last executing test programs: 11.020308874s ago: executing program 0 (id=1701): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8912, &(0x7f0000000900)={'veth0_macvtap\x00', @random='\x00\x00\x00 \x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x6, 0x9, 0x2, 0xe, 0x1, 0x20000, 0xc0000000, 0x2, 0x33, 0x5, 0x7, 0x3, 0x2, 0x7f, 0xfffffffc, 0x0, 0xfffffffe, 0x6, 0x5, 0x1ff, 0xfffffff9, 0xa}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001e40)='syz0\x00', 0x1ff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.598899637s ago: executing program 0 (id=1712): r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x113580, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x1424, r1}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x2b, 0x3, 0x0, {0x4, 0xa, 0x0, '/dev/cuse\x00'}}, 0x2b) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = geteuid() fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x10510d0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@allow_other}, {}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}], [{@appraise}, {@dont_appraise}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f00000003c0)="23f1e715c96b2034578cab51b30bdb6b398ce0235d6e41dadd2484c9f55adc9174ebdf300e904bb40ec686dfed3523ec4d8bb0c211ca79d1218d2ca195f63214e0f35139c5e4e54a1419060b7965c89f87da091ee9c73a91e411c8187858a038f671a99490653f662740d34b01e799b5147c64f11cab3e7451f876a82557ad32e0fc3e9db82765351d7989513c9def1936a46cedd4d7c78255dbd8194749ba741f") r5 = syz_clone(0x80000000, &(0x7f0000000480)="a7985378055591d7ea7783ed7065dc743d9f2810bb47183ad9a889eedbe9330f3de34322b6d136b00d1c37983f68b681e01111a633d7e97835ea72f87d5ab8eacb6a67647f260641f6026181fc3c61e629ccab05004a5647e7ee572b0289b555df9c5c223660cf5afd0d6093cb30f223c4122100a31a6a5054d700e26e40e35a4cd418e799e0d40b09e18a378f6df1633476c23fab8c6f58af81fc57c302b915680da825a2243e3d3fc5a35265df3c4200fea8218bf34b263a7716c8e97b", 0xbe, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="fff9ba6823") ptrace$poke(0x4, r5, &(0x7f0000000600), 0x7) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2000, 0x1) r6 = epoll_create(0x5) r7 = socket$inet(0x2, 0x2, 0x7f) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r6, &(0x7f0000000680)={r0, r1, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x110, r0, 0x0) sendmsg$key(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2, 0xd, 0x7, 0x5, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x8, @remote, 0xfffffff8}, @in6={0xa, 0x4e22, 0x9, @remote, 0x1ec}}]}, 0x50}}, 0x1) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1010, &(0x7f0000000840)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xa69a}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_hash}]}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0x7ff, 0x7, {{0x17, 0x4, 0x0, 0x1, 0x5c, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}, {[@rr={0x7, 0xb, 0xc0, [@empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x9a, 0x1, 0x5}, @lsrr={0x83, 0x1f, 0x86, [@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @multicast2, @local]}, @timestamp={0x44, 0x14, 0x9c, 0x0, 0x2, [0x5, 0x6, 0x1, 0x667]}, @noop, @noop]}}}}}) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000000a00)={@empty, @remote, @multicast1}, 0xc) openat$nullb(0xffffff9c, &(0x7f0000000a40), 0x800, 0x0) read$FUSE(r2, &(0x7f0000000a80)={0x2020}, 0x2020) openat$fuse(0xffffff9c, &(0x7f0000002ac0), 0x2, 0x0) io_uring_enter(r0, 0x5a0f, 0x614, 0x20, &(0x7f0000002b00)={[0x4, 0xfffffff7]}, 0x8) r9 = openat$btrfs_control(0xffffff9c, &(0x7f0000002b40), 0x12b000, 0x0) r10 = openat$thread_pidfd(0xffffff9c, &(0x7f0000002b80), 0x1b1001, 0x0) r11 = openat$sndseq(0xffffff9c, &(0x7f0000002bc0), 0x200802) poll(&(0x7f0000002c00)=[{r6, 0xa602}, {}, {r1, 0x5115}, {r7, 0x8000}, {r9, 0x10a}, {r10, 0x56}, {r11, 0x410}, {r2}], 0x8, 0x1) lsetxattr$security_capability(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80), &(0x7f0000002cc0)=@v1={0x1000000, [{0x4, 0x1}]}, 0xc, 0x3) bind$l2tp(r9, &(0x7f0000002d00)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) 9.197229455s ago: executing program 0 (id=1715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "d50c6f"}]}], {0x14}}, 0x70}}, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x230}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x80, &(0x7f0000000180)=0xa, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x2, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x240410c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r10], 0x2c}}, 0x0) 7.060822584s ago: executing program 3 (id=1726): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1f5af82f2c3a440"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x101, 0x408281) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000c711c2c243b981c8a36e26ed5e1a03010902120001330000000904000000a0122400"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x20, 0x14}, 0x0, 0x0}) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) 5.94708198s ago: executing program 0 (id=1734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="8a000000", @ANYRES16=0x0, @ANYBLOB="000429bd88c51cac9901eb5729506e95aa7000fbdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000030000000800a4000200000005001900000000002c0081000500020003000000050001000f000000050001000800000005000100ff00000005000200010000001000bd000000ff7f05000000619cc00106001a0103000000060012004d0000000c00430001000000c33c00000600360004000000"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/14, &(0x7f0000000140)=0xe) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000572000/0x3000)=nil, 0x3000, 0x19) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) write$dsp(r2, &(0x7f0000000540)="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", 0x117) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000000)='./cgroup\x00', 0x62000030) prlimit64(r3, 0xd, &(0x7f0000000040)={0x6, 0x7ed6fc5a}, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r5, &(0x7f0000000180)=""/17, 0x11) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, &(0x7f0000000200)) 5.187709839s ago: executing program 1 (id=1738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @mcast1, 0xd}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10001, 0xc00) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000001c0)={0x0, {0xe1, 0x6}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'macvlan0\x00', {0xff}, {}, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x4f227d869566f73e) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) syz_io_uring_setup(0x395, &(0x7f0000000080)={0x0, 0x9fb1, 0x4000, 0x0, 0x34c}, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0xffffffffffffff80) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in6=@local, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0xc0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xff, 0xfffffffc, 0xfffffffc}}, 0xe4) 4.868067303s ago: executing program 1 (id=1739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf25010000002000000009410000004c00180000af8569620000000000000000000000000000000000000000000000000000c84098fd0000000000000000000000000000000000000000000000000000ebffffffffffffffa000dbd4a26cafe78645659694e32599b73e6b38572f3187a10549efc6b994d05a33efa0855d55d5bf5a27da60834ff16a4397b200c2d995d06dda4f3f610b171f"], 0x68}, 0x1, 0x0, 0x0, 0x4c015}, 0xc4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) pwritev2(r4, &(0x7f0000000440)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1, 0x5, 0x80, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r6 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 4.664791574s ago: executing program 2 (id=1741): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0x80c]}, 0x0, &(0x7f0000000140), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300", @ANYRESOCT=r2], 0xe8}}, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) unshare(0x20000400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, 0x3, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x545f372}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040000) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xfffffffe}, 0x80, 0x0}, 0x20048050) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872424dfef0a) 4.248243425s ago: executing program 2 (id=1742): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="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", 0x17f}, {&(0x7f0000000180)="85c0cbda90aab53aad72dd3e7bde7cb574c91123a531183d457ac5dbd18f555986ec436683384f6389a3eed29f941e2f7d7d59c8283a0a43a767d50b9071b6eebb7e6c047730eff665fb373a393402ff687677479e7511bc33726f495e91d96240f633682672af50625e809607e3a96fbf6956be0d35073b1c069944cef8429c61607ddb3a66682461dadd", 0x8b}, {&(0x7f0000000700)="da57f6a78a34988cf70e2bcccf86ff299222e1d12d1035d7e673f57a6d0e01715c97e3eb0540b9edad23dd901c9baa81f08ddaa9c83054080bec3e8921b5f80c12a4daa8e0941327fddd15b52dd4af4be87c90179b5347476a66954d95524bcf6d1dfbcbb5c7d0d8e250b99b841f32792eac28e71c22112e9f893891f8ced1385fc2af03ef42558efbe32bfef585d3ec6ee63573f91b497c8823809e337f140531960317da6bb78090ee0f", 0xab}], 0x3, 0x0, 0x0, 0x20000011}}], 0x1, 0x200400d1) 4.210340207s ago: executing program 2 (id=1743): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0x402c5839, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) 4.131081027s ago: executing program 2 (id=1744): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "d50c6f"}]}], {0x14}}, 0x70}}, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x230}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x80, &(0x7f0000000180)=0xa, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x2, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x240410c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r10], 0x2c}}, 0x0) 3.912082951s ago: executing program 3 (id=1745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="b678b8b76f28c82472ef152caed1c2fde759206b3d0c7c7016e1ce2e8593b238d8c80b7329a82ee849bd699bad1ede954063a076358bb47a5baf837eae77b8cb5b9c88c87f01c2e2d352caf47a8d97c115e2f32847df6913c52b442be67c98433774ab35c35bbb3d687b6c8f49bd650ef7ec8e6904aab21e77dd4a480cb2c284a2667f38a6ee5f7d5f776bd264aa23263b28cc15bb5bdbddf50dfbfff59d67552f01d3d2c7b208d446d13fc6c8d5b3bffcab50c7825b0e541c520e61e7f935c5f043c1adfaf003c1f3454c67f4ea7c1dd219e6578d00b13153020be2801a5013072b3f2c950c67e919f7e6ae198d99e2", 0xf0}, {&(0x7f0000000440)="938ab68aec3ae6724340ea457edad96987ce7dd031d2e8ea7d215945a3cd224c072ae3061b16f269f8dce1762f7006155fe82c621023", 0x36}, {&(0x7f0000000540)}, {0x0}, {&(0x7f0000000e40)="d2043de261edf20dd7adfb423e5f84e16f453f56f43edf71612b55b760be7027d240a4c1e348c1dfafc38012241a35afc3d22a84121623b1c6954d34916209e8619e0177924b6a0715cebae0d6708e4bdc22d1a6fdf1b60f5b71d4f5d63a29d31110f857b9b834648a27faf474af6d8beeb49c693cf3e7207ac051450313411bee933ab3e914e036481a0a9ddbdaf9003e2bd62bb51efdfb6ea271ec1557d92548480b25a44ceff84d433ebb766205181d821c6d130275a1a3ee1f789608e167805832b4c0bd492394661691a7a96de32a3982d3fd92afa252b2e85082c78689fd0fecf075aa4e04d887095f72f4", 0xee}, {&(0x7f0000000580)="5daec98deb7f3e69a632816bf0885d253e6b817f227447ad24b7f364497edb920ccaf330ce71c0da69e197d9f033ec3617", 0x31}, {&(0x7f0000000d40)="0842763559432becbcbed85b6f9cb7f04f5a7c90f2d056251cfbf5cafb516855f7442a2c2f81aecbfbc517a5a4a4e3574db8187f0a323fffd5e059182afb7194c3b793d565894e2801b9887e26f82365a5d6bde9a7a8e3eadb6e4c9af57a1a52787d266ec9d40739fdd70e590e8bcc476a0dce5a7cd1826d217d95df5b1f20d650f4d1feb6534f", 0x87}], 0x7}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2000005, 0x3003, 0x3, 0x9, 0x6, 0x1, 0x5}}) write(0xffffffffffffffff, &(0x7f0000000040)="1c00000021002551071c0165ff00", 0xe) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0xc8, 0x20000b49, 0xa3, 0x3, 0x5, 0x20000003}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x68}}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x80000040, 0x80000070, 0x800000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x110) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000fb89962661651b7bcc94da7bd7e8cb00001701000003000000010000000000000017010000040000000500000000000000170100000200000000000000f4557afeb0e1196f866757ac4f155f716d514ac4e5d301a9052d59c559dd36c195ab00000000000017010000040000001ff700000000000017010000030000000100000000"]}], 0x1, 0x24040881) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3.135796545s ago: executing program 4 (id=1746): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r1, 0x401, 0xf5) 2.734984334s ago: executing program 4 (id=1747): r0 = socket$inet_dccp(0x2, 0x6, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x8001, @empty, 0x7}}}, 0x3a) 2.535775904s ago: executing program 3 (id=1748): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8912, &(0x7f0000000900)={'veth0_macvtap\x00', @random='\x00\x00\x00 \x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x6, 0x9, 0x2, 0xe, 0x1, 0x20000, 0xc0000000, 0x2, 0x33, 0x5, 0x7, 0x3, 0x2, 0x7f, 0xfffffffc, 0x0, 0xfffffffe, 0x6, 0x5, 0x1ff, 0xfffffff9, 0xa}}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001e40)='syz0\x00', 0x1ff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.456365389s ago: executing program 1 (id=1749): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(r3, 0x0, 0x0, 0xe1, 0x8) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2], 0x3c}}, 0x0) 2.455129959s ago: executing program 0 (id=1750): r0 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x240000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) (async) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x5000000) (async) syz_fuse_handle_req(r3, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x9, 0x0, {0x2, 0x80000008000080, 0x3, 0x6, 0x3, 0x100000000000008, 0x80000000, 0x800, 0x6, 0xc000, 0x7fffffff, r5, r6, 0x0, 0x49}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=@polexpire={0x23c, 0x1b, 0x2, 0x70bd29, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in6=@empty, 0x4e21, 0x2, 0x4e23, 0x1, 0xa, 0x20, 0x0, 0x3c, 0x0, r5}, {0xfd, 0x6, 0xb4, 0x316e5591, 0x9, 0x6, 0x5, 0x5}, {0x4, 0x7, 0xfffc000000000000, 0x4}, 0x0, 0x0, 0x2444b8d08ab122f5, 0x1, 0x2, 0x2}, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in=@remote, 0x0, 0x0, 0x2, 0xfa, 0x1cf1, 0x3, 0x10000}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x6c}, 0x2, @in=@loopback, 0x3507, 0x3, 0x0, 0x8, 0xffff, 0x5}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in6=@private0, 0x3501, 0x0, 0x1, 0x3, 0x8, 0xfffffe5a, 0x9}, {{@in=@empty, 0x4d6}, 0xa, @in=@private=0xa010100, 0x3502, 0x4, 0x0, 0xc7, 0x4, 0x100010, 0x4}, {{@in=@loopback, 0x4d3, 0x2b}, 0xa, @in=@private=0xa010101, 0x0, 0x2, 0x2, 0x2, 0x2, 0x5, 0x9}, {{@in6=@empty, 0x4d6, 0xff}, 0xa, @in=@broadcast, 0x0, 0x0, 0x2, 0x0, 0x5, 0x5, 0xfff}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40050}, 0x4004001) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=@getae={0x314, 0x1f, 0x200, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0xa, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, [@sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x6, 0xc3, "554af0358809651adfcdb600e47d76bbc45b4069cf76edb72043e25bfdbc4eebf6f96f47d0e80a3164195271c9aa69160c0391af7d20e5e24bbbfbd4f363e1987754e687e4f2b9584b350ecb4983b3c81c39ce1014aaf1e01824bffa2a85d7875eb189068ac1b689ffd0310cbd3bcafbfdf8c7aaa9f779dd0e3cec58bdd4f09529d97a4b0e254d08af6b368edafb981d88750e079ec217618fce7dffa8840a209b33dfd4ff8bafc44417f6c3ac494f1c35a2da7c96cfe9410c61e7c7ede3a627e64e69"}}, @offload={0xc, 0x1c, {r9, 0x1}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd26, 0x70bd25, 0x70bd2c, 0x70bd2c, 0x5, [0x3, 0x101, 0xf, 0x80, 0x6, 0x80000]}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd26, 0x70bd26, 0x70bd27, 0x70bd2b, 0x8832, [0x6, 0x900000, 0xc55f, 0x0, 0x10001, 0x3, 0x9, 0x8f]}}, @sa={0xe0, 0x6, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0xffff, 0x4e20, 0x0, 0x2, 0x60, 0xa0, 0x1d, r9, r5}, {@in=@empty, 0x4d5, 0x32}, @in=@multicast2, {0xa, 0xff, 0x1, 0x629, 0x7f, 0x4, 0x3, 0xe3}, {0xe, 0x9, 0x80, 0x4}, {0x4, 0x6, 0x7}, 0x70bd29, 0x3506, 0x2, 0x2, 0x77, 0xa7}}, @policy={0xa8, 0x7, {{@in=@rand_addr=0x64010100, @in=@empty, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x33, r9, r10}, {0x7, 0x6, 0x9, 0x1, 0xf, 0x9, 0xff, 0xdf6}, {0x4, 0x200, 0x9, 0x5}, 0x7, 0x0, 0x1, 0x1, 0x2, 0x1}}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400"], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0xfffeffff, 0x4) (async) prlimit64(r7, 0xd, &(0x7f0000000340)={0x4, 0x7}, &(0x7f0000000480)) 2.412402234s ago: executing program 1 (id=1751): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 2.342688744s ago: executing program 0 (id=1752): socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ptype\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r2, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 2.232399388s ago: executing program 1 (id=1753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="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", 0x17f}, {&(0x7f0000000180)="85c0cbda90aab53aad72dd3e7bde7cb574c91123a531183d457ac5dbd18f555986ec436683384f6389a3eed29f941e2f7d7d59c8283a0a43a767d50b9071b6eebb7e6c047730eff665fb373a393402ff687677479e7511bc33726f495e91d96240f633682672af50625e809607e3a96fbf6956be0d35073b1c069944cef8429c61607ddb3a66682461dadd", 