61, &(0x7f00000001c0)={0x5, 0xf, 0x61, 0x6, [@generic={0x34, 0x10, 0x3, "4d48b1331a29dffd4dd9d9489e76ef49982f849e7f4452e75c69096ecde5605da7e0d95132f59e0524c4b6fd40bd036aa4"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xe, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb, 0x81, 0xfff}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x22, &(0x7f0000000280)=@string={0x22, 0x3, "25fb1fc9faef329dfae965ac5f2475cb2fe1ed637f4f6a574172643ebe85dfc2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44f}}]}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/148) 6.656420683s ago: executing program 3 (id=2498): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.52152959s ago: executing program 3 (id=2499): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x3, @private1, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="14", 0x1}], 0x1}}], 0x1, 0x54) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000001200), 0x0, 0x2) connect$unix(r0, &(0x7f0000001240)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001340)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r1 = open(&(0x7f0000001380)='./bus\x00', 0x143142, 0x0) readv(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000014c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x4000) write(r2, &(0x7f0000001500)='4', 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000012c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000001440), 0xffffffffffffff94, 0x1, 0x0, 0x55) 5.474058289s ago: executing program 3 (id=2503): syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3f01, 0x280000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000340)={0x12, 0x75, &(0x7f00000002c0)="7ae1f092207813b0ca1378e0c329e09df0356525665b6d628d2a8a7a6b245991227d09ebc8d3ec948c1a4f954f15e410b06cdb7cc1b2b9b983824ff5751369c487395bb0fee8152a012a77260c80feba9fc6c66224059cb8c99e33b17080c1488ab7b207520f420c0170108294563aeaab075ba4d9"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004004) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf25670000000800c40001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20c4c3385803e5cc}, 0x8800) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x8001af85, &(0x7f0000000540)) sendfile(r5, r4, 0x0, 0x8010002b) 4.033665223s ago: executing program 0 (id=2511): openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x161840, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000003c0)=0xffffffff) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/1, 0x1}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/15, 0xf}, {0x0}], 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 3.826449159s ago: executing program 0 (id=2514): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x3, @private1, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="14", 0x1}], 0x1}}], 0x1, 0x54) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000001200), 0x0, 0x2) connect$unix(r0, &(0x7f0000001240)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001340)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) r1 = open(&(0x7f0000001380)='./bus\x00', 0x143142, 0x0) readv(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000014c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x4000) write(r2, &(0x7f0000001500)='4', 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000012c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000001440), 0xffffffffffffff94, 0x1, 0x0, 0x55) 3.774009445s ago: executing program 3 (id=2515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000020000000000000000000000000000000000000000000000fffc000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000000000002000000010000000000000000000000060000000000000075b4ffffffffffffffffffffffffffff0400000000000000030000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.122422671s ago: executing program 3 (id=2516): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x4d, 0x2ba8}) r3 = syz_open_dev$video4linux(&(0x7f0000000840), 0x7fffffff, 0x8000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000880)={0x0, @bt={0x800, 0x51b, 0x1, 0x3, 0xb, 0x1000, 0x5, 0x171aeb69, 0x5, 0x8, 0x9, 0x4, 0x24, 0x7, 0x18, 0x1, {0x7f, 0x2}, 0x0, 0xf8}}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r5}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000000640)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x366, 0x10, &(0x7f00000007c0), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r8, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000400)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) syz_open_procfs(0x0, &(0x7f0000000480)='net/xfrm_stat\x00') write$tun(r7, &(0x7f0000000440)={@void, @val={0x1, 0x5, 0x1c, 0x2, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@noop]}}, {0x1234, 0x4e20, 0x8}}}, 0x2a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x2, 0xe608}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000a40)={0xf, 0x400000000000, 0x25, 0x0, 0x700, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40086437, &(0x7f0000000ac0)={0x0, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40106435, &(0x7f0000000b00)) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.87387486s ago: executing program 1 (id=2518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a3001000000090001007379"], 0x80}}, 0x20048000) close(r0) 2.781180172s ago: executing program 0 (id=2520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004014) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_open_dev$loop(&(0x7f00000004c0), 0x440, 0x888e2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001800010000000000000000000a00000000000000000000000800040001000000060015000700000014001680080001000f000000040008"], 0x40}}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_freeze_timeout', 0x0, 0x4e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000640)={r2, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d874df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe553a9e5d83cd4a524bd3ffe70c7f3f800b2f7b6a020000001fcaed1e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce3, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b9066140000101020301090232000201008032090400"], 0x0) syz_usb_control_io(r5, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)=ANY=[@ANYBLOB="aca7f78ba1d175"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xa, @string={0xa, 0x3, "d2f6a19682971579"}}}, 0x0) 2.724762267s ago: executing program 1 (id=2521): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.691248601s ago: executing program 3 (id=2522): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x6828, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000008c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x27}, 0x1, 0x6, 0x0, 0x700, 0x4, 0x540000}) ppoll(&(0x7f0000000940), 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_80211_join_ibss(&(0x7f0000000d40)='wlan0\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x113, &(0x7f00000002c0)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0xd9, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0x9, "5170a63689ef34"}, @fastopen={0x22, 0xa, "3f9c69cf89b03cfd"}]}}, {"c4ee18c1437d0b3a11239d343bafa0dcedd42ebe2fccd13bf57e7b248454b40a02c21602000000000000008eef2760065cc97b130b305443eae98a3c3d7aec843f1139587e72e1a0d40523081bf21cf3d77ddbbad32a2b7a687ee40ea5b0ccda9cef7ef6d305da09c16b9ee88dc09bd62462bd01ec6e21f3b4953f2a6dc541351d1336ad86f19791905283d385096f6464d50821d4cf204a3c2f55130964d2b990dc0f71c5319ba363d8f28700245033a3"}}}}}}}, 0x0) syz_usb_connect$midi(0x4, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x3, 0x10, 0x4c, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x8, 0xc9, 0x8b, {0x8, 0x25, 0x1, 0x4, "10c88eaa"}}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x4, 0x81, 0xa7, {0xf, 0x25, 0x1, 0xb, "029749bcb3b2e581f131bf"}}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x7, 0xff, 0x7, {0x5, 0x25, 0x1, 0x1, "a9"}}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x2, 0x7d, 0x4, {0xd, 0x25, 0x1, 0x9, "846d8159e278a8a0e0"}}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xff, 0x6, 0x2, {0xf, 0x25, 0x1, 0xb, "7b1f77201c85fd146d4459"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x5, 0x8, 0xe, 0x10, 0x4}, 0x61, &(0x7f00000001c0)={0x5, 0xf, 0x61, 0x6, [@generic={0x34, 0x10, 0x3, "4d48b1331a29dffd4dd9d9489e76ef49982f849e7f4452e75c69096ecde5605da7e0d95132f59e0524c4b6fd40bd036aa4"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xe, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb, 0x81, 0xfff}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x22, &(0x7f0000000280)=@string={0x22, 0x3, "25fb1fc9faef329dfae965ac5f2475cb2fe1ed637f4f6a574172643ebe85dfc2"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44f}}]}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/148) 2.58480325s ago: executing program 1 (id=2523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000020000000000000000000000000000000000000000000000fffc000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000000000002000000010000000000000000000000060000000000000075b4ffffffffffffffffffffffffffff0400000000000000030000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.548726536s ago: executing program 1 (id=2524): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x4d, 0x2ba8}) r3 = syz_open_dev$video4linux(&(0x7f0000000840), 0x7fffffff, 0x8000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000880)={0x0, @bt={0x800, 0x51b, 0x1, 0x3, 0xb, 0x1000, 0x5, 0x171aeb69, 0x5, 0x8, 0x9, 0x4, 0x24, 0x7, 0x18, 0x1, {0x7f, 0x2}, 0x0, 0xf8}}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000000640)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x366, 0x10, &(0x7f00000007c0), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r7, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x5001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000400)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) syz_open_procfs(0x0, &(0x7f0000000480)='net/xfrm_stat\x00') write$tun(r6, &(0x7f0000000440)={@void, @val={0x1, 0x5, 0x1c, 0x2, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@noop]}}, {0x1234, 0x4e20, 0x8}}}, 0x2a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x2, 0xe608}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000a40)={0xf, 0x400000000000, 0x25, 0x0, 0x700, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40086437, &(0x7f0000000ac0)={0x0, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40106435, &(0x7f0000000b00)) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.341979843s ago: executing program 1 (id=2525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl(r1, 0x4048aec9, &(0x7f0000000380)="0100"/72) ioctl(r1, 0x400caed0, &(0x7f0000000400)="0100000000000000ffffffff") 2.015812821s ago: executing program 1 (id=2529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x7, 0x80102) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x89, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c863499cf"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r4 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000680)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r4, &(0x7f0000000f00)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000010c0)=0x7ff, 0x4) sendmsg$tipc(r5, &(0x7f00000011c0)={&(0x7f0000001200)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r5) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000003440)}, 0x3}], 0x1, 0x2, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xcf, 0xc000, 0x1, &(0x7f0000000200)='f'}], 0x1}) r6 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x4d, 0x2ba8}) r3 = syz_open_dev$video4linux(&(0x7f0000000840), 0x7fffffff, 0x8000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000880)={0x0, @bt={0x800, 0x51b, 0x1, 0x3, 0xb, 0x1000, 0x5, 0x171aeb69, 0x5, 0x8, 0x9, 0x4, 0x24, 0x7, 0x18, 0x1, {0x7f, 0x2}, 0x0, 0xf8}}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000000640)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x366, 0x10, &(0x7f00000007c0), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r7, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x5001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000400)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) syz_open_procfs(0x0, &(0x7f0000000480)='net/xfrm_stat\x00') write$tun(r6, &(0x7f0000000440)={@void, @val={0x1, 0x5, 0x1c, 0x2, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@noop]}}, {0x1234, 0x4e20, 0x8}}}, 0x2a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x2, 0xe608}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000a40)={0xf, 0x400000000000, 0x25, 0x0, 0x700, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40086437, &(0x7f0000000ac0)={0x0, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40106435, &(0x7f0000000b00)) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 383.271775ms ago: executing program 4 (id=2539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000020000000000000000000000000000000000000000000000fffc000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000000000002000000010000000000000000000000060000000000000075b4ffffffffffffffffffffffffffff0400000000000000030000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 336.171824ms ago: executing program 2 (id=2540): syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3f01, 0x280000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000340)={0x12, 0x75, &(0x7f00000002c0)="7ae1f092207813b0ca1378e0c329e09df0356525665b6d628d2a8a7a6b245991227d09ebc8d3ec948c1a4f954f15e410b06cdb7cc1b2b9b983824ff5751369c487395bb0fee8152a012a77260c80feba9fc6c66224059cb8c99e33b17080c1488ab7b207520f420c0170108294563aeaab075ba4d9"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004004) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf25670000000800c40001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20c4c3385803e5cc}, 0x8800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x8001af85, &(0x7f0000000540)) sendfile(r5, r4, 0x0, 0x8010002b) 290.864103ms ago: executing program 4 (id=2541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000102) 188.218148ms ago: executing program 4 (id=2542): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 75.813792ms ago: executing program 4 (id=2543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a30010000000900010073797a30000000002c00038008000140000000001800038014000100766574"], 0x80}}, 0x20048000) close(r0) 0s ago: executing program 4 (id=2544): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001900)={0x20000008}) close(r0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x1000006, 0x4018831, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000019c0)={0x1d, 0x0, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000001a00)={0x1d, 0x0, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)="0807060504030201", 0x8}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001b80)=0x80, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001940)) read(r4, &(0x7f0000000180)=""/158, 0x9e) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000280)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200020, &(0x7f0000001580)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7ff}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize}, {@default_permissions}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@permit_directio}]}}, 0x0, 0x0, &(0x7f0000001700)="f1d752b163c40977ee3fea6e665bbf5281ad4de1a7b50b4e28e56d2f53c00f6eb88b2349caf52781bd62e0bf7ee42121d34e2c0672ce352425a50bea068538baacaca6477ff0bfc98336352602c7eb93ad1e5e88967a9268b252fed09440c979d49b36ad4984a144f925d218cbe0444824aabfd428e15086933a849d0aa947581f65201e50690c317daf0e38882786b3f2f14d8a918eea37a6d377e795b26b91cefa2723eec05ada5852929db97bb1ade3db6625e80db206180aee5391") r8 = fsopen(&(0x7f0000001800)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x4) fchdir(r9) renameat2(r7, &(0x7f00000017c0)='./file0\x00', r9, &(0x7f0000001840)='./file0\x00', 0x3) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl(r6, 0x400caed0, &(0x7f0000000400)="0100000000000000ffffffff") kernel console output (not intermixed with test programs): 143][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 287.641245][ T5694] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 287.779078][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 287.779211][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 287.794106][ T5694] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 287.798909][ T5694] usb 4-1: config 1 has an invalid interface number: 27 but max is 1 [ 