last executing test programs: 17.191662457s ago: executing program 4 (id=1334): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c00009040000020701010009"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000100000008001b0000000000"], 0x30}}, 0x0) 13.584081794s ago: executing program 4 (id=1345): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x80086601, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000", 0x4}], 0x1) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 11.329997052s ago: executing program 4 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2, r5}]) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000af0c2020460400f007ab01020301090204430000facacf00d66f1a0acc39a90a48ea6c00446202c7534ca3e596fbc1ecfe23c5b8f899e3ff78d0983b30c7822fe6f337f35f2d9e28a6f2ecfb8c77ce44eeeea6205dc05a073898c261cea9b266640a188900000692736a00"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) 8.34301456s ago: executing program 1 (id=1364): r0 = socket(0x10, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x12, 0x2, 0xffffffffffffffff, @void, @value=r3}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001500)) dup(r5) close(0x3) 8.040427382s ago: executing program 2 (id=1366): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x38, 0x0, "f2de039caaf87ea4f9b0cc04978efe783d2936c96fd675dcda406531fdaacfbfeb933188177fbeddd3cef82502ab01f551041a587102a1916317a92bb678bc3c01e222770cc77c70aec386fdb83bf92c"}, 0xd8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 8.026288742s ago: executing program 1 (id=1367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x400c0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 7.200512753s ago: executing program 4 (id=1370): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) syz_io_uring_setup(0x2b7, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000380)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100)=0x4, 0x0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8100}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x40, 0x0, 0x3b2}, &(0x7f0000000180)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8000}, 0x1}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e22, 0x6, @remote, 0x8}}, {{0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe774}}}, 0x104) io_uring_enter(r7, 0x266a, 0x41e3, 0x2, 0x0, 0x55) readv(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/132, 0x84}], 0x1, 0x7, 0x0) fsopen(&(0x7f00000009c0)='9p\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0x6, 0x3}, 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{}, {0x1c}, {0x6}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740), 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 6.834438127s ago: executing program 2 (id=1371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x1, 0x18, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(blake2s-224-x86,xts-aes-neon)\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 6.784241903s ago: executing program 1 (id=1372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) dup2(r0, r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100001"], 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0x1, 0x0, 0x0, 0x1, 0x6, 0x7}}, {0x4}}]}]}, 0x54}}, 0x40010) 6.580437382s ago: executing program 1 (id=1373): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000004900010000000000000000000a00806e0805000000000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xffffffffffffffdd, 0x0, 0x0, 0x4, 0x5f, 0x0, 0xc000, 0x4, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', r3, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x40000008, {0x6, 0x3, 0x100000003, 0x800000000000, 0x2, 0x3881fffc, {0x6, 0xfffffffffffff73b, 0x8, 0x800000000000, 0x3, 0x2, 0xa, 0x0, 0x0, 0x6000, 0x9011, r3, r4, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="c800000010000000000000000000ba77ccb336c1a94ddd8865ca801584b4269a1f206ff8bd9bd4babba481a64f06da9c303bf50d60f11ab59633314e5f7bb4491f0be133d50160b4d38349bdbabbb32c7e0b3841dd5b6a1fcd43de7b0cfee0459afb85f4dcfed1898b41a34a5dd421", @ANYRES32=0x0, @ANYBLOB="05220000000000006400128009000100766c616e00000000540002800c0002000000000000000000400003800c000100040000004c4d00000c000100fcffffff000000000c00010008000000000000000c00010001000000090000000c00010003000000ffffffff04000480440012800b000100697036677265000034000280060010004e2300000800040009000000060011004e20000008000d000500000006000f000600000008001400ff070000"], 0xc8}, 0x1, 0xba01}, 0x0) (async) pread64(r0, &(0x7f0000000180)=""/109, 0x6d, 0x100) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf, 0x13}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8004}]}}]}, 0x44}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000fb20000200000849078ac1414bbffffffffdd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4a2cc84df31569534bacff3cf57d83ced0e1806a3887d5e1fa204a811bebe3c9cabba670316de9c49ed0f2a20f39ea09254d4587aa975829a3ea81888b459d"], 0x0) (rerun: 32) 6.44981548s ago: executing program 2 (id=1374): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000224000100000000090400000103000000092105000001220500090581030002000007"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff0}, 0x24000004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0xa, 0x1, 0x89) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x3, 0x1, 0x2, 0x8c, 0xa4, 0x8, 0x1, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2, 0x28}, 0xe) writev(r0, &(0x7f0000000a00), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe21, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x8000000, 0xffff7fff}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="200826000000685c967f0c586c258e92d37987b7c9b081fe5dbd132ac7d056c102ff36ef4774ebfc697d209c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x9c}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) 6.02779989s ago: executing program 1 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2, r5}]) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000af0c2020460400f007ab01020301090204430000facacf00d66f1a0acc39a90a48ea6c00446202c7534ca3e596fbc1ecfe23c5b8f899e3ff78d0983b30c7822fe6f337f35f2d9e28a6f2ecfb8c77ce44eeeea6205dc05a073898c261cea9b266640a188900000692736a00"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) 5.946006586s ago: executing program 0 (id=1376): r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x9], [0x0, 0x1, 0x0, 0x0, 0x4, 0x80, 0xffff], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]], '\x00', [{0x2}, {0x0, 0x40000005}, {0xaf5, 0xd67e}, {0x3fe}, {0x0, 0x800000}, {0x0, 0x8}, {0x0, 0x3}, {0xf, 0xfffffffe}, {0x3, 0x3ff}, {0x0, 0x9}, {0x8, 0xa}, {0x0, 0xca}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x70}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = openat$sndseq(0xffffff9c, &(0x7f00000056c0), 0x2) r2 = epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x47, 0xfffffffffffffffe) (async) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x47, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000057c0)={0x80000017}) 5.876319587s ago: executing program 3 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005040000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) 5.456797663s ago: executing program 3 (id=1378): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0xa, 0x80000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffa}, 0x8) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r12, {0xd, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 5.296128547s ago: executing program 0 (id=1379): r0 = socket(0x10, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x12, 0x2, 0xffffffffffffffff, @void, @value=r3}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001500)) close(0x3) 4.9836038s ago: executing program 0 (id=1380): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x6ea0, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000003c0)) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) membarrier(0x10, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x5288fbd8d4bddb5e, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 3.69223361s ago: executing program 4 (id=1381): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c00009040000020701010009"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000100000008001b0000000000"], 0x30}}, 0x0) 3.326846694s ago: executing program 3 (id=1382): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x38, 0x0, "f2de039caaf87ea4f9b0cc04978efe783d2936c96fd675dcda406531fdaacfbfeb933188177fbeddd3cef82502ab01f551041a587102a1916317a92bb678bc3c01e222770cc77c70aec386fdb83bf92c"}, 0xd8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 3.1648315s ago: executing program 3 (id=1383): open(&(0x7f0000000000)='./file0\x00', 0x80c0, 0x162) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x31e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x4}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x180a}}, {0xd9, &(0x7f0000000080)=@string={0xd9, 0x3, "4afa8c2ce562492d2c420558654b0e78dbd9f53e88cfc95386b489a3690628a4282c0ba837e88855cb33e488779c89d8a136c1044e0b3176591b46dae77dfbfea10e6f9f23b18eae6579a88da8085595d1d94e9876eda51ba4b16598e53337a92fd256d931536068b1bf7d524c289b12b9ab74c7b0797f0e6b20a93aaa99f9abf0407bf62d7d4660dd980d8b532c5c7d3435d43160ce5c3f8edd598fecaaee4ffe452cd3abf8117f19f2207b3ba3ddc89142e74dc86cf84a3de32cb07b1337dc9eaa2dbcc152842b15c14c08aa13f7a216b2476084ab7a"}}, {0xf8, &(0x7f0000000200)=@string={0xf8, 0x3, "5bebbed6d83665c941d5873201740c5a6d4a4a5a600976765c4a452b172d76dc800b9aea40b17cd4e27633fa9728af837e20ecd6ecbd16ea869f9753acbbdb687eea3fa67071dd3b34ad43b6262100a46d125fb1ac8a98e31d88fecb85ca767c45c4e52c86009b8a9e0682051436900645d4db24356e11fe4fd39f492bc6e4a6fa3e80a3d7dbd77e52ff7217e3a198728a14a8455a854cd58054c6ab17a1b77e44a201d130eba4ae19d632cd02558f34ac37537f8bc378af95f5ef9d150f5f50230f31cf863ae24b65e6c40961e9fc534bb21f147f8adc335a369f557ab0843b33e4d7f0da1ac1aa891e9dcac60d91d1ab83c59dd2f2"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x67, &(0x7f0000000340)=@string={0x67, 0x3, "b0bc918a56e7ce0504a4e4d50ef67c619611418279cb5e733f16aac255b09d82f65eba14c314102c340ae6874cbfc4d0392e91afa08ef7c9ffb7942d806de0a19faa861387036cf41f95447fc139633a780b6084c2341ab52fc77fe3ec90e06a5edb8a8b78"}}, {0xcf, &(0x7f00000004c0)=@string={0xcf, 0x3, "9ca84b2c36086907c73e30251ec19af7619801cc8b301e4af208b75b7dcc1a604e1b52f9cc6d440179b3b9d071652e84bd08aa91dffb292e1bcd7ba207f2eff3ba4a4d8ce9482f76b1a735f58dfa629b6124a35417bd9c085979a502a8d4d259390b0169bbc781e286835b4ee7d5640e86ba9e5115f802d163cff7919b4ee27124092d08eb6f473c6ba42eb5de4de8da4ae9305d56449e02a20a2ef1c75f87489d624433c22f9ee2264fe50f87ae4d765784be2f9ce3d0ec4160beeffdfc10dc7d257e47cab4fc3ad80715cd3c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100c}}]}) 2.992270539s ago: executing program 2 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) dup2(r0, r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100001"], 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x40010) 2.738707514s ago: executing program 2 (id=1385): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f000001bd80)=@raw={'raw\x00', 0x4001, 0x3, 0x1258, 0x112c, 0x0, 0x148, 0x112c, 0x148, 0x120c, 0x240, 0x240, 0x120c, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'erspan0\x00', 'nr0\x00'}, 0x0, 0x10c4, 0x112c, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gre0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12b4) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) write$UHID_INPUT(r1, 0x0, 0x0) 1.856233059s ago: executing program 2 