0x8b}, {&(0x7f0000000700)="da57f6a78a34988cf70e2bcccf86ff299222e1d12d1035d7e673f57a6d0e01715c97e3eb0540b9edad23dd901c9baa81f08ddaa9c83054080bec3e8921b5f80c12a4daa8e0941327fddd15b52dd4af4be87c90179b5347476a66954d95524bcf6d1dfbcbb5c7d0d8e250b99b841f32792eac28e71c22112e9f893891f8ced1385fc2af03ef42558efbe32bfef585d3ec6ee63573f91b497c8823809e337f140531960317da6bb78090ee0f", 0xab}], 0x3, 0x0, 0x0, 0x20000011}}], 0x1, 0x200400d1) 2.207641503s ago: executing program 1 (id=1754): r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_usb_connect(0x5, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002188dc4011fe10008fc438b6a07f268073da090018d38824e378184cc2b92ee03b96e5bc68e58d4f606bee5014d3a6fbd863cb985cb1f86711a03e8e66cbc2c60c462c68c30794e7f990bb762fe85d6ec2446549bdf1827946eef833312b7297b650639acec84bf8e2ac9f9d2f8b4dbe339aa38632cb20d8065c8d52fe18a86d170af9d5644e347012979b46c9fbebd45d5daab52c3600"/168], 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x0, 0x20000}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x6080, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) clock_gettime(0x6, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0], 0x44}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r8 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r8, &(0x7f0000002300)=[{&(0x7f0000001200)='\x00', 0x1}, {&(0x7f0000001300)="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", 0x1000}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0x42031, 0xffffffffffffffff, 0x80000000) 2.107407302s ago: executing program 2 (id=1755): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x15c, 0x30, 0x1, 0x0, 0x0, {}, [{0x148, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x100, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xbc, 0x6, "6c79f65c3ec5ce86f29cb211ffd77182215647c3d6895ca8f39fa96fd5531034a251a77497c279453d63e85a07944bf2a327d1c38d0259dce2752b89a5b50c3417fac5e219333078c199e1950c31f3b36238829d39de3d018ac2f7d29150fa70f0428b0336537b55df125310e4ece991c99f8f9041afbc13a923818f1a102e8f86ae62c25b76ea92514409bd55845475c4da684bbe4df2d1473d7a3c99c2fb30c789a06136d2409d0bc7d235c72d3d07af8ae1c8b95b7991"}, {0xc}, {0xc}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000001940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20008801}], 0x1, 0x40800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) 1.412386737s ago: executing program 4 (id=1756): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_clone(0x58000000, 0x0, 0xfd, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={0x0}, 0x1b, 0x7}, 0x4000800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x4, 0xf, {r1}, {}, 0x7, 0x10000}) sched_setaffinity(r2, 0x8, &(0x7f0000000080)) 1.336617983s ago: executing program 4 (id=1757): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "88098d119cfa7616c17cefa0e17843179ef2da100ad772ee72666017e29494a2", 0x32315241}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x44080) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="af86269e186bb9666daa09d75de7c05507f197b1060102000000002b0700000017b9730500010007000000"], 0x1c}}, 0x4800) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000400)=[0x9], &(0x7f0000000180)=[r9, r9], &(0x7f0000000340)}) 898.471507ms ago: executing program 3 (id=1758): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) 724.265641ms ago: executing program 3 (id=1759): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x101, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x9, r0, 0x0}]) unshare(0x68060200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) ppoll(&(0x7f0000000180)=[{r4, 0xc030}], 0x1, &(0x7f0000000340), 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x80, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x8044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000000)=""/27, 0x1b, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 438.108074ms ago: executing program 2 (id=1760): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x14) (fail_nth: 5) 72.088297ms ago: executing program 4 (id=1761): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x8400) 406.095µs ago: executing program 3 (id=1762): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x11e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000001040), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000001040), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff03, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x207e, 0x43, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 4 (id=1763): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000740)={{0x0, 0x5, 0x8, 0x2, 'syz0\x00', 0xa72}, 0x1, [0x7, 0x2d, 0x6b, 0xff, 0x1436, 0x3, 0x6, 0x38, 0x20000, 0x2, 0x8, 0x3, 0x10001, 0xc, 0x83b1, 0x9, 0x6, 0x3, 0x7, 0x1c72, 0x7, 0xd62, 0x4, 0x3, 0x8, 0x2, 0x6, 0x7, 0x9, 0x6, 0xb3, 0xfffffff9, 0xffff0001, 0x4, 0x8, 0x4, 0x1, 0x5, 0x3, 0x3, 0x2, 0x6, 0xb7, 0xb, 0x358c, 0xb, 0xfff, 0x6e7, 0x0, 0x80, 0x10000, 0x9, 0x3, 0x9, 0x8, 0x72, 0x6f14, 0x6, 0x80000001, 0x44, 0xbab, 0x9, 0xf, 0x65c6, 0x0, 0x8, 0x7, 0x3, 0x2, 0x20000000, 0x3, 0x4, 0x4, 0x5, 0x0, 0x5, 0xd83, 0x0, 0x1, 0x401, 0x34f, 0x7ff, 0x200, 0x63, 0x9, 0x181d, 0x7, 0x4b80, 0x6, 0x0, 0xfffffff8, 0xfffffffe, 0x50000, 0x6, 0x3, 0x7, 0x3, 0x1ff, 0xfffffff8, 0xd, 0x3, 0x2, 0x5159, 0x0, 0x5, 0x145a, 0x6, 0xf, 0x6, 0xf, 0x9, 0x7, 0x8, 0x6, 0x41, 0x81, 0x41666f03, 0xffffffff, 0x98e9, 0x10d7, 0x9, 0x2, 0xff, 0x6, 0x100, 0xffffffff, 0x1, 0x3]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @local=@item_4={0x3, 0x2, 0x2, "2cb5b914"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @global]}}, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x100, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x1ff, 0x0, 0xf, 0x0, 0x4, 0x1}, {0x1, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x0, @in=@empty, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) unlink(&(0x7f0000000140)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) close(0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000001440)={0x0, 0x5, 0x0, 0x5}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x80, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): onnect, device number 80 [ 445.388091][ T10] usblp0: removed [ 445.413891][T10380] raw_sendmsg: syz.2.1426 forgot to set AF_INET. Fix it! [ 445.444121][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 445.475926][ T9] usbtmc 4-1:16.0: can't read capabilities [ 445.802190][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.811541][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.858085][ T978] usb 4-1: USB disconnect, device number 98 [ 445.976571][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 446.067679][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.074738][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.162284][T10388] IPVS: length: 95 != 24 [ 446.169868][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 446.180466][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.239042][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.260308][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 446.302952][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.324454][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 446.339098][ T10] usb 3-1: config 0 descriptor?? [ 446.355493][ T978] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 446.514848][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 446.534387][ T978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.563805][ T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.577861][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 446.590874][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 446.606714][ T978] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 446.616417][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.785941][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 446.816369][T10399] vlan2: entered promiscuous mode [ 446.821449][T10399] vlan1: entered promiscuous mode [ 446.889448][ T978] hub 1-1:1.0: bad descriptor, ignoring hub [ 446.932386][ T978] hub 1-1:1.0: probe with driver hub failed with error -5 [ 447.096815][ T978] cdc_wdm 1-1:1.0: skipping garbage [ 447.110738][ T978] cdc_wdm 1-1:1.0: skipping garbage [ 447.150041][ T978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 447.157400][ T978] cdc_wdm 1-1:1.0: Unknown control protocol [ 447.199606][ T978] usb 1-1: USB disconnect, device number 81 [ 447.206517][ T5888] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 447.347877][ T5888] usb 4-1: device descriptor read/64, error -71 [ 447.618795][ T10] usb 5-1: USB disconnect, device number 79 [ 447.704866][ T5888] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 447.799007][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 447.845273][ T5888] usb 4-1: device descriptor read/64, error -71 [ 447.866176][T10411] bond0 (unregistering): Released all slaves [ 448.083111][T10407] bond0: entered promiscuous mode [ 448.092050][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.167816][ T5888] usb usb4-port1: attempt power cycle [ 448.285687][ T5890] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 448.323423][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.382000][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.495385][ T5890] usb 5-1: device descriptor read/64, error -71 [ 448.534699][ T5888] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 448.568747][ T5888] usb 4-1: device descriptor read/8, error -71 [ 448.735654][ T5890] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 448.814852][ T5888] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 448.848269][ T5888] usb 4-1: device descriptor read/8, error -71 [ 448.885604][ T5890] usb 5-1: device descriptor read/64, error -71 [ 448.965094][ T5888] usb usb4-port1: unable to enumerate USB device [ 449.014868][ T5890] usb usb5-port1: attempt power cycle [ 449.384764][ T5890] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 449.405680][ T5890] usb 5-1: device descriptor read/8, error -71 [ 449.414703][ T5888] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 449.516982][ T5894] usb 3-1: USB disconnect, device number 86 [ 449.569908][ T5888] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 449.644733][ T5890] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 449.656290][ T5888] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 449.700313][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 449.708199][ T5890] usb 5-1: device descriptor read/8, error -71 [ 449.746812][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 449.760541][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.771030][ T5888] usb 1-1: Product: syz [ 449.779403][ T5888] usb 1-1: Manufacturer: syz [ 449.784124][ T5888] usb 1-1: SerialNumber: syz [ 449.793725][T10424] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 449.801502][T10424] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 449.845955][ T5890] usb usb5-port1: unable to enumerate USB device [ 449.965770][ T5894] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 450.031384][ T5888] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 450.048914][ T5888] usb 1-1: USB disconnect, device number 82 [ 450.059322][ T5888] usblp0: removed [ 450.066075][T10435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.081264][T10435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.124827][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 450.133261][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.146076][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.157615][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.168151][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.182225][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.191399][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.407290][ T5894] usb 3-1: GET_CAPABILITIES returned 0 [ 450.413082][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 450.712297][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.761170][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.914468][T10448] FAULT_INJECTION: forcing a failure. [ 450.914468][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 450.964829][T10448] CPU: 1 UID: 0 PID: 10448 Comm: syz.1.1448 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 450.964860][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.964870][T10448] Call Trace: [ 450.964876][T10448] [ 450.964884][T10448] dump_stack_lvl+0x241/0x360 [ 450.964913][T10448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.964935][T10448] ? __pfx__printk+0x10/0x10 [ 450.964958][T10448] ? __pfx___might_resched+0x10/0x10 [ 450.964978][T10448] should_fail_ex+0x424/0x570 [ 450.965004][T10448] should_failslab+0xac/0x100 [ 450.965022][T10448] kmem_cache_alloc_noprof+0x78/0x390 [ 450.965039][T10448] ? getname_flags+0xb6/0x530 [ 450.965055][T10448] ? ksys_write+0x24e/0x2d0 [ 450.965077][T10448] getname_flags+0xb6/0x530 [ 450.965096][T10448] do_sys_openat2+0xbf/0x1d0 [ 450.965114][T10448] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.965130][T10448] ? __fget_files+0x2a/0x420 [ 450.965159][T10448] ? __fget_files+0x2a/0x420 [ 450.965179][T10448] __ia32_compat_sys_openat+0x241/0x290 [ 450.965199][T10448] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 450.965221][T10448] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 450.965245][T10448] ? lockdep_hardirqs_on+0x9d/0x150 [ 450.965269][T10448] __do_fast_syscall_32+0xb4/0x110 [ 450.965284][T10448] ? exc_page_fault+0x599/0x8b0 [ 450.965308][T10448] do_fast_syscall_32+0x34/0x80 [ 450.965322][T10448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.965341][T10448] RIP: 0023:0xf7f04579 [ 450.965354][T10448] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 450.965371][T10448] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 450.965393][T10448] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 450.965409][T10448] RDX: 0000000000141b82 RSI: 0000000000000180 RDI: 0000000000000000 [ 450.965422][T10448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.965434][T10448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.965447][T10448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.965472][T10448] [ 451.192216][ T5892] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 451.192741][ T5894] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 451.415770][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.433718][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.524423][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.540206][ T5894] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 451.555224][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 451.564669][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.577780][ T5892] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.588202][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 451.597494][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.609029][ T5894] usb 4-1: config 0 descriptor?? [ 451.616008][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.630374][ T5892] usb 1-1: config 0 descriptor?? [ 451.694728][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 451.844840][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 451.911739][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.922159][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.934476][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 452.007179][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.059429][ T10] usb 5-1: config 0 descriptor?? [ 452.069229][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 452.094786][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 452.138235][ T5894] usb 4-1: USB disconnect, device number 103 [ 452.346429][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.364999][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.633064][ T5892] usb 3-1: USB disconnect, device number 87 [ 452.983304][T10475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.994921][T10475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.022774][T10475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.040797][T10475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.114998][ T5892] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 453.274861][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 453.282324][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.293039][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.302044][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 453.313535][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 453.325009][ T5892] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 453.334174][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.346080][ T5892] hub 3-1:1.0: bad descriptor, ignoring hub [ 453.353179][ T5892] hub 3-1:1.0: probe with driver hub failed with error -5 [ 453.361203][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 453.367468][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 453.375135][ T5892] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 453.381722][ T5892] cdc_wdm 3-1:1.0: Unknown control