last executing test programs: 13.466777428s ago: executing program 0 (id=7314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 13.142027815s ago: executing program 0 (id=7316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd", 0xb5}, {&(0x7f0000000200)="de21cff472aa580c2ee9f858e448235908eefdb1208e0f5550b00480aba01f684783fb02a4db09dae1acd597a63280adfea05789fabacfe30d2707e810", 0x3d}, {&(0x7f00000014c0)="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", 0xde9}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 12.31484323s ago: executing program 3 (id=7319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 11.387049462s ago: executing program 1 (id=7321): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="4c000000028601030000000000000000059d08001400078008000840000000520800064000000006090002007325c3797a3100004989a70fa79600000500040000000000050005000a000000e9a72940aca3690e567d51a6c8a3c079c4b852b1124ffef864192f06245c33472f583ba95725ffe1b7986ad7c3de30478e6b9443186163a5efb47acf2e51b678c36a270080000000000000ab384302db6e63bfab86fc7d995461ab494f81d49e382b2622ec5125cc142fd8db950aea1b12ad64a45519c4326cc6901f4bd98a85abc690b1a86cd1d9ce599498b67bd75fba319514c474e31ee9ff"], 0x4c}}, 0x44000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x34b9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x4c831, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000300)='bpf\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() 11.266984048s ago: executing program 0 (id=7323): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="31830000000000000000190000a008763100"], 0x14}}, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f01c80f205066b98200004066b80000000066ba000000000f3067660f5e00baf80c66b8e4844e8866efbafc0c66ed660f090f01d764660fdceff30f0966f3aa", 0x40}], 0x1, 0x72, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x54101, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_clone3(&(0x7f0000000380)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0xa}, 0x81) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000100), 0x2000, 0x0) mq_notify(r6, &(0x7f0000000540)={0x0, 0x1f, 0x2, @thr={&(0x7f00000002c0)="c8b30a24757732b9932de3cbe4840012b7c777e863ce70893d2568113877ce25be3c6300066c7e34f83a9074863ea4dddd0f5b30971a65eb46e2723de26264e198dbc3406fd9e92cd1bc805c7e71af6c22d2975c93d0b8eaf7fb8dac0ccda2", &(0x7f0000000480)="00ddfe319c5fddcb8ec0517dc5e67d4428348a7c45c7b60af2ca240b943482a3420f1acac57e1703b127f169c148bd59109b6efdb18f710319337e4a679d9098d306eaeec440aba045866c56c2430d148a6324b58368a8de0e2c1259a23064f9"}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f000000e540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x10, 0x1, 0x1, [r8]}}, @rights={{0x14, 0x1, 0x1, [r8, r8]}}], 0x24, 0x810}}], 0x1, 0x4048050) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet6(0xa, 0x808, 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3d, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x4c) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.074986158s ago: executing program 3 (id=7324): socket$kcm(0x2, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x9, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0xffffffff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 11.06978055s ago: executing program 2 (id=7334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x104) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) 10.240521633s ago: executing program 3 (id=7325): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="be2662de3770e5986cd894f960a359941a2a4f77ff8b3be585b6ae29c7e309b43da35c4e3048edd642618b01bcba017c29a367b0902ec9c8fb1052b2c11e3bded2d77870e7c24cdf1a114bc4fa96be600be17e1eaabf91d7b0625f8a2009a9eb6638941d8dcd3a470baa0e392da8bec430b6a0d3fbb065b0fa399c6d1e98f6e422702c62adab4619aa9ebc47bcb0823afedc1da41018aeaf8e22cfe17d8e61ec", 0xa0}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0xfffffffffffffffc, 0xfffffe0000000004, 0xfa11, 0x9}, 0x0) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000900)={0x5, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x38415262, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x110, 0x3}, {0x3, 0x7}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r8, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000640)=""/131, &(0x7f0000000500)=0x83) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[0x0], 0x0}) 9.533322294s ago: executing program 2 (id=7326): socket$inet6(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0xa5, 0x8000000000, 0x2, 0x3, 0x40, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 9.338537776s ago: executing program 1 (id=7327): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x1, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000004) pipe(0x0) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x3, 0x62, 0x0, 0x0) io_uring_enter(r0, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) 7.896965027s ago: executing program 0 (id=7328): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="85ed00001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a000000000000000800060a010400000000000000000100002208000b4000000000700004803c0001800b00010065787468647200002c000280080001400035127e8b00034000000002080004400000002205000200070000000800064000000002300054bf08000100636d700024000280100003800b000100261fbabdae20b300080001400000001308000240000000020900010073797a303e6c10f43dcc6a516a4e3e2847bd176535c904891683503a16b540900568166a4073ce011bf2b1297b7985960916289f7b282eecc859f6d251ede8490f0cbb012513ec3d26adfbdb992237b89eaa5c4df0b7de494e9766bf09adce0d17d353ab2d"], 0x10c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="be2662de3770e5986cd894f960a359941a2a4f77ff8b3be585b6ae29c7e309b43da35c4e3048edd642618b01bcba017c29a367b0902ec9c8fb1052b2c11e3bded2d77870e7c24cdf1a114bc4fa96be600be17e1eaabf91d7b0625f8a2009a9eb6638941d8dcd3a470baa0e392da8bec430b6a0d3fbb065b0fa399c6d1e98f6e422702c62adab4619aa9ebc47bcb0823afedc1da41018aeaf8e22cfe17d8e61ec", 0xa0}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0xfffffffffffffffc, 0xfffffe0000000004, 0xfa11, 0x9}, 0x0) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r6 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000900)={0x5, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x38415262, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x110, 0x3}, {0x3, 0x7}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r8, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000640)=""/131, &(0x7f0000000500)=0x83) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[0x0], 0x0}) 6.511752065s ago: executing program 3 (id=7329): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="be2662de3770e5986cd894f960a359941a2a4f77ff8b3be585b6ae29c7e309b43da35c4e3048edd642618b01bcba017c29a367b0902ec9c8fb1052b2c11e3bded2d77870e7c24cdf1a114bc4fa96be600be17e1eaabf91d7b0625f8a2009a9eb6638941d8dcd3a470baa0e392da8bec430b6a0d3fbb065b0fa399c6d1e98f6e422702c62adab4619aa9ebc47bcb0823afedc1da41018", 0x96}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0xfffffffffffffffc, 0xfffffe0000000004, 0xfa11, 0x9}, 0x0) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000900)={0x5, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x38415262, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x110, 0x3}, {0x3, 0x7}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r8, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000640)=""/131, &(0x7f0000000500)=0x83) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[0x0], 0x0}) 6.501775837s ago: executing program 4 (id=7330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.951900027s ago: executing program 2 (id=7331): syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) close(0xffffffffffffffff) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$unix(r0, &(0x7f00000010c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 5.54173994s ago: executing program 4 (id=7332): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.260285262s ago: executing program 1 (id=7333): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r2 = socket$inet6(0xa, 0x80000, 0x8) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3ff, 0x8, 0x4) socket$key(0xf, 0x3, 0x2) 4.90247351s ago: executing program 4 (id=7335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be9", 0x95}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125bd069ddc713fbff", 0xdf1}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.408748227s ago: executing program 2 (id=7336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0xd, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xc2}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd70007ddbdf2500000000", @ANYRES32=r0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a00000000000c0023003709"], 0x48}, 0x1, 0x0, 0x0, 0x10000010}, 0x20040844) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x22, 0x6, "c6c4021fc3a5f53e69ff0a53f2cf8e34eafb8cef5d1663882dff335c09a4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x6, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x504}}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 4.098108023s ago: executing program 0 (id=7337): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x203, 0x80742, 0x41414770, 0x32315659, 0xffffffff, 0x490, 0x1, 0x1, 0xfeedcafe, 0x3, 0x0, 0x1}}) syz_open_dev$sg(&(0x7f0000001840), 0x3, 0x40000) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff000000070501"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="40011e0000004d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.671706591s ago: executing program 3 (id=7338): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xfffffffffffffffb, 0x0, 0x97, 0xe, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.909389611s ago: executing program 1 (id=7339): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x595e, 0x400, 0x3, 0x52}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x6011}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.458109505s ago: executing program 4 (id=7340): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) io_submit(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.120717879s ago: executing program 1 (id=7341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x10000, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xbbe676b2, 0x6], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x6, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x5, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f513f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYBLOB="fd351a7fa4489056a73e03977cdb2f66ece5cae6db38504f20"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) 853.868341ms ago: executing program 4 (id=7342): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28) sendmsg$inet_sctp(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001bc0)="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", 0x2b5}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 793.137127ms ago: executing program 2 (id=7343): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 500.906389ms ago: executing program 0 (id=7344): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0x10) 255.776853ms ago: executing program 2 (id=7345): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000100)={'veth1_macvtap\x00', 0x9}) syz_usb_connect$midi(0x3, 0x56, 0x0, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 48.901845ms ago: executing program 4 (id=7346): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a07050203"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000240)={0x20, 0x30, 0x4, "bbb4024b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r2, &(0x7f0000000300)='xdevxcharx188x0', 0xf) read(r1, &(0x7f0000000400), 0x10) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000400), 0x1) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000404), 0x1) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000409), 0x1) write(r2, &(0x7f0000000300)=':', 0x1) read(r1, &(0x7f000000040d), 0x1) openat(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 7.480033ms ago: executing program 1 (id=7347): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000000c0)={{0x1, 0x3, 0xa2, 0x1000, '\x00', 0x9}, 0x0, [0x4, 0x6, 0x7, 0x4, 0x7, 0x38, 0x200, 0x4, 0x4, 0x2, 0xc20000, 0x4, 0x7ff, 0xa6e, 0xffff0001, 0x1, 0x4, 0x1, 0x8000, 0x3, 0x7, 0x7, 0x2, 0xfffffffd, 0x2, 0x4, 0xd, 0x6, 0x7, 0x8, 0x6, 0x9, 0x9, 0x80000000, 0x400, 0x7, 0x40, 0x7f, 0x2, 0x0, 0x7ffffd, 0x80000000, 0xd23, 0x4, 0xe, 0x0, 0x764b, 0xf, 0x5, 0xe, 0x2, 0x6, 0x101, 0xb50, 0x100, 0xaa, 0x2e, 0x3, 0x73, 0x1000, 0x7, 0x7fffffff, 0x0, 0x4, 0x68c, 0xfffff822, 0x4, 0x6, 0x46, 0x3, 0x2, 0x0, 0x7, 0xfff, 0x0, 0x29, 0x2, 0x1000, 0x1000, 0x9, 0x7, 0x8, 0x1, 0x8, 0x3, 0x6, 0x6, 0x8001, 0x4, 0x8, 0x3, 0xfff, 0x8000, 0xe, 0x4, 0x4, 0x3, 0x0, 0x7, 0x13, 0x9, 0x8, 0x401, 0x8, 0x10, 0x0, 0x4, 0x6, 0x80000000, 0x80, 0x7, 0x7, 0xfff, 0x2, 0x6, 0x5, 0x9, 0x0, 0x40, 0x200, 0xe7, 0x1, 0x6, 0x5b5, 0x7, 0x4, 0xfffffffe, 0x9]}) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) r2 = syz_open_dev$loop(&(0x7f00000003c0), 0x4, 0x1) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) nanosleep(&(0x7f0000000300), 0x0) write$UHID_INPUT2(r1, &(0x7f0000000500)={0xc, {0x1, '\x00'}}, 0x7) 0s ago: executing program 3 (id=7348): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="be2662de3770e5986cd894f960a359941a2a4f77ff8b3be585b6ae29c7e309b43da35c4e3048edd642618b01bcba017c29a367b0902ec9c8fb1052b2c11e3bded2d77870e7c24cdf1a114bc4fa96be600be17e1eaabf91d7b0625f8a2009a9eb6638941d8dcd3a470baa0e392da8bec430b6a0d3fbb065b0fa399c6d1e98f6e422702c62adab4619aa9ebc47bcb0823afedc1da41018", 0x96}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xc, 0xfffffffffffffffc, 0xfffffe0000000004, 0xfa11, 0x9}, 0x0) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r6 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000900)={0x5, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x38415262, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x110, 0x3}, {0x3, 0x7}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r8, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000640)=""/131, &(0x7f0000000500)=0x83) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[0x0], 0x0}) kernel console output (not intermixed with test programs): [ 2817.339283][T25601] gspca_stk1135: Sensor write failed [ 2817.339318][T25601] gspca_stk1135: serial bus timeout: status=0x00 [ 2817.339329][T25601] gspca_stk1135: Sensor read failed [ 2817.339363][T25601] gspca_stk1135: serial bus timeout: status=0x00 [ 2817.339375][T25601] gspca_stk1135: Sensor read failed [ 2817.339384][T25601] gspca_stk1135: Detected sensor type unknown (0x0) [ 2817.339422][T25601] gspca_stk1135: serial bus timeout: status=0x00 [ 2817.339434][T25601] gspca_stk1135: Sensor read failed [ 2817.339468][T25601] gspca_stk1135: serial bus timeout: status=0x00 [ 2817.339480][T25601] gspca_stk1135: Sensor read failed [ 2817.339514][T25601] gspca_stk1135: serial bus timeout: status=0x00 [ 2817.339525][T25601] gspca_stk1135: Sensor write failed [ 2817.339558][T25601] gspca_stk1135: serial bus timeout: status=0x00 [ 2817.339569][T25601] gspca_stk1135: Sensor write failed [ 2817.339646][T25601] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 2817.348796][T25601] usb 3-1: USB disconnect, device number 58 [ 2817.649236][T25601] usb 2-1: USB disconnect, device number 24 [ 