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_setup(0x1, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000af0c2020460400f007ab01020301090204430000facacf00d66f1a0acc39a90a48ea6c00446202c7534ca3e596fbc1ecfe23c5b8f899e3ff78d0983b30c7822fe6f337f35f2d9e28a6f2ecfb8c77ce44eeeea6205dc05a073898c261cea9b266640a188900000692736a00"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) 1.432565815s ago: executing program 0 (id=1387): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="05000005", 0x4, 0x50, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 1.041632042s ago: executing program 1 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x600}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1433010000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r12, @ANYBLOB="0a0034000101fe000101000007001501"], 0x30}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) 491.952536ms ago: executing program 0 (id=1389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005040000005f596da4", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) 451.509811ms ago: executing program 3 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14fff4001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000008000a40000000070900030073ed72a0060080000900010073797a30"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x24000090) 298.499705ms ago: executing program 0 (id=1391): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) syz_io_uring_setup(0x2b7, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000380)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100)=0x4, 0x0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8100}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x40, 0x0, 0x3b2}, &(0x7f0000000180)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8000}, 0x1}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e22, 0x6, @remote, 0x8}}, {{0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe774}}}, 0x104) io_uring_enter(r7, 0x266a, 0x41e3, 0x2, 0x0, 0x55) readv(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/132, 0x84}], 0x1, 0x7, 0x0) fsopen(&(0x7f00000009c0)='9p\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0x6, 0x3}, 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{}, {0x1c}, {0x6}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740), 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xd4, 0x26, 0x7a, 0x10, 0x1004, 0x61aa, 0x4f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 220.370567ms ago: executing program 4 (id=1392): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x810) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flistxattr(r2, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @loopback}}}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) getsockopt$bt_hci(r1, 0x11e, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 3 (id=1393): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0xa, 0x80000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffa}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@delqdisc={0x188, 0x25, 0x400, 0x1ff, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff1, 0x6}, {0xfff1, 0xffff}, {0x10, 0xd}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x3, 0x81, 0x0, 0xf, 0x8, 0x7}}, {0x12, 0x2, [0x400, 0x1, 0x3, 0x0, 0x4, 0xf, 0x8e9d]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x81, 0x0, 0x5, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x4, 0x8]}}, {{0x1c, 0x1, {0x7, 0x7, 0x10, 0xfffffff6, 0x0, 0x57, 0x1902, 0x3}}, {0xa, 0x2, [0x800, 0x6, 0x8]}}, {{0x1c, 0x1, {0x3, 0x20, 0x1, 0x2, 0x0, 0x2, 0xb, 0x7}}, {0x12, 0x2, [0x3, 0x2, 0x9, 0x1, 0x7, 0x5, 0x0]}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0xc, 0x1, 0x8, 0x3, 0x3}}, {0xa, 0x2, [0x1, 0x9, 0x0]}}, {{0x1c, 0x1, {0xd0, 0x3, 0x2, 0xc08, 0x0, 0x6, 0x81, 0x7}}, {0x12, 0x2, [0x0, 0xff, 0x4, 0x797f, 0x1, 0x4, 0x3]}}, {{0x1c, 0x1, {0xf5, 0xb5, 0x8, 0xd31, 0x2, 0x4, 0x4, 0x8}}, {0x14, 0x2, [0x7, 0xb5, 0x6, 0x1ff, 0x1, 0xff00, 0xf, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x7a, 0x1}}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x9f}}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0xd, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) kernel console output (not intermixed with test programs): of the config [ 436.702570][ T24] usb 3-1: config 0 has no interfaces? [ 436.777882][ T24] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 436.787363][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.795414][ T24] usb 3-1: Product: syz [ 436.800332][ T24] usb 3-1: Manufacturer: syz [ 436.809548][ T24] usb 3-1: SerialNumber: syz [ 436.836649][ T24] usb 3-1: config 0 descriptor?? [ 437.743466][ T9613] syz.3.952: attempt to access beyond end of device [ 437.743466][ T9613] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 437.985651][ T1210] usb 5-1: USB disconnect, device number 41 [ 438.331380][ T1210] usb 2-1: USB disconnect, device number 47 [ 438.673911][ T24] usb 3-1: USB disconnect, device number 42 [ 439.094320][ T9630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.955'. [ 440.096104][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 440.527240][ T9641] input: syz0 as /devices/virtual/input/input24 [ 441.042278][ T9645] tipc: Enabled bearer , priority 0 [ 441.087237][ T9645] syzkaller0: entered promiscuous mode [ 441.106089][ T9645] syzkaller0: entered allmulticast mode [ 441.182777][ T9645] tipc: Resetting bearer [ 441.196290][ T1210] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 441.348329][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.402365][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.466168][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.540828][ T9653] netlink: 'syz.1.964': attribute type 21 has an invalid length. [ 441.726035][ T1210] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.794078][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.812201][ T1210] usb 4-1: config 0 descriptor?? [ 442.031401][ T9644] tipc: Resetting bearer [ 442.106655][ T9644] tipc: Disabling bearer [ 442.390300][ T1210] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 442.547570][ T1210] usb 4-1: USB disconnect, device number 43 [ 442.739918][ T9665] fido_id[9665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 442.838983][ T30] audit: type=1326 audit(1753452260.126:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.4.967" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 443.046131][ T5931] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 443.215942][ T1210] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 443.258065][ T5931] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 443.291971][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.375921][ T5931] usb 3-1: config 0 has no interfaces? [ 443.385444][ T5931] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 443.396831][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.406832][ T5931] usb 3-1: Product: syz [ 443.411157][ T5931] usb 3-1: Manufacturer: syz [ 444.018084][ T1210] usb 5-1: Using ep0 maxpacket: 16 [ 444.032692][ T5931] usb 3-1: SerialNumber: syz [ 444.069556][ T1210] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 444.080751][ T5931] usb 3-1: config 0 descriptor?? [ 444.095077][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.186834][ T1210] usb 5-1: Product: syz [ 444.191262][ T1210] usb 5-1: Manufacturer: syz [ 444.256001][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 444.410345][ T9683] syz.3.969: attempt to access beyond end of device [ 444.410345][ T9683] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 444.765958][ T1210] usb 5-1: SerialNumber: syz [ 444.882072][ T1210] usb 5-1: config 0 descriptor?? [ 444.903846][ T1210] usb 5-1: bad CDC descriptors [ 444.909832][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.040604][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.049880][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.167749][ T9] usb 1-1: Product: syz [ 445.172037][ T9] usb 1-1: Manufacturer: syz [ 445.342674][ T9] usb 1-1: SerialNumber: syz [ 445.501177][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.512360][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.186639][ T9] usb 5-1: USB disconnect, device number 42 [ 446.229922][ T5931] usb 3-1: USB disconnect, device number 43 [ 447.041990][ T9703] syz.3.973: attempt to access beyond end of device [ 447.041990][ T9703] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 447.137081][ T9705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.972'. [ 448.153366][ T5931] usb 1-1: USB disconnect, device number 47 [ 448.741818][ T9709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.974'. [ 449.173252][ T9716] netlink: 'syz.1.977': attribute type 21 has an invalid length. [ 449.184071][ T9716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.977'. [ 449.476021][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 449.564871][ T30] audit: type=1326 audit(1753452266.846:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.1.981" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 450.305499][ T5932] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 450.535056][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.565709][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.586008][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.605965][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.615142][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.632195][ T9] usb 3-1: config 0 descriptor?? [ 450.677154][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 450.737052][ T5932] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 450.759208][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.799066][ T5932] usb 2-1: Product: syz [ 450.803340][ T5932] usb 2-1: Manufacturer: syz [ 450.819375][ T5932] usb 2-1: SerialNumber: syz [ 450.835098][ T5932] usb 2-1: config 0 descriptor?? [ 450.887534][ T5932] usb 2-1: bad CDC descriptors [ 451.370566][ T9] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 451.417541][ T9] usb 3-1: USB disconnect, device number 44 [ 451.603213][ T9741] fido_id[9741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 451.726542][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 451.781439][ T5931] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 451.905994][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 451.913793][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 451.924207][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 451.934574][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 451.979867][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 451.995063][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.995245][ T5931] usb 1-1: config index 0 descriptor too short (expected 17156, got 18) [ 452.003953][ T43] usb 4-1: Product: syz [ 452.031579][ T43] usb 4-1: Manufacturer: syz [ 452.039217][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.061089][ T5931] usb 1-1: config 0 has no interfaces? [ 452.085192][ T43] usb 4-1: SerialNumber: syz [ 452.101771][ T5931] usb 1-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 452.116830][ T9743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 452.117159][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.143231][ T5931] usb 1-1: Product: syz [ 452.163631][ T5931] usb 1-1: Manufacturer: syz [ 452.270243][ T5931] usb 1-1: SerialNumber: syz [ 452.304842][ T5931] usb 1-1: config 0 descriptor?? [ 452.347239][ T43] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 452.492704][ T43] usb 