287.798938][ T5694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.798958][ T5694] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 287.798982][ T5694] usb 4-1: config 1 has no interface number 2 [ 287.799055][ T5694] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 287.799081][ T5694] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.799111][ T5694] usb 4-1: config 1 interface 1 has no altsetting 0 [ 287.807181][ T10] usb 5-1: USB disconnect, device number 39 [ 287.877704][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.877737][ T5694] usb 4-1: Product: syz [ 287.877755][ T5694] usb 4-1: Manufacturer: syz [ 287.877772][ T5694] usb 4-1: SerialNumber: syz [ 288.093343][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 288.211243][T10461] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 288.264453][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 288.281605][ T5702] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 288.343375][T10896] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 288.363236][T10461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.365597][T10461] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.365636][T10461] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.366912][T10461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.366942][T10461] usb 1-1: SerialNumber: syz [ 288.441158][T10906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2097'. [ 288.598818][T10906] Scaler: ================= START STATUS ================= [ 288.598861][T10906] Scaler: ================== END STATUS ================== [ 288.691212][ T5694] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 288.701129][ T5673] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 288.871207][ T5673] usb 5-1: Using ep0 maxpacket: 32 [ 288.872142][ T5673] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 288.873925][ T5673] usb 5-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.873961][ T5673] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.873997][ T5673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.878532][ T5673] usb 5-1: config 0 descriptor?? [ 289.089905][ T5702] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 289.092804][ T5702] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 289.093020][ T5702] usb 2-1: can't read configurations, error -71 [ 289.266756][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 289.285556][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 289.350311][ T5673] magicmouse 0003:05AC:0324.0014: unknown main item tag 0x1 [ 289.350351][ T5673] magicmouse 0003:05AC:0324.0014: unknown main item tag 0x3 [ 289.375999][ T5673] magicmouse 0003:05AC:0324.0014: hidraw0: USB HID v11.06 Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 289.376046][ T5673] magicmouse 0003:05AC:0324.0014: magicmouse input not registered [ 289.406058][ T5673] magicmouse 0003:05AC:0324.0014: probe with driver magicmouse failed with error -12 [ 289.543038][ T5694] speedtch 4-1:1.0: speedtch_bind: device reset failed (-19)! [ 289.543157][ T5694] usb 4-1: selecting invalid altsetting 0 [ 289.543184][ T5694] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 289.574251][ T5694] speedtch 4-1:1.27: speedtch_bind: setting interface to 1 failed (-19)! [ 289.587874][ T5694] usb 4-1: selecting invalid altsetting 0 [ 289.588055][ T5694] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -19! [ 289.616024][ T5694] usb 4-1: selecting invalid altsetting 0 [ 289.616060][ T5694] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 289.616480][ T5694] usb 4-1: selecting invalid altsetting 0 [ 289.616506][ T5694] speedtch 4-1:1.1: probe with driver speedtch failed with error -22 [ 289.675850][ T5694] usb 4-1: USB disconnect, device number 35 [ 289.985244][T10461] cdc_ether 1-1:1.0: skipping garbage [ 289.985262][T10461] cdc_ether 1-1:1.0: GUID doesn't match [ 290.039124][T10461] usb 1-1: USB disconnect, device number 21 [ 290.203000][ T5694] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 290.209053][T10939] netlink: 'syz.0.2108': attribute type 12 has an invalid length. [ 290.342020][T10461] usb 5-1: USB disconnect, device number 40 [ 290.357802][ T5694] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 290.369019][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.369059][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.369104][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.423112][ T5694] usb 4-1: config 0 descriptor?? [ 290.627128][T10948] futex_wake_op: syz.4.2110 tries to shift op by -1; fix this program [ 290.744663][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'. [ 290.856608][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 290.896528][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 290.897733][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 290.898843][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 291.121354][T10461] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 291.282271][T10461] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 291.285565][T10461] usb 3-1: config 1 has an invalid interface number: 27 but max is 1 [ 291.285595][T10461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.285615][T10461] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 291.285666][T10461] usb 3-1: config 1 has no interface number 2 [ 291.285733][T10461] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 291.285759][T10461] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.285821][T10461] usb 3-1: config 1 interface 1 has no altsetting 0 [ 291.288692][T10461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.288720][T10461] usb 3-1: Product: syz [ 291.288759][T10461] usb 3-1: Manufacturer: syz [ 291.288776][T10461] usb 3-1: SerialNumber: syz [ 291.531325][ T10] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 291.724569][T10969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2117'. [ 291.777085][T10976] Scaler: ================= START STATUS ================= [ 291.777105][T10976] Scaler: ================== END STATUS ================== [ 291.890468][T10954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.971136][ T5697] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 292.021252][T10456] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 292.131895][ T5697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.133064][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.133113][ T5697] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.134369][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.134396][ T5697] usb 2-1: SerialNumber: syz [ 292.175333][T10456] usb 1-1: not running at top speed; connect to a high speed hub [ 292.175372][T10456] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 292.179878][T10456] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.180197][T10456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.221678][T10461] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 292.246690][T10456] gspca_main: spca501-2.14.0 probing 0000:0000 [ 292.405240][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 292.407739][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 292.407777][ T10] usb 5-1: can't read configurations, error -71 [ 292.456289][T10975] netlink: 'syz.0.2119': attribute type 10 has an invalid length. [ 292.476426][T10456] gspca_spca501: reg write: error -71 [ 292.476474][T10456] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 292.476567][T10456] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 292.477765][T10456] uvcvideo 1-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 292.477874][T10456] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 292.477933][T10456] uvcvideo 1-1:1.0: No streaming interface found for terminal 32774. [ 292.537642][T10456] usb 1-1: USB disconnect, device number 22 [ 292.859879][ T5694] usbhid 4-1:0.0: can't add hid device: -71 [ 292.859994][ T5694] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.884108][ T5694] usb 4-1: USB disconnect, device number 36 [ 293.068902][T10461] speedtch 3-1:1.0: speedtch_bind: device reset failed (-19)! [ 293.069002][T10461] usb 3-1: selecting invalid altsetting 0 [ 293.069031][T10461] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 293.104069][T10461] speedtch 3-1:1.27: speedtch_bind: setting interface to 1 failed (-19)! [ 293.106318][T10461] usb 3-1: selecting invalid altsetting 0 [ 293.106347][T10461] speedtch 3-1:1.27: usbatm_usb_probe: bind failed: -19! [ 293.114839][T10461] usb 3-1: selecting invalid altsetting 0 [ 293.114909][T10461] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 293.115771][T10461] usb 3-1: selecting invalid altsetting 0 [ 293.115827][T10461] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 293.160961][T10461] usb 3-1: USB disconnect, device number 36 [ 293.313309][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 293.314860][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 293.316142][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 293.566141][T10994] netlink: NAT attribute has 1 unknown bytes [ 293.566180][T10994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.626192][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 293.963607][T11011] netlink: 'syz.0.2136': attribute type 12 has an invalid length. [ 294.021271][T10461] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 294.131248][ T5674] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 294.173110][T10461] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 294.174507][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.174572][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.174615][T10461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.178139][T10461] usb 4-1: config 0 descriptor?? [ 294.290637][ T5697] cdc_ether 2-1:1.0: skipping garbage [ 294.290662][ T5697] cdc_ether 2-1:1.0: GUID doesn't match [ 294.303844][ T5674] usb 5-1: not running at top speed; connect to a high speed hub [ 294.303882][ T5674] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 294.313299][ T5674] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.313369][ T5674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.365579][ T5697] usb 2-1: USB disconnect, device number 35 [ 294.385479][ T5674] gspca_main: spca501-2.14.0 probing 0000:0000 [ 294.604402][T11009] netlink: 'syz.4.2135': attribute type 10 has an invalid length. [ 294.608568][T11009] veth1_to_hsr: left allmulticast mode [ 294.632546][T11009] veth1_to_hsr: entered allmulticast mode [ 294.648501][T11009] team0: Port device veth1_to_hsr added [ 294.649619][T10461] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 294.649660][T10461] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 294.649689][T10461] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 294.649717][T10461] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 294.649746][T10461] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 294.728398][T11024] netlink: 'syz.0.2142': attribute type 4 has an invalid length. [ 294.740694][ T5674] gspca_spca501: reg write: error -71 [ 294.740712][ T5674] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 294.740803][ T5674] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 294.745950][T10461] cm6533_jd 0003:0D8C:0022.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 294.755900][ T5674] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 294.755997][ T5674] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 294.756065][ T5674] uvcvideo 5-1:1.0: No streaming interface found for terminal 32774. [ 294.823655][T11021] syzkaller0: entered promiscuous mode [ 294.823682][T11021] syzkaller0: entered allmulticast mode [ 294.830263][T11021] 0: reclassify loop, rule prio 0, protocol 700 [ 294.863643][ T5674] usb 5-1: USB disconnect, device number 43 [ 295.331196][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 295.481251][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 295.490163][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.490220][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 295.495059][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 234, changing to 7 [ 295.511793][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.511869][ T10] usb 3-1: Product: syz [ 295.511920][ T10] usb 3-1: Manufacturer: syz [ 295.511964][ T10] usb 3-1: SerialNumber: syz [ 295.757865][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.763792][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.906513][ T10] usb 3-1: USB disconnect, device number 37 [ 295.941373][T10461] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 295.994715][ T8207] udevd[8207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.098296][T10461] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.100826][T10461] usb 5-1: not running at top speed; connect to a high speed hub [ 296.100863][T10461] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 296.109200][T10461] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 296.109231][T10461] usb 5-1: config 1 has no interface number 0 [ 296.109275][T10461] usb 5-1: config 1 interface 93 altsetting 185 endpoint 0x2 has invalid wMaxPacketSize 0 [ 296.109301][T10461] usb 5-1: config 1 interface 93 has no altsetting 0 [ 296.124681][T10461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.124756][T10461] usb 5-1: Product: syz [ 296.124805][T10461] usb 5-1: Manufacturer: syz [ 296.124847][T10461] usb 5-1: SerialNumber: syz [ 296.311169][ T5681] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 296.391801][T11052] netlink: 'syz.4.2153': attribute type 25 has an invalid length. [ 296.442432][T10461] peak_usb 5-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 296.442465][T10461] peak_usb 5-1:1.93: unable to read PCAN-USB serial number (err -22) [ 296.472752][ T5681] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.476452][ T5681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.476968][ T5681] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.480050][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.480075][ T5681] usb 1-1: SerialNumber: syz [ 296.619020][T10461] peak_usb 5-1:1.93: probe with driver peak_usb failed with error -22 [ 296.630516][T10461] usb 5-1: USB disconnect, device number 44 [ 296.812219][ T10] usb 4-1: USB disconnect, device number 37 [ 296.892966][T11068] netlink: 'syz.3.2157': attribute type 4 has an invalid length. [ 296.941469][T10461] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 297.101892][T10461] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.103724][T10461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.109068][T10461] usb 5-1: config 0 descriptor?? [ 297.135192][T10461] cp210x 5-1:0.0: cp210x converter detected [ 297.460835][T11071] __nla_validate_parse: 8 callbacks suppressed [ 297.460886][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 297.659477][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 297.673967][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 297.838445][T10461] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 297.838480][T10461] cp210x 5-1:0.0: querying part number failed [ 297.860347][T10461] usb 5-1: cp210x converter now attached to ttyUSB0 [ 297.899892][T10461] usb 5-1: USB disconnect, device number 45 [ 297.946353][T10461] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.964011][T10461] cp210x 5-1:0.0: device disconnected [ 298.084216][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'. [ 298.097922][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'. [ 298.114055][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'. [ 298.368321][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 298.368344][ T30] audit: type=1326 audit(1792557790.650:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.368509][ T30] audit: type=1326 audit(1792557790.650:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.374261][ T30] audit: type=1326 audit(1792557790.660:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71977eb code=0x7ffc0000 [ 298.403642][ T30] audit: type=1326 audit(1792557790.690:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.403702][ T30] audit: type=1326 audit(1792557790.690:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.409714][ T30] audit: type=1326 audit(1792557790.690:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.409770][ T30] audit: type=1326 audit(1792557790.690:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.409816][ T30] audit: type=1326 audit(1792557790.690:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.419818][ T30] audit: type=1326 audit(1792557790.700:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.454583][ T30] audit: type=1326 audit(1792557790.720:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.3.2164" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 298.766096][ T5681] cdc_ether 1-1:1.0: skipping garbage [ 298.766120][ T5681] cdc_ether 1-1:1.0: GUID doesn't match [ 298.786415][ T5681] usb 1-1: USB disconnect, device number 23 [ 298.879726][T11097] FAULT_INJECTION: forcing a failure. [ 298.879726][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.879769][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.2.