2817.694269][T32444] udevd[32444]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2817.879094][T32447] input: syz0 as /devices/virtual/input/input112 [ 2818.253283][T32456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6142'. [ 2818.855063][T28151] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2819.024238][T28151] usb 2-1: Using ep0 maxpacket: 8 [ 2819.026405][T28151] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2819.029159][T28151] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2819.029221][T28151] usb 2-1: config 0 has no interface number 0 [ 2819.029318][T28151] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2819.029387][T28151] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2819.029450][T28151] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2819.029514][T28151] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2819.029591][T28151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.132856][T28151] usb 2-1: config 0 descriptor?? [ 2819.188115][T28151] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2819.400839][T28151] usb 2-1: USB disconnect, device number 25 [ 2819.407113][T28151] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2819.556637][T32486] socket: no more sockets [ 2819.907636][T25590] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2819.973108][T32492] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6154'. [ 2820.066632][T25590] usb 3-1: Using ep0 maxpacket: 32 [ 2820.068002][T25590] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2820.069578][T25590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2820.107927][T25590] usb 3-1: config 0 descriptor?? [ 2820.157782][T25590] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2821.035375][T25590] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 2821.094398][T25590] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 2821.098526][T25590] usb 3-1: USB disconnect, device number 59 [ 2822.697045][T32527] kernel read not supported for file /zero (pid: 32527 comm: syz.2.6170) [ 2822.767784][T32525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6166'. [ 2822.788720][T32525] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6166'. [ 2822.858977][T32534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6171'. [ 2823.056938][T32539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6174'. [ 2823.252829][T32539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2823.410768][T32545] bond0: (slave batadv0): Opening slave failed [ 2824.021964][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6179'. [ 2824.369358][T32564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6176'. [ 2826.074236][T25601] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2826.285914][T25601] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2826.286062][T25601] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2826.338653][T25601] usb 2-1: config 129 has an invalid interface number: 80 but max is 0 [ 2826.338685][T25601] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 2826.338707][T25601] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2826.338730][T25601] usb 2-1: config 129 has no interface number 0 [ 2826.338756][T25601] usb 2-1: config 129 has no interface number 1 [ 2826.338835][T25601] usb 2-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2826.338867][T25601] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2826.338909][T25601] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2826.338940][T25601] usb 2-1: config 129 interface 80 has no altsetting 0 [ 2826.338961][T25601] usb 2-1: config 129 interface 5 has no altsetting 0 [ 2826.744304][T25601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.744371][T25601] usb 2-1: SerialNumber: syz [ 2827.079682][T25601] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2827.079811][T25601] usb 2-1: MIDIStreaming interface descriptor not found [ 2827.392517][T25601] usb 2-1: USB disconnect, device number 26 [ 2827.799775][T32614] netlink: 'syz.4.6195': attribute type 1 has an invalid length. [ 2827.831744][T32610] udevd[32610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2828.035121][T32614] bond0: entered promiscuous mode [ 2828.035289][T32614] bond0: entered allmulticast mode [ 2828.036860][T32614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2828.105659][T32616] erspan1: entered allmulticast mode [ 2828.125338][T32616] bond0: (slave erspan1): making interface the new active one [ 2828.125359][T32616] erspan1: entered promiscuous mode [ 2828.126654][T32616] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 2828.283661][T32626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6196'. [ 2828.370988][T32626] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6196'. [ 2829.017801][T32641] input: syz0 as /devices/virtual/input/input113 [ 2829.093252][T32644] program syz.0.6200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2830.126819][T32651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6207'. [ 2830.134437][T32651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6207'. [ 2830.135881][T32651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6207'. [ 2830.965764][T32657] input: syz0 as /devices/virtual/input/input114 [ 2831.570873][T20644] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 2831.618395][T20644] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2832.152194][T32667] fido_id[32667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2834.278583][T32702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2834.279815][T32702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2834.994208][T25590] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 2835.020560][T25590] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2836.058419][T32741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6241'. [ 2836.058486][T32741] netlink: 'syz.4.6241': attribute type 6 has an invalid length. [ 2836.058519][T32741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6241'. [ 2836.094178][T32741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6241'. [ 2836.094204][T32741] netlink: 'syz.4.6241': attribute type 6 has an invalid length. [ 2836.094219][T32741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6241'. [ 2836.315977][T32752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.319486][T32752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2836.412136][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.412206][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.628102][T32758] syzkaller1: entered allmulticast mode [ 2837.510533][ T302] vivid-008: disconnect [ 2837.528994][T32765] vivid-008: reconnect [ 2838.536020][ T322] netlink: 'syz.3.6259': attribute type 4 has an invalid length. [ 2838.567206][T25590] hid-sensor-hub 0003:1234:5678.0050: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 2839.105734][ T327] fido_id[327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2839.787844][ T342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2839.791238][ T342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2840.424228][T20644] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2840.574354][T20644] usb 4-1: Using ep0 maxpacket: 32 [ 2840.579165][T20644] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2840.583197][T20644] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2840.583261][T20644] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2840.583390][T20644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2840.601190][T20644] usb 4-1: config 0 descriptor?? [ 2840.971998][ T374] input: syz0 as /devices/virtual/input/input115 [ 2841.134866][T20644] corsair-cpro 0003:1B1C:0C10.0051: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 2841.506894][ T386] netlink: 'syz.4.6279': attribute type 1 has an invalid length. [ 2841.564386][ T386] bond3: entered promiscuous mode [ 2841.564775][ T386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2841.612975][T20644] corsair-cpro 0003:1B1C:0C10.0051: probe with driver corsair-cpro failed with error -71 [ 2841.640322][T20644] usb 4-1: USB disconnect, device number 23 [ 2841.700662][ T391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2841.703503][ T391] bond3: (slave bond4): making interface the new active one [ 2841.703522][ T391] bond4: entered promiscuous mode [ 2841.704326][ T391] bond3: (slave bond4): Enslaving as an active interface with an up link [ 2841.787706][ T394] syzkaller1: entered promiscuous mode [ 2841.787731][ T394] syzkaller1: entered allmulticast mode [ 2842.948363][ T422] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6293'. [ 2846.197990][ T460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6307'. [ 2846.198062][ T460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6307'. [ 2846.242277][ T458] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6305'. [ 2847.239876][ T470] netlink: 'syz.3.6309': attribute type 4 has an invalid length. [ 2847.483319][T25590] hid-sensor-hub 0003:1234:5678.0052: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 2848.393775][ T482] fido_id[482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2848.804506][T25590] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2848.967593][T25590] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2848.971517][T25590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2848.971563][T25590] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2849.025856][T25590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2849.025920][T25590] usb 2-1: SerialNumber: syz [ 2849.260903][T25590] usb 2-1: 0:2 : does not exist [ 2849.453231][T25590] usb 2-1: USB disconnect, device number 27 [ 2849.612027][ T479] udevd[479]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2850.600264][ T515] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6319'. [ 2851.301667][ T525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6324'. [ 2851.376916][ T525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6324'. [ 2852.169410][ T533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6327'. [ 2854.528630][ T31] audit: type=1804 audit(1791212474.889:2382): pid=551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6333" name="/newroot/1273/file1" dev="tmpfs" ino=6685 res=1 errno=0 [ 2855.399713][ T555] binder: 552:555 ioctl c0306201 800002c0 returned -14 [ 2855.414257][T20644] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2855.612398][T20644] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 2855.625512][T20644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2856.758600][T20644] usb 2-1: ATUSB: AT86RF231 version 1 [ 2856.966695][T20644] usb 2-1: Firmware version (0.0) predates our first public release. [ 2856.966759][T20644] usb 2-1: Please update to version 0.2 or newer [ 2857.026826][T25590] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2857.087393][T20644] usb 2-1: USB disconnect, device number 28 [ 2857.194271][T25590] usb 4-1: Using ep0 maxpacket: 32 [ 2857.201755][T25590] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2857.250201][T25590] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2857.250231][T25590] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2857.250252][T25590] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2857.250297][T25590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2857.250319][T25590] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2857.250345][T25590] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2857.250386][T25590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2857.274328][T25590] usb 4-1: config 0 descriptor?? [ 2857.670580][T25590] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2857.703773][T25590] usb 4-1: USB disconnect, device number 24 [ 2857.783067][T25590] usblp0: removed [ 2858.255795][T25590] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2858.405030][T25590] usb 4-1: Using ep0 maxpacket: 32 [ 2858.406938][T25590] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2858.411122][T25590] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2858.411191][T25590] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2858.411255][T25590] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2858.411384][T25590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2858.411446][T25590] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2858.411515][T25590] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2858.411617][T25590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.523162][T25590] usb 4-1: config 0 descriptor?? [ 2858.570107][ T590] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6343'. [ 2858.866872][T25590] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2859.679110][T20644] usb 4-1: USB disconnect, device number 25 [ 2859.742359][T20644] usblp0: removed [ 2860.094149][ T601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6346'. [ 2860.524473][ T600] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6346'. [ 2860.653962][ T604] binder: 602:604 ioctl c0306201 800002c0 returned -14 [ 2869.524707][ T671] binder: 669:671 ioctl c0306201 800002c0 returned -14 [ 2871.497742][ T706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6374'. [ 2876.344342][T20644] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2876.496856][T20644] usb 4-1: Using ep0 maxpacket: 8 [ 2876.503769][T20644] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2876.574124][T20644] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2876.574232][T20644] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2876.574289][T20644] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2876.574350][T20644] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2876.574394][T20644] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2876.574491][T20644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.011316][T20644] usb 4-1: usb_control_msg returned -32 [ 2877.011366][T20644] usbtmc 4-1:16.0: can't read capabilities [ 2877.368143][T28151] usb 4-1: USB disconnect, device number 26 [ 2877.375433][ T733] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 2881.969616][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6405'. [ 2881.969679][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6405'. [ 2882.392151][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'. [ 2882.448621][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6406'. [ 2882.481823][ T810] netlink: 'syz.0.6407': attribute type 1 has an invalid length. [ 2882.508567][ T807] macvtap1: entered promiscuous mode [ 2882.508597][ T807] gretap0: entered promiscuous mode [ 2882.508764][ T807] macvtap1: entered allmulticast mode [ 2882.508787][ T807] gretap0: entered allmulticast mode [ 2882.598027][ T810] bond2: entered promiscuous mode [ 2882.598399][ T810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2882.794519][T25590] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2882.826014][ T810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2882.826419][ T810] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2882.826440][ T810] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 2882.830257][ T810] bond2: (slave ip6gre1): making interface the new active one [ 2882.830276][ T810] ip6gre1: entered promiscuous mode [ 2882.832311][ T810] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 