2-1: USB disconnect, device number 48 [ 452.544243][ T9743] FAULT_INJECTION: forcing a failure. [ 452.544243][ T9743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.557824][ T30] audit: type=1326 audit(1753452269.826:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.585973][ T9743] CPU: 1 UID: 0 PID: 9743 Comm: syz.3.983 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 452.586004][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.586017][ T9743] Call Trace: [ 452.586026][ T9743] [ 452.586036][ T9743] dump_stack_lvl+0x189/0x250 [ 452.586066][ T9743] ? __pfx____ratelimit+0x10/0x10 [ 452.586089][ T9743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.586111][ T9743] ? __pfx__printk+0x10/0x10 [ 452.586138][ T9743] ? __might_fault+0xb0/0x130 [ 452.586177][ T9743] should_fail_ex+0x414/0x560 [ 452.586204][ T9743] _copy_from_user+0x2d/0xb0 [ 452.586233][ T9743] get_old_itimerspec32+0x145/0x220 [ 452.586259][ T9743] ? __pfx_get_old_itimerspec32+0x10/0x10 [ 452.586283][ T9743] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.586340][ T9743] __ia32_sys_timer_settime32+0x152/0x250 [ 452.586375][ T9743] ? __pfx___ia32_sys_timer_settime32+0x10/0x10 [ 452.586413][ T9743] ? __secure_computing+0xe2/0x2a0 [ 452.586453][ T9743] __do_fast_syscall_32+0xb6/0x2b0 [ 452.586480][ T9743] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.586506][ T9743] do_fast_syscall_32+0x34/0x80 [ 452.586529][ T9743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.586554][ T9743] RIP: 0023:0xf709e539 [ 452.586568][ T9743] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 452.586580][ T9743] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000104 [ 452.586597][ T9743] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 452.586611][ T9743] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.586624][ T9743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.586635][ T9743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.586647][ T9743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.586675][ T9743] [ 452.800510][ T30] audit: type=1326 audit(1753452269.826:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=51 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.822873][ T30] audit: type=1326 audit(1753452269.826:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.844944][ T30] audit: type=1326 audit(1753452269.826:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.867380][ T30] audit: type=1326 audit(1753452269.826:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.891466][ T30] audit: type=1326 audit(1753452269.826:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.914139][ T30] audit: type=1326 audit(1753452269.826:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.936366][ T30] audit: type=1326 audit(1753452269.826:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 452.958347][ T30] audit: type=1326 audit(1753452269.826:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 454.079617][ T9805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.988'. [ 454.728658][ T5932] usb 4-1: USB disconnect, device number 44 [ 454.796283][ T5932] usblp0: removed [ 454.916620][ T5931] usb 1-1: USB disconnect, device number 48 [ 455.230108][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059817000: rx timeout, send abort [ 455.249840][ T9814] tipc: Started in network mode [ 455.376391][ T9814] tipc: Node identity 2e7240065607, cluster identity 4711 [ 455.383847][ T9814] tipc: Enabled bearer , priority 0 [ 455.483627][ T9817] syzkaller0: entered promiscuous mode [ 455.510658][ T9817] syzkaller0: entered allmulticast mode [ 455.575593][ T9821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.990'. [ 455.675776][ T9817] tipc: Resetting bearer [ 455.730274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059815000: rx timeout, send abort [ 455.738747][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059817000: abort rx timeout. Force session deactivation [ 455.853720][ T9813] tipc: Resetting bearer [ 455.985034][ T9813] tipc: Disabling bearer [ 456.231152][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059815800: rx timeout, send abort [ 456.240105][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059815000: abort rx timeout. Force session deactivation [ 456.696434][ T5990] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 456.739525][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059815800: abort rx timeout. Force session deactivation [ 456.786950][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 456.858031][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.875937][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.906629][ T5990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.950280][ T5990] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.980550][ T43] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 456.997063][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.046631][ T5990] usb 1-1: config 0 descriptor?? [ 457.078408][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 457.105901][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.183295][ T43] usb 3-1: config 0 descriptor?? [ 457.225572][ T43] pwc: Creative Labs Webcam Pro Ex detected. [ 457.256076][ T43] pwc: Warning: more than 1 configuration available. [ 457.276492][ T5931] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 457.425185][ T9831] binder: 9830:9831 ioctl 400c620e 80000180 returned -22 [ 457.493429][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.503438][ T5990] usbhid 1-1:0.0: can't add hid device: -71 [ 457.518061][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.528711][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.536219][ T5990] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 457.586977][ T5931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.606671][ T5990] usb 1-1: USB disconnect, device number 49 [ 457.618019][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.763120][ T5931] usb 2-1: config 0 descriptor?? [ 457.936263][ T5917] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 458.164491][ T43] pwc: Failed to set LED on/off time (-71) [ 458.220982][ T43] pwc: send_video_command error -71 [ 458.263057][ T5931] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 458.276283][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 458.284001][ T43] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 458.367300][ T43] usb 3-1: USB disconnect, device number 45 [ 458.394407][ T5917] usb 4-1: config 0 has no interfaces? [ 458.424815][ T5917] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 458.464491][ T5931] usb 2-1: USB disconnect, device number 49 [ 458.511928][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.565915][ T5917] usb 4-1: Product: syz [ 458.570189][ T5917] usb 4-1: Manufacturer: syz [ 458.574846][ T5917] usb 4-1: SerialNumber: syz [ 458.590554][ T9855] fido_id[9855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 458.681801][ T5917] usb 4-1: config 0 descriptor?? [ 458.743887][ T9859] netlink: 'syz.0.1001': attribute type 21 has an invalid length. [ 458.793913][ T9859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1001'. [ 460.946273][ T5917] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 461.086359][ T5917] usb 2-1: device descriptor read/64, error -71 [ 461.125225][ T43] usb 4-1: USB disconnect, device number 45 [ 461.264679][ T9887] input: syz0 as /devices/virtual/input/input25 [ 461.309390][ T9886] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 461.328402][ T9886] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 461.338806][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 461.374866][ T9886] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 461.475960][ T5917] usb 2-1: device descriptor read/64, error -71 [ 461.596142][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 461.636153][ T5917] usb usb2-port1: attempt power cycle [ 461.768402][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.826425][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.836973][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.850420][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.874262][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.886053][ T5990] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 461.897674][ T9] usb 4-1: config 0 descriptor?? [ 461.975993][ T5917] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 462.046435][ T5990] usb 1-1: device descriptor read/64, error -71 [ 462.077704][ T5917] usb 2-1: device descriptor read/8, error -71 [ 462.285978][ T5990] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 462.324442][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 462.333124][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 462.365923][ T5917] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 462.391812][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 462.391832][ T30] audit: type=1326 audit(1753452279.676:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.2.1014" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 462.408355][ T9] usb 4-1: USB disconnect, device number 46 [ 462.430969][ T5917] usb 2-1: device descriptor read/8, error -71 [ 462.488753][ T5990] usb 1-1: device descriptor read/64, error -71 [ 462.563831][ T5917] usb usb2-port1: unable to enumerate USB device [ 462.607323][ T5990] usb usb1-port1: attempt power cycle [ 462.736289][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 462.886253][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 462.898685][ T43] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 462.909650][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.928076][ T43] usb 3-1: Product: syz [ 462.932323][ T43] usb 3-1: Manufacturer: syz [ 462.945677][ T43] usb 3-1: SerialNumber: syz [ 462.962825][ T43] usb 3-1: config 0 descriptor?? [ 462.983500][ T43] usb 3-1: bad CDC descriptors [ 462.988656][ T5990] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 463.290158][ T5990] usb 1-1: device descriptor read/8, error -71 [ 463.445963][ T5917] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 463.546283][ T5990] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 463.579139][ T5990] usb 1-1: device descriptor read/8, error -71 [ 463.631716][ T5917] usb 5-1: config index 0 descriptor too short (expected 17156, got 18) [ 463.651875][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.664222][ T5917] usb 5-1: config 0 has no interfaces? [ 463.679675][ T5917] usb 5-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 463.700074][ T5990] usb usb1-port1: unable to enumerate USB device [ 463.717845][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.730255][ T5917] usb 5-1: Product: syz [ 463.734648][ T5917] usb 5-1: Manufacturer: syz [ 463.740414][ T5917] usb 5-1: SerialNumber: syz [ 463.758839][ T5917] usb 5-1: config 0 descriptor?? [ 463.806547][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 464.004278][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.015570][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.131168][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.144637][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.166505][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.316763][ T9] usb 4-1: config 0 descriptor?? [ 464.784922][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 464.808052][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 464.866757][ T9] usb 4-1: USB disconnect, device number 47 [ 465.225972][ T9] usb 3-1: USB