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.879797][T11097] Tainted: [L]=SOFTLOCKUP [ 298.879803][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.879813][T11097] Call Trace: [ 298.879819][T11097] [ 298.879826][T11097] dump_stack_lvl+0xe8/0x150 [ 298.879855][T11097] should_fail_ex+0x410/0x560 [ 298.879883][T11097] _copy_from_user+0x2d/0xb0 [ 298.879900][T11097] cmsghdr_from_user_compat_to_kern+0x534/0x810 [ 298.879925][T11097] ? lock_acquire+0x115/0x350 [ 298.879950][T11097] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 298.879981][T11097] ____sys_sendmsg+0x217/0x850 [ 298.880005][T11097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.880035][T11097] ___sys_sendmsg+0x2a5/0x360 [ 298.880052][T11097] ? __lock_acquire+0x747/0x2de0 [ 298.880073][T11097] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.880117][T11097] ? kstrtoull+0x137/0x1d0 [ 298.880174][T11097] ? __fget_files+0x3a2/0x420 [ 298.880203][T11097] ? __fget_files+0x2a/0x420 [ 298.880225][T11097] __sys_sendmmsg+0x2de/0x4d0 [ 298.880248][T11097] ? __pfx___sys_sendmmsg+0x10/0x10 [ 298.880294][T11097] ? fput+0xa0/0xd0 [ 298.880317][T11097] ? ksys_write+0x242/0x270 [ 298.880339][T11097] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 298.880364][T11097] __do_fast_syscall_32+0x27a/0x6b0 [ 298.880386][T11097] ? do_fast_syscall_32+0x33/0x70 [ 298.880407][T11097] ? asm_int80_emulation+0x1a/0x20 [ 298.880426][T11097] ? do_int80_emulation+0x299/0x500 [ 298.880446][T11097] ? trace_irq_disable+0x3b/0x140 [ 298.880467][T11097] do_fast_syscall_32+0x33/0x70 [ 298.880489][T11097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.880509][T11097] RIP: 0023:0xf7fa50ec [ 298.880523][T11097] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 298.880537][T11097] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 298.880554][T11097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 298.880564][T11097] RDX: 0000000000000001 RSI: 0000000004000800 RDI: 0000000000000000 [ 298.880574][T11097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.880583][T11097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.880592][T11097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.880614][T11097] [ 299.101695][T10461] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 299.194699][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 299.195912][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 299.229153][T11103] netlink: 'syz.2.2170': attribute type 4 has an invalid length. [ 299.252756][T10461] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 299.253853][T10461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.253888][T10461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.253930][T10461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.258252][T10461] usb 5-1: config 0 descriptor?? [ 299.557154][T11113] openvswitch: netlink: Key type 355 is out of range max 32 [ 299.641461][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 299.714293][T10461] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 299.714336][T10461] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 299.718899][T10461] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 299.718935][T10461] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 299.718980][T10461] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 299.789911][T10461] cm6533_jd 0003:0D8C:0022.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 300.011694][T11120] FAULT_INJECTION: forcing a failure. [ 300.011694][T11120] name failslab, interval 1, probability 0, space 0, times 0 [ 300.011734][T11120] CPU: 1 UID: 0 PID: 11120 Comm: syz.3.2177 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.011764][T11120] Tainted: [L]=SOFTLOCKUP [ 300.011772][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.011786][T11120] Call Trace: [ 300.011795][T11120] [ 300.011805][T11120] dump_stack_lvl+0xe8/0x150 [ 300.011846][T11120] should_fail_ex+0x410/0x560 [ 300.011883][T11120] ? __alloc_skb+0x1db/0x7a0 [ 300.011906][T11120] should_failslab+0xa8/0x100 [ 300.011940][T11120] ? __alloc_skb+0x1db/0x7a0 [ 300.011960][T11120] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 300.011986][T11120] ? __alloc_skb+0x18d/0x7a0 [ 300.012009][T11120] ? __alloc_skb+0x1db/0x7a0 [ 300.012037][T11120] __alloc_skb+0x1db/0x7a0 [ 300.012064][T11120] netlink_sendmsg+0x625/0xba0 [ 300.012106][T11120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.012140][T11120] ? aa_sock_msg_perm+0x144/0x210 [ 300.012167][T11120] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.012200][T11120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.012230][T11120] sock_sendmsg_nosec+0x13a/0x180 [ 300.012273][T11120] ____sys_sendmsg+0x54e/0x850 [ 300.012307][T11120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.012351][T11120] ___sys_sendmsg+0x2a5/0x360 [ 300.012379][T11120] ? __lock_acquire+0x747/0x2de0 [ 300.012411][T11120] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.012438][T11120] ? get_pid_task+0x20/0x1f0 [ 300.012462][T11120] ? get_pid_task+0x20/0x1f0 [ 300.012481][T11120] ? get_pid_task+0x20/0x1f0 [ 300.012537][T11120] ? __fget_files+0x3a2/0x420 [ 300.012559][T11120] ? __fget_files+0x2a/0x420 [ 300.012590][T11120] __sys_sendmsg+0x177/0x240 [ 300.012620][T11120] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.012668][T11120] __do_fast_syscall_32+0x27a/0x6b0 [ 300.012700][T11120] ? do_fast_syscall_32+0x33/0x70 [ 300.012729][T11120] ? asm_int80_emulation+0x1a/0x20 [ 300.012751][T11120] ? do_int80_emulation+0x299/0x500 [ 300.012819][T11120] ? trace_irq_disable+0x3b/0x140 [ 300.012857][T11120] do_fast_syscall_32+0x33/0x70 [ 300.012888][T11120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.012916][T11120] RIP: 0023:0xf743f0ec [ 300.012935][T11120] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 300.012955][T11120] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 300.012980][T11120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 300.012996][T11120] RDX: 0000000004008094 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.013011][T11120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.013024][T11120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 300.013038][T11120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.013071][T11120] [ 300.709511][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 301.110548][T11142] openvswitch: netlink: Key type 99 is out of range max 32 [ 301.126140][T11143] Format for deleting device is "id" (uint). [ 301.434977][T11147] netlink: 'syz.2.2188': attribute type 49 has an invalid length. [ 301.459424][T11150] netlink: 'syz.0.2189': attribute type 9 has an invalid length. [ 301.721185][T10456] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 301.731150][T10461] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 301.866535][ T5673] usb 5-1: USB disconnect, device number 46 [ 301.871097][T10456] usb 3-1: Using ep0 maxpacket: 32 [ 301.885305][T10461] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.886056][T10456] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 301.893623][T10461] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.893862][T10461] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 301.910954][T10456] usb 3-1: config 0 has no interfaces? [ 301.932049][T10461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 301.932131][T10461] usb 4-1: SerialNumber: syz [ 301.949122][T10456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.949197][T10456] usb 3-1: Product: syz [ 301.949240][T10456] usb 3-1: Manufacturer: syz [ 301.949281][T10456] usb 3-1: SerialNumber: syz [ 301.995318][T10456] usb 3-1: config 0 descriptor?? [ 302.091284][T11158] netlink: 'syz.1.2192': attribute type 4 has an invalid length. [ 302.240281][T10456] usb 3-1: USB disconnect, device number 38 [ 303.304816][T10456] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 303.453409][T10456] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 303.458530][T10456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.502887][T10456] pwc: Logitech/Cisco VT Camera webcam detected. [ 303.567331][T10461] cdc_ether 4-1:1.0: skipping garbage [ 303.567350][T10461] cdc_ether 4-1:1.0: GUID doesn't match [ 303.605577][T10461] usb 4-1: USB disconnect, device number 38 [ 303.714758][T11180] __nla_validate_parse: 2 callbacks suppressed [ 303.714787][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'. [ 303.769066][T11181] netlink: 'syz.4.2199': attribute type 16 has an invalid length. [ 303.769122][T11181] netlink: 'syz.4.2199': attribute type 17 has an invalid length. [ 303.809738][T11181] lo: left allmulticast mode [ 303.838181][T11181] tunl0: left allmulticast mode [ 303.861782][T11181] gre0: left allmulticast mode [ 303.870991][T11181] gretap0: left allmulticast mode [ 303.886296][T11181] erspan0: left allmulticast mode [ 303.887505][T11181] ip_vti0: left allmulticast mode [ 303.888564][T11181] ip6_vti0: left allmulticast mode [ 303.889580][T11181] sit0: left allmulticast mode [ 303.890947][T11181] ip6tnl0: left allmulticast mode [ 303.919619][T11181] ip6gre0: left allmulticast mode [ 303.920537][T11181] syz_tun: left allmulticast mode [ 303.933410][T11181] ip6gretap0: left allmulticast mode [ 303.937195][T11181] bridge0: left allmulticast mode [ 303.938134][T11181] vcan0: left allmulticast mode [ 303.939221][T11181] bond0: left allmulticast mode [ 303.939245][T11181] dummy0: left allmulticast mode [ 303.940563][T11181] team0: left allmulticast mode [ 303.940584][T11181] veth1_to_hsr: left allmulticast mode [ 303.987688][T11181] nlmon0: left allmulticast mode [ 303.988834][T11181] batadv0: left allmulticast mode [ 303.990628][T11181] vxcan0: left allmulticast mode [ 304.009214][T11181] vxcan1: left allmulticast mode [ 304.009929][T11181] veth0: left allmulticast mode [ 304.022528][T11181] veth1: left allmulticast mode [ 304.023521][T11181] wg0: left allmulticast mode [ 304.024520][T11181] wg1: left allmulticast mode [ 304.025534][T11181] wg2: left allmulticast mode [ 304.026516][T11181] veth0_to_bridge: left allmulticast mode [ 304.028886][T11181] veth1_to_bridge: left allmulticast mode [ 304.065629][T11181] veth0_to_bond: left allmulticast mode [ 304.066619][T11181] bond_slave_0: left allmulticast mode [ 304.067463][T11181] veth0_to_team: left allmulticast mode [ 304.068329][T11181] team_slave_0: left allmulticast mode [ 304.069384][T11181] veth1_to_team: left allmulticast mode [ 304.070110][T11181] team_slave_1: left allmulticast mode [ 304.107479][T11181] veth0_to_batadv: left allmulticast mode [ 304.108487][T11181] batadv_slave_0: left allmulticast mode [ 304.109782][T11181] veth1_to_batadv: left allmulticast mode [ 304.110626][T11181] batadv_slave_1: left allmulticast mode [ 304.110964][T11181] xfrm0: left allmulticast mode [ 304.153650][T11181] veth0_to_hsr: left allmulticast mode [ 304.184007][T11181] hsr0: left allmulticast mode [ 304.184033][T11181] hsr_slave_0: left allmulticast mode [ 304.184051][T11181] hsr_slave_1: left allmulticast mode [ 304.189316][T11181] veth1_virt_wifi: left allmulticast mode [ 304.190516][T11181] veth0_virt_wifi: left allmulticast mode [ 304.225621][T11181] virt_wifi0: left allmulticast mode [ 304.225651][T11181] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.271246][T11169] syz.0.2195 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 304.271293][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.0.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.271325][T11169] Tainted: [L]=SOFTLOCKUP [ 304.271334][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.271348][T11169] Call Trace: [ 304.271357][T11169] [ 304.271368][T11169] dump_stack_lvl+0xe8/0x150 [ 304.271409][T11169] dump_header+0xd3/0x4b0 [ 304.271443][T11169] oom_kill_process+0x3ab/0x9e0 [ 304.271482][T11169] out_of_memory+0x1064/0x1480 [ 304.271522][T11169] ? try_charge_memcg+0xc32/0x15e0 [ 304.271562][T11169] ? __pfx_out_of_memory+0x10/0x10 [ 304.271591][T11169] ? do_raw_spin_unlock+0xf5/0x200 [ 304.271638][T11169] try_charge_memcg+0xcdf/0x15e0 [ 304.271686][T11169] ? __pfx_try_charge_memcg+0x10/0x10 [ 304.271712][T11169] ? kasan_save_track+0x4f/0x80 [ 304.271754][T11169] ? percpu_ref_tryget+0x15/0x180 [ 304.271798][T11169] ? __obj_cgroup_charge+0x36/0x2c0 [ 304.271828][T11169] __obj_cgroup_charge+0x1fd/0x2c0 [ 304.271855][T11169] ? __obj_cgroup_charge+0x36/0x2c0 [ 304.271884][T11169] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 304.271925][T11169] ? alloc_empty_file+0x5b/0x1d0 [ 304.271958][T11169] kmem_cache_alloc_noprof+0x367/0x600 [ 304.271982][T11169] ? alloc_empty_file+0x5b/0x1d0 [ 304.272010][T11169] ? kmem_cache_alloc_noprof+0x156/0x600 [ 304.272033][T11169] ? alloc_empty_file+0x5b/0x1d0 [ 304.272072][T11169] alloc_empty_file+0x5b/0x1d0 [ 304.272105][T11169] alloc_file_pseudo+0x115/0x1e0 [ 304.272142][T11169] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 304.272181][T11169] sock_alloc_file+0xb8/0x2e0 [ 304.272219][T11169] __sys_socketpair+0x386/0x560 [ 304.272261][T11169] __ia32_sys_socketpair+0x9a/0xb0 [ 304.272296][T11169] __do_fast_syscall_32+0x27a/0x6b0 [ 304.272330][T11169] ? do_fast_syscall_32+0x33/0x70 [ 304.272360][T11169] ? asm_int80_emulation+0x1a/0x20 [ 304.272382][T11169] ? do_int80_emulation+0x299/0x500 [ 304.272415][T11169] do_fast_syscall_32+0x33/0x70 [ 304.272446][T11169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.272474][T11169] RIP: 0023:0xf747f0ec [ 304.272496][T11169] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 304.272517][T11169] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000168 [ 304.272541][T11169] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000002 [ 304.272558][T11169] RDX: 0000000000000000 RSI: 0000000080000680 RDI: 0000000000000000 [ 304.272572][T11169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.272585][T11169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.272600][T11169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.272635][T11169] [ 304.273074][T11169] memory: usage 8kB, limit 8kB, failcnt 49 [ 304.273093][T11169] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 304.273109][T11169] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 304.273123][T11169] Memory cgroup stats for /syz0/test: [ 304.273441][T11169] cache 0 [ 304.273452][T11169] rss 0 [ 304.273461][T11169] rss_huge 0 [ 304.273469][T11169] shmem 0 [ 304.273478][T11169] mapped_file 0 [ 304.273487][T11169] dirty 0 [ 304.273495][T11169] writeback 0 [ 304.273503][T11169] workingset_refault_anon 0 [ 304.273513][T11169] workingset_refault_file 0 [ 304.273522][T11169] swap 0 [ 304.273530][T11169] swapcached 0 [ 304.273538][T11169] pgpgin 0 [ 304.273546][T11169] pgpgout 0 [ 304.273554][T11169] pgfault 0 [ 304.273562][T11169] pgmajfault 0 [ 304.273571][T11169] inactive_anon 0 [ 304.273579][T11169] active_anon 0 [ 304.273588][T11169] inactive_file 0 [ 304.273595][T11169] active_file 0 [ 304.273604][T11169] unevictable 0 [ 304.273612][T11169] hierarchical_memory_limit 8192 [ 304.273622][T11169] hierarchical_memsw_limit 9223372036854771712 [ 304.273632][T11169] total_cache 0 [ 304.273640][T11169] total_rss 0 [ 304.273648][T11169] total_rss_huge 0 [ 304.273656][T11169] total_shmem 0 [ 304.273664][T11169] total_mapped_file 0 [ 304.273673][T11169] total_dirty 0 [ 304.273682][T11169] total_writeback 0 [ 304.273689][T11169] total_workingset_refault_anon 0 [ 304.273699][T11169] total_workingset_refault_file 0 [ 304.273708][T11169] total_swap 0 [ 304.273729][T11169] total_swapcached 0 [ 304.273737][T11169] total_pgpgin 0 [ 304.273746][T11169] total_pgpgout 0 [ 304.273754][T11169] total_pgfault 0 [ 304.273762][T11169] total_pgmajfault 0 [ 304.273772][T11169] total_inactive_anon 0 [ 304.273780][T11169] total_active_anon 0 [ 304.273789][T11169] total_inactive_file 0 [ 304.273798][T11169] total_active_file 0 [ 304.273806][T11169] total_unevictable 0 [ 304.273814][T11169] anon_cost 0 [ 304.273823][T11169] file_cost 0 [ 304.273841][T11169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.2195,pid=11168,uid=0 [ 304.274796][T11169] Memory cgroup out of memory: Killed process 11168 (syz.0.2195) total-vm:102288kB, anon-rss:2552kB, file-rss:22172kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 304.639350][T11170] socket: no more sockets [ 304.691737][T11182] vlan2: entered promiscuous mode [ 304.691868][T11182] bridge0: entered promiscuous mode [ 305.036186][T10456] pwc: Failed to set LED on/off time (-71) [ 305.037361][T10456] pwc: send_video_command error -71 [ 305.037377][T10456] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 305.037482][T10456] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 305.059530][T10456] usb 1-1: USB disconnect, device number 24 [ 305.334624][T11204] FAULT_INJECTION: forcing a failure. [ 305.334624][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.334663][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.4.