2882.994879][T25590] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 2883.001456][T25590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.001495][T25590] usb 2-1: Product: syz [ 2883.001554][T25590] usb 2-1: Manufacturer: syz [ 2883.001584][T25590] usb 2-1: SerialNumber: syz [ 2883.414935][T25590] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 2883.491555][T25590] usb 2-1: USB disconnect, device number 29 [ 2884.065539][T25590] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2884.215825][T25590] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 2884.235446][T25590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2884.235480][T25590] usb 2-1: Product: syz [ 2884.235506][T25590] usb 2-1: Manufacturer: syz [ 2884.235532][T25590] usb 2-1: SerialNumber: syz [ 2884.288536][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6415'. [ 2884.288578][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6415'. [ 2884.288603][ T838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6415'. [ 2884.589780][ T843] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6417'. [ 2884.753554][T25590] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 2885.414605][T25590] usb 2-1: USB disconnect, device number 30 [ 2888.102961][ T879] erspan1: entered promiscuous mode [ 2888.381143][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6433'. [ 2888.381208][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6433'. [ 2888.866410][ T892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6436'. [ 2889.045300][ T890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6437'. [ 2889.275361][ T901] gretap0: entered promiscuous mode [ 2889.275778][ T901] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 2890.464324][ T923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6446'. [ 2890.594597][ T922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6445'. [ 2890.681027][ T929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6448'. [ 2891.195848][ T936] syzkaller1: entered promiscuous mode [ 2891.195873][ T936] syzkaller1: entered allmulticast mode [ 2891.343125][ T944] loop2: detected capacity change from 0 to 7 [ 2891.373556][ T944] loop2: [ 2891.373587][ T944] loop2: partition table partially beyond EOD, truncated [ 2893.337347][ T977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2894.627440][ T947] ipvlan0: left allmulticast mode [ 2894.627497][ T947] veth0_vlan: left allmulticast mode [ 2894.663772][ T947] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2894.671448][ T947] ipip0: left promiscuous mode [ 2894.671466][ T947] ipip0: left allmulticast mode [ 2894.751999][ T947] bond2: left promiscuous mode [ 2894.752025][ T947] ip6gre1: left promiscuous mode [ 2895.002077][ T947] erspan1: left promiscuous mode [ 2895.227998][ T994] syzkaller1: entered promiscuous mode [ 2895.228056][ T994] syzkaller1: entered allmulticast mode [ 2897.817034][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.817164][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2902.256878][ T969] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2902.462458][ T969] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2902.537831][ T969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2902.537864][ T969] usb 4-1: config 0 has no interfaces? [ 2902.537897][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.541864][ T969] usb 4-1: config 0 descriptor?? [ 2902.827348][ T969] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 2902.830497][ T969] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2904.406488][T25622] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 2904.555717][T25622] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2904.558272][T25622] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2904.558316][T25622] usb 3-1: config 0 has no interface number 0 [ 2904.558442][T25622] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2904.558503][T25622] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2904.558598][T25622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2904.604307][T25622] usb 3-1: config 0 descriptor?? [ 2904.627593][ T1132] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 2904.650854][T25622] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2904.919337][ T969] usb 3-1: USB disconnect, device number 60 [ 2905.729027][ T969] usb 4-1: USB disconnect, device number 27 [ 2906.776777][ T31] audit: type=1326 audit(1791212527.119:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1177 comm="syz.4.6523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f0ec code=0x0 [ 2907.278804][ T1189] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 2907.488017][ T1194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2908.114213][ T969] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2908.268914][ T969] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2908.304635][ T969] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2908.304701][ T969] usb 2-1: Product: syz [ 2908.304735][ T969] usb 2-1: SerialNumber: syz [ 2908.368840][ T969] usb 2-1: config 0 descriptor?? [ 2908.615795][ T969] hso 2-1:0.0: Failed to find INT IN ep [ 2908.621602][ T1220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2908.835443][ T969] usb 2-1: USB disconnect, device number 31 [ 2909.286051][ T1241] nvme_fabrics: missing parameter 'transport=%s' [ 2909.286088][ T1241] nvme_fabrics: missing parameter 'nqn=%s' [ 2910.913954][ T1274] program syz.2.6567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2911.017211][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017247][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017274][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017300][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017326][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017351][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017376][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017402][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017435][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.017461][ T969] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x0 [ 2911.032211][ T1282] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6559'. [ 2911.040643][ T969] hid-generic 0000:3000000:0000.0054: hidraw0: HID v0.00 Device [sy] on syz0 [ 2911.065574][ T1282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6559'. [ 2911.601740][ T1284] fido_id[1284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2913.718434][ T1313] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2914.854743][ T965] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2915.005021][ T965] usb 3-1: Using ep0 maxpacket: 32 [ 2915.029046][ T965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2915.029173][ T965] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2915.135252][ T965] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 2915.135318][ T965] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 2915.135359][ T965] usb 3-1: config 14 has no interface number 0 [ 2915.135413][ T965] usb 3-1: config 14 has no interface number 1 [ 2915.135524][ T965] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2915.135582][ T965] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2915.135646][ T965] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2915.135709][ T965] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2915.135774][ T965] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2915.135818][ T965] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2915.135878][ T965] usb 3-1: config 14 interface 57 has no altsetting 0 [ 2915.135915][ T965] usb 3-1: config 14 interface 228 has no altsetting 0 [ 2915.142697][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2915.142759][ T965] usb 3-1: Product: syz [ 2915.142792][ T965] usb 3-1: Manufacturer: syz [ 2915.142826][ T965] usb 3-1: SerialNumber: syz [ 2915.659143][ T965] legousbtower 3-1:14.57: interrupt endpoints not found [ 2916.067039][ T965] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2916.086136][ T965] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2917.027155][ T965] usb 3-1: USB disconnect, device number 61 [ 2917.058150][ T965] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 2918.142716][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6592'. [ 2918.163517][ T1382] gretap0: entered promiscuous mode [ 2918.163757][ T1382] macvtap1: entered promiscuous mode [ 2918.163940][ T1382] macvtap1: entered allmulticast mode [ 2918.163956][ T1382] gretap0: entered allmulticast mode [ 2918.172516][ T1382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6592'. [ 2918.382105][ T1386] Set syz1 is full, maxelem 2076 reached [ 2918.904705][ T1403] program syz.0.6598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2919.304946][T25623] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2919.431275][ T1410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6603'. [ 2919.431324][ T1410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6603'. [ 2919.431337][ T1410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6603'. [ 2919.498546][T25623] usb 4-1: Using ep0 maxpacket: 32 [ 2919.555522][T25623] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2919.555632][T25623] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2919.558930][T25623] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 2919.558975][T25623] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 2919.559035][T25623] usb 4-1: config 14 has no interface number 0 [ 2919.559071][T25623] usb 4-1: config 14 has no interface number 1 [ 2919.559224][T25623] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2919.559269][T25623] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2919.559327][T25623] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2919.559392][T25623] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2919.559456][T25623] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2919.559520][T25623] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2919.559585][T25623] usb 4-1: config 14 interface 57 has no altsetting 0 [ 2919.559623][T25623] usb 4-1: config 14 interface 228 has no altsetting 0 [ 2919.565094][T25623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.565156][T25623] usb 4-1: Product: syz [ 2919.565191][T25623] usb 4-1: Manufacturer: syz [ 2919.565225][T25623] usb 4-1: SerialNumber: syz [ 2920.273894][T25623] legousbtower 4-1:14.57: interrupt endpoints not found [ 2920.459592][ T1417] netlink: 'syz.4.6606': attribute type 1 has an invalid length. [ 2920.697532][T25623] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2920.724363][T25623] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2920.729059][ T1417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2920.808694][ T1419] bond5: (slave erspan2): making interface the new active one [ 2920.810003][ T1419] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 2921.789755][T28151] usb 4-1: USB disconnect, device number 28 [ 2921.829139][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6611'. [ 2921.858435][T28151] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 2922.482708][ T1452] syzkaller1: entered promiscuous mode [ 2922.482748][ T1452] syzkaller1: entered allmulticast mode [ 2922.721570][ T1457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6620'. [ 2922.721629][ T1457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6620'. [ 2922.724150][ T1455] 0: reclassify loop, rule prio 0, protocol 03 [ 2923.525324][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6627'. [ 2923.916095][ T1487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6630'. [ 2923.940662][ T1483] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6630'. [ 2924.501075][ T1497] program syz.2.6634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2925.698055][ T31] audit: type=1800 audit(1791212546.049:2384): pid=1504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6636" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2926.602272][T28151] hid_parser_main: 22 callbacks suppressed [ 2926.602332][T28151] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 2926.684945][T28151] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2927.082121][ T1513] fido_id[1513]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2928.043877][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6645'. [ 2928.774327][ T1533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6647'. [ 2929.817759][ T1548] gretap0: entered promiscuous mode [ 2929.836229][ T1548] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 2931.056252][ T1558] program syz.2.6654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2931.149880][ T1561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6656'. [ 2931.201610][ T1561] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 2931.249566][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6657'. [ 2931.274477][ T1561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6656'. [ 2931.274546][ T1561] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 2931.610907][ T1569] erspan1: entered promiscuous mode [ 2932.912857][ T1590] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 2932.912921][ T1590] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 2934.694928][T28151] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2934.855398][T28151] usb 3-1: Using ep0 maxpacket: 32 [ 2934.862605][T28151] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2934.862740][T28151] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2934.866118][T28151] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 2934.866208][T28151] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 2934.866253][T28151] usb 3-1: config 14 has no interface number 0 [ 2934.866312][T28151] usb 3-1: config 14 has no interface number 1 [ 2934.866505][T28151] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2934.866573][T28151] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2934.866639][T28151] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2934.866704][T28151] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2934.866771][T28151] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2934.866837][T28151] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2934.866902][T28151] usb 3-1: config 14 interface 57 has no altsetting 0 [ 2934.866963][T28151] usb 3-1: config 14 interface 228 has no altsetting 0 [ 2935.075055][T28151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.075103][T28151] usb 3-1: Product: syz [ 2935.075115][T28151] usb 3-1: Manufacturer: syz [ 2935.075139][T28151] usb 3-1: SerialNumber: syz [ 2935.244708][ T1604] syzkaller1: entered promiscuous mode [ 2935.244732][ T1604] syzkaller1: entered allmulticast mode [ 2935.325081][ T1606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6673'. [ 2935.469633][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6674'. [ 2935.677339][T28151] legousbtower 3-1:14.57: interrupt endpoints not found [ 2935.709900][ T1613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6676'. [ 2935.790994][ T1615] program syz.4.6675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2936.112681][T28151] legousbtower 3-1:14.228: get version request failed: -32 [ 2936.113235][T28151] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -32 [ 2937.686473][T28151] usb 