disconnect, device number 46 [ 465.315549][ T9928] FAULT_INJECTION: forcing a failure. [ 465.315549][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 465.352596][ T9928] CPU: 0 UID: 0 PID: 9928 Comm: syz.2.1019 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 465.352628][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.352645][ T9928] Call Trace: [ 465.352653][ T9928] [ 465.352663][ T9928] dump_stack_lvl+0x189/0x250 [ 465.352695][ T9928] ? __pfx____ratelimit+0x10/0x10 [ 465.352720][ T9928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.352745][ T9928] ? __pfx__printk+0x10/0x10 [ 465.352771][ T9928] ? crng_make_state+0x3fc/0x700 [ 465.352795][ T9928] ? crng_make_state+0x13a/0x700 [ 465.352823][ T9928] should_fail_ex+0x414/0x560 [ 465.352851][ T9928] should_failslab+0xa8/0x100 [ 465.352883][ T9928] __kmalloc_cache_noprof+0x70/0x3d0 [ 465.352913][ T9928] ? sctp_add_bind_addr+0x8c/0x370 [ 465.352935][ T9928] sctp_add_bind_addr+0x8c/0x370 [ 465.352956][ T9928] sctp_copy_local_addr_list+0x30b/0x4e0 [ 465.352985][ T9928] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 465.353011][ T9928] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 465.353041][ T9928] ? sctp_v4_is_any+0x35/0x60 [ 465.353066][ T9928] ? sctp_copy_one_addr+0x93/0x360 [ 465.353087][ T9928] sctp_bind_addr_copy+0xb3/0x3c0 [ 465.353106][ T9928] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 465.353126][ T9928] sctp_connect_new_asoc+0x2e0/0x690 [ 465.353164][ T9928] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 465.353192][ T9928] ? __local_bh_enable_ip+0x12d/0x1c0 [ 465.353224][ T9928] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 465.353242][ T9928] ? security_sctp_bind_connect+0x7e/0x2e0 [ 465.353269][ T9928] sctp_sendmsg+0x155c/0x2810 [ 465.353321][ T9928] ? __pfx_sctp_sendmsg+0x10/0x10 [ 465.353354][ T9928] ? aa_sk_perm+0x81e/0x950 [ 465.353379][ T9928] ? __pfx_aa_sk_perm+0x10/0x10 [ 465.353399][ T9928] ? sock_rps_record_flow+0x19/0x410 [ 465.353419][ T9928] ? inet_sendmsg+0x2f4/0x370 [ 465.353439][ T9928] __sock_sendmsg+0x19c/0x270 [ 465.353471][ T9928] __sys_sendto+0x3bd/0x520 [ 465.353503][ T9928] ? __pfx___sys_sendto+0x10/0x10 [ 465.353528][ T9928] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 465.353560][ T9928] ? __fget_files+0x3a0/0x420 [ 465.353582][ T9928] ? ksys_write+0x22a/0x250 [ 465.353624][ T9928] __ia32_sys_sendto+0xdd/0x100 [ 465.353658][ T9928] __do_fast_syscall_32+0xb6/0x2b0 [ 465.353682][ T9928] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.353708][ T9928] do_fast_syscall_32+0x34/0x80 [ 465.353732][ T9928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.353757][ T9928] RIP: 0023:0xf7f92539 [ 465.353775][ T9928] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 465.353793][ T9928] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 465.353815][ T9928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 465.353828][ T9928] RDX: 000000000001a000 RSI: 00000000040048c4 RDI: 00000000800000c0 [ 465.353841][ T9928] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 465.353853][ T9928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 465.353864][ T9928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.353895][ T9928] [ 466.209468][ T5917] usb 5-1: USB disconnect, device number 43 [ 466.629439][ T5917] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 466.756877][ T9941] input: syz0 as /devices/virtual/input/input26 [ 466.847744][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 466.872480][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.917463][ T5917] usb 5-1: config 0 descriptor?? [ 467.018809][ T5917] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 467.091861][ T9953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1026'. [ 467.207760][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.234163][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.392514][ T5917] usb 5-1: USB disconnect, device number 44 [ 467.778796][ T9965] syz.4.1029: attempt to access beyond end of device [ 467.778796][ T9965] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 470.353175][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 470.378876][ T5931] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 470.538701][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.566152][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.585917][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.605180][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 470.626118][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.635256][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.669856][ T9] usb 4-1: config 0 descriptor?? [ 470.676377][ T5931] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 470.685539][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.715084][ T5931] usb 5-1: Product: syz [ 470.725996][ T5931] usb 5-1: Manufacturer: syz [ 470.730733][ T5931] usb 5-1: SerialNumber: syz [ 470.756715][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 470.956608][ T24] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 471.102549][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 471.125549][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 471.131866][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.135132][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 471.217143][ T24] usb 2-1: config 0 descriptor?? [ 471.234553][ T9] usb 4-1: USB disconnect, device number 48 [ 471.247116][ T24] pwc: Creative Labs Webcam Pro Ex detected. [ 471.260091][ T24] pwc: Warning: more than 1 configuration available. [ 471.522265][ T9975] binder: 9974:9975 ioctl 400c620e 80000180 returned -22 [ 472.198215][ T24] pwc: Failed to set LED on/off time (-71) [ 472.249106][ T24] pwc: send_video_command error -71 [ 472.254586][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 472.323315][ T24] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 472.390502][ T24] usb 2-1: USB disconnect, device number 54 [ 472.842603][T10001] input: syz0 as /devices/virtual/input/input27 [ 473.223473][ T5990] usb 5-1: USB disconnect, device number 45 [ 473.782224][T10008] syz.4.1040: attempt to access beyond end of device [ 473.782224][T10008] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 474.185976][ T5990] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 474.783846][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.812789][T10025] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1044'. [ 474.822405][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.860154][ T5990] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 474.884051][T10025] netlink: zone id is out of range [ 474.905921][T10025] netlink: zone id is out of range [ 474.911202][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.936278][T10025] netlink: get zone limit has 8 unknown bytes [ 475.000217][ T5990] usb 3-1: config 0 descriptor?? [ 475.443143][ T5990] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 475.461036][ T5990] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 475.934347][ T5990] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device [ 475.943698][ T5990] arvo 0003:1E7D:30D4.0020: couldn't install keyboard [ 475.962024][ T5990] arvo 0003:1E7D:30D4.0020: probe with driver arvo failed with error -71 [ 476.165987][ T24] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 476.176088][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 476.195415][ T5990] usb 3-1: USB disconnect, device number 47 [ 476.363263][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.375584][ T24] usb 4-1: config index 0 descriptor too short (expected 17156, got 18) [ 476.384407][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.395152][ T24] usb 4-1: config 0 has no interfaces? [ 476.466719][ T24] usb 4-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 476.479799][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.508001][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.519481][ T24] usb 4-1: Product: syz [ 476.523713][ T24] usb 4-1: Manufacturer: syz [ 476.532306][ T24] usb 4-1: SerialNumber: syz [ 476.569987][ T24] usb 4-1: config 0 descriptor?? [ 476.583114][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.692785][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.774838][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.836377][ T9] usb 5-1: config 0 descriptor?? [ 477.216097][ T5931] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 477.272975][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 477.279644][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 477.365685][ T9] usb 5-1: USB disconnect, device number 46 [ 477.408592][ T5931] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.428879][ T5931] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 477.438626][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.447507][ T5931] usb 3-1: Product: syz [ 477.455763][ T5931] usb 3-1: Manufacturer: syz [ 477.456662][T10044] input: syz0 as /devices/virtual/input/input28 [ 477.485467][ T5931] usb 3-1: SerialNumber: syz [ 477.846209][ T5990] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 478.084449][ T5990] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 478.098724][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.243274][ T5990] usb 2-1: config 0 descriptor?? [ 478.622633][ T5990] usb 2-1: Cannot read MAC address [ 478.692364][ T5990] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 478.724178][ T5990] usb 2-1: USB disconnect, device number 55 [ 478.855061][ T24] usb 4-1: USB disconnect, device number 49 [ 479.753759][ T5931] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 480.153853][ T9] usb 3-1: USB disconnect, device number 48 [ 480.501388][ T5931] usb 4-1: config index 0 descriptor too short (expected 17156, got 18) [ 480.540431][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.581850][ T5931] usb 4-1: config 0 has no interfaces? [ 480.612384][ T5931] usb 4-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 480.630194][T10077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1057'. [ 480.670339][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.680071][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 480.729816][ T5931] usb 4-1: Product: syz [ 480.745930][ T5931] usb 4-1: Manufacturer: syz [ 480.830886][ T5931] usb 4-1: SerialNumber: syz [ 480.878008][ T5931] usb 4-1: config 0 descriptor?? [ 480.898233][ T9] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 480.984586][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.156509][ T9] usb 2-1: config 0 has no interfaces? [ 481.226011][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 481.241354][ T9] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 481.263146][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.283292][ T9] usb 2-1: Product: syz [ 481.292766][ T9] usb 2-1: Manufacturer: syz [ 481.309509][ T9] usb 2-1: SerialNumber: syz [ 481.325940][ T5990] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 481.343733][ T9] usb 2-1: config 0 descriptor?? [ 481.499542][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.510983][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.617400][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.788233][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.819110][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.874942][ T24] usb 3-1: config 0 descriptor?? [ 482.346513][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 482.356807][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 