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.334701][T11204] Tainted: [L]=SOFTLOCKUP [ 305.334710][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.334722][T11204] Call Trace: [ 305.334731][T11204] [ 305.334740][T11204] dump_stack_lvl+0xe8/0x150 [ 305.334777][T11204] should_fail_ex+0x410/0x560 [ 305.334814][T11204] _copy_from_user+0x2d/0xb0 [ 305.334836][T11204] get_compat_msghdr+0xb3/0x4c0 [ 305.334868][T11204] ? __pfx_get_compat_msghdr+0x10/0x10 [ 305.334909][T11204] ___sys_sendmsg+0x201/0x360 [ 305.334932][T11204] ? __lock_acquire+0x747/0x2de0 [ 305.334966][T11204] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.334990][T11204] ? get_pid_task+0x20/0x1f0 [ 305.335010][T11204] ? get_pid_task+0x20/0x1f0 [ 305.335028][T11204] ? get_pid_task+0x20/0x1f0 [ 305.335076][T11204] ? __fget_files+0x3a2/0x420 [ 305.335101][T11204] ? __fget_files+0x2a/0x420 [ 305.335129][T11204] __sys_sendmsg+0x177/0x240 [ 305.335155][T11204] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.335198][T11204] __do_fast_syscall_32+0x27a/0x6b0 [ 305.335229][T11204] ? do_fast_syscall_32+0x33/0x70 [ 305.335256][T11204] ? asm_int80_emulation+0x1a/0x20 [ 305.335277][T11204] ? do_int80_emulation+0x299/0x500 [ 305.335304][T11204] ? trace_irq_disable+0x3b/0x140 [ 305.335332][T11204] do_fast_syscall_32+0x33/0x70 [ 305.335362][T11204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.335389][T11204] RIP: 0023:0xf7fc60ec [ 305.335409][T11204] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 305.335427][T11204] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 305.335450][T11204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 305.335464][T11204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.335477][T11204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.335490][T11204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 305.335503][T11204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.335535][T11204] [ 305.355548][T10461] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 305.373093][ T5694] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 305.385797][T11201] netlink: 'syz.3.2207': attribute type 49 has an invalid length. [ 305.525644][T10461] usb 3-1: Using ep0 maxpacket: 32 [ 305.538600][T10461] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 305.559718][ T5694] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 305.586523][T10461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.586738][T10461] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 305.587574][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.587722][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.587892][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.626672][T10461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.626757][T10461] usb 3-1: Product: syz [ 305.626802][T10461] usb 3-1: Manufacturer: syz [ 305.626845][T10461] usb 3-1: SerialNumber: syz [ 305.715742][ T5694] usb 2-1: config 0 descriptor?? [ 305.775389][T10461] snd-ua101 3-1:1.1: sample format descriptor not found [ 305.775423][T10461] snd-ua101 3-1:1.0: invalid num_altsetting [ 305.951162][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 306.101566][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 306.102050][T11214] could not allocate digest TFM handle sha1-ni [ 306.102742][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 306.103669][ T10] usb 4-1: config 0 has no interfaces? [ 306.122502][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.122532][ T10] usb 4-1: Product: syz [ 306.122573][ T10] usb 4-1: Manufacturer: syz [ 306.122691][ T10] usb 4-1: SerialNumber: syz [ 306.185436][ T10] usb 4-1: config 0 descriptor?? [ 306.209291][ T5694] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 306.209347][ T5694] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 306.209375][ T5694] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 306.209410][ T5694] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 306.209438][ T5694] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 306.293905][ T5694] cm6533_jd 0003:0D8C:0022.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 306.345019][ T5681] usb 3-1: USB disconnect, device number 39 [ 306.426009][ T5694] usb 4-1: USB disconnect, device number 39 [ 306.893056][T11236] lo: left promiscuous mode [ 306.902311][ T5694] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 306.924889][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.063063][ T5694] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.064300][ T5694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.064351][ T5694] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.065892][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.065919][ T5694] usb 5-1: SerialNumber: syz [ 307.221199][T11241] FAULT_INJECTION: forcing a failure. [ 307.221199][T11241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.221238][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.0.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.221269][T11241] Tainted: [L]=SOFTLOCKUP [ 307.221278][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 307.221291][T11241] Call Trace: [ 307.221299][T11241] [ 307.221308][T11241] dump_stack_lvl+0xe8/0x150 [ 307.221348][T11241] should_fail_ex+0x410/0x560 [ 307.221387][T11241] _copy_from_iter+0x1d3/0x1660 [ 307.221422][T11241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.221456][T11241] ? __pfx_policy_nodemask+0x10/0x10 [ 307.221491][T11241] ? lock_acquire+0x115/0x350 [ 307.221512][T11241] ? __pfx__copy_from_iter+0x10/0x10 [ 307.221544][T11241] ? alloc_pages_mpol+0x256/0x390 [ 307.221582][T11241] copy_page_from_iter+0x219/0x2d0 [ 307.221613][T11241] tun_get_user+0x20b7/0x4450 [ 307.221663][T11241] ? tun_get_user+0x6de/0x4450 [ 307.221709][T11241] ? aa_file_perm+0x4ed/0x15f0 [ 307.221728][T11241] ? __pfx_tun_get_user+0x10/0x10 [ 307.221757][T11241] ? __lock_acquire+0x747/0x2de0 [ 307.221789][T11241] ? ref_tracker_alloc+0x341/0x4b0 [ 307.221820][T11241] ? lock_acquire+0x115/0x350 [ 307.221845][T11241] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 307.221877][T11241] ? lock_acquire+0x115/0x350 [ 307.221897][T11241] ? tun_get+0x1c/0x2f0 [ 307.221927][T11241] ? tun_get+0x1c/0x2f0 [ 307.221959][T11241] ? tun_get+0x1c/0x2f0 [ 307.221995][T11241] tun_chr_write_iter+0x113/0x200 [ 307.222024][T11241] vfs_write+0x612/0xba0 [ 307.222050][T11241] ? __pfx_vfs_write+0x10/0x10 [ 307.222071][T11241] ? __fget_files+0x3a2/0x420 [ 307.222088][T11241] ? __fget_files+0x2a/0x420 [ 307.222110][T11241] ? fdget+0x1ac/0x250 [ 307.222137][T11241] ksys_write+0x150/0x270 [ 307.222159][T11241] ? __pfx_ksys_write+0x10/0x10 [ 307.222182][T11241] ? asm_int80_emulation+0x1a/0x20 [ 307.222205][T11241] do_int80_emulation+0x198/0x500 [ 307.222230][T11241] ? trace_irq_disable+0x3b/0x140 [ 307.222251][T11241] ? asm_int80_emulation+0x1a/0x20 [ 307.222273][T11241] ? clear_bhb_loop+0x70/0xc0 [ 307.222292][T11241] ? clear_bhb_loop+0x70/0xc0 [ 307.222314][T11241] asm_int80_emulation+0x1a/0x20 [ 307.222331][T11241] RIP: 0023:0xf71d77eb [ 307.222348][T11241] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 307.222364][T11241] RSP: 002b:00000000f549644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 307.222384][T11241] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000340 [ 307.222399][T11241] RDX: 000000000000005a RSI: 0000000000000000 RDI: 0000000000000000 [ 307.222414][T11241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.222424][T11241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.222435][T11241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.222461][T11241] [ 307.668947][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 308.112981][ T5674] usb 2-1: USB disconnect, device number 36 [ 308.477745][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 308.478966][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 308.891359][ T5694] cdc_ether 5-1:1.0: skipping garbage [ 308.891385][ T5694] cdc_ether 5-1:1.0: GUID doesn't match [ 308.919557][ T5694] usb 5-1: USB disconnect, device number 47 [ 308.935469][T11281] syzkaller1: entered promiscuous mode [ 308.935493][T11281] syzkaller1: entered allmulticast mode [ 309.032859][T10456] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 309.071369][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 309.091222][T10461] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 309.181103][T10456] usb 1-1: Using ep0 maxpacket: 32 [ 309.181859][T10456] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 309.183004][T10456] usb 1-1: config 245 has an invalid interface number: 214 but max is 0 [ 309.183033][T10456] usb 1-1: config 245 has no interface number 0 [ 309.183093][T10456] usb 1-1: config 245 interface 214 has no altsetting 0 [ 309.185534][T10456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.185561][T10456] usb 1-1: Product: syz [ 309.185572][T10456] usb 1-1: Manufacturer: syz [ 309.185590][T10456] usb 1-1: SerialNumber: syz [ 309.245092][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 309.252434][T10461] usb 4-1: Using ep0 maxpacket: 32 [ 309.253684][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.253832][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.254010][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.260607][T10461] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 309.290553][ T10] usb 2-1: config 0 descriptor?? [ 309.308149][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.308313][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.308568][T10461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.349219][T10461] usb 4-1: config 0 descriptor?? [ 309.361794][T10461] hub 4-1:0.0: USB hub found [ 309.555018][T10461] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 309.594051][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2229'. [ 309.594127][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2229'. [ 309.658072][T10456] f81534a_ctrl 1-1:245.214: failed to enable ports: -71 [ 309.658110][T10456] f81534a_ctrl 1-1:245.214: probe with driver f81534a_ctrl failed with error -71 [ 309.688803][T10456] usb 1-1: USB disconnect, device number 25 [ 309.768741][ T10] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 309.768786][ T10] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 309.768812][ T10] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 309.824970][ T10] cm6533_jd 0003:0D8C:0022.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 309.985782][T10461] hid-generic 0003:046D:C31C.0019: unknown main item tag 0x0 [ 310.001718][T10461] hid-generic 0003:046D:C31C.0019: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 310.051583][ T5673] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 310.158076][T11297] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 310.203431][ T5673] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.203941][ T5673] usb 3-1: not running at top speed; connect to a high speed hub [ 310.203975][ T5673] usb 3-1: New USB device found, idVendor=9022, idProduct=d483, bcdDevice=50.e4 [ 310.204991][ T5673] usb 3-1: config 6 has an invalid interface number: 91 but max is 0 [ 310.205017][ T5673] usb 3-1: config 6 has no interface number 0 [ 310.205058][ T5673] usb 3-1: config 6 interface 91 has no altsetting 0 [ 310.208446][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.208465][ T5673] usb 3-1: Product: syz [ 310.208475][ T5673] usb 3-1: Manufacturer: syz [ 310.208486][ T5673] usb 3-1: SerialNumber: syz [ 310.289714][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 310.289735][ T30] audit: type=1326 audit(1792557802.570:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.290183][ T30] audit: type=1326 audit(1792557802.570:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.290641][ T30] audit: type=1326 audit(1792557802.570:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.297371][ T30] audit: type=1326 audit(1792557802.570:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.304834][ T30] audit: type=1326 audit(1792557802.590:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.306380][ T30] audit: type=1326 audit(1792557802.590:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.309728][ T30] audit: type=1326 audit(1792557802.590:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.309860][ T30] audit: type=1326 audit(1792557802.590:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.309976][ T30] audit: type=1326 audit(1792557802.590:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.310116][ T30] audit: type=1326 audit(1792557802.590:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 310.339888][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2239'. [ 310.382573][T10461] usb 4-1: USB disconnect, device number 40 [ 310.883306][T10461] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 310.994952][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 311.032584][T10461] usb 4-1: Using ep0 maxpacket: 32 [ 311.033282][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 311.033620][T10461] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 311.035019][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.035052][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.035094][T10461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.040693][T10461] usb 4-1: config 0 descriptor?? [ 311.105705][T10461] hub 4-1:0.0: USB hub found [ 311.312408][T10461] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 311.331380][ T5674] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 311.461192][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 311.518607][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 311.519115][T11280] xt_cgroup: path and classid specified [ 311.541138][ T5697] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 311.614538][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 311.615600][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 311.616349][T10461] usbhid 4-1:0.0: can't add hid device: -71 [ 311.616456][T10461] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.619668][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.619721][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.656137][ T10] usb 1-1: config 0 descriptor?? [ 311.661123][T10461] usb 4-1: USB disconnect, device number 41 [ 311.688731][ T10] rndis_host 1-1:0.0: missing cdc header descriptor [ 311.695836][ T10] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 311.695898][ T10] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 311.695997][ T10] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 311.751893][ T5697] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 311.752980][ T5697] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.753005][ T5697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.754090][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 311.754116][ T5697] usb 5-1: SerialNumber: syz [ 311.881369][ T10] usb 1-1: USB disconnect, device number 26 [ 311.927771][T11325] syzkaller1: entered promiscuous mode [ 311.927798][T11325] syzkaller1: entered allmulticast mode [ 311.992546][ T5697] usb 5-1: 0:2 : does not exist [ 312.031715][ T5697] usb 5-1: USB disconnect, device number 48 [ 312.068168][ T8256] udevd[8256]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.276883][T11327] netlink: 'syz.3.2247': attribute type 2 has an invalid length. [ 312.581306][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 312.603830][ T5681] usb 