3-1: USB disconnect, device number 62 [ 2938.684847][ T31] audit: type=1326 audit(1791212559.029:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.689268][ T31] audit: type=1326 audit(1791212559.049:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.766481][ T31] audit: type=1326 audit(1791212559.119:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.766732][ T31] audit: type=1326 audit(1791212559.119:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.770403][ T31] audit: type=1326 audit(1791212559.119:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.770572][ T31] audit: type=1326 audit(1791212559.119:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.772745][ T31] audit: type=1326 audit(1791212559.119:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.773125][ T31] audit: type=1326 audit(1791212559.119:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.776699][ T31] audit: type=1326 audit(1791212559.139:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2938.779853][ T31] audit: type=1326 audit(1791212559.139:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1629 comm="syz.0.6682" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f850ec code=0x7ffc0000 [ 2939.669905][ T1640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6683'. [ 2939.741119][ T1640] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6683'. [ 2941.739633][ T1656] syzkaller1: entered promiscuous mode [ 2941.739727][ T1656] syzkaller1: entered allmulticast mode [ 2942.748487][ T1662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6689'. [ 2945.221575][ T1684] loop0: detected capacity change from 0 to 2049 [ 2945.301226][ T1684] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 2945.301289][ T1684] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 2945.301298][ T1684] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 2945.301391][ T1684] loop0: [ 2946.025915][ T1698] Set syz1 is full, maxelem 256 reached [ 2946.105674][ T1699] TC_ACT_REPEAT abuse ? [ 2947.652470][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6711'. [ 2947.730749][ T1729] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6711'. [ 2947.830954][ T1736] syzkaller1: entered promiscuous mode [ 2947.830981][ T1736] syzkaller1: entered allmulticast mode [ 2951.262771][ T1775] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6724'. [ 2952.449532][ T1783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6729'. [ 2952.490581][ T1787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2952.543743][ T1787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2952.613603][ T1783] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6729'. [ 2952.845340][ T1790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6732'. [ 2953.654437][ T965] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2953.808721][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 2953.861258][ T965] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 2953.879809][ T965] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2953.879868][ T965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2953.946292][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.946361][ T965] usb 4-1: Product: syz [ 2953.946404][ T965] usb 4-1: Manufacturer: syz [ 2953.946458][ T965] usb 4-1: SerialNumber: syz [ 2953.953734][ T965] usb 4-1: config 0 descriptor?? [ 2954.326659][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2954.346362][ T965] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input116 [ 2954.517989][ T965] imon:send_packet: packet tx failed (-71) [ 2954.554057][ T965] imon 4-1:0.0: panel buttons/knobs setup failed [ 2954.588870][ T1801] netlink: 'syz.1.6735': attribute type 39 has an invalid length. [ 2954.925726][ T965] rc_core: IR keymap rc-imon-pad not found [ 2954.925789][ T965] Registered IR keymap rc-empty [ 2954.925986][ T965] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2954.926050][ T965] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2954.927366][ T965] imon:send_packet: packet tx failed (-71) [ 2954.974315][ T965] imon 4-1:0.0: remote input dev register failed [ 2954.974491][ T965] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 2955.272175][ T965] imon 4-1:0.0: unable to initialize intf0, err 0 [ 2955.272201][ T965] imon:imon_probe: failed to initialize context! [ 2955.272214][ T965] imon 4-1:0.0: unable to register, err -19 [ 2955.314773][ T965] usb 4-1: USB disconnect, device number 29 [ 2955.569781][ T1809] Set syz1 is full, maxelem 6117 reached [ 2955.684271][ T965] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 2955.854393][ T1822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6744'. [ 2955.990260][ T965] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 2955.992784][ T965] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2955.992842][ T965] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 2955.992906][ T965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2956.153937][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2956.153969][ T965] usb 4-1: Product: syz [ 2956.153987][ T965] usb 4-1: Manufacturer: syz [ 2956.154004][ T965] usb 4-1: SerialNumber: syz [ 2956.162093][ T965] usb 4-1: config 0 descriptor?? [ 2956.183395][ T1792] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2956.430682][ T965] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input118 [ 2956.450097][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2956.497375][ T965] imon:send_packet: packet tx failed (-71) [ 2956.525331][ T965] imon 4-1:0.0: panel buttons/knobs setup failed [ 2956.648508][ T965] rc_core: IR keymap rc-imon-pad not found [ 2956.648530][ T965] Registered IR keymap rc-empty [ 2956.648605][ T965] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2956.648624][ T965] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2956.674773][ T965] imon:send_packet: packet tx failed (-71) [ 2956.726925][ T965] imon 4-1:0.0: remote input dev register failed [ 2956.727066][ T965] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 2956.778238][ T965] imon 4-1:0.0: unable to initialize intf0, err 0 [ 2956.778255][ T965] imon:imon_probe: failed to initialize context! [ 2956.778264][ T965] imon 4-1:0.0: unable to register, err -19 [ 2956.786897][ T965] usb 4-1: USB disconnect, device number 30 [ 2957.877398][T28151] input: syz0 as /devices/virtual/misc/uhid/0005:0003:0386.0056/input/input120 [ 2957.905626][T28151] hid-generic 0005:0003:0386.0056: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 2958.155791][ T1856] fido_id[1856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2959.246568][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.246699][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2961.828139][ T1892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6763'. [ 2961.852127][ T1892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6763'. [ 2964.118437][ T1928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'. [ 2965.636496][ T965] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 2965.846529][ T965] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2965.849215][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2965.849274][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2965.849339][ T965] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2965.849442][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2965.903217][ T965] usb 2-1: config 0 descriptor?? [ 2966.259927][ T1965] netlink: 'syz.2.6788': attribute type 1 has an invalid length. [ 2966.363466][ T1965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2966.423727][ T1965] bond0: (slave geneve2): making interface the new active one [ 2966.443628][ T1965] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 2966.466800][ T965] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2966.879500][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6790'. [ 2966.899621][ T1974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6791'. [ 2966.986085][ T1978] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 2967.082843][ T1972] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2967.329313][ T1983] syz.2.6795: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2967.329473][ T1983] CPU: 1 UID: 0 PID: 1983 Comm: syz.2.6795 Tainted: G L syzkaller #0 PREEMPT(full) [ 2967.329504][ T1983] Tainted: [L]=SOFTLOCKUP [ 2967.329514][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2967.329529][ T1983] Call Trace: [ 2967.329539][ T1983] [ 2967.329550][ T1983] dump_stack_lvl+0xe8/0x150 [ 2967.329601][ T1983] warn_alloc+0x24d/0x270 [ 2967.329632][ T1983] ? __pfx_warn_alloc+0x10/0x10 [ 2967.329663][ T1983] ? alloc_pages_mpol+0x256/0x390 [ 2967.329711][ T1983] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 2967.329763][ T1983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2967.329786][ T1983] ? rcu_is_watching+0x16/0xb0 [ 2967.329815][ T1983] ? hash_netiface_create+0x364/0xf80 [ 2967.329929][ T1983] ? rcu_is_watching+0x16/0xb0 [ 2967.329959][ T1983] ? hash_netiface_create+0x364/0xf80 [ 2967.329982][ T1983] __kvmalloc_node_noprof+0x5a1/0x820 [ 2967.330009][ T1983] ? hash_netiface_create+0x364/0xf80 [ 2967.330033][ T1983] ? __kmalloc_noprof+0x38c/0x720 [ 2967.330058][ T1983] ? hash_netiface_create+0x2fb/0xf80 [ 2967.330079][ T1983] ? hash_netiface_create+0x364/0xf80 [ 2967.330109][ T1983] hash_netiface_create+0x364/0xf80 [ 2967.330140][ T1983] ? ip_set_create+0x4ef/0x1a50 [ 2967.330187][ T1983] ? __pfx_hash_netiface_create+0x10/0x10 [ 2967.330214][ T1983] ip_set_create+0xae8/0x1a50 [ 2967.330238][ T1983] ? ip_set_create+0x4ef/0x1a50 [ 2967.330272][ T1983] ? __pfx_ip_set_create+0x10/0x10 [ 2967.330329][ T1983] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 2967.330391][ T1983] ? unwind_get_return_address+0x4d/0x90 [ 2967.330419][ T1983] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 2967.330459][ T1983] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2967.330526][ T1983] netlink_rcv_skb+0x226/0x4a0 [ 2967.330574][ T1983] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2967.330598][ T1983] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2967.330634][ T1983] ? bpf_lsm_capable+0x9/0x20 [ 2967.330657][ T1983] ? security_capable+0x7e/0x2c0 [ 2967.330727][ T1983] nfnetlink_rcv+0x2b9/0x28c0 [ 2967.330786][ T1983] ? __dev_queue_xmit+0x29b/0x3920 [ 2967.330862][ T1983] ? __local_bh_enable_ip+0xd6/0x140 [ 2967.330899][ T1983] ? lockdep_hardirqs_on+0x7b/0x110 [ 2967.330933][ T1983] ? __dev_queue_xmit+0x29b/0x3920 [ 2967.330954][ T1983] ? __local_bh_enable_ip+0xd6/0x140 [ 2967.330982][ T1983] ? __dev_queue_xmit+0x29b/0x3920 [ 2967.331002][ T1983] ? __dev_queue_xmit+0x1efb/0x3920 [ 2967.331023][ T1983] ? __do_fast_syscall_32+0x27a/0x6b0 [ 2967.331049][ T1983] ? __dev_queue_xmit+0x29b/0x3920 [ 2967.331080][ T1983] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2967.331120][ T1983] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2967.331150][ T1983] ? ref_tracker_free+0x689/0x830 [ 2967.331227][ T1983] ? __pfx_ref_tracker_free+0x10/0x10 [ 2967.331265][ T1983] ? __skb_clone+0x449/0x6c0 [ 2967.331348][ T1983] ? skb_clone+0x246/0x3a0 [ 2967.331372][ T1983] ? __netlink_deliver_tap+0x811/0x860 [ 2967.331417][ T1983] ? netlink_deliver_tap+0x2e/0x1b0 [ 2967.331447][ T1983] ? netlink_deliver_tap+0x2e/0x1b0 [ 2967.331470][ T1983] ? netlink_deliver_tap+0x2e/0x1b0 [ 2967.331499][ T1983] netlink_unicast+0x7bd/0x940 [ 2967.331550][ T1983] netlink_sendmsg+0x813/0xb40 [ 2967.331584][ T1983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2967.331616][ T1983] ? apparmor_socket_sendmsg+0x98/0x360 [ 2967.331670][ T1983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2967.331701][ T1983] sock_sendmsg_nosec+0x13a/0x180 [ 2967.331731][ T1983] ____sys_sendmsg+0x54e/0x850 [ 2967.331783][ T1983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2967.331820][ T1983] ? __pfx_futex_wake_mark+0x10/0x10 [ 2967.331858][ T1983] ___sys_sendmsg+0x2a5/0x360 [ 2967.331888][ T1983] ? __lock_acquire+0x747/0x2de0 [ 2967.331915][ T1983] ? __pfx____sys_sendmsg+0x10/0x10 [ 2967.331969][ T1983] ? futex_wait+0x2a2/0x390 [ 2967.332018][ T1983] ? __fget_files+0x2a/0x420 [ 2967.332052][ T1983] ? __fget_files+0x3a2/0x420 [ 2967.332094][ T1983] __sys_sendmsg+0x177/0x240 [ 2967.332129][ T1983] ? __pfx___sys_sendmsg+0x10/0x10 [ 2967.332181][ T1983] __do_fast_syscall_32+0x27a/0x6b0 [ 2967.332203][ T1983] ? do_fast_syscall_32+0x33/0x70 [ 2967.332236][ T1983] ? irqentry_exit+0x10f/0x920 [ 2967.332265][ T1983] ? trace_irq_disable+0x3b/0x140 [ 2967.332293][ T1983] do_fast_syscall_32+0x33/0x70 [ 2967.332327][ T1983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2967.332357][ T1983] RIP: 0023:0xf6fdf0ec [ 2967.332382][ T1983] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2967.332403][ T1983] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2967.332426][ T1983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2967.332441][ T1983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2967.332466][ T1983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2967.332478][ T1983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2967.332491][ T1983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2967.332519][ T1983] [ 2967.633548][ T1983] Mem-Info: [ 2967.633595][ T1983] active_anon:7197 inactive_anon:3173 isolated_anon:0 [ 2967.633595][ T1983] active_file:1126 inactive_file:55162 isolated_file:0 [ 2967.633595][ T1983] unevictable:0 dirty:269 writeback:0 [ 2967.633595][ T1983] slab_reclaimable:8492 slab_unreclaimable:132809 [ 2967.633595][ T1983] mapped:29923 shmem:5694 pagetables:1732 [ 2967.633595][ T1983] sec_pagetables:0 bounce:0 [ 2967.633595][ T1983] kernel_misc_reclaimable:0 [ 2967.633595][ T1983] free:1254746 free_pcp:9291 free_cma:0 [ 2967.633742][ T1983] Node 0 active_anon:28788kB inactive_anon:12692kB active_file:4504kB inactive_file:220380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119616kB dirty:1076kB writeback:0kB shmem:22776kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12636kB pagetables:6760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2967.633916][ T1983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2967.634069][ T1983] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2967.634236][ T1983] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2967.634362][ T1983] Node 0 DMA32 free:1071708kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28788kB inactive_anon:12692kB active_file:4504kB inactive_file:220380kB unevictable:0kB writepending:1076kB zspages:1448kB present:3129332kB managed:2546828kB mlocked:0kB bounce:0kB free_pcp:29100kB local_pcp:19924kB free_cma:0kB [ 2967.634543][ T1983] lowmem_reserve[]: 0 0 0 0 0 [ 2967.634642][ T1983] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2967.634784][ T1983] lowmem_reserve[]: 0 0 0 0 0 [ 2967.634874][ T1983] Node 1 Normal free:3931920kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:8064kB local_pcp:420kB free_cma:0kB [ 2967.635023][ T1983] lowmem_reserve[]: 0 0 0 0 0 [ 2967.635119][ T1983] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 2967.635567][ T1983] Node 0 DMA32: 2838*4kB (UME) 3590*8kB (UME) 2234*16kB (UME) 1304*32kB (UME) 664*64kB (UME) 324*128kB (UME) 187*256kB (UME) 132*512kB (ME) 57*1024kB (UME) 8*2048kB (UM) 166*4096kB (UM) = 1071656kB [ 