protocol [ 453.636112][ T5892] usb 1-1: USB disconnect, device number 83 [ 453.698297][T10481] IPVS: length: 95 != 24 [ 453.737279][ T5888] usb 3-1: USB disconnect, device number 88 [ 453.821535][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 454.343114][ T978] usb 5-1: USB disconnect, device number 84 [ 454.367705][ T5888] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 454.554044][ T5888] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.576053][ T5888] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.609479][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.631717][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1466'. [ 454.688819][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.745353][T10491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 454.760059][ T5888] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.815812][ T978] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 454.984381][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 455.020310][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 455.056017][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 455.090939][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.104822][ T5892] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 455.133467][ T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.161681][ T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.185490][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.285437][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.326927][ T5892] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 455.345785][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.378144][ T5892] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 455.424874][ T5892] usb 1-1: config 1 interface 0 has no altsetting 0 [ 455.437261][ T978] usb 5-1: GET_CAPABILITIES returned 0 [ 455.446849][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 455.511878][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.516791][ T978] usbtmc 5-1:16.0: can't read capabilities [ 455.564847][ T5892] usb 1-1: Product: syz [ 455.569536][ T5892] usb 1-1: Manufacturer: syz [ 455.575043][ T5892] usb 1-1: SerialNumber: syz [ 455.607702][T10501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 455.615441][T10501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 455.710733][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.720655][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.738766][ T978] usb 5-1: USB disconnect, device number 85 [ 455.840686][ T5892] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 455.860080][ T5892] usb 1-1: USB disconnect, device number 84 [ 455.871312][ T5892] usblp0: removed [ 455.972066][T10516] FAULT_INJECTION: forcing a failure. [ 455.972066][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 455.991171][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.2.1472 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 455.991207][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.991222][T10516] Call Trace: [ 455.991230][T10516] [ 455.991239][T10516] dump_stack_lvl+0x241/0x360 [ 455.991277][T10516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.991306][T10516] ? __pfx__printk+0x10/0x10 [ 455.991351][T10516] ? __pfx___might_resched+0x10/0x10 [ 455.991381][T10516] should_fail_ex+0x424/0x570 [ 455.991418][T10516] should_failslab+0xac/0x100 [ 455.991443][T10516] kmem_cache_alloc_noprof+0x78/0x390 [ 455.991465][T10516] ? mpol_set_shared_policy+0xac/0xc50 [ 455.991493][T10516] mpol_set_shared_policy+0xac/0xc50 [ 455.991526][T10516] mbind_range+0x45f/0x830 [ 455.991550][T10516] ? mas_find+0x950/0xbb0 [ 455.991585][T10516] __se_sys_mbind+0xc08/0x1950 [ 455.991698][T10516] ? __pfx___se_sys_mbind+0x10/0x10 [ 455.991726][T10516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.991747][T10516] ? __fget_files+0x2a/0x420 [ 455.991790][T10516] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 455.991824][T10516] ? __ia32_sys_mbind+0x21/0xf0 [ 455.991846][T10516] __do_fast_syscall_32+0xb4/0x110 [ 455.991867][T10516] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 455.991887][T10516] ? lockdep_hardirqs_on+0x9d/0x150 [ 455.991920][T10516] do_fast_syscall_32+0x34/0x80 [ 455.991941][T10516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.991967][T10516] RIP: 0023:0xf73fd579 [ 455.991985][T10516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.992003][T10516] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 455.992027][T10516] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 455.992042][T10516] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000008 [ 455.992055][T10516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.992067][T10516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.992085][T10516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.992109][T10516] [ 456.503501][T10520] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20004 [ 456.519548][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 456.556249][T10520] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.565545][T10520] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.574494][T10520] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.583709][T10520] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.638868][T10520] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.648052][T10520] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.657497][T10520] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.666734][T10520] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.904758][ T978] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 457.010139][T10531] IPVS: length: 95 != 24 [ 457.054776][ T978] usb 5-1: device descriptor read/64, error -71 [ 457.161804][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 457.294909][ T978] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 457.425417][ T978] usb 5-1: device descriptor read/64, error -71 [ 457.450546][ T5892] usb 4-1: USB disconnect, device number 104 [ 457.547149][T10540] FAULT_INJECTION: forcing a failure. [ 457.547149][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 457.561456][ T978] usb usb5-port1: attempt power cycle [ 457.563221][T10540] CPU: 0 UID: 0 PID: 10540 Comm: syz.3.1480 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 457.563255][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.563270][T10540] Call Trace: [ 457.563279][T10540] [ 457.563288][T10540] dump_stack_lvl+0x241/0x360 [ 457.563330][T10540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.563362][T10540] ? __pfx__printk+0x10/0x10 [ 457.563392][T10540] ? kasan_save_free_info+0x40/0x50 [ 457.563421][T10540] ? kfree+0x198/0x430 [ 457.563452][T10540] ? tipc_dest_pop+0x1b3/0x250 [ 457.563479][T10540] ? tipc_sk_mcast_rcv+0x6dd/0x1400 [ 457.563506][T10540] ? __tipc_sendmsg+0x2850/0x3490 [ 457.563537][T10540] ? tipc_sendmsg+0x55/0x70 [ 457.563556][T10540] ? __sock_sendmsg+0x221/0x270 [ 457.563580][T10540] ? ____sys_sendmsg+0x523/0x860 [ 457.563616][T10540] should_fail_ex+0x424/0x570 [ 457.563655][T10540] should_failslab+0xac/0x100 [ 457.563680][T10540] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 457.563707][T10540] ? __alloc_skb+0x1c2/0x480 [ 457.563739][T10540] __alloc_skb+0x1c2/0x480 [ 457.563774][T10540] ? __pfx___alloc_skb+0x10/0x10 [ 457.563806][T10540] ? kasan_quarantine_put+0xdc/0x230 [ 457.563843][T10540] __pskb_copy_fclone+0xb3/0x10e0 [ 457.563866][T10540] ? tipc_dest_pop+0x1b3/0x250 [ 457.563897][T10540] ? tipc_dest_pop+0x1b3/0x250 [ 457.563927][T10540] tipc_sk_mcast_rcv+0x711/0x1400 [ 457.563975][T10540] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 457.564019][T10540] ? tipc_mcast_xmit+0x12c5/0x1b70 [ 457.564051][T10540] ? tipc_mcast_xmit+0x12c5/0x1b70 [ 457.564082][T10540] tipc_mcast_xmit+0x1438/0x1b70 [ 457.564121][T10540] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 457.564151][T10540] ? _copy_from_iter+0x342/0x1c70 [ 457.564184][T10540] ? __build_skb_around+0x247/0x3d0 [ 457.564217][T10540] ? __alloc_skb+0x2e8/0x480 [ 457.564246][T10540] ? __pfx__copy_from_iter+0x10/0x10 [ 457.564276][T10540] ? __pfx___alloc_skb+0x10/0x10 [ 457.564309][T10540] ? tipc_msg_build+0x437/0x1050 [ 457.564334][T10540] ? tipc_msg_build+0x49f/0x1050 [ 457.564355][T10540] ? __local_bh_enable_ip+0x168/0x200 [ 457.564377][T10540] ? lockdep_hardirqs_on+0x9d/0x150 [ 457.564440][T10540] ? rcu_is_watching+0x15/0xb0 [ 457.564472][T10540] __tipc_sendmsg+0x2850/0x3490 [ 457.564520][T10540] ? __pfx___tipc_sendmsg+0x10/0x10 [ 457.564554][T10540] ? cgroup_rstat_updated+0x144/0xc40 [ 457.564590][T10540] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 457.564617][T10540] ? aa_label_sk_perm+0x4f4/0x6d0 [ 457.564650][T10540] ? __pfx_woken_wake_function+0x10/0x10 [ 457.564712][T10540] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 457.564749][T10540] ? look_up_lock_class+0x7b/0x170 [ 457.564785][T10540] ? register_lock_class+0x54/0x330 [ 457.564826][T10540] ? __local_bh_enable_ip+0x168/0x200 [ 457.564849][T10540] ? tipc_sendmsg+0x47/0x70 [ 457.564869][T10540] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 457.564891][T10540] ? do_raw_spin_unlock+0x13c/0x8b0 [ 457.564929][T10540] ? __pfx_tipc_sendmsg+0x10/0x10 [ 457.564959][T10540] tipc_sendmsg+0x55/0x70 [ 457.564976][T10540] __sock_sendmsg+0x221/0x270 [ 457.565004][T10540] ____sys_sendmsg+0x523/0x860 [ 457.565044][T10540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.565090][T10540] __sys_sendmsg+0x271/0x360 [ 457.565127][T10540] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.565196][T10540] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 457.565232][T10540] ? lockdep_hardirqs_on+0x9d/0x150 [ 457.565267][T10540] __do_fast_syscall_32+0xb4/0x110 [ 457.565291][T10540] ? exc_page_fault+0x599/0x8b0 [ 457.565326][T10540] do_fast_syscall_32+0x34/0x80 [ 457.565348][T10540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.565377][T10540] RIP: 0023:0xf744d579 [ 457.565396][T10540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 457.565415][T10540] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 457.565453][T10540] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 457.565469][T10540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.565483][T10540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.565496][T10540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.565510][T10540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.565536][T10540] [ 457.565723][T10540] tipc: Failed to clone mcast rcv buffer [ 458.039540][T10541] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 458.074851][ T978] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 458.111678][ T978] usb 5-1: device descriptor read/8, error -71 [ 458.374772][ T978] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 458.431128][ T978] usb 5-1: device descriptor read/8, error -71 [ 458.479319][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.512729][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.588566][ T978] usb usb5-port1: unable to enumerate USB device [ 458.815367][ T5888] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 458.966144][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 458.972777][ T5888] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 458.982063][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.009186][ T5888] usb 4-1: config 0 descriptor?? [ 459.026248][ T978] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 459.035618][ T5888] gspca_main: sq930x-2.14.0 probing 041e:403c [ 459.186652][ T978] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 459.198407][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.214748][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.238648][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.256515][ T978] usb 1-1: config 0 descriptor?? [ 459.281124][ T978] cp210x 1-1:0.0: cp210x converter detected [ 459.624472][T10567] bond_slave_0: entered promiscuous mode [ 459.643754][T10567] FAULT_INJECTION: forcing a failure. [ 459.643754][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 459.675591][ T978] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 459.695470][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz.2.1489 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 459.695507][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.695522][T10567] Call Trace: [ 459.695531][T10567] [ 459.695541][T10567] dump_stack_lvl+0x241/0x360 [ 459.695591][T10567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.695628][T10567] ? __pfx__printk+0x10/0x10 [ 459.695665][T10567] should_fail_ex+0x424/0x570 [ 459.695702][T10567] should_failslab+0xac/0x100 [ 459.695727][T10567] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 459.695752][T10567] ? __alloc_skb+0x1c2/0x480 [ 459.695784][T10567] __alloc_skb+0x1c2/0x480 [ 459.695811][T10567] ? rtnl_prop_list_size+0x1e/0x1e0 [ 459.695838][T10567] ? __pfx___alloc_skb+0x10/0x10 [ 459.695869][T10567] ? if_nlmsg_size+0x75b/0x7b0 [ 459.695890][T10567] ? if_nlmsg_size+0x544/0x7b0 [ 459.695912][T10567] rtmsg_ifinfo_build_skb+0x84/0x260 [ 459.695936][T10567] ? __local_bh_enable_ip+0x168/0x200 [ 459.695961][T10567] rtmsg_ifinfo+0x91/0x1b0 [ 459.695987][T10567] __dev_notify_flags+0xf9/0x410 [ 459.696021][T10567] ? __pfx___dev_notify_flags+0x10/0x10 [ 459.696049][T10567] ? __dev_change_flags+0x517/0x700 [ 459.696082][T10567] ? __pfx___dev_change_flags+0x10/0x10 [ 459.696111][T10567] ? validate_linkmsg+0x82a/0xa40 [ 459.696133][T10567] ? is_bpf_text_address+0x26/0x2a0 [ 459.696158][T10567] ? nla_strscpy+0x102/0x180 [ 459.696185][T10567] netif_change_flags+0xf0/0x1a0 [ 459.696218][T10567] do_setlink+0x1077/0x4370 [ 459.696258][T10567] ? __pfx_stack_trace_save+0x10/0x10 [ 459.696294][T10567] ? __pfx_do_setlink+0x10/0x10 [ 459.696325][T10567] ? __lock_acquire+0xad5/0xd80 [ 459.696356][T10567] ? __pfx___mutex_trylock_common+0x10/0x10 [ 459.696387][T10567] ? rcu_is_watching+0x15/0xb0 [ 459.696415][T10567] ? trace_contention_end+0x3c/0x120 [ 459.696442][T10567] ? __mutex_lock+0x380/0x10c0 [ 459.696465][T10567] ? __pfx_aa_get_newest_label+0x10/0x10 [ 459.696499][T10567] ? rcu_is_watching+0x15/0xb0 [ 459.696523][T10567] ? rtnl_newlink+0xd68/0x1fe0 [ 459.696549][T10567] ? __pfx___mutex_lock+0x10/0x10 [ 459.696573][T10567] ? nla_strscpy+0x102/0x180 [ 459.696608][T10567] ? full_name_hash+0x93/0xe0 [ 459.696640][T10567] rtnl_newlink+0x17e2/0x1fe0 [ 459.696665][T10567] ? stack_depot_save_flags+0x44/0x940 [ 459.696696][T10567] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.696721][T10567] ? __netlink_deliver_tap+0x561/0x7f0 [ 459.696775][T10567] ? kasan_quarantine_put+0xdc/0x230 [ 459.696805][T10567] ? lockdep_hardirqs_on+0x9d/0x150 [ 459.696840][T10567] ? nlmon_xmit+0xaf/0x100 [ 459.696875][T10567] ? __local_bh_enable_ip+0x168/0x200 [ 459.696896][T10567] ? lockdep_hardirqs_on+0x9d/0x150 [ 459.696933][T10567] ? aa_get_newest_label+0x101/0x6f0 [ 459.696966][T10567] ? __lock_acquire+0xad5/0xd80 [ 459.697002][T10567] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.697029][T10567] rtnetlink_rcv_msg+0x80f/0xd70 [ 459.697054][T10567] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 459.697083][T10567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.697114][T10567] ? ref_tracker_free+0x63e/0x7e0 [ 459.697141][T10567] netlink_rcv_skb+0x208/0x480 [ 459.697167][T10567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.697195][T10567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.697232][T10567] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.697259][T10567] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.697286][T10567] netlink_unicast+0x7f8/0x9a0 [ 459.697314][T10567] ? __pfx_netlink_unicast+0x10/0x10 [ 459.697339][T10567] ? skb_put+0x114/0x1f0 [ 459.697371][T10567] netlink_sendmsg+0x8c3/0xcd0 [ 459.697406][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.697435][T10567] ? __import_iovec+0x585/0x830 [ 459.697462][T10567] ? aa_sock_msg_perm+0x91/0x160 [ 459.697494][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.697519][T10567] __sock_sendmsg+0x221/0x270 [ 459.697545][T10567] ____sys_sendmsg+0x523/0x860 [ 459.697592][T10567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.697636][T10567] __sys_sendmsg+0x271/0x360 [ 459.697671][T10567] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.697738][T10567] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 459.697772][T10567] ? lockdep_hardirqs_on+0x9d/0x150 [ 459.697807][T10567] __do_fast_syscall_32+0xb4/0x110 [ 459.697828][T10567] ? exc_page_fault+0x599/0x8b0 [ 459.697862][T10567] do_fast_syscall_32+0x34/0x80 [ 459.697883][T10567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.697909][T10567] RIP: 0023:0xf73fd579 [ 459.697927][T10567] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 459.697945][T10567] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 459.697968][T10567] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 459.697983][T10567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.698003][T10567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.698016][T10567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 