2-1: USB disconnect, device number 37 [ 312.730338][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 312.732729][ T10] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 312.738758][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.758835][ T10] usb 4-1: config 0 descriptor?? [ 312.768665][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 312.870972][ T5673] dvb-usb: found a 'TeVii S482 (tuner 1)' in warm state. [ 312.880105][ T5673] dw2102: su3000_power_ctrl: 1, initialized 0 [ 312.894127][ T5673] dvb-usb: bulk message failed: -22 (2/0) [ 312.928132][ T5673] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 312.946727][ T5673] dvb-usb: TeVii S482 (tuner 1) error while loading driver (-19) [ 312.949564][ T5673] usb 3-1: USB disconnect, device number 40 [ 313.025296][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 313.049083][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 313.050391][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 313.187414][ T10] cpia1 4-1:0.0: unexpected state after lo power cmd: 01 [ 313.291752][T10456] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 313.411150][ T5673] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 313.452020][T10456] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 313.456472][T10456] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 313.456497][T10456] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 313.456523][T10456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.582899][ T5673] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 313.584338][ T5673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.584371][ T5673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.584412][ T5673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.590908][ T5673] usb 3-1: config 0 descriptor?? [ 313.692167][T10456] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 313.697601][T10456] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input20 [ 313.726463][T10456] input: failed to attach handler kbd to device input20, error: -5 [ 313.769168][T10456] usb 5-1: USB disconnect, device number 49 [ 314.006613][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 314.006654][ T10] cpia1 4-1:0.0: unexpected systemstate: 01 [ 314.026347][ T10] usb 4-1: USB disconnect, device number 42 [ 314.054335][ T5673] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 314.054375][ T5673] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 314.054404][ T5673] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 314.099719][ T5673] cm6533_jd 0003:0D8C:0022.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 314.568956][T11375] syzkaller1: entered promiscuous mode [ 314.568976][T11375] syzkaller1: entered allmulticast mode [ 314.591503][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 314.742119][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 314.742764][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 314.744974][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.744997][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.745025][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.750642][ T10] usb 2-1: config 0 descriptor?? [ 314.971714][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.973093][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.120458][T11380] __nla_validate_parse: 2 callbacks suppressed [ 315.120476][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 315.138966][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 315.140097][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2266'. [ 315.204632][ T10] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 315.204661][ T10] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 315.393623][ T10] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 315.596819][ T10] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 315.648184][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 315.800644][ T10] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 315.813091][ T10] ft260 0003:0403:6030.001B: failed to retrieve status: -5 [ 315.971306][T11387] syzkaller1: entered promiscuous mode [ 315.971334][T11387] syzkaller1: entered allmulticast mode [ 316.023978][ T10] ft260 0003:0403:6030.001B: failed to reset I2C controller: -71 [ 316.052382][ T10] usb 2-1: USB disconnect, device number 38 [ 316.191763][ T24] usb 3-1: USB disconnect, device number 41 [ 316.446305][T11402] futex_wake_op: syz.3.2276 tries to shift op by -1; fix this program [ 316.531546][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 316.534642][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 316.536009][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 316.911205][T10456] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 316.915518][T11413] netlink: 'syz.1.2281': attribute type 4 has an invalid length. [ 317.062294][T10456] usb 1-1: Using ep0 maxpacket: 16 [ 317.067126][T10456] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.067165][T10456] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 317.069612][T10456] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 317.105879][T10456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.105910][T10456] usb 1-1: Product: syz [ 317.105927][T10456] usb 1-1: Manufacturer: syz [ 317.105943][T10456] usb 1-1: SerialNumber: syz [ 317.154387][T10456] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 317.206145][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.206209][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.315445][T10456] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 317.782152][ T5681] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 317.932427][ T5681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.937188][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.937241][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 317.940116][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.940144][ T5681] usb 3-1: SerialNumber: syz [ 318.158586][T10456] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 318.159211][T10456] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 318.192123][T10456] usb 1-1: USB disconnect, device number 27 [ 318.261445][ T8421] udevd[8421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.295791][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 318.561286][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 318.691269][ T10] usb 4-1: device descriptor read/64, error -71 [ 318.931155][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 319.062011][ T10] usb 4-1: device descriptor read/64, error -71 [ 319.172099][ T10] usb usb4-port1: attempt power cycle [ 319.481948][ T5681] cdc_ether 3-1:1.0: skipping garbage [ 319.481973][ T5681] cdc_ether 3-1:1.0: GUID doesn't match [ 319.511863][ T5681] usb 3-1: USB disconnect, device number 42 [ 319.513062][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 319.534330][ T10] usb 4-1: device descriptor read/8, error -71 [ 319.759121][T11433] futex_wake_op: syz.4.2287 tries to shift op by -1; fix this program [ 319.771664][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 319.799813][ T10] usb 4-1: device descriptor read/8, error -71 [ 319.859212][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 319.867148][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 319.903219][ T10] usb usb4-port1: unable to enumerate USB device [ 320.106766][T11445] netlink: 'syz.4.2294': attribute type 4 has an invalid length. [ 320.281135][ T5673] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 320.441583][ T5673] usb 2-1: Using ep0 maxpacket: 32 [ 320.444043][ T5673] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 320.445493][ T5673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.445524][ T5673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.445566][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.478510][ T5673] usb 2-1: config 0 descriptor?? [ 320.621163][T10456] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 320.641204][ T24] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 320.715750][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.716253][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.771241][T10456] usb 3-1: Using ep0 maxpacket: 8 [ 320.772512][T10456] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.773882][T10456] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 320.773934][T10456] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.773954][T10456] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.773972][T10456] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.774014][T10456] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.774057][T10456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.856879][ T24] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 320.867489][ T24] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 320.867528][ T24] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 320.867598][ T24] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 320.867647][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.913201][T11453] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 320.933565][ T5673] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 320.933603][ T5673] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 320.996966][T10456] usb 3-1: usb_control_msg returned -32 [ 320.997024][T10456] usbtmc 3-1:16.0: can't read capabilities [ 321.122003][T11448] input: syz1 as /devices/virtual/input/input21 [ 321.138073][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.138562][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.140931][ T5673] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 321.176338][ T24] usb 1-1: string descriptor 0 read error: -71 [ 321.274451][ T24] usb 1-1: USB disconnect, device number 28 [ 321.332686][ T5673] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 321.533686][ T5673] ft260 0003:0403:6030.001C: failed to retrieve status: -32, no wakeup [ 321.534416][ T5673] ft260 0003:0403:6030.001C: failed to retrieve status: -5 [ 321.721352][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.724253][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.799174][ T5673] ft260 0003:0403:6030.001C: failed to reset I2C controller: -71 [ 321.826594][ T5673] usb 2-1: USB disconnect, device number 39 [ 321.870566][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.870880][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.999595][T11470] __nla_validate_parse: 1 callbacks suppressed [ 321.999612][T11470] netlink: 308 bytes leftover after parsing attributes in process `syz.4.2298'. [ 322.158747][T11473] futex_wake_op: syz.0.2300 tries to shift op by -1; fix this program [ 322.336635][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 322.338118][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 322.339576][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 322.602410][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 322.603594][T11486] syzkaller1: entered promiscuous mode [ 322.603617][T11486] syzkaller1: entered allmulticast mode [ 322.655504][T11487] netlink: 'syz.0.2306': attribute type 16 has an invalid length. [ 322.655530][T11487] netlink: 'syz.0.2306': attribute type 17 has an invalid length. [ 322.699286][T11483] syzkaller1: entered promiscuous mode [ 322.699315][T11483] syzkaller1: entered allmulticast mode [ 322.732783][ T5673] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 322.799184][T11487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 322.867690][ T5681] usb 3-1: USB disconnect, device number 43 [ 322.923160][ T5673] usb 4-1: unable to get BOS descriptor or descriptor too short [ 322.923663][ T5673] usb 4-1: not running at top speed; connect to a high speed hub [ 322.923726][ T5673] usb 4-1: New USB device found, idVendor=9022, idProduct=d483, bcdDevice=50.e4 [ 322.924885][ T5673] usb 4-1: config 6 has an invalid interface number: 91 but max is 0 [ 322.924912][ T5673] usb 4-1: config 6 has no interface number 0 [ 322.924981][ T5673] usb 4-1: config 6 interface 91 has no altsetting 0 [ 322.927941][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.927967][ T5673] usb 4-1: Product: syz [ 322.927984][ T5673] usb 4-1: Manufacturer: syz [ 322.928000][ T5673] usb 4-1: SerialNumber: syz [ 323.022958][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 323.059950][T11485] vlan2: entered promiscuous mode [ 323.059985][T11485] bridge0: entered promiscuous mode [ 323.263308][T10456] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 323.391163][T10456] usb 5-1: device descriptor read/64, error -71 [ 323.631636][T10456] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 323.711253][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 323.731467][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 323.762503][T10456] usb 5-1: device descriptor read/64, error -71 [ 323.861205][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 323.862012][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 323.863293][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.863325][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.863367][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.866135][ T10] usb 3-1: config 0 descriptor?? [ 323.876127][T10456] usb usb5-port1: attempt power cycle [ 323.932320][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 323.934065][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.937172][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.937198][ T24] usb 2-1: Product: syz [ 323.937239][ T24] usb 2-1: Manufacturer: syz [ 323.937256][ T24] usb 2-1: SerialNumber: syz [ 324.054286][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 324.079972][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.080756][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.156158][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 324.157794][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 324.159243][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 324.231224][T10456] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 324.254071][T10456] usb 5-1: device descriptor read/8, error -71 [ 324.276975][T11503] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.277166][T11503] block device autoloading is deprecated and will be removed. [ 324.303328][ T24] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 324.303355][ T24] usb 2-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 324.303378][ T24] usb 2-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 324.304372][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.304997][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 324.342529][ T10] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 324.342642][ T10] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 324.368156][ T24] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 324.368184][ T24] usb 2-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 324.368208][ T24] usb 2-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 324.368721][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.369396][ T24] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 324.417280][ T24] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 324.417309][ T24] usb 2-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 324.417333][ T24] usb 2-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 324.419387][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.493773][T10456] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 324.511975][T10456] usb 5-1: device descriptor read/8, error -71 [ 324.512233][ T10] ft260 0003:0403:6030.001D: chip code: 0000 0000 [ 324.535717][ T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 324.538228][ T24] usb 2-1: USB disconnect, device number 40 [ 324.586176][ T8256] udevd[8256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.623082][T10456] usb usb5-port1: unable to enumerate USB device [ 324.716068][ T10] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 324.725535][ T5694] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 324.883167][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 324.885423][ T5694] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 324.887350][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.887401][ T5694] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.887431][ T5694] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.887487][ T5694] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.887517][ T5694] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.887551][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.896735][ T5694] usb 1-1: config 0 descriptor?? [ 324.934497][ T10] ft260 0003:0403:6030.001D: failed to retrieve status: -32, no wakeup [ 324.984214][ T10] ft260 0003:0403:6030.001D: failed to retrieve status: -5 [ 325.154114][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.154802][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.200828][ T10] ft260 0003:0403:6030.001D: failed to reset I2C controller: -71 [ 325.258857][ T10] usb 3-1: USB disconnect, device number 44 [ 325.539039][ T5673] dvb-usb: found a 'TeVii S482 (tuner 1)' in warm state. [ 325.540360][ T5673] dw2102: su3000_power_ctrl: 1, initialized 0 [ 325.540407][ T5673] dvb-usb: bulk message failed: -22 (2/0) [ 325.571699][ T5673] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 325.594750][ T5673] dvb-usb: TeVii S482 (tuner 1) error while loading driver (-19) [ 325.599789][ T5673] usb 4-1: USB disconnect, device number 47 [ 325.918205][T11522] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 326.243603][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 326.399232][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.414424][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.414458][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.414480][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.414560][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.420697][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.420717][ T9] usb 3-1: Product: syz [ 326.420728][ T9] usb 3-1: Manufacturer: syz [ 326.490891][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 326.491551][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 326.516701][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 326.516763][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 326.713065][ T10] usb 3-1: USB disconnect, device number 45 [ 327.110214][T11534] syzkaller1: entered promiscuous mode [ 327.110232][T11534] syzkaller1: entered allmulticast mode [ 327.152086][T11536] netlink: 'syz.4.2324': attribute type 4 has an invalid length. [ 327.221475][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 327.372239][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.373692][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.373721][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.373742][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.373827][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.377336][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.377363][ T10] usb 3-1: Product: syz [ 327.377410][ T10] usb 3-1: Manufacturer: syz [ 327.475644][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 327.475669][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 327.497933][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 327.504115][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 327.599910][T11539] __nla_validate_parse: 1 callbacks suppressed [ 327.600405][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 327.625521][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 327.719305][ T5694] usbhid 1-1:0.0: can't add hid device: -71 [ 327.719385][ T5694] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 327.730084][ T5694] usb 1-1: USB disconnect, device number 29 [ 327.884521][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 327.888391][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 327.893124][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 328.173551][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 328.406339][ C1] cdc_wdm 3-1:1.0: unknown notification 2 received: index 45978 len 12823 [ 328.406606][ C1] cdc_wdm 3-1:1.0: unknown notification 172 received: index 62 len 0 [ 328.406838][ C1] cdc_wdm 3-1:1.0: unknown notification 175 received: index 8148 len 11953 [ 328.412764][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 328.439294][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.439459][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.439671][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.439695][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.447508][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.447534][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.447739][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.447760][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.454561][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.454585][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.454791][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.454814][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.455049][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.455070][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.455286][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.455307][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.455524][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.455545][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.455757][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 328.455777][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 328.469959][ T5673] usb 3-1: USB disconnect, device number 46 [ 328.470070][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 328.541878][ T10] usb 2-1: device descriptor read/64, error -71 [ 328.781187][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 328.871139][ T5694] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 328.912071][ T10] usb 2-1: device descriptor read/64, error -71 [ 329.021453][ T10] usb usb2-port1: attempt power cycle [ 329.023026][ T5694] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 329.024230][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.062423][ T5694] pwc: Logitech/Cisco VT Camera webcam detected. [ 329.149240][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 329.149270][ T30] audit: type=1326 audit(1792557821.430:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.150219][ T30] audit: type=1326 audit(1792557821.430:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.150273][ T30] audit: type=1326 audit(1792557821.430:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.150328][ T30] audit: type=1326 audit(1792557821.430:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.150378][ T30] audit: type=1326 audit(1792557821.430:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.150427][ T30] audit: type=1326 audit(1792557821.430:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.150744][ T30] audit: type=1326 audit(1792557821.430:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.167473][ T30] audit: type=1326 audit(1792557821.430:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.209205][ T30] audit: type=1326 audit(1792557821.490:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.0.2336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf747f0ec code=0x7ffc0000 [ 329.401230][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 329.421829][ T10] usb 2-1: device descriptor read/8, error -71 [ 329.566862][T11578] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 329.592597][T11567] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 329.671187][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 329.698995][ T10] usb 2-1: device descriptor read/8, error -71 [ 329.801671][ T10] usb usb2-port1: unable to enumerate USB device [ 329.805660][T11567] socket: no more sockets [ 329.992033][ T5694] pwc: Failed to set LED on/off time (-71) [ 329.992404][ T5694] pwc: send_video_command error -71 [ 329.992417][ T5694] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 329.992520][ T5694] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71 [ 330.032984][ T5694] usb 5-1: USB disconnect, device number 54 [ 330.364681][T11586] syzkaller1: entered promiscuous mode [ 330.364700][T11586] syzkaller1: entered allmulticast mode [ 330.490893][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 330.497183][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 330.561672][ T5673] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 330.610688][T11592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2342'. [ 330.642340][T11594] netlink: 'syz.2.2343': attribute type 4 has an invalid length. [ 330.711226][ T5673] usb 4-1: Using ep0 maxpacket: 32 [ 330.711969][ T5673] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 330.713105][ T5673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.713165][ T5673] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.713195][ T5673] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.713221][ T5673] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.713250][ T5673] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.713284][ T5673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.717723][ T5673] usb 4-1: config 0 descriptor?? [ 330.940280][T11585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.953444][T11585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.906719][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'. [ 332.131486][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 332.281517][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 332.285383][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 332.286782][ T10] usb 3-1: config 245 has an invalid interface number: 214 but max is 0 [ 332.286818][ T10] usb 3-1: config 245 has no interface number 0 [ 332.286849][ T10] usb 3-1: config 245 interface 214 has no altsetting 0 [ 332.331307][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.331330][ T10] usb 3-1: Product: syz [ 332.331359][ T10] usb 3-1: Manufacturer: syz [ 332.331375][ T10] usb 3-1: SerialNumber: syz [ 332.827490][T11607] __nla_validate_parse: 1 callbacks suppressed [ 332.827509][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2348'. [ 332.827570][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2348'. [ 333.017126][ T10] f81534a_ctrl 3-1:245.214: failed to enable ports: -71 [ 333.017164][ T10] f81534a_ctrl 3-1:245.214: probe with driver f81534a_ctrl failed with error -71 [ 333.059025][ T10] usb 3-1: USB disconnect, device number 47 [ 334.090463][T11645] netlink: 'syz.2.2358': attribute type 4 has an invalid length. [ 334.489947][ T5673] usbhid 4-1:0.0: can't add hid device: -71 [ 334.490222][ T5673] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 334.513232][ T5673] usb 4-1: USB disconnect, device number 48 [ 334.697615][T11649] syzkaller1: entered promiscuous mode [ 334.697634][T11649] syzkaller1: entered allmulticast mode [ 334.945977][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 334.960489][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 335.191680][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 335.505959][T11676] syzkaller1: entered promiscuous mode [ 335.505986][T11676] syzkaller1: entered allmulticast mode [ 335.591182][T10461] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 335.741857][T10461] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 335.743029][T10461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.743061][T10461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.743100][T10461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.747925][T10461] usb 1-1: config 0 descriptor?? [ 336.175156][T10461] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 336.175200][T10461] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 336.175229][T10461] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 336.210178][T10461] cm6533_jd 0003:0D8C:0022.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 336.463812][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 336.483675][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 336.501206][T10461] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 336.621824][T11690] netlink: 'syz.1.2375': attribute type 4 has an invalid length. [ 336.651244][T10461] usb 3-1: Using ep0 maxpacket: 32 [ 336.652172][T10461] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 336.653699][T10461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.653759][T10461] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.653789][T10461] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.653815][T10461] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.653845][T10461] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.653882][T10461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.658884][T10461] usb 3-1: config 0 descriptor?? [ 336.878590][T11683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.890506][T11683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.795019][T11705] syzkaller1: entered promiscuous mode [ 337.795047][T11705] syzkaller1: entered allmulticast mode [ 338.000569][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 338.061901][ T5694] usb 1-1: reset high-speed USB device number 30 using dummy_hcd [ 338.897771][T11722] netlink: 'syz.3.2384': attribute type 3 has an invalid length. [ 339.182646][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 339.202468][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 339.263602][ T10] usb 1-1: USB disconnect, device number 30 [ 339.466543][T11718] syzkaller0: entered promiscuous mode [ 339.466571][T11718] syzkaller0: entered allmulticast mode [ 339.541197][T11706] mmap: syz.4.2378 (11706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 339.761348][ T5681] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 339.922031][ T5681] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 339.925893][ T5681] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 339.925931][ T5681] usb 2-1: config 0 has no interface number 0 [ 339.925987][ T5681] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.968087][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.968116][ T5681] usb 2-1: Product: syz [ 339.968132][ T5681] usb 2-1: Manufacturer: syz [ 339.968148][ T5681] usb 2-1: SerialNumber: syz [ 340.001157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 340.014700][ T5681] usb 2-1: config 0 descriptor?? [ 340.025645][ T5681] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 340.309845][T10461] usbhid 3-1:0.0: can't add hid device: -71 [ 340.309970][T10461] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.345881][T10461] usb 3-1: USB disconnect, device number 48 [ 340.644214][T11741] netlink: 'syz.3.2390': attribute type 4 has an invalid length. [ 341.330877][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 341.794669][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 341.869685][T11753] syzkaller1: entered promiscuous mode [ 341.869705][T11753] syzkaller1: entered allmulticast mode [ 341.964930][ T5681] usb 2-1: USB disconnect, device number 45 [ 341.968495][ T5681] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 342.141101][ T5673] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 342.229139][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 342.240295][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 342.252820][ T30] audit: type=1326 audit(1792557834.540:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.252999][ T30] audit: type=1326 audit(1792557834.540:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.258128][ T30] audit: type=1326 audit(1792557834.540:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.258299][ T30] audit: type=1326 audit(1792557834.540:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.259910][ T30] audit: type=1326 audit(1792557834.540:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.259962][ T30] audit: type=1326 audit(1792557834.540:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.260101][ T30] audit: type=1326 audit(1792557834.540:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.310123][ T30] audit: type=1326 audit(1792557834.540:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.341587][ T30] audit: type=1326 audit(1792557834.620:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.2396" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fa50ec code=0x7ffc0000 [ 342.416225][ T5673] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 342.500231][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.500269][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.500313][ T5673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.532772][ T5673] usb 4-1: config 0 descriptor?? [ 342.951160][T10461] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 342.978864][ T5673] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 342.978934][ T5673] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 342.978962][ T5673] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 343.033407][ T5673] cm6533_jd 0003:0D8C:0022.