482.398054][ T24] usb 3-1: USB disconnect, device number 49 [ 482.500913][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1061'. [ 483.525192][T10094] input: syz0 as /devices/virtual/input/input29 [ 483.788029][ T5931] usb 4-1: USB disconnect, device number 50 [ 483.841294][ T9] usb 2-1: USB disconnect, device number 56 [ 484.155951][T10101] netlink: 'syz.3.1065': attribute type 21 has an invalid length. [ 484.186210][ T1210] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 484.395139][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.416463][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.612300][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.653048][ T1210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.672837][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.698607][ T1210] usb 3-1: config 0 descriptor?? [ 484.736297][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 484.941778][ T30] audit: type=1326 audit(1753452302.186:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.4.1068" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 484.966903][ T9] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 485.245039][ T1210] usbhid 3-1:0.0: can't add hid device: -71 [ 485.252496][ T1210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 485.260371][ T5990] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 485.295931][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.322898][ T9] usb 2-1: config 0 has no interfaces? [ 485.334855][ T1210] usb 3-1: USB disconnect, device number 50 [ 485.361381][ T9] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 485.426085][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 485.436006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.506497][ T5990] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 485.531480][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.563273][ T5990] usb 5-1: Product: syz [ 485.571396][ T9] usb 2-1: Product: syz [ 485.586523][ T5990] usb 5-1: Manufacturer: syz [ 485.605459][ T9] usb 2-1: Manufacturer: syz [ 485.620224][ T5990] usb 5-1: SerialNumber: syz [ 485.627660][ T9] usb 2-1: SerialNumber: syz [ 485.647993][ T5990] usb 5-1: config 0 descriptor?? [ 485.671198][ T5990] usb 5-1: bad CDC descriptors [ 485.692895][ T9] usb 2-1: config 0 descriptor?? [ 487.960702][ T5931] usb 5-1: USB disconnect, device number 47 [ 488.138521][ T1210] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 488.178425][ T9] usb 2-1: USB disconnect, device number 57 [ 488.428399][ T1210] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 488.538457][ T1210] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 488.582493][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.643404][ T1210] usb 1-1: config 0 descriptor?? [ 488.649935][ T5931] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 488.683192][ T1210] pwc: Creative Labs Webcam Pro Ex detected. [ 488.696838][ T5990] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 488.712737][ T1210] pwc: Warning: more than 1 configuration available. [ 488.815955][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 488.824432][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.850732][ T5931] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 488.882825][ T5990] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 488.893628][T10138] binder: 10137:10138 ioctl 400c620e 80000180 returned -22 [ 488.901195][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.911579][ T5990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.950610][ T5990] usb 3-1: config 0 has no interfaces? [ 488.970234][ T5990] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 488.980404][ T5931] usb 5-1: config 0 descriptor?? [ 489.021594][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.092414][ T5990] usb 3-1: Product: syz [ 489.135219][ T5990] usb 3-1: Manufacturer: syz [ 489.159575][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1078'. [ 489.177825][ T5990] usb 3-1: SerialNumber: syz [ 489.200629][ T5990] usb 3-1: config 0 descriptor?? [ 489.677902][ T1210] pwc: Failed to set LED on/off time (-71) [ 489.832001][ T1210] pwc: send_video_command error -71 [ 489.841673][ T5931] logitech-djreceiver 0003:046D:C513.0021: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.4-1/input0 [ 489.854152][ T1210] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 489.864007][ T1210] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 489.905789][ T1210] usb 1-1: USB disconnect, device number 55 [ 490.116562][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 490.454432][ T9] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 490.481918][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.492637][ T9] usb 2-1: config 0 has no interfaces? [ 490.533502][ T9] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 490.833768][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.060642][ T9] usb 2-1: Product: syz [ 491.068839][ T9] usb 2-1: Manufacturer: syz [ 491.075781][ T9] usb 2-1: SerialNumber: syz [ 491.085599][ T9] usb 2-1: config 0 descriptor?? [ 491.529341][ T5990] usb 3-1: USB disconnect, device number 51 [ 492.163342][ T1210] usb 5-1: USB disconnect, device number 48 [ 492.319170][T10180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1084'. [ 492.826827][ T30] audit: type=1326 audit(1753452310.106:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.2.1086" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 493.216268][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 493.244256][ T9] usb 2-1: USB disconnect, device number 58 [ 493.326397][ T5990] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 493.367172][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 493.377920][ T43] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 493.379297][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 493.416881][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.445918][ T43] usb 3-1: Product: syz [ 493.450201][ T43] usb 3-1: Manufacturer: syz [ 493.481507][ T43] usb 3-1: SerialNumber: syz [ 493.514019][ T43] usb 3-1: config 0 descriptor?? [ 493.533243][ T5990] usb 4-1: config index 0 descriptor too short (expected 17156, got 18) [ 493.545316][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.558882][ T43] usb 3-1: bad CDC descriptors [ 493.579275][ T5990] usb 4-1: config 0 has no interfaces? [ 493.591891][ T5990] usb 4-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 493.601959][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.625337][ T5990] usb 4-1: Product: syz [ 493.653327][ T5990] usb 4-1: Manufacturer: syz [ 493.664113][ T5990] usb 4-1: SerialNumber: syz [ 493.685684][ T5990] usb 4-1: config 0 descriptor?? [ 493.733158][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 495.788116][ T5917] usb 3-1: USB disconnect, device number 52 [ 496.268286][T10215] syz.2.1091: attempt to access beyond end of device [ 496.268286][T10215] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 496.939627][ T5990] usb 4-1: USB disconnect, device number 51 [ 497.770672][T10228] netlink: 'syz.4.1097': attribute type 21 has an invalid length. [ 497.979777][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 498.063605][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1101'. [ 498.096186][ T5990] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 498.171161][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.190270][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.200512][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.213549][ T9] usb 1-1: Product: syz [ 498.218999][ T9] usb 1-1: Manufacturer: syz [ 498.224910][ T9] usb 1-1: SerialNumber: syz [ 498.248448][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 498.257690][ T5990] usb 3-1: device descriptor read/64, error -71 [ 498.349380][ T30] audit: type=1326 audit(1753452315.636:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.3.1103" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 498.496151][ T5990] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 498.626183][ T5990] usb 3-1: device descriptor read/64, error -71 [ 498.667638][ T43] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 498.789708][ T5990] usb usb3-port1: attempt power cycle [ 499.005917][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 499.073619][ T43] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 499.100925][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.136264][ T43] usb 4-1: Product: syz [ 499.145374][ T43] usb 4-1: Manufacturer: syz [ 499.150477][ T43] usb 4-1: SerialNumber: syz [ 499.167130][ T43] usb 4-1: config 0 descriptor?? [ 499.188991][ T43] usb 4-1: bad CDC descriptors [ 499.266086][ T5990] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 499.303231][ T5990] usb 3-1: device descriptor read/8, error -71 [ 499.546028][ T5990] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 499.579260][ T5990] usb 3-1: device descriptor read/8, error -71 [ 499.696386][ T5990] usb usb3-port1: unable to enumerate USB device [ 500.113467][T10259] input: syz0 as /devices/virtual/input/input30 [ 500.735254][ T43] usb 1-1: USB disconnect, device number 56 [ 500.950894][T10270] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1111'. [ 500.973667][T10270] netlink: zone id is out of range [ 500.985064][T10270] netlink: zone id is out of range [ 500.999964][T10270] netlink: zone id is out of range [ 501.020158][T10270] netlink: zone id is out of range [ 501.032419][T10270] netlink: zone id is out of range [ 501.044647][T10270] netlink: get zone limit has 8 unknown bytes [ 501.093544][T10274] syz.1.1110: attempt to access beyond end of device [ 501.093544][T10274] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 502.231165][ T5990] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 502.260829][ T24] usb 4-1: USB disconnect, device number 52 [ 502.421976][ T5990] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 502.444565][ T5990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.466318][ T5990] usb 3-1: config 0 has no interfaces? [ 502.480147][ T5990] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 502.490221][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.506232][ T5990] usb 3-1: Product: syz [ 502.510769][ T5990] usb 3-1: Manufacturer: syz [ 502.515449][ T5990] usb 3-1: SerialNumber: syz [ 502.536481][ T5990] usb 3-1: config 0 descriptor?? [ 502.731609][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1113'. [ 503.175955][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 503.360182][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.371813][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.392877][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.417059][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.426914][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.531270][ T9] usb 1-1: config 0 descriptor?? [ 503.536548][ T1210] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 503.774236][ T1210] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.861113][ T1210] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 503.916316][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.954747][ T1210] usb 2-1: Product: syz [ 503.993656][ T1210] usb 2-1: Manufacturer: syz [ 504.001689][ T9] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 504.025245][ T1210] usb 2-1: SerialNumber: syz [ 504.177427][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 504.249029][ T43] usb 1-1: USB disconnect, device number 57 [ 504.340600][ T24] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 504.392933][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 504.405023][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.432252][ T24] usb 5-1: config 0 descriptor?? [ 504.465110][ T24] pwc: Creative Labs Webcam Pro Ex detected. [ 504.472155][ T24] pwc: Warning: more than 1 configuration available. [ 504.665010][T10291] binder: 10290:10291 ioctl 400c620e 80000180 returned -22 [ 504.986047][ T24] pwc: Failed to set LED on/off time (-71) [ 504.987931][T10298] SET target dimension over the limit! [ 505.022718][ T24] pwc: send_video_command error -71 [ 505.042330][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 505.071965][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 505.109700][ T24] usb 5-1: USB disconnect, device number 49 [ 505.179312][ T5990] usb 3-1: USB disconnect, device number 57 [ 506.096359][ T24] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 506.217268][ T9] usb 2-1: USB disconnect, device number 59 [ 506.270908][T10311] input: syz0 as /devices/virtual/input/input31 [ 506.284619][ T24] usb 1-1: config index 0 descriptor too short (expected 17156, got 18) [ 506.303144][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.355322][ T24] usb 1-1: config 0 has no interfaces? [ 506.388094][ T24] usb 1-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 506.400782][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.414862][ T24] usb 1-1: Product: syz [ 506.420535][ T24] usb 1-1: Manufacturer: syz [ 506.425214][ T24] usb 1-1: SerialNumber: syz [ 506.496665][ T24] usb 1-1: config 0 descriptor?? [ 506.608018][ T30] audit: type=1326 audit(1753452323.856:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.1.1123" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 506.923378][ T30] audit: type=1326 audit(1753452324.176:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.3.1124" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e539 code=0x0 [ 506.926972][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1125'. [ 506.945538][ T5917] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 506.950592][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.975753][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.116836][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 507.135760][ T5917] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 507.146078][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.177403][ T5917] usb 2-1: Product: syz [ 507.187101][ T5917] usb 2-1: Manufacturer: syz [ 507.197634][ T5917] usb 2-1: SerialNumber: syz [ 507.225231][ T5917] usb 2-1: config 0 descriptor?? [ 507.238087][ T5917] usb 2-1: bad CDC descriptors [ 507.924307][T10339] netlink: 'syz.3.1127': attribute type 21 has an invalid length. [ 508.030742][ T5917] usb 2-1: USB disconnect, device number 60 [ 508.355936][ T1210] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 508.639658][ T1210] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.664488][ T1210] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.724959][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.840833][ T1210] usb 3-1: Product: syz [ 508.845101][ T1210] usb 3-1: Manufacturer: syz [ 508.870455][ T1210] usb 3-1: SerialNumber: syz [ 509.177874][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 509.505979][ T5917] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 510.201664][ T5917] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 510.226823][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.241129][ T24] usb 1-1: USB disconnect, device number 58 [ 510.281472][ T5917] usb 2-1: config 0 has no interfaces? [ 510.384612][ T5917] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 510.414275][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.430284][ T5917] usb 2-1: Product: syz [ 510.434796][ T5917] usb 2-1: Manufacturer: syz [ 510.441152][ T5917] usb 2-1: SerialNumber: syz [ 510.493023][ T5917] usb 2-1: config 0 descriptor?? [ 511.616026][ T1210] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 511.692127][ T5931] usb 3-1: USB disconnect, device number 58 [ 511.789733][ T1210] usb 5-1: config index 0 descriptor too short (expected 17156, got 18) [ 511.798516][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.850842][ T1210] usb 5-1: config 0 has no interfaces? [ 511.990761][T10373] openvswitch: netlink: Actions may not be safe on all matching packets [ 512.228788][ T1210] usb 5-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 512.330082][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.360440][ T1210] usb 5-1: Product: syz [ 512.741293][ T1210] usb 5-1: Manufacturer: syz [ 512.955903][ T1210] usb 5-1: SerialNumber: syz [ 513.019700][ T1210] usb 5-1: config 0 descriptor?? [ 513.403194][ T5917] usb 2-1: USB disconnect, device number 61 [ 513.617143][T10379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.622572][T10379] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1137'. [ 513.916140][ T5931] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 514.077876][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.117630][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.163491][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.254808][ T5931] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.487472][T10392] netlink: 'syz.2.1140': attribute type 21 has an invalid length. [ 514.500051][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.593245][ T5931] usb 4-1: config 0 descriptor?? [ 515.124503][ T5931] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 515.243067][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 515.302394][ T1210] usb 5-1: USB disconnect, device number 50 [ 515.378573][ T5931] usb 4-1: USB disconnect, device number 53 [ 515.910595][T10404] fido_id[10404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 516.040107][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 517.006010][T10416] netlink: 'syz.4.1145': attribute type 16 has an invalid length. [ 517.015282][T10416] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1145'. [ 517.045202][T10416] trusted_key: encrypted_key: insufficient parameters specified [ 518.087941][T10428] fuse: Unknown parameter ' ' [ 518.201562][T10431] syz.4.1148: attempt to access beyond end of device [ 518.201562][T10431] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 519.025297][T10441] netlink: 'syz.0.1151': attribute type 21 has an invalid length. [ 519.199282][T10443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1150'. [ 520.386933][ T5931] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 520.697221][ T5931] usb 1-1: config index 0 descriptor too short (expected 17156, got 18) [ 520.706073][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.736988][ T5931] usb 1-1: config 0 has no interfaces? [ 520.758449][ T5931] usb 1-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 520.767751][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.785955][ T5931] usb 1-1: Product: syz [ 520.790381][ T5931] usb 1-1: Manufacturer: syz [ 520.795046][ T5931] usb 1-1: SerialNumber: syz [ 520.920312][ T5931] usb 1-1: config 0 descriptor?? [ 521.044842][T10466] sit1: entered promiscuous mode [ 522.689341][ T5931] usb 1-1: USB disconnect, device number 59 [ 523.070230][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 523.156168][ T1210] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 523.271700][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 523.320484][ T1210] usb 3-1: config 0 has no interfaces? [ 523.329416][ T1210] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 523.529431][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.563196][ T1210] usb 3-1: Product: syz [ 523.573539][ T1210] usb 3-1: Manufacturer: syz [ 523.591936][ T1210] usb 3-1: SerialNumber: syz [ 523.620969][ T1210] usb 3-1: config 0 descriptor?? [ 523.925910][ T24] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 524.217205][T10477] fuse: Bad value for 'fd' [ 524.261508][ T24] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 524.278410][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.303663][ T24] usb 2-1: config 0 has no interfaces? [ 524.321716][ T24] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 524.333458][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.349213][ T24] usb 2-1: Product: syz [ 524.362333][ T24] usb 2-1: Manufacturer: syz [ 524.374404][ T24] usb 2-1: SerialNumber: syz [ 524.400485][ T24] usb 2-1: config 0 descriptor?? [ 525.205963][ T1210] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 525.330081][T10510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1169'. [ 525.377295][ T1210] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 525.431369][ T1210] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 525.468984][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.781433][ T1210] usb 4-1: config 0 descriptor?? [ 525.847954][ T5917] usb 3-1: USB disconnect, device number 59 [ 526.028057][ T1210] pwc: Creative Labs Webcam Pro Ex detected. [ 526.182943][ T1210] pwc: Warning: more than 1 configuration available. [ 526.607757][ T1210] pwc: Failed to set LED on/off time (-71) [ 526.614084][ T1210] pwc: send_video_command error -71 [ 526.620607][ T1210] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 526.667043][ T1210] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 526.704926][ T1210] usb 4-1: USB disconnect, device number 54 [ 526.751151][ T24] usb 2-1: USB disconnect, device number 62 [ 527.275245][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 527.555772][T10539] syz.3.1177: attempt to access beyond end of device [ 527.555772][T10539] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 527.966287][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.993809][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.030604][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.195953][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.221052][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.240033][ T24] usb 2-1: config 0 descriptor?? [ 528.534936][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 528.682967][ T24] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 528.945085][ T24] usb 2-1: USB disconnect, device number 63 [ 529.089323][ T30] audit: type=1326 audit(1753452346.376:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.3.1181" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e539 code=0x0 [ 529.162140][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 530.134999][ T30] audit: type=1326 audit(1753452347.416:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10561 comm="syz.4.1184" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 530.426740][ T5917] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 530.496440][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 530.537138][ T1210] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 530.670882][ T5917] usb 1-1: config index 0 descriptor too short (expected 17156, got 18) [ 530.681458][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.703982][ T5917] usb 1-1: config 0 has no interfaces? [ 530.719954][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 530.720000][ T1210] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.730813][ T24] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 530.763565][ T5917] usb 1-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 530.781629][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.802366][ T1210] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.812498][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.819212][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.830590][ T1210] usb 2-1: Product: syz [ 530.901352][ T1210] usb 2-1: Manufacturer: syz [ 530.906129][ T1210] usb 2-1: SerialNumber: syz [ 530.946308][ T24] usb 5-1: Product: syz [ 531.002319][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1186'. [ 531.056791][ T5917] usb 1-1: Product: syz [ 531.071331][ T24] usb 5-1: Manufacturer: syz [ 531.076723][ T5917] usb 1-1: Manufacturer: syz [ 531.144357][ T24] usb 5-1: SerialNumber: syz [ 531.166291][ T5917] usb 1-1: SerialNumber: syz [ 531.205016][ T24] usb 5-1: config 0 descriptor?? [ 531.213153][ T5917] usb 1-1: config 0 descriptor?? [ 531.305948][ T24] usb 5-1: bad CDC descriptors [ 531.944766][ T24] usb 2-1: USB disconnect, device number 64 [ 532.946042][ T1210] usb 5-1: USB disconnect, device number 51 [ 533.378274][ T5917] usb 1-1: USB disconnect, device number 60 [ 533.575905][ T1210] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 533.744704][T10595] syz.0.1191: attempt to access beyond end of device [ 533.744704][T10595] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 533.776219][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 533.784031][ T1210] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 533.794696][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.808308][ T1210] pvrusb2: Hardware description: Terratec Grabster AV400 [ 533.815654][ T1210] pvrusb2: ********** [ 533.853963][ T5931] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 533.888159][ T1210] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 534.040306][ T1210] pvrusb2: Important functionality might not be entirely working. [ 534.155037][T10554] syz.3.1181 (10554): drop_caches: 1 [ 534.213443][ T1210] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 534.225632][ T1210] pvrusb2: ********** [ 534.439043][ T5931] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 534.447523][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.461627][T10553] syz.3.1181 (10553): drop_caches: 1 [ 534.467156][ T5931] usb 5-1: config 0 has no interface number 0 [ 534.488846][ T5931] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.657462][ T5931] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 534.672153][ T5931] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 534.683924][ T5931] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 534.698541][ T5931] usb 5-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=b8.c5 [ 534.710808][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.745647][ T5931] usb 5-1: Product: syz [ 534.765307][ T5931] usb 5-1: Manufacturer: syz [ 534.784896][ T5931] usb 5-1: SerialNumber: syz [ 534.830769][ T5931] usb 5-1: config 0 descriptor?? [ 534.861105][ T5931] iowarrior 5-1:0.186: no interrupt-out endpoint found [ 535.062203][T10592] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 535.187894][ T5931] usb 5-1: USB disconnect, device number 52 [ 535.862444][ T30] audit: type=1326 audit(1753452353.146:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1198" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 535.995413][ T5932] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 536.159871][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 536.169629][ T5932] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.185993][ T5931] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 536.198432][ T5932] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.209679][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 536.232968][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 536.243196][ T5932] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 536.261036][ T5932] usb 4-1: Product: syz [ 536.272003][ T5932] usb 4-1: Manufacturer: syz [ 536.300043][ T5932] hub 4-1:4.0: USB hub found [ 536.368837][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.399453][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 536.467578][ T9] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 536.506090][ T5932] hub 4-1:4.0: 2 ports detected [ 536.534263][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.577436][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 536.591367][ T1210] usb 3-1: USB disconnect, device number 60 [ 536.597039][ T2343] pvrusb2: Invalid write control endpoint [ 536.607954][ T5932] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 536.614591][ T5932] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 536.628981][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.640139][ T9] usb 1-1: Product: syz [ 536.666152][ T9] usb 1-1: Manufacturer: syz [ 536.670840][ T9] usb 1-1: SerialNumber: syz [ 536.699283][ T5931] usb 2-1: Product: syz [ 536.703596][ T5931] usb 2-1: Manufacturer: syz [ 536.726401][ T5931] usb 2-1: SerialNumber: syz [ 536.861048][ T9] usb 1-1: config 0 descriptor?? [ 537.082833][ T5932] usb 4-1: USB disconnect, device number 55 [ 537.089751][ T9] usb 1-1: bad CDC descriptors [ 537.373087][ T2343] pvrusb2: Invalid write control endpoint [ 537.396860][ T24] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 537.409481][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 537.781563][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 537.811360][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 537.838503][ T2343] pvrusb2: Device being rendered inoperable [ 537.861897][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 537.870279][ T5932] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 537.890739][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 537.922777][ T2343] pvrusb2: Attached sub-driver cx25840 [ 537.935562][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 537.955617][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 538.053702][ T5932] usb 4-1: config index 0 descriptor too short (expected 17156, got 18) [ 538.065675][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.108981][ T5932] usb 4-1: config 0 has no interfaces? [ 538.133532][ T5932] usb 4-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 538.155657][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.164483][ T5932] usb 4-1: Product: syz [ 538.254620][ T5932] usb 4-1: Manufacturer: syz [ 538.275207][ T5932] usb 4-1: SerialNumber: syz [ 538.412753][ T5932] usb 4-1: config 0 descriptor?? [ 539.049601][ T24] usb 5-1: config index 0 descriptor too short (expected 17156, got 18) [ 539.068287][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.127438][ T24] usb 5-1: config 0 has no interfaces? [ 539.149687][ T5933] usb 1-1: USB disconnect, device number 61 [ 539.194144][ T24] usb 5-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 539.236087][ T5931] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 539.363068][ T1210] usb 2-1: USB disconnect, device number 65 [ 539.445851][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.957260][ T5931] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 539.965729][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.045645][ T5931] usb 3-1: config 0 has no interfaces? [ 540.117167][ T24] usb 5-1: Product: syz [ 540.396385][ T24] usb 5-1: Manufacturer: syz [ 540.402286][ T24] usb 5-1: SerialNumber: syz [ 540.444714][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 540.485225][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 540.513353][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 540.550841][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 540.595632][ T24] usb 5-1: config 0 descriptor?? [ 540.648408][ T5933] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 540.928830][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.946098][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.957623][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.971749][ T5933] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.981299][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.997635][ T5933] usb 1-1: config 0 descriptor?? [ 541.047973][ T5932] usb 4-1: USB disconnect, device number 56 [ 541.174249][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 541.180843][ T5931] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 541.231369][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.275693][ T5931] usb 3-1: config 0 descriptor?? [ 541.303954][ T5931] usb 3-1: can't set config #0, error -71 [ 541.332527][ T5931] usb 3-1: USB disconnect, device number 61 [ 541.704694][T10642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'. [ 541.760795][ T5933] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 542.145999][T10667] syz.1.1209: attempt to access beyond end of device [ 542.145999][T10667] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 542.202121][T10644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1203'. [ 542.664517][ T24] usb 5-1: USB disconnect, device number 53 [ 543.126244][ T24] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 543.366203][ T24] usb 1-1: device descriptor read/64, error -32 [ 543.488053][ T30] audit: type=1326 audit(1753452360.776:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10674 comm="syz.2.1213" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 543.617160][ T24] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 543.814330][ T24] usb 1-1: device descriptor read/64, error -32 [ 544.025940][ T5931] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 544.065914][ T24] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 544.108165][ T24] usb 1-1: device descriptor read/8, error -32 [ 544.180903][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 544.220611][ T5931] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 544.242373][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.264856][ T5931] usb 3-1: Product: syz [ 544.282088][ T5931] usb 3-1: Manufacturer: syz [ 544.301674][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.311178][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.402263][ T5931] usb 3-1: SerialNumber: syz [ 544.433014][ T5931] usb 3-1: config 0 descriptor?? [ 544.463346][ T5931] usb 3-1: bad CDC descriptors [ 544.486158][ T5917] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 544.510851][ T24] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 544.577067][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 544.584212][T10666] raw-gadget.2 gadget.0: failed to queue suspend event [ 544.597196][ T24] usb 1-1: device descriptor read/8, error -32 [ 544.620756][T10666] raw-gadget.2 gadget.0: failed to queue disconnect event [ 544.658858][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.683052][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.708321][ T5990] usb 1-1: USB disconnect, device number 62 [ 544.730381][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.747851][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.764332][ T5917] usb 2-1: Product: syz [ 544.788394][ T5917] usb 2-1: Manufacturer: syz [ 544.807633][ T5917] usb 2-1: SerialNumber: syz [ 544.888718][ T5931] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 545.044215][T10686] fuse: Unknown parameter 'fP&d' [ 545.061571][ T5931] usb 4-1: config 0 has an invalid interface number: 59 but max is 0 [ 545.070149][ T5931] usb 4-1: config 0 has an invalid descriptor of length 62, skipping remainder of the config [ 545.085214][ T5931] usb 4-1: config 0 has no interface number 0 [ 545.092097][ T5931] usb 4-1: config 0 interface 59 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 