459.698029][T10567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.698053][T10567] [ 460.009240][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 460.009275][ T30] audit: type=1326 audit(1743403709.111:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.0.1485" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x0 [ 460.515574][ T5888] gspca_sq930x: ucbus_write failed -110 [ 460.521312][ T5888] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 460.630069][ T10] usb 4-1: USB disconnect, device number 105 [ 460.853294][T10580] IPVS: length: 95 != 24 [ 461.036334][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 461.314744][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 461.474820][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 461.694715][ T5842] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 461.755653][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.788193][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.878326][T10595] FAULT_INJECTION: forcing a failure. [ 461.878326][T10595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.902067][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 461.915089][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.940934][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.949336][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.970791][ T10] usb 5-1: config 0 descriptor?? [ 461.978123][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.999235][T10595] CPU: 1 UID: 0 PID: 10595 Comm: syz.2.1498 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 461.999265][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 461.999284][T10595] Call Trace: [ 461.999292][T10595] [ 461.999301][T10595] dump_stack_lvl+0x241/0x360 [ 461.999339][T10595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.999370][T10595] ? __pfx__printk+0x10/0x10 [ 461.999408][T10595] should_fail_ex+0x424/0x570 [ 461.999445][T10595] _copy_from_user+0x2d/0xb0 [ 461.999484][T10595] do_ip_vs_set_ctl+0x2dc/0xe50 [ 461.999517][T10595] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 461.999556][T10595] ? __mutex_unlock_slowpath+0x229/0x800 [ 461.999583][T10595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 461.999617][T10595] nf_setsockopt+0x295/0x2c0 [ 461.999647][T10595] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 461.999674][T10595] smc_setsockopt+0x25c/0xd50 [ 461.999708][T10595] ? __pfx_aa_sk_perm+0x10/0x10 [ 461.999733][T10595] ? __pfx_smc_setsockopt+0x10/0x10 [ 461.999763][T10595] ? __lock_acquire+0xad5/0xd80 [ 461.999785][T10595] ? aa_sock_opt_perm+0x79/0x120 [ 461.999817][T10595] ? __pfx_smc_setsockopt+0x10/0x10 [ 461.999848][T10595] do_sock_setsockopt+0x3b1/0x710 [ 461.999883][T10595] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 461.999912][T10595] ? __fget_files+0x2a/0x420 [ 461.999939][T10595] ? __fget_files+0x39d/0x420 [ 461.999961][T10595] ? __fget_files+0x2a/0x420 [ 461.999991][T10595] __ia32_sys_setsockopt+0x1f2/0x280 [ 462.000026][T10595] __do_fast_syscall_32+0xb4/0x110 [ 462.000048][T10595] ? exc_page_fault+0x599/0x8b0 [ 462.000082][T10595] do_fast_syscall_32+0x34/0x80 [ 462.000103][T10595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.000127][T10595] RIP: 0023:0xf73fd579 [ 462.000145][T10595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 462.000162][T10595] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 462.000184][T10595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 462.000199][T10595] RDX: 000000000000048f RSI: 00000000800003c0 RDI: 000000000000002c [ 462.000212][T10595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.000224][T10595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.000236][T10595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.000259][T10595] [ 462.023865][ T5842] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.055835][ T978] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 462.089539][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.314781][ T978] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 462.345393][T10602] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002 [ 462.348734][ T5842] usb 4-1: config 0 descriptor?? [ 462.407566][ T978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 462.506521][ T978] usb 1-1: USB disconnect, device number 85 [ 462.536811][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 462.560416][ T978] cp210x 1-1:0.0: device disconnected [ 462.766132][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 462.790989][ T5842] usbhid 4-1:0.0: can't add hid device: -71 [ 462.797402][ T5842] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 462.874910][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.884433][ T5842] usb 4-1: USB disconnect, device number 106 [ 462.904789][ T978] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 462.937983][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.970213][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 462.980260][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 462.999287][T10615] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 463.013631][T10615] team0: entered promiscuous mode [ 463.034498][T10615] team_slave_0: entered promiscuous mode [ 463.052990][T10615] team_slave_1: entered promiscuous mode [ 463.139525][ T978] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 463.150709][ T978] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 463.268450][ T978] usb 1-1: config 1 interface 0 has no altsetting 0 [ 463.293220][ T978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 463.328592][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.346014][ T978] usb 1-1: Product: syz [ 463.350255][ T978] usb 1-1: Manufacturer: syz [ 463.363428][ T978] usb 1-1: SerialNumber: syz [ 463.383993][T10600] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 463.430890][T10600] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 463.474193][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1508'. [ 463.515137][ T5842] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 463.664908][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 463.693141][ T5842] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 463.725192][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.725216][ T978] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 463.739852][ T5842] usb 3-1: config 0 descriptor?? [ 463.763060][ T5842] gspca_main: sq930x-2.14.0 probing 041e:403c [ 463.801851][T10624] FAULT_INJECTION: forcing a failure. [ 463.801851][T10624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.822808][ T978] usb 1-1: USB disconnect, device number 86 [ 463.838136][T10624] CPU: 0 UID: 0 PID: 10624 Comm: syz.3.1509 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 463.838169][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.838184][T10624] Call Trace: [ 463.838192][T10624] [ 463.838201][T10624] dump_stack_lvl+0x241/0x360 [ 463.838244][T10624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.838274][T10624] ? __pfx__printk+0x10/0x10 [ 463.838310][T10624] should_fail_ex+0x424/0x570 [ 463.838345][T10624] _copy_to_user+0x31/0xb0 [ 463.838374][T10624] simple_read_from_buffer+0xc4/0x170 [ 463.838400][T10624] proc_fail_nth_read+0x1ef/0x260 [ 463.838430][T10624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.838460][T10624] ? rw_verify_area+0x246/0x630 [ 463.838488][T10624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.838515][T10624] vfs_read+0x21f/0xb90 [ 463.838547][T10624] ? __pfx___mutex_lock+0x10/0x10 [ 463.838568][T10624] ? __pfx_vfs_read+0x10/0x10 [ 463.838600][T10624] ? __fget_files+0x2a/0x420 [ 463.838625][T10624] ? __fget_files+0x39d/0x420 [ 463.838648][T10624] ? __fget_files+0x2a/0x420 [ 463.838677][T10624] ksys_read+0x19d/0x2d0 [ 463.838705][T10624] ? __pfx_ksys_read+0x10/0x10 [ 463.838734][T10624] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 463.838766][T10624] ? lockdep_hardirqs_on+0x9d/0x150 [ 463.838798][T10624] __do_fast_syscall_32+0xb4/0x110 [ 463.838820][T10624] ? exc_page_fault+0x599/0x8b0 [ 463.838851][T10624] do_fast_syscall_32+0x34/0x80 [ 463.838872][T10624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.838897][T10624] RIP: 0023:0xf744d579 [ 463.838916][T10624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 463.838935][T10624] RSP: 002b:00000000f50d6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 463.838958][T10624] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 463.838973][T10624] RDX: 000000000000000f RSI: 00000000f743cff4 RDI: 0000000000000000 [ 463.838986][T10624] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 463.839014][T10624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 463.839027][T10624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.839052][T10624] [ 464.116250][ T978] usblp0: removed [ 464.256051][ T5888] usb 5-1: USB disconnect, device number 90 [ 464.455517][T10628] IPVS: length: 95 != 24 [ 464.653913][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 464.695961][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1512'. [ 464.758444][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1512'. [ 464.824950][ T5842] gspca_sq930x: ucbus_write failed -110 [ 464.831974][ T5842] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 464.881928][ T5842] usb 3-1: USB disconnect, device number 89 [ 466.054900][ T5890] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 466.164742][ T5888] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 466.209689][ T5890] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 466.237888][ T5890] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 466.256378][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0 [ 466.270993][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 466.292756][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.319281][ T5890] usb 3-1: Product: syz [ 466.323583][ T5890] usb 3-1: Manufacturer: syz [ 466.328441][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 466.343960][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.358976][ T5890] usb 3-1: SerialNumber: syz [ 466.374230][ T5888] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.374905][T10657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 466.399459][T10657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 466.419240][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 466.430188][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.449277][ T5888] usb 1-1: config 0 descriptor?? [ 466.629533][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 466.646307][ T5890] usb 3-1: USB disconnect, device number 90 [ 466.689649][ T5890] usblp0: removed [ 467.074729][ T5888] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 467.244727][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 467.252466][ T5888] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 467.261177][ T5888] usb 5-1: config 0 has no interface number 0 [ 467.281276][ T5888] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 467.290893][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.306824][ T5888] usb 5-1: Product: syz [ 467.314796][ T5888] usb 5-1: Manufacturer: syz [ 467.326396][ T5888] usb 5-1: SerialNumber: syz [ 467.338883][ T5888] usb 5-1: config 0 descriptor?? [ 467.354016][ T5888] smsc95xx v2.0.0 [ 467.454825][ T5890] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 467.603203][T10685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.604692][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 467.619477][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.632802][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.653956][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.664023][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.672263][ T5890] usb 4-1: Product: syz [ 467.676715][ T5890] usb 4-1: Manufacturer: syz [ 467.681539][ T5890] usb 4-1: SerialNumber: syz [ 467.692158][T10685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.742545][T10685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.844308][T10687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.859001][T10687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.111182][ T5890] usb 4-1: 0:2 : does not exist [ 468.234886][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 468.384887][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 468.392073][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 468.406448][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 468.417316][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 468.426385][ T10] usb 3-1: Product: syz [ 468.430937][ T10] usb 3-1: Manufacturer: syz [ 468.436348][ T10] usb 3-1: SerialNumber: syz [ 468.453135][ T10] usb 3-1: config 0 descriptor?? [ 468.461241][T10689] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 468.695706][ T5890] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 468.732278][ T5890] usb 4-1: USB disconnect, device number 107 [ 468.747572][ T978] usb 3-1: USB disconnect, device number 91 [ 468.784735][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.853384][ T5894] usb 1-1: USB disconnect, device number 87 [ 468.935559][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.319293][T10699] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 469.717951][T10715] IPVS: length: 95 != 24 [ 469.724795][ T9] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 469.773976][T10717] macsec1: entered allmulticast mode [ 469.836408][ T5888] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 469.850728][ T5888] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.876615][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 469.887277][ T5888] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 469.899753][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 469.912978][ T5888] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 469.920140][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 469.960165][ T5888] usb 5-1: USB disconnect, device number 91 [ 469.964029][ T9] usb 4-1: config 214 has an invalid descriptor of length 0, skipping remainder of the config [ 469.981425][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1545'. [ 469.988947][ T9] usb 4-1: config 214 has 0 interfaces, different from the descriptor's value: 1 [ 470.034980][ T9] usb 4-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=c7.ab [ 470.048354][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.057335][ T9] usb 4-1: Product: syz [ 470.064977][ T9] usb 4-1: Manufacturer: syz [ 470.073181][ T9] usb 4-1: SerialNumber: syz [ 470.296550][ T9] usb 4-1: USB disconnect, device number 108 [ 470.595035][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 470.606533][ T5842] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 470.653226][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.682108][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.794739][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 470.800781][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 470.814012][ T5842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 470.825470][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 470.840009][ T10] usb 5-1: config 0 has no interface number 0 [ 470.846518][ T5842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 470.856277][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 470.856853][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 470.875989][ T5842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.886380][T10740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1552'. [ 470.891139][ T5842] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.912795][ T5842] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 470.923909][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.933076][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 470.947869][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 470.963582][ T10] usb 5-1: Product: syz [ 470.970840][ T10] usb 5-1: SerialNumber: syz [ 470.980918][ T10] usb 5-1: config 0 descriptor?? [ 470.990956][ T10] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 471.035352][T10744] tipc: Started in network mode [ 471.040492][T10744] tipc: Node identity 40582d000000000008, cluster identity 4711 [ 471.048962][T10745] tipc: Cannot configure node identity twice [ 471.171586][ T5842] usb 3-1: GET_CAPABILITIES returned 0 [ 471.180314][ T5842] usbtmc 3-1:16.0: can't read capabilities [ 471.210798][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.221310][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.231082][ T5842] usb 5-1: USB disconnect, device number 92 [ 471.498005][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.509668][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.690654][ T5890] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 471.742375][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'. [ 471.908972][ T5890] usb 1-1: config 0 has no interfaces? [ 471.952822][ T5890] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.952858][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.952882][ T5890] usb 1-1: Product: syz [ 471.952900][ T5890] usb 1-1: Manufacturer: syz [ 471.952917][ T5890] usb 1-1: SerialNumber: syz [ 471.965425][ T5890] usb 1-1: config 0 descriptor?? [ 472.071210][T10768] IPVS: length: 95 != 24 [ 472.297017][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 472.784890][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 472.939587][ T10] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.957657][ T10] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.999902][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 473.028573][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.40 [ 473.038558][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.060230][ T10] usb 4-1: Product: 谠䒉⸒杖⑳䪡爚ᓦ턯ᩤ᭬ヂꠠ붂è­ã§‡î—ç…¶î—ºæ°™ë’®ã›Œê»®ã–§ç˜„æ¼»ç¼ƒæ„Šéœ¢à ŠçŽ³êŒæ›´èƒ‰ã¹—ጘꩼἵ䰳胞≙쑣鼓轼⤯졢ᧅ砛鲻âê°¢î˜ç£è¬«à´´ë¦µâ”¬ [ 473.130584][ T10] usb 4-1: Manufacturer: 別ᆸꢲ詮⨈꟥ꋡ鉤㸺êî»®à¨ŽíŽæ°„㓟螇膷᫃뮃躋ê‚ë¼Šì¸–ä“…ì§„é‚¹ä’”ëŽ¾â­ åžŠç²æ›ŒÇ®ã«šî¢•蘧ç‘讬਽ᄇ仼볼槞鑹퓛⬀럂䎶徨䮯ç¥âŠ«â¡æ‰²×†×¨ï±²ã²à§„纆æ…ஹä³ìº¯ÐŸë‰»ë¸€â¶‰å°³î¤ˆè´™î„µä„˜îˆ¢æ’–ᷘ蘪哻►䞷펮곢莜è‰ïŽœ [ 473.178497][ T10] usb 4-1: SerialNumber: syz [ 473.211309][T10785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.224304][T10785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.369885][ T5892] usb 3-1: USB disconnect, device number 92 [ 473.484851][ T5842] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 473.618532][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 473.630954][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 473.645076][ T10] usb 4-1: USB disconnect, device number 109 [ 473.655699][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.670715][ T5842] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.683290][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.693642][ T5842] usb 5-1: SerialNumber: syz [ 474.938660][ T5894] usb 1-1: USB disconnect, device number 88 [ 475.096371][ T5842] cdc_ether 5-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 475.142486][T10811] IPVS: length: 95 != 24 [ 475.298830][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 475.319473][T10817] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 475.348786][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 475.516466][ T10] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 475.530418][ T10] usb 4-1: config 0 has no interface number 0 [ 475.537512][ T10] usb 4-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.553531][ T10] usb 4-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 475.572598][ T10] usb 4-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 166, changing to 7 [ 475.589682][ T10] usb 4-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 475.601956][ T10] usb 4-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.623270][ T10] usb 4-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= d.81 [ 475.633340][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.651017][ T10] usb 4-1: Product: syz [ 475.656638][ T10] usb 4-1: Manufacturer: syz [ 475.661350][ T10] usb 4-1: SerialNumber: syz [ 475.669265][ T10] usb 4-1: config 0 descriptor?? [ 475.675004][ T5842] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 475.683733][T10809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 475.699955][ T10] em28xx 4-1:0.92: New device syz syz @ 480 Mbps (093b:a005, interface 92, class 92) [ 475.710374][ T10] em28xx 4-1:0.92: DVB interface 92 found: isoc [ 475.849116][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 475.876279][ T975] usb 5-1: USB disconnect, device number 93 [ 475.886304][ T5842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 475.922233][ T975] cdc_ether 5-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 475.961096][ T5842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 475.976512][ T5842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.995704][ T5842] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.014661][ T5842] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.029318][ T10] em28xx 4-1:0.92: unknown em28xx chip ID (0) [ 476.053666][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.148402][ T10] em28xx 4-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 476.160391][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.179807][ T10] em28xx 4-1:0.92: board has no eeprom [ 476.201697][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.268161][ T10] em28xx 4-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 476.285137][ T5842] usb 3-1: GET_CAPABILITIES returned 0 [ 476.293858][ T10] em28xx 4-1:0.92: dvb set to isoc mode. [ 476.303018][ T5842] usbtmc 3-1:16.0: can't read capabilities [ 476.315059][ T9] em28xx 4-1:0.92: Remote control support is not available for this card. [ 476.336414][ T10] usb 4-1: USB disconnect, device number 110 [ 476.343169][ T10] em28xx 4-1:0.92: Disconnecting em28xx [ 476.365379][ T5892] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 476.395275][ T10] em28xx 4-1:0.92: Closing input extension [ 476.418615][ T10] em28xx 4-1:0.92: Freeing device [ 476.536831][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 476.546283][ T5892] usb 1-1: can't read configurations, error -61 [ 476.590427][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.628404][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.694803][ T5892] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 476.783678][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 476.793305][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 476.841217][ T30] audit: type=1400 audit(1743403726.021:1231): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A3976 pid=10864 comm="syz.3.1582" [ 476.954065][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 476.966821][ T5892] usb 1-1: can't read configurations, error -61 [ 476.980152][T10878] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 476.995859][T10878] bridge0: port 3(syz_tun) entered disabled state [ 477.003801][T10878] syz_tun: left allmulticast mode [ 477.007864][ T5892] usb usb1-port1: attempt power cycle [ 477.010254][T10878] bridge0: port 3(syz_tun) entered disabled state [ 477.031098][T10878] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 477.050808][T10878] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 477.072282][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.086235][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.374769][ T5892] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 477.398104][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 477.444650][ T5892] usb 1-1: can't read configurations, error -61 [ 477.585257][ T5892] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 477.617624][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 477.675648][ T5892] usb 1-1: can't read configurations, error -61 [ 477.716412][ T5892] usb usb1-port1: unable to enumerate USB device [ 478.505878][ T5842] usb 3-1: USB disconnect, device number 93 [ 478.601126][T10933] FAULT_INJECTION: forcing a failure. [ 478.601126][T10933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.619814][T10933] CPU: 0 UID: 0 PID: 10933 Comm: syz.2.1594 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 478.619847][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 478.619861][T10933] Call Trace: [ 478.619869][T10933] [ 478.619879][T10933] dump_stack_lvl+0x241/0x360 [ 478.619918][T10933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.619950][T10933] ? __pfx__printk+0x10/0x10 [ 478.619988][T10933] should_fail_ex+0x424/0x570 [ 478.620033][T10933] _copy_from_iter+0x211/0x1c70 [ 478.620063][T10933] ? __build_skb_around+0x247/0x3d0 [ 478.620093][T10933] ? __alloc_skb+0x298/0x480 [ 478.620121][T10933] ? __pfx__copy_from_iter+0x10/0x10 [ 478.620148][T10933] ? __pfx___alloc_skb+0x10/0x10 [ 478.620178][T10933] ? skb_put+0x114/0x1f0 [ 478.620210][T10933] netlink_sendmsg+0x73c/0xcd0 [ 478.620255][T10933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.620291][T10933] ? __import_iovec+0x585/0x830 [ 478.620318][T10933] ? aa_sock_msg_perm+0x91/0x160 [ 478.620351][T10933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.620375][T10933] __sock_sendmsg+0x221/0x270 [ 478.620406][T10933] ____sys_sendmsg+0x523/0x860 [ 478.620448][T10933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.620490][T10933] __sys_sendmsg+0x271/0x360 [ 478.620524][T10933] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.620590][T10933] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 478.620624][T10933] ? lockdep_hardirqs_on+0x9d/0x150 [ 478.620656][T10933] __do_fast_syscall_32+0xb4/0x110 [ 478.620683][T10933] ? exc_page_fault+0x599/0x8b0 [ 478.620716][T10933] do_fast_syscall_32+0x34/0x80 [ 478.620737][T10933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.620763][T10933] RIP: 0023:0xf73fd579 [ 478.620781][T10933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 478.620799][T10933] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 478.620823][T10933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 478.620839][T10933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.620852][T10933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.620864][T10933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.620877][T10933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.620901][T10933] [ 478.904261][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 479.014756][ T5888] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 479.132422][ T30] audit: type=1326 audit(1743403728.261:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.154646][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.185901][ T30] audit: type=1326 audit(1743403728.271:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.221068][T10945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.252550][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 479.492954][ T5888] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 479.502239][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.514241][ T30] audit: type=1326 audit(1743403728.271:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.536387][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.547250][T10953] vivid-003: disconnect [ 479.552222][T10953] vivid-003: reconnect [ 479.581450][ T5888] usb 5-1: config 0 descriptor?? [ 479.597299][ T5888] gspca_main: sq930x-2.14.0 probing 041e:403c [ 479.607130][ T30] audit: type=1326 audit(1743403728.271:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.630708][ T30] audit: type=1326 audit(1743403728.271:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.655028][ T30] audit: type=1326 audit(1743403728.271:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=24 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.682363][ T30] audit: type=1326 audit(1743403728.271:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.706329][ T30] audit: type=1326 audit(1743403728.271:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.730057][ T30] audit: type=1326 audit(1743403728.271:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 479.784747][ T5892] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 479.792444][ T5842] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 479.954789][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 479.960011][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 479.970757][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.985741][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.995753][ T5892] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.008499][ T5892] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 480.020537][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 480.034835][ T5892] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 54446, setting to 1024 [ 480.054001][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 480.073988][ T5892] usb 3-1: config 6 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 480.097776][ T5842] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 480.107129][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.117690][ T5892] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 480.138324][ T5842] hub 1-1:1.0: bad descriptor, ignoring hub [ 480.144312][ T5842] hub 1-1:1.0: probe with driver hub failed with error -5 [ 480.153277][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.185244][ T5892] usb 3-1: Product: syz [ 480.190340][ T5842] cdc_wdm 1-1:1.0: skipping garbage [ 480.199940][ T5892] usb 3-1: Manufacturer: syz [ 480.229213][ T5842] cdc_wdm 1-1:1.0: skipping garbage [ 480.243472][ T5892] usb 3-1: SerialNumber: syz [ 480.273562][T10951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.290213][ T5842] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 480.291506][T10957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.305549][ T5888] gspca_sq930x: ucbus_write failed -110 [ 480.311190][ T5888] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 480.313494][ T5892] hso 3-1:6.0: Can't find BULK OUT endpoint [ 480.330383][ T5842] cdc_wdm 1-1:1.0: Unknown control protocol [ 480.395637][ T5842] usb 1-1: USB disconnect, device number 93 [ 480.539896][ T5892] usb 3-1: USB disconnect, device number 94 [ 480.611871][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.623321][ T5894] usb 5-1: USB disconnect, device number 94 [ 480.629745][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.655589][T10962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.722322][T10965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.731464][T10965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.381300][T10975] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 481.744699][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.935704][ T5888] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 482.098350][ T5888] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 482.113384][ T5888] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 482.125936][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 482.139709][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 482.179929][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.205347][ T5888] usb 1-1: Product: syz [ 482.222128][ T5888] usb 1-1: Manufacturer: syz [ 482.235445][ T5888] usb 1-1: SerialNumber: syz [ 482.258236][T10989] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 482.266973][T10989] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 482.489352][ T5888] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 482.543902][ T5888] usb 1-1: USB disconnect, device number 94 [ 482.583364][ T5888] usblp0: removed [ 482.717132][T11001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.730485][T11001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.845011][ T5842] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 482.985348][ T5894] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 483.015125][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 483.026782][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.040744][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 483.051337][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 483.070844][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 483.112247][ T5842] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 483.122243][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.135479][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 483.143229][ T5842] hub 3-1:1.0: bad descriptor, ignoring hub [ 483.152928][ T5842] hub 3-1:1.0: probe with driver hub failed with error -5 [ 483.163932][ T5894] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 483.164251][ T5842] cdc_wdm 3-1:1.0: skipping garbage [ 483.175244][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.200744][ T5894] usb 4-1: config 0 descriptor?? [ 483.219996][ T5842] cdc_wdm 3-1:1.0: skipping garbage [ 483.237069][ T5842] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 483.243398][ T5842] cdc_wdm 3-1:1.0: Unknown control protocol [ 483.404454][T11020] IPVS: length: 95 != 24 [ 483.438326][T11003] netlink: 'syz.3.1617': attribute type 25 has an invalid length. [ 483.455583][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 483.462539][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 483.489174][ T5894] usb 4-1: USB disconnect, device number 111 [ 483.516849][ T978] usb 3-1: USB disconnect, device number 95 [ 483.548962][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 483.822105][T11025] FAULT_INJECTION: forcing a failure. [ 483.822105][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.840574][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.1.1625 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 483.840606][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 483.840620][T11025] Call Trace: [ 483.840629][T11025] [ 483.840639][T11025] dump_stack_lvl+0x241/0x360 [ 483.840686][T11025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.840716][T11025] ? __pfx__printk+0x10/0x10 [ 483.840751][T11025] should_fail_ex+0x424/0x570 [ 483.840785][T11025] _copy_from_iter+0x211/0x1c70 [ 483.840815][T11025] ? __build_skb_around+0x247/0x3d0 [ 483.840846][T11025] ? __alloc_skb+0x298/0x480 [ 483.840868][T11025] ? __pfx__copy_from_iter+0x10/0x10 [ 483.840892][T11025] ? __pfx___alloc_skb+0x10/0x10 [ 483.840917][T11025] ? skb_put+0x114/0x1f0 [ 