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 343.103929][T10461] usb 3-1: Using ep0 maxpacket: 16 [ 343.105000][T10461] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 343.128307][T10461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.128335][T10461] usb 3-1: Product: syz [ 343.128364][T10461] usb 3-1: Manufacturer: syz [ 343.128378][T10461] usb 3-1: SerialNumber: syz [ 343.334842][T11783] netlink: 'syz.1.2405': attribute type 4 has an invalid length. [ 343.384940][T10461] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 343.390807][T10461] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 343.394458][T10461] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 343.394607][T10461] usb 3-1: media controller created [ 343.448680][T10461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.554584][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 343.589168][T11765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.597497][T11765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.625910][T10461] zl10353_read_register: readreg error (reg=127, ret==-71) [ 343.736775][T10461] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 343.755104][T10461] usb 3-1: USB disconnect, device number 49 [ 344.108858][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 344.110690][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 344.386331][ T30] audit: type=1326 audit(1792557836.670:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.2409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 344.581179][T10461] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 344.581400][T11807] syzkaller1: entered promiscuous mode [ 344.581419][T11807] syzkaller1: entered allmulticast mode [ 344.731756][T10461] usb 3-1: Using ep0 maxpacket: 32 [ 344.734348][T10461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.734401][T10461] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0012, bcdDevice= 0.40 [ 344.738227][T10461] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 344.750735][T10461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.750811][T10461] usb 3-1: Product: syz [ 344.750861][T10461] usb 3-1: Manufacturer: syz [ 344.750904][T10461] usb 3-1: SerialNumber: syz [ 344.916225][ T5673] usb 4-1: USB disconnect, device number 49 [ 345.062696][T10461] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 345.159868][T11820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.164487][T10461] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 345.184741][T11820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.185106][T11820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.211778][T10461] usb 3-1: USB disconnect, device number 50 [ 345.235428][ T8421] udevd[8421]: setting mode of /dev/bus/usb/003/050 to 020664 failed: No such file or directory [ 345.235556][ T8421] udevd[8421]: setting owner of /dev/bus/usb/003/050 to uid=0, gid=0 failed: No such file or directory [ 345.300209][T11827] netlink: 'syz.1.2418': attribute type 4 has an invalid length. [ 345.318919][ T8421] udevd[8421]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.454940][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'. [ 345.587900][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 345.589602][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 347.016466][T11852] netlink: 'syz.1.2435': attribute type 4 has an invalid length. [ 347.872762][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 347.955986][T10461] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 348.112863][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 348.113533][T10461] usb 5-1: Using ep0 maxpacket: 8 [ 348.116854][T10461] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.116903][T10461] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.118178][T10461] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.118210][T10461] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 348.123502][T10461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.123606][T10461] usb 5-1: Product: syz [ 348.123657][T10461] usb 5-1: Manufacturer: syz [ 348.123700][T10461] usb 5-1: SerialNumber: syz [ 348.196525][T10461] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 348.196590][T10461] cdc_ncm 5-1:1.0: bind() failure [ 348.220610][T10461] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 348.220664][T10461] cdc_ncm 5-1:1.1: bind() failure [ 348.243416][ T9] usb 1-1: device descriptor read/64, error -71 [ 348.427201][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.427712][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.481867][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 348.615026][ T9] usb 1-1: device descriptor read/64, error -71 [ 348.621144][ T5681] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 348.645075][T10461] usb 5-1: USB disconnect, device number 55 [ 348.721738][ T9] usb usb1-port1: attempt power cycle [ 348.781246][ T5681] usb 2-1: Using ep0 maxpacket: 32 [ 348.783931][ T5681] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 348.784991][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.785025][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.785066][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.790152][ T5681] usb 2-1: config 0 descriptor?? [ 348.944284][T11872] netlink: Conntrack attr has 12 unknown bytes [ 348.944327][T11872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.062470][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.063659][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.078171][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 349.095676][ T9] usb 1-1: device descriptor read/8, error -71 [ 349.287208][ T5681] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 349.287254][ T5681] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 349.300583][T11879] syzkaller1: entered promiscuous mode [ 349.300740][T11879] syzkaller1: entered allmulticast mode [ 349.331116][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 349.351887][ T9] usb 1-1: device descriptor read/8, error -71 [ 349.461873][ T9] usb usb1-port1: unable to enumerate USB device [ 349.478801][ T5681] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 349.679939][ T5681] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 349.880794][ T5681] ft260 0003:0403:6030.0020: failed to retrieve status: -32, no wakeup [ 349.890095][ T5681] ft260 0003:0403:6030.0020: failed to retrieve status: -5 [ 350.106457][ T5681] ft260 0003:0403:6030.0020: failed to reset I2C controller: -71 [ 350.153600][ T5681] usb 2-1: USB disconnect, device number 46 [ 350.298941][T11884] netlink: 'syz.4.2440': attribute type 4 has an invalid length. [ 350.471286][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 350.553468][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 350.554904][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 350.621454][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 350.623765][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 350.625167][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.625218][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.625249][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.625274][ T24] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.625312][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.625348][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.630096][ T24] usb 4-1: config 0 descriptor?? [ 350.890583][T11897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.930646][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.941514][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.435129][ T5694] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 351.581937][ T5694] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 351.585750][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.585785][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.585824][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.613840][ T5694] usb 5-1: config 0 descriptor?? [ 351.688168][T11911] syzkaller1: entered promiscuous mode [ 351.688222][T11911] syzkaller1: entered allmulticast mode [ 352.094116][ T5694] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 352.095689][ T5694] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 352.095860][ T5694] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 352.152432][ T5694] cm6533_jd 0003:0D8C:0022.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 352.477394][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 352.477475][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.483119][ T24] usb 4-1: USB disconnect, device number 50 [ 353.302453][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 353.304138][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 353.692189][T10461] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 353.831344][T10461] usb 4-1: Using ep0 maxpacket: 32 [ 353.838478][T10461] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 353.839755][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.839788][T10461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.839827][T10461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.852118][T10461] usb 4-1: config 0 descriptor?? [ 353.912097][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 354.068230][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.069691][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.100797][T11943] syzkaller1: entered promiscuous mode [ 354.100815][T11943] syzkaller1: entered allmulticast mode [ 354.191123][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 354.256743][ T5694] usb 5-1: USB disconnect, device number 56 [ 354.322449][ T10] usb 2-1: device descriptor read/64, error -71 [ 354.327402][T10461] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 354.327441][T10461] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 354.508989][T10461] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 354.561438][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 354.693040][ T10] usb 2-1: device descriptor read/64, error -71 [ 354.710266][T10461] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 354.801770][ T10] usb usb2-port1: attempt power cycle [ 354.924813][T10461] ft260 0003:0403:6030.0022: failed to retrieve status: -32, no wakeup [ 354.925702][T10461] ft260 0003:0403:6030.0022: failed to retrieve status: -5 [ 355.139165][T10461] ft260 0003:0403:6030.0022: failed to reset I2C controller: -71 [ 355.143840][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 355.164931][ T10] usb 2-1: device descriptor read/8, error -71 [ 355.198150][T10461] usb 4-1: USB disconnect, device number 51 [ 355.224515][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 355.247468][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 355.326735][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 355.328149][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 355.411693][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 355.432035][ T10] usb 2-1: device descriptor read/8, error -71 [ 355.542885][ T10] usb usb2-port1: unable to enumerate USB device [ 356.886438][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 356.888277][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 357.012107][T11982] syzkaller1: entered promiscuous mode [ 357.012133][T11982] syzkaller1: entered allmulticast mode [ 357.061300][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 357.542193][ T5681] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 357.692881][ T5681] usb 2-1: Using ep0 maxpacket: 32 [ 357.693584][ T5681] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 357.694448][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.694501][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.694528][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.750362][ T5681] usb 2-1: config 0 descriptor?? [ 357.988415][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.998356][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.247206][ T5681] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 358.247252][ T5681] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 358.440846][ T5681] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 358.643434][ T5681] ft260 0003:0403:6030.0023: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 358.811186][ T5673] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 358.844519][ T5681] ft260 0003:0403:6030.0023: failed to retrieve status: -32, no wakeup [ 358.845390][ T5681] ft260 0003:0403:6030.0023: failed to retrieve status: -5 [ 358.967660][ T5673] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 358.969937][ T5673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.997839][ T5673] usb 5-1: config 0 descriptor?? [ 359.015237][ T5673] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 359.070470][ T5681] ft260 0003:0403:6030.0023: failed to reset I2C controller: -71 [ 359.097571][ T5681] usb 2-1: USB disconnect, device number 51 [ 359.426108][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 359.427408][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 359.515050][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 359.639239][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 359.751130][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 359.902427][ T10] usb 3-1: device descriptor read/64, error -71 [ 360.021085][T10461] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 360.141339][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 360.182119][T10461] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 360.184385][T10461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.184418][T10461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.184457][T10461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.189171][T10461] usb 1-1: config 0 descriptor?? [ 360.291619][ T10] usb 3-1: device descriptor read/64, error -71 [ 360.401911][ T10] usb usb3-port1: attempt power cycle [ 360.617070][T10461] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 360.617255][T10461] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 360.649100][T10461] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0024/input/input22 [ 360.701581][T10461] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 360.741110][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 360.773823][ T10] usb 3-1: device descriptor read/8, error -71 [ 360.973847][ T5673] usb 5-1: USB disconnect, device number 57 [ 361.014475][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 361.032902][ T10] usb 3-1: device descriptor read/8, error -71 [ 361.141999][ T10] usb usb3-port1: unable to enumerate USB device [ 361.286269][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 361.288667][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 361.498403][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 361.737331][T12059] netlink: 'syz.4.2507': attribute type 4 has an invalid length. [ 361.811086][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 361.891435][ T10] usb 1-1: reset high-speed USB device number 35 using dummy_hcd [ 361.961085][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 361.961904][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 361.964367][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.964401][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.964453][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.969489][ T24] usb 2-1: config 0 descriptor?? [ 362.213232][T12055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.213973][T12055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.426149][ T24] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 362.426189][ T24] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 362.622654][ T24] ft260 0003:0403:6030.0025: chip code: 0000 0000 [ 362.823689][ T24] ft260 0003:0403:6030.0025: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 362.951882][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 362.957211][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 363.039273][ T24] ft260 0003:0403:6030.0025: failed to retrieve status: -32, no wakeup [ 363.051990][ T24] ft260 0003:0403:6030.0025: failed to retrieve status: -5 [ 363.214325][T12073] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 363.267855][ T24] ft260 0003:0403:6030.0025: failed to reset I2C controller: -71 [ 363.328414][ T24] usb 2-1: USB disconnect, device number 52 [ 363.612626][T10461] usb 1-1: USB disconnect, device number 35 [ 363.664142][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 364.111469][T12084] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2518'. [ 364.178267][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 364.199595][T12087] netlink: 'syz.2.2519': attribute type 4 has an invalid length. [ 364.298423][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'. [ 364.299618][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'. [ 364.444167][T10461] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 364.471119][ T5697] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 364.595784][T10461] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 364.598881][T10461] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.598927][T10461] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.607313][T10461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.607385][T10461] usb 1-1: Product: syz [ 364.607428][T10461] usb 1-1: Manufacturer: syz [ 364.607469][T10461] usb 1-1: SerialNumber: syz [ 364.638872][ T5697] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 364.670087][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.670125][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.670166][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.703936][ T5697] usb 4-1: config 0 descriptor?? [ 364.754531][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 364.845206][T10461] speedtch 1-1:1.0: speedtch_bind: data interface not found! [ 364.845234][T10461] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 365.081606][T12114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2532'. [ 365.128740][ T5697] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 365.128864][ T5697] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 365.153278][ T5697] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0026/input/input23 [ 365.181167][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 365.199415][ T5697] cm6533_jd 0003:0D8C:0022.