2967.636039][ T1983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2967.636307][ T1983] Node 1 Normal: 4*4kB (UM) 6*8kB (M) 3*16kB (M) 3*32kB (UM) 9*64kB (UM) 4*128kB (UM) 8*256kB (UM) 3*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3931920kB [ 2967.636808][ T1983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2967.636856][ T1983] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 2967.636903][ T1983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2967.636951][ T1983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2967.637011][ T1983] 62033 total pagecache pages [ 2967.637032][ T1983] 57 pages in swap cache [ 2967.637065][ T1983] Free swap = 121340kB [ 2967.637093][ T1983] Total swap = 124996kB [ 2967.637116][ T1983] 2097051 pages RAM [ 2967.637144][ T1983] 0 pages HighMem/MovableOnly [ 2967.637165][ T1983] 428728 pages reserved [ 2967.637186][ T1983] 0 pages cma reserved [ 2967.903247][ T967] usb 2-1: USB disconnect, device number 32 [ 2968.555675][ T2004] lo: left allmulticast mode [ 2968.933217][ T2013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2968.936828][ T2013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2972.930907][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 2972.930988][ T31] audit: type=1326 audit(1791212593.289:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.1.6813" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf701f0ec code=0x0 [ 2972.976844][ T31] audit: type=1326 audit(1791212593.339:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.976947][ T31] audit: type=1326 audit(1791212593.339:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.977042][ T31] audit: type=1326 audit(1791212593.339:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.977136][ T31] audit: type=1326 audit(1791212593.339:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.977261][ T31] audit: type=1326 audit(1791212593.339:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.983460][ T31] audit: type=1326 audit(1791212593.339:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.983562][ T31] audit: type=1326 audit(1791212593.339:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2972.983656][ T31] audit: type=1326 audit(1791212593.339:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2973.073969][ T31] audit: type=1326 audit(1791212593.409:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2045 comm="syz.2.6814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 2974.686727][ T2066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6819'. [ 2974.695874][ T2066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6819'. [ 2975.214764][ T2074] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 2975.254842][ T2074] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 2975.274854][ T2074] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 2975.672473][ T2088] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6826'. [ 2976.601164][ T2102] input: syz0 as /devices/virtual/input/input121 [ 2978.189285][ T2111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2978.412941][ T2113] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6833'. [ 2978.741838][ T2122] socket: no more sockets [ 2979.370261][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6837'. [ 2979.499994][ T2133] program syz.3.6838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2979.555934][ T2134] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6839'. [ 2980.088000][ T2136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6840'. [ 2980.199168][ T2137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6840'. [ 2984.078852][ T2163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6848'. [ 2984.451773][ T2171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6845'. [ 2985.714650][ T2182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6851'. [ 2987.979820][ T2192] program syz.1.6854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2989.555786][ T2203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6857'. [ 2989.813182][ T2209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6857'. [ 2990.399031][ T2220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6858'. [ 2992.133258][ T2230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6863'. [ 2992.153467][ T2230] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6863'. [ 2993.480488][ T2240] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6865'. [ 2994.625602][ T2248] program syz.4.6866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2996.838012][ T2261] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6870'. [ 2999.097575][ T2271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6873'. [ 2999.097605][ T2271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6873'. [ 3000.814611][T24545] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3000.814786][ T720] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3000.814877][ T720] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3000.815010][ T720] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3001.223844][ T2297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6881'. [ 3001.228337][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 3001.228384][ T31] audit: type=1800 audit(1791212621.589:2445): pid=2299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6880" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3001.273558][ T2297] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6881'. [ 3001.393152][ T2295] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6879'. [ 3001.592648][ T2303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6882'. [ 3003.237406][ T2316] program syz.2.6885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3006.562059][ T2342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6891'. [ 3006.562576][ T2344] syzkaller0: entered promiscuous mode [ 3006.562592][ T2344] syzkaller0: entered allmulticast mode [ 3007.346564][ T2357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6895'. [ 3008.297747][ T2372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6899'. [ 3011.135564][ T2383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6900'. [ 3011.189833][ T2383] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6900'. [ 3013.006714][ T2398] program syz.4.6906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3014.149982][ T2405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6908'. [ 3014.338938][ T31] audit: type=1326 audit(1791212634.699:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.340474][ T31] audit: type=1326 audit(1791212634.699:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.340893][ T31] audit: type=1326 audit(1791212634.699:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.341482][ T31] audit: type=1326 audit(1791212634.699:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.344143][ T31] audit: type=1326 audit(1791212634.699:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.403554][ T31] audit: type=1326 audit(1791212634.769:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.403608][ T31] audit: type=1326 audit(1791212634.769:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.403660][ T31] audit: type=1326 audit(1791212634.769:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.405013][ T31] audit: type=1326 audit(1791212634.769:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.405062][ T31] audit: type=1326 audit(1791212634.769:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2406 comm="syz.1.6909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 3014.684528][ T2410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6910'. [ 3015.342458][ T2426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6911'. [ 3016.875376][ T2440] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6917'. [ 3019.807035][ T2451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3019.808156][ T2451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3020.067758][ T2464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6922'. [ 3020.687846][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.687976][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.799040][ T2472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6923'. [ 3020.830015][ T2472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6923'. [ 3021.652955][ T2487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6927'. [ 3022.499881][ T2498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3022.500277][ T2498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3023.896299][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6934'. [ 3024.786953][ T2520] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6935'. [ 3024.897547][ T2523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6935'. [ 3025.125729][ T2520] bond7: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 3025.130013][ T2523] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 3025.544253][T25622] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 3025.696270][T25622] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3025.725627][T25622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3025.725691][T25622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3025.725731][T25622] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3025.725803][T25622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.835185][T25622] usb 4-1: config 0 descriptor?? [ 3026.337076][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337166][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337295][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337366][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337430][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337495][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337558][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337622][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337698][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.337763][T25622] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 3026.478536][T25622] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3026.618271][ T965] usb 4-1: USB disconnect, device number 31 [ 3026.852637][ T2540] fido_id[2540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3027.047903][ T2553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6942'. [ 3027.557819][ T2560] syzkaller0: entered promiscuous mode [ 3027.557845][ T2560] syzkaller0: entered allmulticast mode [ 3027.562206][ T2563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6944'. [ 3030.433042][ T2613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6955'. [ 3030.732112][ T965] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3030.964247][ T965] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 3030.966992][ T965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3030.967058][ T965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3030.975215][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3030.975280][ T965] usb 2-1: Product: syz [ 3030.975319][ T965] usb 2-1: Manufacturer: syz [ 3031.068229][ T965] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 3031.193734][ T2626] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6959'. [ 3032.751496][ T2646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6965'. [ 3032.806999][ T2648] syzkaller1: entered promiscuous mode [ 3032.807023][ T2648] syzkaller1: entered allmulticast mode [ 3033.469576][ T965] usb 2-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0 [ 3033.509926][ T965] usb 2-1: USB disconnect, device number 33 [ 3033.548001][ T965] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0 [ 3033.549843][ T965] mos7840 2-1:1.0: device disconnected [ 3034.540686][ T2668] loop0: detected capacity change from 0 to 2049 [ 3034.623000][ T2668] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 3034.623049][ T2668] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 3034.623081][ T2668] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 3034.623213][ T2668] loop0: [ 3038.082077][ T2709] Set syz1 is full, maxelem 256 reached [ 3039.269845][ T2723] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6983'. [ 3040.451463][ T2744] batman_adv: batadv0: Adding interface: syzkaller0 [ 3040.451519][ T2744] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3040.451755][ T2744] batman_adv: batadv0: Interface activated: syzkaller0 [ 3040.502090][ T2743] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 3040.664892][ T2743] batman_adv: batadv0: Removing interface: syzkaller0 [ 3040.832138][ T2754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6992'. [ 3042.307883][ T2768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7004'. [ 3047.069310][ T2801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7005'. [ 3048.346123][ T2816] syzkaller0: entered promiscuous mode [ 3048.346163][ T2816] syzkaller0: entered allmulticast mode [ 3049.024605][ T2843] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7013'. [ 3049.217719][ T2845] TC_ACT_REPEAT abuse ? [ 3050.307971][ T2861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7019'. [ 3050.394976][ T965] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3050.565485][ T965] usb 4-1: Using ep0 maxpacket: 8 [ 3050.566538][ T965] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 3050.570589][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.570621][ T965] usb 4-1: Product: syz [ 3050.570632][ T965] usb 4-1: Manufacturer: syz [ 3050.570656][ T965] usb 4-1: SerialNumber: syz [ 3050.646302][ T965] usb 4-1: config 0 descriptor?? [ 3050.903379][ T965] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3050.919824][ T965] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 3050.954372][ T965] usb 4-1: USB disconnect, device number 32 [ 3052.511405][ T2896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3053.782442][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7032'. [ 3054.096293][ T2919] syzkaller0: entered promiscuous mode [ 3054.096333][ T2919] syzkaller0: entered allmulticast mode [ 3054.155573][ T2925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7036'. [ 3054.464513][ T965] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3054.624170][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 3054.625483][ T965] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 3054.649868][ T2933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7039'. [ 3054.652116][ T2933] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7039'. [ 3054.667487][ T965] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3054.667526][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3054.751355][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.751419][ T965] usb 3-1: Product: syz [ 3054.751454][ T965] usb 3-1: Manufacturer: syz [ 3054.751488][ T965] usb 3-1: SerialNumber: syz [ 3054.781574][ T965] usb 3-1: config 0 descriptor?? [ 3055.148086][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3055.199170][ T965] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input122 [ 3055.300473][ T965] imon:send_packet: packet tx failed (-71) [ 3055.314264][ T965] imon 3-1:0.0: panel buttons/knobs setup failed [ 3055.544088][ T965] rc_core: IR keymap rc-imon-pad not found [ 3055.544146][ T965] Registered IR keymap rc-empty [ 3055.544310][ T965] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3055.544349][ T965] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3055.544833][ T965] imon:send_packet: packet tx failed (-71) [ 3055.581589][ T965] imon 3-1:0.0: remote input dev register failed [ 3055.581746][ T965] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 3055.683277][ T965] imon 3-1:0.0: unable to initialize intf0, err 0 [ 3055.683302][ T965] imon:imon_probe: failed to initialize context! [ 3055.683316][ T965] imon 3-1:0.0: unable to register, err -19 [ 3055.688829][ T965] usb 3-1: USB disconnect, device number 63 [ 3056.044439][ T965] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 3056.215134][ T965] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 3056.217795][ T965] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3056.217853][ T965] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 3056.217921][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3056.344782][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3056.344845][ T965] usb 3-1: Product: syz [ 3056.344881][ T965] usb 3-1: Manufacturer: syz [ 3056.344914][ T965] usb 3-1: SerialNumber: syz [ 3056.380842][ T965] usb 3-1: config 0 descriptor?? [ 3056.403516][ T2930] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3056.747181][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3056.771173][ T965] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input124 [ 3056.973650][ T2959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7047'. [ 3057.376120][ T965] rc_core: IR keymap rc-imon-pad not found [ 3057.376177][ T965] Registered IR keymap rc-empty [ 3057.376342][ T965] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3057.376380][ T965] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3057.454290][ T965] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 3057.455840][ T965] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input125 [ 3057.479465][ T965] imon 3-1:0.0: iMON device (15c2:0045, intf0) on usb<3:64> initialized [ 3057.767759][ T965] usb 3-1: USB disconnect, device number 64 [ 3058.835281][ T2975] program syz.4.7050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3058.842758][ T2977] vivid-007: disconnect [ 3059.238041][ T2985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7055'. [ 3059.900426][ T2974] vivid-007: reconnect [ 3060.330011][T25622] input: syz0 as /devices/virtual/misc/uhid/0005:0003:0386.0059/input/input126 [ 3060.562575][T25622] hid-generic 0005:0003:0386.0059: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 3061.148318][ T3001] fido_id[3001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3061.365409][ T3003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7060'. [ 3062.904902][ T3011] netlink: 'syz.4.7062': attribute type 39 has an invalid length. [ 3063.712788][ T3017] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7063'. [ 3064.921068][ T3030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7068'. [ 3065.515536][ T3039] netlink: 'syz.0.7071': attribute type 4 has an invalid length. [ 3065.941670][ T3040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7070'. [ 3065.969319][ T3038] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7070'. [ 3066.640933][ T3048] program syz.0.7073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3067.660578][ T3052] netlink: 'syz.0.7076': attribute type 39 has an invalid length. [ 3068.138372][ T3059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7077'. [ 3068.357365][T25622] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3068.534244][T25622] usb 2-1: Using ep0 maxpacket: 32 [ 3068.539560][T25622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3068.539683][T25622] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3068.602081][T25622] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 3068.602147][T25622] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 3068.602186][T25622] usb 2-1: config 14 has no interface number 0 [ 3068.602240][T25622] usb 2-1: config 14 has no interface number 1 [ 3068.602370][T25622] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 3068.602413][T25622] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 3068.602472][T25622] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 3068.602542][T25622] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 3068.602604][T25622] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 3068.602667][T25622] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3068.602714][T25622] usb 2-1: config 14 interface 57 has no altsetting 0 [ 3068.602767][T25622] usb 2-1: config 14 interface 228 has no altsetting 0 [ 3068.781197][T25622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3068.781230][T25622] usb 2-1: Product: syz [ 3068.781253][T25622] usb 2-1: Manufacturer: syz [ 3068.781264][T25622] usb 2-1: SerialNumber: syz [ 3069.289864][T25622] legousbtower 2-1:14.57: interrupt endpoints not found [ 3069.691651][T25622] legousbtower 2-1:14.228: get version request failed: -121 [ 3069.692016][T25622] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 3070.627473][ T3082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7083'. [ 3070.999620][T25623] usb 2-1: USB disconnect, device number 34 [ 3072.138004][ T3090] program syz.0.7086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3072.216259][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3072.276634][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3072.280803][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3072.323984][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3072.331326][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3073.464252][ T965] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3073.641080][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 3073.676876][ T965] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 3073.774072][ T965] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3073.774111][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3073.898791][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.898852][ T965] usb 3-1: Product: syz [ 3073.898915][ T965] usb 3-1: Manufacturer: syz [ 3073.898950][ T965] usb 3-1: SerialNumber: syz [ 3073.932123][ T965] usb 3-1: config 0 descriptor?? [ 3074.278718][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3074.321111][ T965] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input127 [ 3074.379802][ T3110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7092'. [ 3074.448295][ T965] imon:send_packet: packet tx failed (-71) [ 3074.479752][ T3110] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7092'. [ 3074.484510][ T965] imon 3-1:0.0: panel buttons/knobs setup failed [ 3074.975148][ T965] rc_core: IR keymap rc-imon-pad not found [ 3074.975188][ T965] Registered IR keymap rc-empty [ 3074.975354][ T965] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3074.975410][ T965] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3074.975877][ T965] imon:send_packet: packet tx failed (-71) [ 3075.034100][ T965] imon 3-1:0.0: remote input dev register failed [ 3075.034372][ T965] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 3075.241716][ T965] imon 3-1:0.0: unable to initialize intf0, err 0 [ 3075.241773][ T965] imon:imon_probe: failed to initialize context! [ 3075.241806][ T965] imon 3-1:0.0: unable to register, err -19 [ 3075.274127][ T965] usb 3-1: USB disconnect, device number 65 [ 3075.594355][ T965] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 3075.759325][ T965] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 3075.775153][ T965] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3075.775220][ T965] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 3075.775283][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3075.835530][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3075.835588][ T965] usb 3-1: Product: syz [ 3075.835624][ T965] usb 3-1: Manufacturer: syz [ 3075.835658][ T965] usb 3-1: SerialNumber: syz [ 3075.842571][ T965] usb 3-1: config 0 descriptor?? [ 3075.851417][ T3102] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3075.945177][ T3125] input: syz0 as /devices/virtual/input/input129 [ 3076.278464][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3076.292947][ T965] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input130 [ 3076.334714][ T965] imon:send_packet: packet tx failed (-71) [ 3076.356623][ T965] imon 3-1:0.0: panel buttons/knobs setup failed [ 3076.494476][ T965] rc_core: IR keymap rc-imon-pad not found [ 3076.494529][ T965] Registered IR keymap rc-empty [ 3076.494705][ T965] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3076.494742][ T965] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3076.495269][ T965] imon:send_packet: packet tx failed (-71) [ 3076.554255][ T965] imon 3-1:0.0: remote input dev register failed [ 3076.554672][ T965] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 3076.616388][ T3140] netlink: 'syz.1.7101': attribute type 11 has an invalid length. [ 3076.632341][ T965] imon 3-1:0.0: unable to initialize intf0, err 0 [ 3076.632362][ T965] imon:imon_probe: failed to initialize context! [ 3076.632375][ T965] imon 3-1:0.0: unable to register, err -19 [ 3076.640364][ T965] usb 3-1: USB disconnect, device number 66 [ 3076.860989][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 3076.861009][ T31] audit: type=1326 audit(1791212697.219:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.861691][ T31] audit: type=1326 audit(1791212697.219:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.861921][ T31] audit: type=1326 audit(1791212697.219:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.862349][ T31] audit: type=1326 audit(1791212697.219:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.862566][ T31] audit: type=1326 audit(1791212697.219:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.862751][ T31] audit: type=1326 audit(1791212697.219:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.863060][ T31] audit: type=1326 audit(1791212697.219:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.863252][ T31] audit: type=1326 audit(1791212697.219:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.863437][ T31] audit: type=1326 audit(1791212697.219:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3076.863812][ T31] audit: type=1326 audit(1791212697.219:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3146 comm="syz.4.7106" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 3077.600925][ T3168] syzkaller0: entered promiscuous mode [ 3077.600966][ T3168] syzkaller0: entered allmulticast mode [ 3077.669929][ T3171] netlink: 'syz.3.7113': attribute type 1 has an invalid length. [ 3077.721320][ T3171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7113'. [ 3077.725705][ T3171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3077.730127][ T3174] netlink: 'syz.2.7114': attribute type 11 has an invalid length. [ 3077.779338][ T3171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3077.783891][ T3171] bond3: (slave geneve3): making interface the new active one [ 3077.784906][ T3171] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 3077.851483][ T720] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 3077.851625][ T720] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 3077.851659][ T720] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 3079.496209][ T3204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3079.497057][ T3204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3080.168727][ T3220] netlink: 'syz.1.7127': attribute type 1 has an invalid length. [ 3080.329980][ T3222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7127'. [ 3080.438405][ T3227] bond1: (slave geneve2): making interface the new active one [ 3080.438828][ T3227] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 3080.477139][ T3222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3080.480241][T27334] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 3080.480283][T27334] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 3080.501563][ T720] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 3080.591577][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7128'. [ 3081.091384][ T3236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3081.112613][ T3236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.133947][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.134097][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.584472][ T967] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3082.737625][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 3082.739903][ T967] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3082.765010][ T967] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3082.765049][ T967] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3082.767733][ T967] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 3082.767797][ T967] usb 4-1: Product: syz [ 3082.767834][ T967] usb 4-1: Manufacturer: syz [ 3082.843235][ T967] hub 4-1:4.0: USB hub found [ 3082.890799][ T3264] syzkaller0: entered promiscuous mode [ 3082.890816][ T3264] syzkaller0: entered allmulticast mode [ 3082.919475][ T3266] input: syz0 as /devices/virtual/input/input132 [ 3083.088128][ T967] hub 4-1:4.0: 2 ports detected [ 3083.396669][ T967] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 3083.466857][ T967] usb 4-1: USB disconnect, device number 33 [ 3084.734618][ T965] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 3084.911669][ T965] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 3084.914857][ T965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3084.914953][ T965] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 3084.916277][ T965] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3084.923883][ T965] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3084.976888][ T965] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3084.976953][ T965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3084.977045][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3085.055773][ T965] usb 4-1: config 0 descriptor?? [ 3085.544339][ T967] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3085.609066][ T965] hid_parser_main: 5 callbacks suppressed [ 3085.609090][ T965] logitech 0003:046D:C298.005A: unknown main item tag 0x2 [ 3085.609119][ T965] logitech 0003:046D:C298.005A: unknown main item tag 0x0 [ 3085.609145][ T965] logitech 0003:046D:C298.005A: unknown main item tag 0x0 [ 3085.613241][ T965] input: HID 046d:c298 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C298.005A/input/input133 [ 3085.684758][ T965] logitech 0003:046D:C298.005A: offset (39) exceeds report_count (19) [ 3085.684887][ T965] logitech 0003:046D:C298.005A: offset (25) exceeds report_count (19) [ 3085.761129][ T967] usb 3-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice= 1.00 [ 3085.764018][ T967] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 3085.764058][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3085.791741][ T3301] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 3085.816622][ T967] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 3086.325445][ T967] gspca_sn9c20x: Write register 1000 failed -110 [ 3086.325586][ T967] gspca_sn9c20x: Device initialization failed [ 3086.325794][ T967] gspca_sn9c20x 