483.840946][T11025] netlink_sendmsg+0x73c/0xcd0 [ 483.840980][T11025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.841008][T11025] ? __import_iovec+0x585/0x830 [ 483.841035][T11025] ? aa_sock_msg_perm+0x91/0x160 [ 483.841063][T11025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.841080][T11025] __sock_sendmsg+0x221/0x270 [ 483.841099][T11025] ____sys_sendmsg+0x523/0x860 [ 483.841125][T11025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.841155][T11025] __sys_sendmsg+0x271/0x360 [ 483.841181][T11025] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.841227][T11025] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 483.841251][T11025] ? lockdep_hardirqs_on+0x9d/0x150 [ 483.841275][T11025] __do_fast_syscall_32+0xb4/0x110 [ 483.841290][T11025] ? exc_page_fault+0x599/0x8b0 [ 483.841314][T11025] do_fast_syscall_32+0x34/0x80 [ 483.841328][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.841347][T11025] RIP: 0023:0xf7f04579 [ 483.841360][T11025] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.841373][T11025] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 483.841391][T11025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 483.841403][T11025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.841412][T11025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.841420][T11025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.841429][T11025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.841447][T11025] [ 484.120307][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 484.165315][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 484.175108][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 484.924960][ T5894] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 485.085865][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 485.199236][ T5894] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 485.214755][ T975] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 485.224386][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.285768][ T5894] usb 3-1: config 0 descriptor?? [ 485.355322][ T975] usb 1-1: device descriptor read/64, error -71 [ 485.405185][ T5894] gspca_main: sq930x-2.14.0 probing 041e:403c [ 485.604763][ T975] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 485.707163][T11067] IPVS: length: 95 != 24 [ 485.764765][ T975] usb 1-1: device descriptor read/64, error -71 [ 485.940581][ T975] usb usb1-port1: attempt power cycle [ 486.114998][ T5894] gspca_sq930x: ucbus_write failed -110 [ 486.120765][ T5894] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 486.452079][ T5894] usb 3-1: USB disconnect, device number 96 [ 486.474802][ T975] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 486.530458][ T975] usb 1-1: device descriptor read/8, error -71 [ 486.666940][T11079] IPVS: length: 95 != 24 [ 486.789774][ T975] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 486.801432][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 486.847594][ T975] usb 1-1: device descriptor read/8, error -71 [ 486.986775][ T975] usb usb1-port1: unable to enumerate USB device [ 487.376376][ T975] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 487.567693][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 487.586011][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.607459][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.625625][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 487.653357][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 487.653418][ T975] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 487.653447][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.657289][ T975] hub 4-1:1.0: bad descriptor, ignoring hub [ 487.657334][ T975] hub 4-1:1.0: probe with driver hub failed with error -5 [ 487.657764][ T975] cdc_wdm 4-1:1.0: skipping garbage [ 487.657783][ T975] cdc_wdm 4-1:1.0: skipping garbage [ 487.658916][ T975] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 487.717506][ T5892] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 487.751272][ T975] cdc_wdm 4-1:1.0: Unknown control protocol [ 487.894821][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 487.902542][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 487.917127][ T5892] usb 5-1: config 128 has an invalid interface number: 6 but max is 2 [ 487.934695][ T5892] usb 5-1: config 128 has an invalid interface number: 8 but max is 2 [ 487.943164][ T5892] usb 5-1: config 128 has an invalid interface number: 92 but max is 2 [ 487.956978][ T5892] usb 5-1: config 128 has no interface number 0 [ 487.963999][ T5892] usb 5-1: config 128 has no interface number 1 [ 487.972245][ T5892] usb 5-1: config 128 has no interface number 2 [ 487.981235][ T5892] usb 5-1: config 128 interface 6 has no altsetting 0 [ 487.991542][ T5892] usb 5-1: config 128 interface 8 has no altsetting 0 [ 488.000724][ T5892] usb 5-1: config 128 interface 92 has no altsetting 0 [ 488.011813][ T5892] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=8c.42 [ 488.023330][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.033113][ T5892] usb 5-1: Product: syz [ 488.041397][ T5892] usb 5-1: Manufacturer: syz [ 488.047403][ T5892] usb 5-1: SerialNumber: syz [ 488.086784][ T5890] usb 4-1: USB disconnect, device number 112 [ 488.134778][ T5894] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 488.268841][ T5892] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 488.285345][ T5892] usb 5-1: selecting invalid altsetting 0 [ 488.290995][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.295348][ T2343] pvrusb2: Invalid write control endpoint [ 488.304332][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 488.322907][ T5892] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 488.327272][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 488.337516][ T5892] usb 5-1: selecting invalid altsetting 0 [ 488.347241][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 162, setting to 64 [ 488.347278][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 488.384097][ T5894] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 488.410963][ T5894] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 488.417673][ T5892] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 488.420234][ T5894] usb 3-1: Manufacturer: syz [ 488.431433][ T5894] usb 3-1: SerialNumber: syz [ 488.439794][ T5894] usb 3-1: config 0 descriptor?? [ 488.445043][ T5892] usb 5-1: selecting invalid altsetting 0 [ 488.451803][ T5892] usb 5-1: USB disconnect, device number 95 [ 488.457037][T11105] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 488.471550][ T2343] pvrusb2: Invalid write control endpoint [ 488.478023][ T5894] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 488.492757][ T2343] pvrusb2: Invalid write control endpoint [ 488.506038][ T2343] pvrusb2: Invalid write control endpoint [ 488.508948][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.512921][ T2343] pvrusb2: Invalid write control endpoint [ 488.529928][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.539195][ T2343] pvrusb2: Invalid write control endpoint [ 488.553463][ T2343] pvrusb2: Invalid write control endpoint [ 488.560697][ T2343] pvrusb2: Invalid write control endpoint [ 488.566640][ T2343] pvrusb2: Invalid write control endpoint [ 488.572589][ T2343] pvrusb2: Invalid write control endpoint [ 488.578894][ T2343] pvrusb2: Invalid write control endpoint [ 488.586480][ T2343] pvrusb2: Invalid write control endpoint [ 488.592383][ T2343] pvrusb2: Invalid write control endpoint [ 488.598512][ T2343] pvrusb2: Invalid write control endpoint [ 488.604398][ T2343] pvrusb2: Invalid write control endpoint [ 488.665403][ T2343] pvrusb2: Invalid write control endpoint [ 488.724036][T11101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1650'. [ 488.742119][ T2343] pvrusb2: Invalid write control endpoint [ 488.787292][ T2343] pvrusb2: Invalid write control endpoint [ 488.793255][ T2343] pvrusb2: Invalid write control endpoint [ 488.865050][ T2343] pvrusb2: Invalid write control endpoint [ 488.871129][ T2343] pvrusb2: Invalid write control endpoint [ 488.903453][ T2343] pvrusb2: Invalid write control endpoint [ 488.931186][ T2343] pvrusb2: Invalid write control endpoint [ 488.939172][ T2343] pvrusb2: Invalid write control endpoint [ 488.939353][ T5894] usb 3-1: USB disconnect, device number 97 [ 488.945060][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 488.945120][ T2343] pvrusb2: Invalid write control endpoint [ 488.970226][ T2343] pvrusb2: Invalid write control endpoint [ 489.025295][ T2343] pvrusb2: Invalid write control endpoint [ 489.031082][ T2343] pvrusb2: Invalid write control endpoint [ 489.065629][ T2343] pvrusb2: Invalid write control endpoint [ 489.071446][ T2343] pvrusb2: Invalid write control endpoint [ 489.087081][ T2343] pvrusb2: Invalid write control endpoint [ 489.098509][ T2343] pvrusb2: Invalid write control endpoint [ 489.109716][ T2343] pvrusb2: Invalid write control endpoint [ 489.123228][ T2343] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 489.173266][ T2343] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 489.189880][ T2343] pvrusb2: Invalid write control endpoint [ 489.235231][ T2343] pvrusb2: Invalid write control endpoint [ 489.250354][ T2343] pvrusb2: Invalid write control endpoint [ 489.298351][ T2343] pvrusb2: Invalid write control endpoint [ 489.304195][ T2343] pvrusb2: Invalid write control endpoint [ 489.307625][T11138] IPVS: length: 95 != 24 [ 489.328369][ T2343] pvrusb2: Invalid write control endpoint [ 489.334173][ T2343] pvrusb2: Invalid write control endpoint [ 489.345433][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 489.345454][ T30] audit: type=1326 audit(1743403738.521:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 489.365707][ T2343] pvrusb2: Invalid write control endpoint [ 489.374065][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.389780][ T2343] pvrusb2: Invalid write control endpoint [ 489.398654][ T2343] pvrusb2: Invalid write control endpoint [ 489.404709][ T2343] pvrusb2: Invalid write control endpoint [ 489.496752][ T2343] pvrusb2: Invalid write control endpoint [ 489.502560][ T2343] pvrusb2: Invalid write control endpoint [ 489.521934][ T2343] pvrusb2: Invalid write control endpoint [ 489.560039][ T2343] pvrusb2: Invalid write control endpoint [ 489.580940][ T30] audit: type=1326 audit(1743403738.521:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 489.586627][ T2343] pvrusb2: Invalid write control endpoint [ 489.620910][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 489.650367][ T30] audit: type=1326 audit(1743403738.521:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 489.713615][ T2343] pvrusb2: Invalid write control endpoint [ 489.730240][ T2343] pvrusb2: Invalid write control endpoint [ 489.736433][ T2343] pvrusb2: Invalid write control endpoint [ 489.740497][ T30] audit: type=1326 audit(1743403738.521:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 489.769138][ T2343] pvrusb2: Invalid write control endpoint [ 489.775004][ T2343] pvrusb2: Invalid write control endpoint [ 489.825268][ T5894] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 489.832167][ T2343] pvrusb2: Attached sub-driver cs53l32a [ 489.938048][ T30] audit: type=1326 audit(1743403738.521:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 489.960187][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.086221][ T5894] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 490.095054][ T5894] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 490.175014][ T30] audit: type=1326 audit(1743403738.521:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 490.214922][ T5894] usb 4-1: config 220 has no interface number 2 [ 490.231280][ T5894] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 490.248857][ T30] audit: type=1326 audit(1743403738.521:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 490.249169][ T2343] pvrusb2: Invalid write control endpoint [ 490.272102][ T5894] usb 4-1: config 220 interface 0 has no altsetting 0 [ 490.325345][ T5894] usb 4-1: config 220 interface 76 has no altsetting 0 [ 490.361190][ T30] audit: type=1326 audit(1743403738.521:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 490.385575][ T5894] usb 4-1: config 220 interface 1 has no altsetting 0 [ 490.393371][ T30] audit: type=1326 audit(1743403738.531:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 490.411696][ T2343] pvrusb2: Invalid write control endpoint [ 490.419740][ T5894] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 490.423708][ T2343] pvrusb2: Invalid write control endpoint [ 490.437194][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.454748][ T5894] usb 4-1: Product: syz [ 490.459645][ T30] audit: type=1326 audit(1743403738.531:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 490.478530][ T2343] pvrusb2: Invalid write control endpoint [ 490.483192][ T5894] usb 4-1: Manufacturer: syz [ 490.500531][ T5894] usb 4-1: SerialNumber: syz [ 490.500722][ T2343] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 490.525682][T11154] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 490.638124][ T2343] pvrusb2: Device being rendered inoperable [ 490.657570][ T2343] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 490.672270][ T2343] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 490.691436][ T2343] pvrusb2: Invalid write control endpoint [ 490.737828][ T2343] pvrusb2: Invalid write control endpoint [ 490.750102][ T2343] pvrusb2: Invalid write control endpoint [ 490.757903][ T2343] pvrusb2: Invalid write control endpoint [ 490.763869][ T2343] pvrusb2: Invalid write control endpoint [ 490.863206][ T2343] pvrusb2: Invalid write control endpoint [ 490.889777][ T2343] pvrusb2: Invalid write control endpoint [ 490.905899][ T2343] pvrusb2: Invalid write control endpoint [ 490.934379][ T2343] pvrusb2: Invalid write control endpoint [ 490.951997][ T2343] pvrusb2: Invalid write control endpoint [ 490.964797][ T5890] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 491.274811][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 491.280179][ T2343] pvrusb2: Invalid write control endpoint [ 491.324847][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.345507][ T2343] pvrusb2: Invalid write control endpoint [ 491.347342][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.352691][ T2343] pvrusb2: Invalid write control endpoint [ 491.361683][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 491.404167][ T2343] pvrusb2: Invalid write control endpoint [ 491.413710][ T2343] pvrusb2: Invalid write control endpoint [ 491.421352][ T2343] pvrusb2: Invalid write control endpoint [ 491.430534][ T2343] pvrusb2: Invalid write control endpoint [ 491.438476][ T2343] pvrusb2: Invalid write control endpoint [ 491.444485][ T2343] pvrusb2: Invalid write control endpoint [ 491.453393][ T2343] pvrusb2: Invalid write control endpoint [ 491.461433][ T2343] pvrusb2: Invalid write control endpoint [ 491.470108][ T2343] pvrusb2: Invalid write control endpoint [ 491.481546][ T2343] pvrusb2: Invalid write control endpoint [ 491.490492][ T2343] pvrusb2: Invalid write control endpoint [ 491.498330][ T2343] pvrusb2: Invalid write control endpoint [ 491.504374][ T2343] pvrusb2: Invalid write control endpoint [ 491.520686][ T2343] pvrusb2: Invalid write control endpoint [ 491.530559][ T2343] pvrusb2: Invalid write control endpoint [ 491.537083][ T2343] pvrusb2: Invalid write control endpoint [ 491.543308][ T2343] pvrusb2: Invalid write control endpoint [ 491.553580][ T2343] pvrusb2: Invalid write control endpoint [ 491.560249][ T2343] pvrusb2: Invalid write control endpoint [ 491.570185][ T2343] pvrusb2: Invalid write control endpoint [ 491.578729][ T2343] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 491.610487][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 491.655015][ T5890] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 491.682821][ T2343] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 491.703357][ T2343] pvrusb2: Invalid write control endpoint [ 491.723623][ T2343] pvrusb2: Invalid write control endpoint [ 491.750866][ T2343] pvrusb2: Invalid write control endpoint [ 491.767212][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.789080][ T5890] hub 1-1:1.0: bad descriptor, ignoring hub [ 491.797750][ T5890] hub 1-1:1.0: probe with driver hub failed with error -5 [ 491.807889][ T2343] pvrusb2: Invalid write control endpoint [ 491.815415][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 491.830556][ T2343] pvrusb2: Invalid write control endpoint [ 491.845081][ T2343] pvrusb2: Invalid write control endpoint [ 491.853804][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 491.866259][ T2343] pvrusb2: Invalid write control endpoint [ 491.886059][ T5890] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 491.888421][ T2343] pvrusb2: Invalid write control endpoint [ 491.933722][ T5890] cdc_wdm 1-1:1.0: Unknown control protocol [ 491.941726][ T2343] pvrusb2: Invalid write control endpoint [ 491.971218][ T2343] pvrusb2: Invalid write control endpoint [ 491.992465][ T2343] pvrusb2: Invalid write control endpoint [ 492.018157][ T2343] pvrusb2: Invalid write control endpoint [ 492.036879][ T5890] usb 1-1: USB disconnect, device number 99 [ 492.043618][ T2343] pvrusb2: Invalid write control endpoint [ 492.059736][ T2343] pvrusb2: Invalid write control endpoint [ 492.081576][ T2343] pvrusb2: Invalid write control endpoint [ 492.099268][ T2343] pvrusb2: Invalid write control endpoint [ 492.117259][ T2343] pvrusb2: Invalid write control endpoint [ 492.143695][ T2343] pvrusb2: Invalid write control endpoint [ 492.180805][ T2343] pvrusb2: Invalid write control endpoint [ 492.203127][ T2343] pvrusb2: Invalid write control endpoint [ 492.213102][ T2343] pvrusb2: Invalid write control endpoint [ 492.221046][ T2343] pvrusb2: Attached sub-driver cs53l32a [ 492.292149][ T2343] pvrusb2: Invalid write control endpoint [ 492.302638][ T2343] pvrusb2: Invalid write control endpoint [ 492.315946][ T2343] pvrusb2: Invalid write control endpoint [ 492.324124][ T2343] pvrusb2: Invalid write control endpoint [ 492.335122][ T2343] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 492.367325][ T2343] pvrusb2: Device being rendered inoperable [ 492.375508][ T2343] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 492.409136][ T2343] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 492.466239][ T5894] usb 4-1: selecting invalid altsetting 0 [ 492.475176][ T5894] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 492.484035][ T2343] pvrusb2: Invalid write control endpoint [ 492.522151][ T5894] usb 4-1: No valid video chain found. [ 492.580844][ T2343] pvrusb2: Invalid write control endpoint [ 492.595894][ T5894] usb 4-1: selecting invalid altsetting 0 [ 492.596366][ T2343] pvrusb2: Invalid write control endpoint [ 492.601671][ T5894] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 492.648922][ T5894] usb 4-1: USB disconnect, device number 113 [ 492.650633][ T2343] pvrusb2: Invalid write control endpoint [ 492.669819][ T2343] pvrusb2: Invalid write control endpoint [ 492.705602][ T2343] pvrusb2: Invalid write control endpoint [ 492.721733][ T2343] pvrusb2: Invalid write control endpoint [ 492.744758][ T2343] pvrusb2: Invalid write control endpoint [ 492.750668][ T2343] pvrusb2: Invalid write control endpoint [ 492.772003][ T2343] pvrusb2: Invalid write control endpoint [ 492.782268][ T2343] pvrusb2: Invalid write control endpoint [ 492.790651][ T2343] pvrusb2: Invalid write control endpoint [ 492.800994][ T2343] pvrusb2: Invalid write control endpoint [ 492.807848][ T2343] pvrusb2: Invalid write control endpoint [ 492.813811][ T2343] pvrusb2: Invalid write control endpoint [ 492.875484][ T2343] pvrusb2: Invalid write control endpoint [ 492.888866][ T2343] pvrusb2: Invalid write control endpoint [ 492.904843][ T2343] pvrusb2: Invalid write control endpoint [ 492.910666][ T2343] pvrusb2: Invalid write control endpoint [ 492.969608][ T2343] pvrusb2: Invalid write control endpoint [ 493.000268][ T2343] pvrusb2: Invalid write control endpoint [ 493.009658][ T2343] pvrusb2: Invalid write control endpoint [ 493.016173][ T2343] pvrusb2: Invalid write control endpoint [ 493.027743][ T2343] pvrusb2: Invalid write control endpoint [ 493.033756][ T2343] pvrusb2: Invalid write control endpoint [ 493.041946][ T2343] pvrusb2: Invalid write control endpoint [ 493.054078][ T2343] pvrusb2: Invalid write control endpoint [ 493.065118][ T5894] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 493.072980][ T2343] pvrusb2: Invalid write control endpoint [ 493.078964][ T5910] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 493.099364][ T2343] pvrusb2: Invalid write control endpoint [ 493.109388][ T2343] pvrusb2: Invalid write control endpoint [ 493.124833][ T2343] pvrusb2: Invalid write control endpoint [ 493.135078][ T2343] pvrusb2: Invalid write control endpoint [ 493.140999][ T2343] pvrusb2: Invalid write control endpoint [ 493.178446][ T2343] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 493.247049][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 493.254707][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 493.274460][ T5894] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 493.276768][ T2343] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c) [ 493.295922][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.301554][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.313070][ T5910] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 493.325545][ T2343] pvrusb2: Invalid write control endpoint [ 493.331794][ T5910] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 493.341344][ T2343] pvrusb2: Invalid write control endpoint [ 493.348442][ T2343] pvrusb2: Invalid write control endpoint [ 493.354239][ T2343] pvrusb2: Invalid write control endpoint [ 493.360174][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.369761][ T2343] pvrusb2: Invalid write control endpoint [ 493.376528][ T5910] usb 1-1: config 0 descriptor?? [ 493.383891][ T2343] pvrusb2: Invalid write control endpoint [ 493.392867][ T5894] usb 4-1: config 0 descriptor?? [ 493.428710][ T5894] gspca_main: sq930x-2.14.0 probing 041e:403c [ 493.432391][ T2343] pvrusb2: Invalid write control endpoint [ 493.454093][ T2343] pvrusb2: Invalid write control endpoint [ 493.462807][ T2343] pvrusb2: Invalid write control endpoint [ 493.478083][ T2343] pvrusb2: Invalid write control endpoint [ 493.487166][ T2343] pvrusb2: Invalid write control endpoint [ 493.530525][ T2343] pvrusb2: Invalid write control endpoint [ 493.536647][ T2343] pvrusb2: Invalid write control endpoint [ 493.543001][ T2343] pvrusb2: Invalid write control endpoint [ 493.552749][ T2343] pvrusb2: Invalid write control endpoint [ 493.560010][ T2343] pvrusb2: Invalid write control endpoint [ 493.565967][ T2343] pvrusb2: Invalid write control endpoint [ 493.571882][ T2343] pvrusb2: Invalid write control endpoint [ 493.642764][ T2343] pvrusb2: Invalid write control endpoint [ 493.659968][ T2343] pvrusb2: Invalid write control endpoint [ 493.680430][ T2343] pvrusb2: Invalid write control endpoint [ 493.696753][ T2343] pvrusb2: Attached sub-driver cs53l32a [ 493.783316][ T2343] pvrusb2: Invalid write control endpoint [ 493.790161][ T2343] pvrusb2: Invalid write control endpoint [ 493.796517][ T2343] pvrusb2: Invalid write control endpoint [ 493.802499][ T2343] pvrusb2: Invalid write control endpoint [ 493.808476][ T2343] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 493.827014][ T2343] pvrusb2: Device being rendered inoperable [ 493.833125][ T2343] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 493.846346][ T2343] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 493.929598][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 494.090579][ T24] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 494.102503][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.132305][ T24] usb 3-1: config 0 descriptor?? [ 494.138460][ T5894] gspca_sq930x: ucbus_write failed -110 [ 494.144381][ T5894] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 494.191630][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 494.304800][ T5892] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 494.383736][ T24] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 494.399150][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 494.577311][ T5890] usb 4-1: USB disconnect, device number 114 [ 494.586618][ T24] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 494.672846][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 494.672866][ T30] audit: type=1326 audit(1743403743.871:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.1.1680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 494.751117][ T30] audit: type=1326 audit(1743403743.911:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.1.1680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 494.785285][ T30] audit: type=1326 audit(1743403743.921:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.1.1680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 495.605319][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 495.645614][ T5890] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 495.766460][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 495.776406][ T24] usb 4-1: config 75 has an invalid interface number: 136 but max is 0 [ 495.795956][ T24] usb 4-1: config 75 has no interface number 0 [ 495.805030][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 495.812652][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.845835][ T5892] usb 3-1: USB disconnect, device number 98 [ 495.858093][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca [ 495.874738][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 495.889613][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.903142][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 495.931641][ T24] usb 4-1: Product: syz [ 495.946733][ T24] usb 4-1: Manufacturer: syz [ 495.955901][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 495.971515][ T24] usb 4-1: SerialNumber: syz [ 495.996781][ T5890] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 496.011284][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.037213][ T5890] hub 5-1:1.0: bad descriptor, ignoring hub [ 496.055571][ T5890] hub 5-1:1.0: probe with driver hub failed with error -5 [ 496.078389][ T5890] cdc_wdm 5-1:1.0: skipping garbage [ 496.084951][ T5890] cdc_wdm 5-1:1.0: skipping garbage [ 496.106762][ T5890] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 496.112853][ T5890] cdc_wdm 5-1:1.0: Unknown control protocol [ 496.435187][ T5910] usb 1-1: USB disconnect, device number 100 [ 496.455769][ T5890] usb 5-1: USB disconnect, device number 97 [ 496.566195][ T24] ftdi_sio 4-1:75.136: FTDI USB Serial Device converter detected [ 496.608339][ T24] ftdi_sio ttyUSB0: unknown device type: 0xbcca [ 496.627560][ T24] usb 4-1: USB disconnect, device number 115 [ 496.643386][ T24] ftdi_sio 4-1:75.136: device disconnected [ 496.694236][T11247] IPVS: length: 95 != 24 [ 496.725846][T11249] IPVS: length: 95 != 24 [ 496.866033][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 496.902890][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 497.453409][ T30] audit: type=1326 audit(1743403746.651:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 497.482966][ T30] audit: type=1326 audit(1743403746.651:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 497.595362][ T5910] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 497.864223][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 497.886513][ T5910] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 497.900106][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.916007][ T30] audit: type=1326 audit(1743403746.651:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 497.925859][ T5910] usb 5-1: config 0 descriptor?? [ 497.967533][ T5910] gspca_main: sq930x-2.14.0 probing 041e:403c [ 498.043321][ T30] audit: type=1326 audit(1743403746.651:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 498.099646][ T30] audit: type=1326 audit(1743403746.651:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 498.123998][T11271] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 498.130104][ T30] audit: type=1326 audit(1743403746.651:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 498.164875][ T30] audit: type=1326 audit(1743403746.651:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.3.1691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 498.284751][ T5892] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 498.495123][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 498.522623][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 498.568329][ T5892] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 498.578018][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.595756][ T5892] usb 3-1: Product: syz [ 498.600728][ T5892] usb 3-1: Manufacturer: syz [ 498.624676][ T5892] usb 3-1: SerialNumber: syz [ 498.641135][ T5892] usb 3-1: config 0 descriptor?? [ 498.685125][ T5910] gspca_sq930x: ucbus_write failed -110 [ 498.714917][ T5910] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 498.778766][ T5892] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 499.207039][ T5890] usb 5-1: USB disconnect, device number 98 [ 499.234350][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.246507][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.415879][ T24] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 499.474856][T11296] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1703'. [ 499.562354][T11301] fuse: Bad value for 'rootmode' [ 499.584802][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 499.591578][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.613495][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 499.623140][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 499.635365][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 499.647236][ T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 499.657003][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.678735][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 499.686069][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 499.694162][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 499.700047][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 499.710877][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 499.717933][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 499.723674][ T9148] usb 3-1: Failed to submit usb control message: -71 [ 499.742195][ T5892] usb 3-1: USB disconnect, device number 99 [ 499.765203][ T9148] usb 3-1: unable to send the bmi data to the device: -71 [ 499.785313][ T9148] usb 3-1: unable to get target info from device [ 499.792247][ T9148] usb 3-1: could not get target info (-71) [ 499.804740][ T978] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 499.835530][ T9148] usb 3-1: could not probe fw (-71) [ 499.996819][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.007611][ T978] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 500.017040][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.028916][ T978] usb 4-1: config 0 descriptor?? [ 500.037475][ T978] pwc: Askey VC010 type 2 USB webcam detected. [ 500.075404][ T5890] usb 1-1: USB disconnect, device number 101 [ 500.184517][T11310] openvswitch: netlink: Key type 273 is out of range max 32 [ 500.239823][ T978] pwc: send_video_command error -71 [ 500.272690][ T978] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 500.281385][ T978] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 500.296365][ T978] usb 4-1: USB disconnect, device number 116 [ 500.885085][ T978] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 501.050117][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.066481][ T978] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 501.085002][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.131751][ T978] usb 4-1: config 0 descriptor?? [ 501.156947][ T978] pwc: Askey VC010 type 2 USB webcam detected. [ 501.414918][ T5890] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 501.515807][T11345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.535081][T11345] syz.4.1716 (11345): drop_caches: 0 [ 501.691860][ T978] pwc: recv_control_msg error -32 req 02 val 2b00 [ 501.708483][ T978] pwc: recv_control_msg error -32 req 02 val 2700 [ 501.746153][ T978] pwc: recv_control_msg error -32 req 02 val 2c00 [ 501.795363][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 501.804071][ T978] pwc: recv_control_msg error -32 req 04 val 1000 [ 501.812185][ T5890] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 501.821961][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.831436][ T978] pwc: recv_control_msg error -32 req 04 val 1300 [ 501.840760][ T978] pwc: recv_control_msg error -32 req 04 val 1400 [ 501.851587][ T978] pwc: recv_control_msg error -32 req 02 val 2000 [ 501.863033][ T978] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.879218][ T5890] usb 1-1: config 0 descriptor?? [ 501.887213][ T978] pwc: recv_control_msg error -32 req 04 val 1500 [ 501.903298][ T5890] gspca_main: sq930x-2.14.0 probing 041e:403c [ 502.316569][ T978] pwc: recv_control_msg error -71 req 02 val 2600 [ 502.332472][ T978] pwc: recv_control_msg error -71 req 02 val 2900 [ 502.352615][ T978] pwc: recv_control_msg error -71 req 02 val 2800 [ 502.370812][ T978] pwc: recv_control_msg error -71 req 04 val 1100 [ 502.385889][ T978] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.421813][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.452713][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.486937][ T978] pwc: Registered as video103. [ 502.510239][ T978] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 502.660522][ T978] usb 4-1: USB disconnect, device number 117 [ 502.677398][ T5890] gspca_sq930x: ucbus_write failed -110 [ 502.693820][ T5890] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 503.100086][T11362] netlink: 'syz.3.1724': attribute type 7 has an invalid length. [ 503.224869][T11365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.234042][T11365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.527005][ T5910] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 