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 365.341253][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 365.342140][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 365.343306][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.343337][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.343377][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.345847][ T24] usb 2-1: config 0 descriptor?? [ 365.478618][T12121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2534'. [ 365.583643][T12106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.587571][T12106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.689817][T12126] syzkaller1: entered promiscuous mode [ 365.689845][T12126] syzkaller1: entered allmulticast mode [ 365.796302][ T24] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 365.796341][ T24] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 365.983382][T12129] netlink: 'syz.4.2537': attribute type 4 has an invalid length. [ 366.000598][ T24] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 366.202064][ T24] ft260 0003:0403:6030.0027: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 366.391110][T10461] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 366.410237][ T24] ft260 0003:0403:6030.0027: failed to retrieve status: -32, no wakeup [ 366.414326][ T24] ft260 0003:0403:6030.0027: failed to retrieve status: -5 [ 366.630709][ T24] ft260 0003:0403:6030.0027: failed to reset I2C controller: -71 [ 366.670964][ T24] usb 2-1: USB disconnect, device number 53 [ 367.154767][T12149] ------------[ cut here ]------------ [ 367.154783][T12149] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 367.154804][T12149] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#1: syz.4.2544/12149 [ 367.179960][T12149] Modules linked in: [ 367.183980][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.4.2544 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.195045][T12149] Tainted: [L]=SOFTLOCKUP [ 367.199413][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 367.209766][T12149] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 367.215780][T12149] Code: c6 05 6b 0d 23 10 01 48 c7 c7 de 01 45 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 cb e7 62 00 e9 81 ee ff ff e8 41 4f 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 367.235533][T12149] RSP: 0018:ffffc9000374ef00 EFLAGS: 00010283 [ 367.241831][T12149] RAX: ffffffff8140d5ef RBX: ffff888000000000 RCX: 0000000000080000 [ 367.249935][T12149] RDX: ffffc9000fbfd000 RSI: 0000000000000388 RDI: 0000000000000389 [ 367.258138][T12149] RBP: ffffc9000374f090 R08: ffffffff917a847f R09: 1ffffffff22f508f [ 367.266330][T12149] R10: dffffc0000000000 R11: fffffbfff22f5090 R12: 1ffff920006e9df4 [ 367.274408][T12149] R13: ffff88807e505b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 367.285426][T12149] FS: 0000000000000000(0000) GS:ffff888123bbb000(0063) knlGS:00000000f5455b40 [ 367.294529][T12149] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 367.301296][T12149] CR2: 0000000033d10ff8 CR3: 000000007ea56000 CR4: 00000000003526f0 [ 367.309322][T12149] Call Trace: [ 367.312757][T12149] [ 367.315741][T12149] ? lock_acquire+0x115/0x350 [ 367.320497][T12149] ? kvm_gpc_refresh+0x31/0x110 [ 367.325491][T12149] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 367.331111][T12149] ? lock_acquire+0x115/0x350 [ 367.335943][T12149] ? lock_acquire+0x115/0x350 [ 367.340672][T12149] kvm_gpc_refresh+0xe1/0x110 [ 367.345464][T12149] ? kvm_xen_set_evtchn+0x11e/0x220 [ 367.350725][T12149] kvm_xen_set_evtchn+0x14f/0x220 [ 367.355956][T12149] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 367.361935][T12149] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 367.367032][T12149] ? schedule+0x90/0x2b0 [ 367.371511][T12149] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 367.377030][T12149] ? lock_acquire+0x115/0x350 [ 367.381885][T12149] ? __lock_acquire+0x747/0x2de0 [ 367.386919][T12149] ? __lock_acquire+0x747/0x2de0 [ 367.391993][T12149] ? __lock_acquire+0x747/0x2de0 [ 367.396992][T12149] ? __lock_acquire+0x747/0x2de0 [ 367.402050][T12149] ? lock_acquire+0x115/0x350 [ 367.406818][T12149] ? lock_acquire+0x115/0x350 [ 367.411640][T12149] ? is_bpf_text_address+0x26/0x2b0 [ 367.416899][T12149] ? is_bpf_text_address+0x292/0x2b0 [ 367.422308][T12149] ? is_bpf_text_address+0x26/0x2b0 [ 367.427570][T12149] ? kernel_text_address+0xa5/0xe0 [ 367.432788][T12149] ? __kernel_text_address+0xd/0x30 [ 367.438041][T12149] ? unwind_get_return_address+0x4d/0x90 [ 367.443850][T12149] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 367.450050][T12149] ? arch_stack_walk+0xfb/0x150 [ 367.455040][T12149] ? stack_trace_save+0xa9/0x100 [ 367.460041][T12149] ? __pfx_stack_trace_save+0x10/0x10 [ 367.465533][T12149] ? kasan_save_track+0x4f/0x80 [ 367.470453][T12149] kvm_vm_ioctl+0x8f7/0xd30 [ 367.475139][T12149] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 367.480217][T12149] ? kasan_save_free_info+0x40/0x50 [ 367.485541][T12149] ? __kasan_slab_free+0x5c/0x80 [ 367.490530][T12149] ? kfree+0x1c5/0x650 [ 367.494691][T12149] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 367.500412][T12149] ? security_file_ioctl_compat+0xc3/0x2a0 [ 367.506352][T12149] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 367.512087][T12149] ? __do_fast_syscall_32+0x27a/0x6b0 [ 367.517508][T12149] ? do_fast_syscall_32+0x33/0x70 [ 367.522860][T12149] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.529434][T12149] ? kvm_arch_vm_compat_ioctl+0x2b7/0x2f0 [ 367.535292][T12149] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 367.541497][T12149] ? kasan_quarantine_put+0xbb/0x1f0 [ 367.546866][T12149] ? tomoyo_path_number_perm+0x219/0x5f0 [ 367.552636][T12149] ? tomoyo_path_number_perm+0x219/0x5f0 [ 367.558357][T12149] ? do_vfs_ioctl+0x116f/0x1530 [ 367.563344][T12149] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 367.568485][T12149] ? hook_file_ioctl_compat+0x1f2/0x600 [ 367.574227][T12149] kvm_vm_compat_ioctl+0x2b1/0x3a0 [ 367.579496][T12149] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 367.585235][T12149] ? __fget_files+0x2a/0x420 [ 367.589868][T12149] ? __fget_files+0x3a2/0x420 [ 367.594723][T12149] ? __fget_files+0x2a/0x420 [ 367.599369][T12149] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 367.605502][T12149] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 367.611077][T12149] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 367.617143][T12149] ? __se_sys_futex_time32+0x3ab/0x440 [ 367.622762][T12149] ? rcu_is_watching+0x16/0xb0 [ 367.627593][T12149] __do_fast_syscall_32+0x27a/0x6b0 [ 367.632892][T12149] ? do_fast_syscall_32+0x33/0x70 [ 367.637988][T12149] ? irqentry_exit+0x10f/0x9b0 [ 367.642879][T12149] ? trace_irq_disable+0x3b/0x140 [ 367.647954][T12149] do_fast_syscall_32+0x33/0x70 [ 367.652929][T12149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.659309][T12149] RIP: 0023:0xf7fc60ec [ 367.663465][T12149] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 367.683313][T12149] RSP: 002b:00000000f545550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 367.691859][T12149] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000400caed0 [ 367.699907][T12149] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.707974][T12149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.716064][T12149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 367.724124][T12149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.732253][T12149] [ 367.735324][T12149] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 367.742653][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.4.2544 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.753628][T12149] Tainted: [L]=SOFTLOCKUP [ 367.757977][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 367.768068][T12149] Call Trace: [ 367.771385][T12149] [ 367.774355][T12149] vpanic+0x56d/0xa60 [ 367.778397][T12149] ? __pfx__printk+0x10/0x10 [ 367.783037][T12149] ? __pfx_vpanic+0x10/0x10 [ 367.787585][T12149] ? is_bpf_text_address+0x292/0x2b0 [ 367.792918][T12149] ? is_bpf_text_address+0x26/0x2b0 [ 367.798182][T12149] panic+0xc5/0xd0 [ 367.801958][T12149] ? __pfx_panic+0x10/0x10 [ 367.806462][T12149] __warn+0x315/0x4c0 [ 367.810581][T12149] ? __kvm_gpc_refresh+0x1510/0x1710 [ 367.815911][T12149] ? __kvm_gpc_refresh+0x1510/0x1710 [ 367.821245][T12149] __report_bug+0x276/0x570 [ 367.825799][T12149] ? check_path+0x21/0x40 [ 367.830182][T12149] ? __kvm_gpc_refresh+0x1510/0x1710 [ 367.835526][T12149] ? __pfx___report_bug+0x10/0x10 [ 367.840593][T12149] ? lockdep_unlock+0x5c/0xd0 [ 367.845309][T12149] ? __lock_acquire+0x1511/0x2de0 [ 367.850399][T12149] ? irqentry_exit+0x2a0/0x9b0 [ 367.855225][T12149] ? lockdep_hardirqs_on+0x7b/0x110 [ 367.860483][T12149] ? __kvm_gpc_refresh+0x1510/0x1710 [ 367.865828][T12149] report_bug+0x16b/0x220 [ 367.870214][T12149] ? __kvm_gpc_refresh+0x1510/0x1710 [ 367.875562][T12149] ? __kvm_gpc_refresh+0x1512/0x1710 [ 367.880897][T12149] handle_bug+0x9c/0x200 [ 367.885205][T12149] exc_invalid_op+0x1a/0x50 [ 367.889761][T12149] asm_exc_invalid_op+0x1a/0x20 [ 367.894652][T12149] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 367.900599][T12149] Code: c6 05 6b 0d 23 10 01 48 c7 c7 de 01 45 8e be 43 04 00 00 48 c7 c2 c0 43 02 8c e8 cb e7 62 00 e9 81 ee ff ff e8 41 4f 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 367.920244][T12149] RSP: 0018:ffffc9000374ef00 EFLAGS: 00010283 [ 367.926366][T12149] RAX: ffffffff8140d5ef RBX: ffff888000000000 RCX: 0000000000080000 [ 367.934389][T12149] RDX: ffffc9000fbfd000 RSI: 0000000000000388 RDI: 0000000000000389 [ 367.942409][T12149] RBP: ffffc9000374f090 R08: ffffffff917a847f R09: 1ffffffff22f508f [ 367.950420][T12149] R10: dffffc0000000000 R11: fffffbfff22f5090 R12: 1ffff920006e9df4 [ 367.958432][T12149] R13: ffff88807e505b60 R14: ffff888000000000 R15: ffffffffffffff01 [ 367.966462][T12149] ? __kvm_gpc_refresh+0x150f/0x1710 [ 367.971820][T12149] ? lock_acquire+0x115/0x350 [ 367.976615][T12149] ? kvm_gpc_refresh+0x31/0x110 [ 367.981518][T12149] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 367.987036][T12149] ? lock_acquire+0x115/0x350 [ 367.991762][T12149] ? lock_acquire+0x115/0x350 [ 367.996485][T12149] kvm_gpc_refresh+0xe1/0x110 [ 368.001221][T12149] ? kvm_xen_set_evtchn+0x11e/0x220 [ 368.006468][T12149] kvm_xen_set_evtchn+0x14f/0x220 [ 368.011585][T12149] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 368.017107][T12149] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 368.022280][T12149] ? schedule+0x90/0x2b0 [ 368.026572][T12149] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 368.032119][T12149] ? lock_acquire+0x115/0x350 [ 368.036848][T12149] ? __lock_acquire+0x747/0x2de0 [ 368.041838][T12149] ? __lock_acquire+0x747/0x2de0 [ 368.046833][T12149] ? __lock_acquire+0x747/0x2de0 [ 368.051844][T12149] ? __lock_acquire+0x747/0x2de0 [ 368.056872][T12149] ? lock_acquire+0x115/0x350 [ 368.061605][T12149] ? lock_acquire+0x115/0x350 [ 368.066339][T12149] ? is_bpf_text_address+0x26/0x2b0 [ 368.071590][T12149] ? is_bpf_text_address+0x292/0x2b0 [ 368.076930][T12149] ? is_bpf_text_address+0x26/0x2b0 [ 368.082187][T12149] ? kernel_text_address+0xa5/0xe0 [ 368.087358][T12149] ? __kernel_text_address+0xd/0x30 [ 368.092602][T12149] ? unwind_get_return_address+0x4d/0x90 [ 368.098284][T12149] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.104548][T12149] ? arch_stack_walk+0xfb/0x150 [ 368.109460][T12149] ? stack_trace_save+0xa9/0x100 [ 368.114437][T12149] ? __pfx_stack_trace_save+0x10/0x10 [ 368.119852][T12149] ? kasan_save_track+0x4f/0x80 [ 368.124756][T12149] kvm_vm_ioctl+0x8f7/0xd30 [ 368.129325][T12149] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 368.134400][T12149] ? kasan_save_free_info+0x40/0x50 [ 368.139642][T12149] ? __kasan_slab_free+0x5c/0x80 [ 368.144624][T12149] ? kfree+0x1c5/0x650 [ 368.148746][T12149] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 368.154475][T12149] ? security_file_ioctl_compat+0xc3/0x2a0 [ 368.160331][T12149] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 368.166015][T12149] ? __do_fast_syscall_32+0x27a/0x6b0 [ 368.171439][T12149] ? do_fast_syscall_32+0x33/0x70 [ 368.176506][T12149] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.183065][T12149] ? kvm_arch_vm_compat_ioctl+0x2b7/0x2f0 [ 368.188850][T12149] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 368.194993][T12149] ? kasan_quarantine_put+0xbb/0x1f0 [ 368.200352][T12149] ? tomoyo_path_number_perm+0x219/0x5f0 [ 368.206051][T12149] ? tomoyo_path_number_perm+0x219/0x5f0 [ 368.211742][T12149] ? do_vfs_ioctl+0x116f/0x1530 [ 368.216639][T12149] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 368.221732][T12149] ? hook_file_ioctl_compat+0x1f2/0x600 [ 368.227343][T12149] kvm_vm_compat_ioctl+0x2b1/0x3a0 [ 368.232521][T12149] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 368.238209][T12149] ? __fget_files+0x2a/0x420 [ 368.242841][T12149] ? __fget_files+0x3a2/0x420 [ 368.247571][T12149] ? __fget_files+0x2a/0x420 [ 368.252205][T12149] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 368.257803][T12149] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 368.263326][T12149] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 368.269359][T12149] ? __se_sys_futex_time32+0x3ab/0x440 [ 368.274874][T12149] ? rcu_is_watching+0x16/0xb0 [ 368.279727][T12149] __do_fast_syscall_32+0x27a/0x6b0 [ 368.284982][T12149] ? do_fast_syscall_32+0x33/0x70 [ 368.290055][T12149] ? irqentry_exit+0x10f/0x9b0 [ 368.294855][T12149] ? trace_irq_disable+0x3b/0x140 [ 368.299928][T12149] do_fast_syscall_32+0x33/0x70 [ 368.304822][T12149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.311199][T12149] RIP: 0023:0xf7fc60ec [ 368.315332][T12149] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 368.335007][T12149] RSP: 002b:00000000f545550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 368.343518][T12149] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000400caed0 [ 368.351584][T12149] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.359591][T12149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.367595][T12149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.375611][T12149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.383638][T12149] [ 368.387293][T12149] Kernel Offset: disabled [ 368.391645][T12149] Rebooting in 86400 seconds..