3-1:1.0: probe with driver gspca_sn9c20x failed with error -110 [ 3086.395813][ T965] logitech 0003:046D:C298.005A: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 3086.396638][ T965] logitech 0003:046D:C298.005A: implement() called with too large value 245 (n: 0)! (kworker/0:2) [ 3086.399681][ T965] logitech 0003:046D:C298.005A: implement() called with too large value 248 (n: 0)! (kworker/0:2) [ 3086.399707][ T965] logitech 0003:046D:C298.005A: implement() called with too large value 3 (n: 0)! (kworker/0:2) [ 3086.399763][ T965] logitech 0003:046D:C298.005A: implement() called with too large value 129 (n: 0)! (kworker/0:2) [ 3086.399783][ T965] logitech 0003:046D:C298.005A: implement() called with too large value 11 (n: 0)! (kworker/0:2) [ 3086.399806][ T965] logitech 0003:046D:C298.005A: Force feedback support for Logitech Gaming Wheels [ 3086.498506][ T965] usb 4-1: USB disconnect, device number 34 [ 3086.814593][ T3312] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 3086.814659][ T3312] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 3086.887340][ T3309] fido_id[3309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 3087.103119][ T3315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7157'. [ 3089.070438][T25622] usb 3-1: USB disconnect, device number 67 [ 3091.774441][T28151] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 3091.927276][T28151] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3091.964793][T28151] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3091.964845][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3091.964872][T28151] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3091.964898][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3091.964924][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3091.994975][T28151] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3091.995103][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3091.995170][T28151] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3091.995237][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3091.995307][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3092.148668][T28151] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3092.148734][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3092.148783][T28151] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3092.148816][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3092.148848][T28151] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3092.264528][T28151] usb 2-1: string descriptor 0 read error: -22 [ 3092.264865][T28151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.342925][T28151] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3092.430613][ T3362] syzkaller0: entered promiscuous mode [ 3092.430654][ T3362] syzkaller0: entered allmulticast mode [ 3093.982830][ T3388] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 3093.982863][ T3388] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 3095.032372][T25622] usb 2-1: USB disconnect, device number 35 [ 3095.254312][T28151] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3095.405276][T28151] usb 3-1: Using ep0 maxpacket: 32 [ 3095.431192][T28151] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3095.431323][T28151] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3095.466154][T28151] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 3095.466196][T28151] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 3095.466232][T28151] usb 3-1: config 14 has no interface number 0 [ 3095.466264][T28151] usb 3-1: config 14 has no interface number 1 [ 3095.466386][T28151] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 3095.466426][T28151] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 3095.466482][T28151] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 3095.466525][T28151] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 3095.466584][T28151] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 3095.466625][T28151] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3095.466680][T28151] usb 3-1: config 14 interface 57 has no altsetting 0 [ 3095.466713][T28151] usb 3-1: config 14 interface 228 has no altsetting 0 [ 3095.483851][T28151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3095.485075][T28151] usb 3-1: Product: syz [ 3095.485134][T28151] usb 3-1: Manufacturer: syz [ 3095.485172][T28151] usb 3-1: SerialNumber: syz [ 3095.785753][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7184'. [ 3095.785942][ T3408] netlink: 87 bytes leftover after parsing attributes in process `syz.1.7184'. [ 3095.808688][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7184'. [ 3095.808752][ T3408] netlink: 87 bytes leftover after parsing attributes in process `syz.1.7184'. [ 3096.187239][T28151] legousbtower 3-1:14.57: interrupt endpoints not found [ 3096.337196][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7185'. [ 3096.592041][T28151] legousbtower 3-1:14.228: get version request failed: -121 [ 3096.592504][T28151] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121 [ 3097.787948][ T3425] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 3097.838544][T18720] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3097.891908][ T3423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3097.935592][ T720] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3098.014944][ T967] usb 3-1: USB disconnect, device number 68 [ 3100.584212][ T3453] kvm: pic: level sensitive irq not supported [ 3101.025061][T25622] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3101.196678][T25622] usb 4-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice= 1.00 [ 3101.199958][T25622] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 3101.200051][T25622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.249458][ T3459] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 3101.280886][T25622] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 3101.784805][T25622] gspca_sn9c20x: Write register 1000 failed -110 [ 3101.784837][T25622] gspca_sn9c20x: Device initialization failed [ 3101.784945][T25622] gspca_sn9c20x 4-1:1.0: probe with driver gspca_sn9c20x failed with error -110 [ 3104.109304][T25622] usb 4-1: USB disconnect, device number 35 [ 3104.138058][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7209'. [ 3104.431638][ T3506] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 3104.431689][ T3506] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 3107.071444][ T3535] loop0: detected capacity change from 0 to 3904 [ 3107.202232][ T3535] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 3107.202299][ T3535] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 3107.202332][ T3535] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 3107.202465][ T3535] loop0: [ 3108.424262][ T3549] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 3108.424330][ T3549] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 3108.997357][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7227'. [ 3109.047698][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7227'. [ 3109.074122][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7227'. [ 3109.075408][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7227'. [ 3109.076123][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7227'. [ 3109.327612][ T3568] netlink: zone id is out of range [ 3109.327671][ T3568] netlink: zone id is out of range [ 3109.349328][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3109.351505][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3110.431658][ T3578] loop0: detected capacity change from 0 to 3904 [ 3110.587551][ T3578] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 3110.587610][ T3578] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 3110.587645][ T3578] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 3110.590692][ T3578] loop0: [ 3112.414106][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 3112.426738][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 3112.470777][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 3112.478737][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 3112.530192][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 3112.627486][ T3599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7238'. [ 3113.236059][ T3604] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7240'. [ 3113.299065][ T3611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3113.301353][ T3611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3116.873048][ T3645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7252'. [ 3118.044752][T28151] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 3118.044754][ T967] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3118.171084][ T3658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7257'. [ 3118.204608][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 3118.207482][ T967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3118.207543][ T967] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3118.225613][ T967] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 3118.225679][ T967] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 3118.225737][ T967] usb 3-1: config 14 has no interface number 0 [ 3118.225777][ T967] usb 3-1: config 14 has no interface number 1 [ 3118.225931][ T967] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 3118.225991][ T967] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 3118.226066][ T967] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 3118.226133][ T967] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 3118.226215][ T967] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 3118.226297][ T967] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 3118.226387][ T967] usb 3-1: config 14 interface 57 has no altsetting 0 [ 3118.226438][ T967] usb 3-1: config 14 interface 228 has no altsetting 0 [ 3118.361549][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.364096][ T967] usb 3-1: Product: syz [ 3118.364148][ T967] usb 3-1: Manufacturer: syz [ 3118.364189][ T967] usb 3-1: SerialNumber: syz [ 3118.372964][T28151] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3118.464256][T28151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.464321][T28151] usb 2-1: Product: syz [ 3118.464357][T28151] usb 2-1: Manufacturer: syz [ 3118.464391][T28151] usb 2-1: SerialNumber: syz [ 3118.519663][T28151] usb 2-1: config 0 descriptor?? [ 3118.747441][T28151] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3118.889967][ T967] legousbtower 3-1:14.57: interrupt endpoints not found [ 3118.942480][ T3662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3118.942943][ T3662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3118.996159][ T3664] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 3118.996190][ T3664] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 3119.319016][ T967] legousbtower 3-1:14.228: get version request failed: -121 [ 3119.319543][ T967] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121 [ 3119.377324][ T3669] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 3119.377354][ T3669] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 3119.449578][ T3671] netlink: 'syz.3.7263': attribute type 1 has an invalid length. [ 3119.475092][ T3671] bond4: entered promiscuous mode [ 3119.475401][ T3671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3119.529043][ T3671] bond4: (slave bridge24): making interface the new active one [ 3119.529069][ T3671] bridge24: entered promiscuous mode [ 3119.530405][ T3671] bond4: (slave bridge24): Enslaving as an active interface with an up link [ 3119.572888][ T3674] netlink: 'syz.4.7264': attribute type 1 has an invalid length. [ 3119.768757][ T3674] bridge20: entered promiscuous mode [ 3119.781875][ T3674] bond8: (slave bridge20): making interface the new active one [ 3119.783195][ T3674] bond8: (slave bridge20): Enslaving as an active interface with an up link [ 3120.000805][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 3120.000853][ T31] audit: type=1326 audit(1791212740.359:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3682 comm="syz.0.7267" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f850ec code=0x0 [ 3120.063609][ T3687] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 3120.063638][ T3687] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 3120.146149][ T3690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7269'. [ 3120.358954][T28151] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3120.384916][T28151] usb 2-1: USB disconnect, device number 36 [ 3120.455472][ T3688] kvm [3682]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc1) = 0xffff0ff0000f0106 [ 3120.560188][ T3688] kvm_intel: kvm [3682]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x1d9) = 0xffff93f0000f0106 [ 3120.561157][ T3702] tipc: Enabled bearer , priority 0 [ 3120.562054][ T3702] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 3120.562084][ T3702] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 3120.627121][ T3702] tipc: Resetting bearer [ 3120.789551][ T967] usb 3-1: USB disconnect, device number 69 [ 3121.658618][ T3709] syzkaller0: entered promiscuous mode [ 3121.658674][ T3709] syzkaller0: entered allmulticast mode [ 3122.085176][ T3716] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 3122.414361][T25622] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3122.565669][T25622] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3122.568728][T25622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.619556][T25622] usb 3-1: config 0 descriptor?? [ 3122.634259][ T967] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3122.654690][T25622] cp210x 3-1:0.0: cp210x converter detected [ 3122.785783][ T967] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3122.812670][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3122.812702][ T967] usb 2-1: Product: syz [ 3122.812725][ T967] usb 2-1: Manufacturer: syz [ 3122.812748][ T967] usb 2-1: SerialNumber: syz [ 3122.990934][T25622] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 3122.990995][T25622] cp210x 3-1:0.0: querying part number failed [ 3123.025041][T25622] usb 3-1: cp210x converter now attached to ttyUSB0 [ 3123.056139][T25622] usb 3-1: USB disconnect, device number 70 [ 3123.114545][T25622] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3123.123807][T25622] cp210x 3-1:0.0: device disconnected [ 3123.285481][ T967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3123.285631][ T967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 3123.682899][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7281'. [ 3123.715967][ T3730] ªªªªªª: renamed from vlan0 [ 3124.446081][ T5694] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3124.662749][ T5694] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3124.676953][ T5694] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3124.677030][ T5694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3124.680512][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3124.680581][ T5694] usb 3-1: SerialNumber: syz [ 3125.034959][ T5694] usb 3-1: 0:2 : does not exist [ 3125.066364][ T3751] syzkaller0: left promiscuous mode [ 3125.066387][ T3751] syzkaller0: left allmulticast mode [ 