503.546770][ T5890] usb 1-1: USB disconnect, device number 102 [ 503.904823][ T5910] usb 4-1: too many configurations: 199, using maximum allowed: 8 [ 503.925696][ T5910] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 503.939678][ T5910] usb 4-1: can't read configurations, error -61 [ 504.094727][ T5910] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 504.236606][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 504.268824][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 504.286132][ T5910] usb 4-1: too many configurations: 199, using maximum allowed: 8 [ 504.296570][T11382] dccp_close: ABORT with 32 bytes unread [ 504.316774][ T5910] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 504.324503][ T5910] usb 4-1: can't read configurations, error -61 [ 504.342342][ T5910] usb usb4-port1: attempt power cycle [ 504.405852][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.425826][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.704730][ T5910] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 504.736622][ T5910] usb 4-1: too many configurations: 199, using maximum allowed: 8 [ 504.746520][ T5910] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 504.770220][ T5910] usb 4-1: can't read configurations, error -61 [ 504.924915][ T5910] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 505.043452][ T5910] usb 4-1: too many configurations: 199, using maximum allowed: 8 [ 505.063180][ T5910] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 505.074464][ T5910] usb 4-1: can't read configurations, error -61 [ 505.085507][ T5910] usb usb4-port1: unable to enumerate USB device [ 505.464783][ T5910] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 505.527528][T11413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.552823][T11412] syz.1.1739 (11412): drop_caches: 0 [ 505.666403][ T5910] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 505.697555][ T5910] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 505.697609][ T5910] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 505.697635][ T5910] usb 5-1: config 0 has no interface number 0 [ 505.697655][ T5910] usb 5-1: config 0 has no interface number 1 [ 505.697699][ T5910] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 505.697728][ T5910] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 505.697758][ T5910] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 505.697792][ T5910] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 505.697819][ T5910] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 505.697847][ T5910] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 505.697874][ T5910] usb 5-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 505.697903][ T5910] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 505.697929][ T5910] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 505.972373][ T5910] usb 5-1: config 0 interface 66 has no altsetting 0 [ 506.002806][ T5910] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 506.014181][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.028962][ T5910] usb 5-1: Product: syz [ 506.037827][ T5910] usb 5-1: Manufacturer: syz [ 506.050077][ T5910] usb 5-1: SerialNumber: syz [ 506.099059][ T5910] usb 5-1: config 0 descriptor?? [ 506.115949][ T5910] ljca 5-1:0.84: bulk endpoints not found [ 506.322527][ T5910] ljca 5-1:0.66: probe with driver ljca failed with error -71 [ 506.334880][ T978] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 506.334998][ T5910] usb 5-1: USB disconnect, device number 99 [ 506.507874][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 506.526437][ T978] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 506.541487][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.553997][ T978] usb 3-1: config 0 descriptor?? [ 506.569792][ T978] gspca_main: sq930x-2.14.0 probing 041e:403c [ 507.274955][ T978] gspca_sq930x: ucbus_write failed -110 [ 507.290484][ T978] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 507.506939][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.513559][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.557841][ T5842] usb 3-1: USB disconnect, device number 100 [ 507.735273][ T978] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 507.757436][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1749'. [ 507.793245][T11443] netlink: 'syz.0.1750': attribute type 11 has an invalid length. [ 507.846325][T11446] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 507.905416][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 507.920764][ T978] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 507.930122][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.939853][ T978] usb 5-1: Product: syz [ 507.944181][ T978] usb 5-1: Manufacturer: syz [ 507.950026][ T978] usb 5-1: SerialNumber: syz [ 507.957622][ T978] usb 5-1: config 0 descriptor?? [ 507.966709][ T978] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 507.995003][ T5890] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 508.025500][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.037367][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.147463][ T5842] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 508.155854][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 508.157931][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.177247][ T978] gspca_ov534_9: reg_w failed -71 [ 508.213211][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.223776][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 508.256482][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 508.275828][ T5890] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 508.295745][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.325803][ T5890] hub 4-1:1.0: bad descriptor, ignoring hub [ 508.334773][ T5842] usb 1-1: device descriptor read/64, error -71 [ 508.341761][ T5890] hub 4-1:1.0: probe with driver hub failed with error -5 [ 508.352424][ T5890] cdc_wdm 4-1:1.0: skipping garbage [ 508.363787][ T5890] cdc_wdm 4-1:1.0: skipping garbage [ 508.379648][ T5890] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 508.392761][ T5890] cdc_wdm 4-1:1.0: Unknown control protocol [ 508.594800][ T5842] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 508.605338][ T978] gspca_ov534_9: Unknown sensor 0000 [ 508.605410][ T978] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 508.630134][ T978] usb 5-1: USB disconnect, device number 100 [ 508.715042][ T5890] usb 4-1: USB disconnect, device number 122 [ 508.769093][ T5842] usb 1-1: device descriptor read/64, error -71 [ 508.895687][ T5842] usb usb1-port1: attempt power cycle [ 509.244689][ T5842] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 509.265528][ T5842] usb 1-1: device descriptor read/8, error -71 [ 509.504746][ T5842] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 509.525423][ T5842] usb 1-1: device descriptor read/8, error -71 [ 509.555189][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 509.646684][ T5842] usb usb1-port1: unable to enumerate USB device [ 509.818761][T11472] FAULT_INJECTION: forcing a failure. [ 509.818761][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 509.844764][T11472] CPU: 0 UID: 0 PID: 11472 Comm: syz.2.1760 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 509.844798][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 509.844819][T11472] Call Trace: [ 509.844829][T11472] [ 509.844839][T11472] dump_stack_lvl+0x241/0x360 [ 509.844877][T11472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.844908][T11472] ? __pfx__printk+0x10/0x10 [ 509.844933][T11472] ? __lock_acquire+0xad5/0xd80 [ 509.844962][T11472] should_fail_ex+0x424/0x570 [ 509.844999][T11472] should_failslab+0xac/0x100 [ 509.845024][T11472] kmem_cache_alloc_noprof+0x78/0x390 [ 509.845048][T11472] ? skb_clone+0x20c/0x390 [ 509.845071][T11472] skb_clone+0x20c/0x390 [ 509.845094][T11472] __netlink_deliver_tap+0x3c4/0x7f0 [ 509.845129][T11472] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.845153][T11472] netlink_deliver_tap+0x19d/0x1b0 [ 509.845179][T11472] netlink_unicast+0x7c6/0x9a0 [ 509.845208][T11472] ? __pfx_netlink_unicast+0x10/0x10 [ 509.845232][T11472] ? skb_put+0x114/0x1f0 [ 509.845265][T11472] netlink_sendmsg+0x8c3/0xcd0 [ 509.845299][T11472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.845328][T11472] ? __import_iovec+0x585/0x830 [ 509.845356][T11472] ? aa_sock_msg_perm+0x91/0x160 [ 509.845388][T11472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.845412][T11472] __sock_sendmsg+0x221/0x270 [ 509.845439][T11472] ____sys_sendmsg+0x523/0x860 [ 509.845477][T11472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.845520][T11472] __sys_sendmsg+0x271/0x360 [ 509.845555][T11472] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.845622][T11472] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 509.845655][T11472] ? lockdep_hardirqs_on+0x9d/0x150 [ 509.845689][T11472] __do_fast_syscall_32+0xb4/0x110 [ 509.845710][T11472] ? exc_page_fault+0x599/0x8b0 [ 509.845743][T11472] do_fast_syscall_32+0x34/0x80 [ 509.845765][T11472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 509.845790][T11472] RIP: 0023:0xf73fd579 [ 509.845817][T11472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 509.845835][T11472] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 509.845859][T11472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 509.845882][T11472] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.845895][T11472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 509.845908][T11472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 509.845922][T11472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 509.845953][T11472] [ 510.114066][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.211512][T11477] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 510.283823][T11478] [ 510.286192][T11478] ====================================================== [ 510.293219][T11478] WARNING: possible circular locking dependency detected [ 510.300243][T11478] 6.14.0-syzkaller-10764-gaa918db707fb #0 Not tainted [ 510.307028][T11478] ------------------------------------------------------ [ 510.314051][T11478] syz.3.1762/11478 is trying to acquire lock: [ 510.320120][T11478] ffffffff900f5188 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 510.329361][T11478] [ 510.329361][T11478] but task is already holding lock: [ 510.336744][T11478] ffff88807c1f0aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 510.346889][T11478] [ 510.346889][T11478] which lock already depends on the new lock. [ 510.346889][T11478] [ 510.357311][T11478] [ 510.357311][T11478] the existing dependency chain (in reverse order) is: [ 510.366370][T11478] [ 510.366370][T11478] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 510.375027][T11478] lock_acquire+0x116/0x2f0 [ 510.380088][T11478] __mutex_lock+0x1a5/0x10c0 [ 510.385214][T11478] smc_switch_to_fallback+0x35/0xda0 [ 510.391048][T11478] smc_sendmsg+0x11f/0x530 [ 510.396000][T11478] __sock_sendmsg+0x221/0x270 [ 510.401381][T11478] __sys_sendto+0x365/0x4c0 [ 510.407579][T11478] __ia32_sys_sendto+0xdd/0x100 [ 510.413018][T11478] __do_fast_syscall_32+0xb4/0x110 [ 510.419636][T11478] do_fast_syscall_32+0x34/0x80 [ 510.425489][T11478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.432630][T11478] [ 510.432630][T11478] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 510.440305][T11478] lock_acquire+0x116/0x2f0 [ 510.445350][T11478] lock_sock_nested+0x48/0x100 [ 510.450665][T11478] do_ip_setsockopt+0x17e9/0x39c0 [ 510.456321][T11478] ip_setsockopt+0x63/0x100 [ 510.461448][T11478] do_sock_setsockopt+0x3b1/0x710 [ 510.467023][T11478] __ia32_sys_setsockopt+0x1f2/0x280 [ 510.472861][T11478] __do_fast_syscall_32+0xb4/0x110 [ 510.478507][T11478] do_fast_syscall_32+0x34/0x80 [ 510.483893][T11478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.490807][T11478] [ 510.490807][T11478] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 510.498077][T11478] validate_chain+0xa69/0x24e0 [ 510.503401][T11478] __lock_acquire+0xad5/0xd80 [ 510.508666][T11478] lock_acquire+0x116/0x2f0 [ 510.513838][T11478] __mutex_lock+0x1a5/0x10c0 [ 510.519235][T11478] do_ip_getsockopt+0x11ae/0x2ba0 [ 510.525665][T11478] ip_getsockopt+0xef/0x2e0 [ 510.531132][T11478] tcp_getsockopt+0x16f/0x1d0 [ 510.536339][T11478] smc_getsockopt+0x1c6/0x400 [ 510.542789][T11478] do_sock_getsockopt+0x391/0x740 [ 510.549220][T11478] __ia32_sys_getsockopt+0x2a1/0x370 [ 510.555130][T11478] __do_fast_syscall_32+0xb4/0x110 [ 510.560800][T11478] do_fast_syscall_32+0x34/0x80 [ 510.566178][T11478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.573917][T11478] [ 510.573917][T11478] other info that might help us debug this: [ 510.573917][T11478] [ 510.585552][T11478] Chain exists of: [ 510.585552][T11478] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 510.585552][T11478] [ 510.600353][T11478] Possible unsafe locking scenario: [ 510.600353][T11478] [ 510.608344][T11478] CPU0 CPU1 [ 510.613729][T11478] ---- ---- [ 510.619114][T11478] lock(&smc->clcsock_release_lock); [ 510.624522][T11478] lock(sk_lock-AF_INET); [ 510.631501][T11478] lock(&smc->clcsock_release_lock); [ 510.639598][T11478] lock(rtnl_mutex); [ 510.644305][T11478] [ 510.644305][T11478] *** DEADLOCK *** [ 510.644305][T11478] [ 510.652998][T11478] 1 lock held by syz.3.1762/11478: [ 510.658390][T11478] #0: ffff88807c1f0aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 510.669064][T11478] [ 510.669064][T11478] stack backtrace: [ 510.675312][T11478] CPU: 1 UID: 0 PID: 11478 Comm: syz.3.1762 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(full) [ 510.675336][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.675347][T11478] Call Trace: [ 510.675357][T11478] [ 510.675365][T11478] dump_stack_lvl+0x241/0x360 [ 510.675394][T11478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.675419][T11478] ? __pfx__printk+0x10/0x10 [ 510.675451][T11478] ? print_lock+0x171/0x1a0 [ 510.675472][T11478] print_circular_bug+0x2e1/0x300 [ 510.675495][T11478] check_noncircular+0x142/0x160 [ 510.675519][T11478] validate_chain+0xa69/0x24e0 [ 510.675548][T11478] __lock_acquire+0xad5/0xd80 [ 510.675567][T11478] lock_acquire+0x116/0x2f0 [ 510.675583][T11478] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 510.675609][T11478] __mutex_lock+0x1a5/0x10c0 [ 510.675626][T11478] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 510.675643][T11478] ? __lock_acquire+0xad5/0xd80 [ 510.675661][T11478] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 510.675678][T11478] ? __pfx___mutex_lock+0x10/0x10 [ 510.675700][T11478] do_ip_getsockopt+0x11ae/0x2ba0 [ 510.675720][T11478] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 510.675739][T11478] ? schedule+0x163/0x360 [ 510.675763][T11478] ? look_up_lock_class+0x7b/0x170 [ 510.675789][T11478] ? register_lock_class+0x54/0x330 [ 510.675807][T11478] ? __lock_acquire+0xad5/0xd80 [ 510.675824][T11478] ? __mutex_trylock_common+0x184/0x2e0 [ 510.675848][T11478] ? __pfx___mutex_trylock_common+0x10/0x10 [ 510.675872][T11478] ip_getsockopt+0xef/0x2e0 [ 510.675890][T11478] ? __pfx_ip_getsockopt+0x10/0x10 [ 510.675908][T11478] ? smc_getsockopt+0x131/0x400 [ 510.675935][T11478] tcp_getsockopt+0x16f/0x1d0 [ 510.675963][T11478] ? __pfx_tcp_getsockopt+0x10/0x10 [ 510.675983][T11478] ? aa_sk_perm+0x96f/0xac0 [ 510.676003][T11478] ? sock_common_getsockopt+0x2e/0xb0 [ 510.676026][T11478] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 510.676046][T11478] smc_getsockopt+0x1c6/0x400 [ 510.676072][T11478] ? __pfx_smc_getsockopt+0x10/0x10 [ 510.676097][T11478] ? aa_sock_opt_perm+0x79/0x120 [ 510.676120][T11478] ? __pfx_smc_getsockopt+0x10/0x10 [ 510.676151][T11478] do_sock_getsockopt+0x391/0x740 [ 510.676177][T11478] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 510.676201][T11478] ? __fget_files+0x2a/0x420 [ 510.676221][T11478] ? __fget_files+0x39d/0x420 [ 510.676239][T11478] ? __fget_files+0x2a/0x420 [ 510.676261][T11478] __ia32_sys_getsockopt+0x2a1/0x370 [ 510.676288][T11478] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 510.676314][T11478] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 510.676341][T11478] ? lockdep_hardirqs_on+0x9d/0x150 [ 510.676367][T11478] __do_fast_syscall_32+0xb4/0x110 [ 510.676384][T11478] ? exc_page_fault+0x599/0x8b0 [ 510.676410][T11478] do_fast_syscall_32+0x34/0x80 [ 510.676426][T11478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.676447][T11478] RIP: 0023:0xf744d579 [ 510.676462][T11478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 510.676477][T11478] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 510.676496][T11478] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 510.676507][T11478] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 00000000800000c0 [ 510.676519][T11478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.676529][T11478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 510.676539][T11478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.676555][T11478] [ 511.053600][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.062464][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16