3125.135594][T28151] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3125.163561][ T5694] usb 3-1: USB disconnect, device number 71 [ 3125.215583][ T3698] udevd[3698]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3125.307344][T28151] usb 4-1: Using ep0 maxpacket: 32 [ 3125.345868][T28151] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3125.389421][T28151] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 3125.389486][T28151] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3125.389527][T28151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3125.389626][T28151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3125.389682][T28151] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3125.389724][T28151] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3125.389821][T28151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.445722][T28151] usb 4-1: config 0 descriptor?? [ 3125.496948][ T967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 3125.497006][ T967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 3125.497027][ T967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3125.497933][ T967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3125.500918][ T967] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 3125.522154][ T967] usb 2-1: USB disconnect, device number 37 [ 3125.745986][T28151] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3125.990077][T28151] usb 4-1: USB disconnect, device number 36 [ 3126.038976][T28151] usblp0: removed [ 3126.574909][ T3766] syzkaller0: entered promiscuous mode [ 3126.574966][ T3766] syzkaller0: entered allmulticast mode [ 3126.786264][ T3769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7294'. [ 3126.825488][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7294'. [ 3127.015959][T18720] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3127.016023][T18720] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3127.016059][T18720] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3128.137007][T25622] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3128.314262][T25622] usb 3-1: Using ep0 maxpacket: 32 [ 3128.316121][T25622] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3128.319033][T25622] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3128.319099][T25622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3128.319165][T25622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3128.319233][T25622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3128.319298][T25622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3128.440028][T25622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.440119][T25622] usb 3-1: Product: syz [ 3128.440163][T25622] usb 3-1: Manufacturer: syz [ 3128.440211][T25622] usb 3-1: SerialNumber: syz [ 3128.446662][T25622] usb 3-1: config 0 descriptor?? [ 3128.572709][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3128.585134][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3128.922429][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3128.922910][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3128.930342][T25622] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 3128.930576][T25622] input input134: Device does not respond to id packet M [ 3128.936467][T25622] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 3128.936575][T25622] input input134: Device does not respond to id packet P [ 3128.940958][T25622] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 3128.941091][T25622] input input134: Device does not respond to id packet B [ 3129.043660][T25622] input input134: Device does not respond to id packet N [ 3130.105917][T25622] iforce 3-1:0.0: usb_submit_urb failed: -110 [ 3130.127028][T25622] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 3130.153002][T25622] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 3130.170069][T25622] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 3130.176513][T25622] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input134 [ 3130.668755][ T965] usb 3-1: USB disconnect, device number 72 [ 3130.695234][ T3809] gretap0: left allmulticast mode [ 3130.695263][ T3809] gretap0: left promiscuous mode [ 3130.760591][ T3655] udevd[3655]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 3130.908427][ T3815] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7307'. [ 3131.184391][ T720] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 3131.184493][ T720] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 3131.184582][ T720] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 3131.255669][ T3817] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 3131.255690][ T3817] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 3131.475289][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3131.506047][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3131.871856][T28151] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3132.024096][T28151] usb 4-1: Using ep0 maxpacket: 8 [ 3132.025822][T28151] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3132.027233][T28151] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 3132.027296][T28151] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3132.027327][T28151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3132.027359][T28151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3132.027377][T28151] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3132.027434][T28151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.320199][T28151] usb 4-1: GET_CAPABILITIES returned 0 [ 3132.320330][T28151] usbtmc 4-1:16.0: can't read capabilities [ 3132.485921][ T3834] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 3132.486751][ T3834] syzkaller0: entered promiscuous mode [ 3132.486771][ T3834] syzkaller0: entered allmulticast mode [ 3132.533169][ T3826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7311'. [ 3132.533235][ T3826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7311'. [ 3132.570562][ T967] usb 4-1: USB disconnect, device number 37 [ 3132.575268][ T3831] tipc: Enabled bearer , priority 0 [ 3133.111272][ T3841] syzkaller0: entered promiscuous mode [ 3133.111332][ T3841] syzkaller0: entered allmulticast mode [ 3134.921814][ T967] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3134.988863][ T3864] program syz.0.7323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3135.124233][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 3135.128432][ T967] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 3135.198746][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3135.198812][ T967] usb 2-1: Product: syz [ 3135.198848][ T967] usb 2-1: Manufacturer: syz [ 3135.198882][ T967] usb 2-1: SerialNumber: syz [ 3135.214095][ T967] usb 2-1: config 0 descriptor?? [ 3135.242623][ T967] usb 2-1: selecting invalid altsetting 3 [ 3135.242647][ T967] comedi comedi5: could not set alternate setting 3 in high speed [ 3135.242665][ T967] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 3135.301717][ T967] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 3135.620085][ T967] usb 2-1: USB disconnect, device number 38 [ 3141.220037][ T965] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3141.378383][ T965] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 3141.382180][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 3141.382243][ T965] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3141.382346][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3141.485256][ T965] usb 2-1: config 0 descriptor?? [ 3142.053596][ T3918] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7336'. [ 3143.080282][ T965] usbhid 2-1:0.0: can't add hid device: -71 [ 3143.080573][ T965] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3143.128057][ T965] usb 2-1: USB disconnect, device number 39 [ 3143.568069][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.568198][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.615740][ T967] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3143.784323][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 3143.786231][ T967] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3143.788483][ T967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3143.788647][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 3143.788750][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3143.872297][ T967] usb 4-1: config 0 descriptor?? [ 3143.925958][ T967] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3144.837344][T28151] usb 4-1: USB disconnect, device number 38 [ 3145.157861][ T3936] input: syz1 as /devices/virtual/input/input136 [ 3145.246024][ T3943] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 3145.339556][ T3943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3145.366095][ T3945] veth7: entered allmulticast mode [ 3145.370328][ T3945] bond2: (slave veth7): Enslaving as an active interface with a down link [ 3145.390067][ T3943] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 3145.422276][ T3943] macvlan3: entered promiscuous mode [ 3145.422302][ T3943] macvlan3: entered allmulticast mode [ 3145.423019][ T3943] bond2: entered promiscuous mode [ 3145.452508][ T3943] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 3145.453326][ T3943] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3145.455686][ T3943] bond2: left promiscuous mode [ 3145.908151][ T3953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3145.925693][ T3953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3145.979084][T25623] corsair-cpro 0003:1B1C:0C10.005B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 3146.001640][ T3957] [ 3146.004023][ T3957] ================================ [ 3146.009151][ T3957] WARNING: inconsistent lock state [ 3146.014338][ T3957] syzkaller #0 Tainted: G L [ 3146.020336][ T3957] -------------------------------- [ 3146.025459][ T3957] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 3146.032381][ T3957] syz.1.7347/3957 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 3146.038731][ T3957] ffff888055acc468 (&ccp->wait_input_report_lock){+.?.}-{3:3}, at: ccp_raw_event+0x51/0x110 [ 3146.048979][ T3957] {IN-SOFTIRQ-W} state was registered at: [ 3146.054718][ T3957] lock_acquire+0x115/0x350 [ 3146.059332][ T3957] _raw_spin_lock+0x2e/0x40 [ 3146.063985][ T3957] ccp_raw_event+0x51/0x110 [ 3146.068602][ T3957] __hid_input_report+0x41c/0x580 [ 3146.073734][ T3957] hid_irq_in+0x492/0x710 [ 3146.078269][ T3957] __usb_hcd_giveback_urb+0x378/0x540 [ 3146.083829][ T3957] dummy_timer+0xa91/0x4cc0 [ 3146.088453][ T3957] __hrtimer_run_queues+0x3bc/0xa10 [ 3146.093765][ T3957] hrtimer_run_softirq+0x1e3/0x2e0 [ 3146.098994][ T3957] handle_softirqs+0x226/0x860 [ 3146.103862][ T3957] __irq_exit_rcu+0xcb/0x220 [ 3146.108565][ T3957] irq_exit_rcu+0x9/0x30 [ 3146.112916][ T3957] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3146.118654][ T3957] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3146.124742][ T3957] ma_leaf_max_gap+0x19c/0x500 [ 3146.129687][ T3957] mas_update_gap+0x189/0x510 [ 3146.134484][ T3957] mas_wr_store_entry+0x57ef/0x7cf0 [ 3146.139848][ T3957] mas_store_prealloc+0x803/0xc20 [ 3146.145003][ T3957] vma_complete+0x208/0x970 [ 3146.149639][ T3957] __split_vma+0x8fb/0xa60 [ 3146.154181][ T3957] vms_gather_munmap_vmas+0x322/0x1370 [ 3146.159762][ T3957] mmap_region+0x925/0x25b0 [ 3146.164384][ T3957] do_mmap+0xe0a/0x1300 [ 3146.168645][ T3957] vm_mmap_pgoff+0x272/0x4e0 [ 3146.173357][ T3957] ksys_mmap_pgoff+0x4dc/0x760 [ 3146.178235][ T3957] do_syscall_64+0x166/0x520 [ 3146.182954][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3146.188946][ T3957] irq event stamp: 439 [ 3146.193055][ T3957] hardirqs last enabled at (439): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 3146.203318][ T3957] hardirqs last disabled at (438): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 3146.213168][ T3957] softirqs last enabled at (348): [] ip4_datagram_connect+0x37/0x50 [ 3146.222900][ T3957] softirqs last disabled at (346): [] release_sock+0x2f/0x260 [ 3146.231983][ T3957] [ 3146.231983][ T3957] other info that might help us debug this: [ 3146.240070][ T3957] Possible unsafe locking scenario: [ 3146.240070][ T3957] [ 3146.247535][ T3957] CPU0 [ 3146.250831][ T3957] ---- [ 3146.254181][ T3957] lock(&ccp->wait_input_report_lock); [ 3146.259772][ T3957] [ 3146.263244][ T3957] lock(&ccp->wait_input_report_lock); [ 3146.269066][ T3957] [ 3146.269066][ T3957] *** DEADLOCK *** [ 3146.269066][ T3957] [ 3146.277254][ T3957] locks held by syz.1.7347/3957: 1, last CPU#1: [ 3146.283526][ T3957] #0: ffff8880810d4060 (&uhid->devlock){+.+.}-{4:4}, at: uhid_char_write+0x7a/0xc90 [ 3146.293149][ T3957] [ 3146.293149][ T3957] stack backtrace: [ 3146.299066][ T3957] CPU: 1 UID: 0 PID: 3957 Comm: syz.1.7347 Tainted: G L syzkaller #0 PREEMPT(full) [ 3146.309956][ T3957] Tainted: [L]=SOFTLOCKUP [ 3146.314307][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 3146.324390][ T3957] Call Trace: [ 3146.327695][ T3957] [ 3146.330655][ T3957] dump_stack_lvl+0xe8/0x150 [ 3146.335287][ T3957] print_usage_bug+0x28c/0x2e0 [ 3146.340087][ T3957] valid_state+0xbe/0xf0 [ 3146.344357][ T3957] mark_lock_irq+0x36/0x380 [ 3146.348899][ T3957] ? __lock_acquire+0x747/0x2de0 [ 3146.353871][ T3957] mark_lock+0x117/0x190 [ 3146.358164][ T3957] __lock_acquire+0xaab/0x2de0 [ 3146.362987][ T3957] ? __lock_acquire+0x747/0x2de0 [ 3146.367966][ T3957] lock_acquire+0x115/0x350 [ 3146.372492][ T3957] ? ccp_raw_event+0x51/0x110 [ 3146.377199][ T3957] _raw_spin_lock+0x2e/0x40 [ 3146.381742][ T3957] ? ccp_raw_event+0x51/0x110 [ 3146.386475][ T3957] ccp_raw_event+0x51/0x110 [ 3146.391015][ T3957] __hid_input_report+0x41c/0x580 [ 3146.396057][ T3957] ? __pfx_ccp_raw_event+0x10/0x10 [ 3146.401199][ T3957] uhid_dev_input2+0xbc/0x150 [ 3146.405923][ T3957] uhid_char_write+0x4a1/0xc90 [ 3146.410726][ T3957] ? __pfx_uhid_char_write+0x10/0x10 [ 3146.416077][ T3957] vfs_write+0x296/0xba0 [ 3146.420348][ T3957] ? __pfx_vfs_write+0x10/0x10 [ 3146.425127][ T3957] ? __fget_files+0x2a/0x420 [ 3146.429746][ T3957] ? __fget_files+0x2a/0x420 [ 3146.434389][ T3957] ? __fget_files+0x3a2/0x420 [ 3146.439093][ T3957] ? __fget_files+0x2a/0x420 [ 3146.443716][ T3957] ksys_write+0x150/0x270 [ 3146.448064][ T3957] ? __pfx_ksys_write+0x10/0x10 [ 3146.452935][ T3957] __do_fast_syscall_32+0x27a/0x6b0 [ 3146.458175][ T3957] ? do_fast_syscall_32+0x33/0x70 [ 3146.463257][ T3957] ? asm_int80_emulation+0x1a/0x20 [ 3146.468394][ T3957] ? do_int80_emulation+0x299/0x500 [ 3146.473622][ T3957] ? trace_irq_disable+0x3b/0x140 [ 3146.478669][ T3957] do_fast_syscall_32+0x33/0x70 [ 3146.483552][ T3957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3146.489916][ T3957] RIP: 0023:0xf701f0ec [ 3146.494001][ T3957] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3146.513629][ T3957] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3146.522067][ T3957] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 3146.530151][ T3957] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 3146.538136][ T3957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3146.546132][ T3957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3146.554121][ T3957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3146.562132][ T3957] [ 3146.606271][T25623] corsair-cpro 0003:1B1C:0C10.005B: probe with driver corsair-cpro failed with error -71