545.130175][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 545.146516][ T5931] usb 4-1: config 0 interface 59 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 545.160452][ T5931] usb 4-1: config 0 interface 59 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 545.173959][ T5931] usb 4-1: config 0 interface 59 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 545.190111][ T5931] usb 4-1: config 0 interface 59 altsetting 10 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 545.204014][ T5931] usb 4-1: config 0 interface 59 altsetting 10 endpoint 0x7 has an invalid bInterval 238, changing to 4 [ 545.224091][ T5931] usb 4-1: config 0 interface 59 altsetting 10 has a duplicate endpoint with address 0xD, skipping [ 545.291869][ T5931] usb 4-1: config 0 interface 59 altsetting 10 has 13 endpoint descriptors, different from the interface descriptor's value: 15 [ 545.332378][ T5931] usb 4-1: config 0 interface 59 has no altsetting 0 [ 545.342139][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 545.352145][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.376080][ T5931] usb 4-1: Dual-Role OTG device on HNP port [ 545.382657][ T5931] usb 4-1: New USB device found, idVendor=1199, idProduct=6838, bcdDevice=3f.41 [ 545.392480][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.466760][ T9] usb 5-1: config 0 descriptor?? [ 545.491102][ T5931] usb 4-1: Product: syz [ 545.531376][ T5931] usb 4-1: Manufacturer: syz [ 545.556066][ T5931] usb 4-1: SerialNumber: syz [ 545.599848][ T5931] usb 4-1: config 0 descriptor?? [ 545.702040][ T5917] usb 2-1: invalid UAC_HEADER (v1) [ 545.847032][T10691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 545.877928][ T5917] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 545.900574][ T5917] usb 2-1: USB disconnect, device number 66 [ 545.921557][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.933035][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.205524][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.245092][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 546.284275][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 546.426438][ T5917] usb 3-1: USB disconnect, device number 62 [ 546.606056][ T5932] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 546.773658][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 546.805860][ T9] [drm] Initialized udl on minor 2 [ 547.017389][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 547.096276][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 547.185358][ T5603] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 547.210710][ T9] usb 5-1: USB disconnect, device number 54 [ 547.231235][ T5603] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 547.238628][ T5932] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 547.289666][T10707] tipc: Enabled bearer , priority 0 [ 547.330927][T10707] syzkaller0: entered promiscuous mode [ 547.344493][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.387875][T10707] syzkaller0: entered allmulticast mode [ 547.447186][T10707] syzkaller0: mtu less than device minimum [ 547.490017][ T5931] sierra 4-1:0.59: Sierra USB modem converter detected [ 547.497077][ T5932] usb 2-1: config 0 has no interfaces? [ 547.502982][T10706] tipc: Resetting bearer [ 547.613118][T10713] syz.2.1224: attempt to access beyond end of device [ 547.613118][T10713] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 547.643196][T10706] tipc: Disabling bearer [ 547.694943][ T5932] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 547.748260][ T5931] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 547.756010][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.777357][ T5932] usb 2-1: Product: syz [ 547.805051][ T5932] usb 2-1: Manufacturer: syz [ 547.810716][ T5931] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 547.827362][ T5932] usb 2-1: SerialNumber: syz [ 547.840502][ T5932] usb 2-1: config 0 descriptor?? [ 547.846551][ T5931] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 547.896350][ T5931] usb 4-1: Sierra USB modem converter now attached to ttyUSB3 [ 547.975025][ T5931] usb 4-1: USB disconnect, device number 57 [ 548.037294][ T5931] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 548.049989][ T5931] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 548.091652][ T5931] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 548.234568][ T5931] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 548.246996][ T5931] sierra 4-1:0.59: device disconnected [ 548.557350][ T5931] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 548.784041][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 548.843309][ T5931] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 548.926749][ T5931] usb 4-1: config 179 has no interface number 0 [ 548.933223][ T5931] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 548.955485][ T5931] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 549.013738][ T5931] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 549.069990][ T5931] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 549.112669][ T5931] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 549.154129][ T5931] usb 4-1: config 179 interface 65 has no altsetting 0 [ 549.185123][ T5931] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 549.230595][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.330114][ T5931] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input32 [ 549.426118][ T5200] input input32: unable to receive magic message: -110 [ 549.511821][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 549.527232][ T5200] input input32: unable to receive magic message: -32 [ 549.584304][ T5200] input input32: unable to receive magic message: -32 [ 549.600572][ T5200] input input32: unable to receive magic message: -32 [ 549.672232][ T5200] input input32: unable to receive magic message: -32 [ 549.731340][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 549.731343][ T5917] usb 4-1: USB disconnect, device number 58 [ 549.731487][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 550.176234][ T5932] usb 2-1: USB disconnect, device number 67 [ 550.297274][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.376809][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.606308][ T5932] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 550.771744][ T5932] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 550.788599][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.801725][ T30] audit: type=1326 audit(1753452368.076:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.0.1232" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 550.824831][ T5932] usb 2-1: Product: syz [ 550.838380][ T5932] usb 2-1: Manufacturer: syz [ 550.851390][ T5932] usb 2-1: SerialNumber: syz [ 550.877690][ T5932] usb 2-1: config 0 descriptor?? [ 551.036690][T10752] input: syz0 as /devices/virtual/input/input33 [ 551.121655][ T5932] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 551.135942][ T5917] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 551.136461][ T5932] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 551.208654][ T5932] usb 2-1: USB disconnect, device number 68 [ 551.296859][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 551.311392][ T5917] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 551.325427][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.334831][ T5917] usb 1-1: Product: syz [ 551.339161][ T5917] usb 1-1: Manufacturer: syz [ 551.345574][T10755] netlink: 'syz.3.1236': attribute type 4 has an invalid length. [ 551.367250][ T5917] usb 1-1: SerialNumber: syz [ 551.389240][ T5917] usb 1-1: config 0 descriptor?? [ 551.399073][ T5917] usb 1-1: bad CDC descriptors [ 552.556110][ T5932] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 552.985743][ T5932] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 552.995593][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.009305][ T5932] usb 3-1: config 0 has no interfaces? [ 553.023362][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 553.066841][ T5932] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 553.086577][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.106000][ T5932] usb 3-1: Product: syz [ 553.110262][ T5932] usb 3-1: Manufacturer: syz [ 553.114906][ T5932] usb 3-1: SerialNumber: syz [ 553.164597][ T5932] usb 3-1: config 0 descriptor?? [ 553.611689][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 553.656736][ T5603] usb 1-1: USB disconnect, device number 63 [ 554.061955][T10790] input: syz0 as /devices/virtual/input/input34 [ 554.098413][T10789] delete_channel: no stack [ 554.635475][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1250'. [ 555.378899][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 555.417425][T10809] macvtap2: entered promiscuous mode [ 555.422835][T10809] team0: entered promiscuous mode [ 555.598063][T10809] macvtap2: entered allmulticast mode [ 555.603796][T10809] team0: entered allmulticast mode [ 555.609540][T10809] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 556.176615][ T30] audit: type=1326 audit(1753452373.296:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.4.1255" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 556.230078][T10806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.376933][ T5932] usb 3-1: USB disconnect, device number 63 [ 556.416303][ T5931] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 556.538358][ T5917] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 556.651810][ T5931] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 556.715611][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 556.715948][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 556.802043][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.810366][ T5931] usb 4-1: Product: syz [ 556.814746][ T5931] usb 4-1: Manufacturer: syz [ 556.819537][ T5931] usb 4-1: SerialNumber: syz [ 556.846376][ T5990] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 556.882704][ T5917] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 556.917926][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.936199][ T5917] usb 5-1: Product: syz [ 556.947351][ T5917] usb 5-1: Manufacturer: syz [ 556.956297][ T5917] usb 5-1: SerialNumber: syz [ 556.971622][ T5917] usb 5-1: config 0 descriptor?? [ 556.990359][ T5917] usb 5-1: bad CDC descriptors [ 557.013604][ T5990] usb 2-1: config index 0 descriptor too short (expected 29, got 18) [ 557.022102][ T5990] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.057063][ T5990] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 557.075940][ T5932] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 557.086545][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.108095][ T5990] usb 2-1: config 0 descriptor?? [ 557.801712][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.886211][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 557.923706][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.956561][ T5932] usb 3-1: Product: syz [ 557.965592][ T5932] usb 3-1: Manufacturer: syz [ 558.001602][ T5932] usb 3-1: SerialNumber: syz [ 558.269997][ T5990] usb 2-1: string descriptor 0 read error: -71 [ 558.282838][ T5990] ldusb 2-1:0.0: Interrupt in endpoint not found [ 558.445580][ T5990] usb 2-1: USB disconnect, device number 69 [ 558.810468][ T5932] usb 5-1: USB disconnect, device number 55 [ 558.959990][ T5990] usb 4-1: USB disconnect, device number 59 [ 559.105482][T10842] netlink: 'syz.3.1264': attribute type 11 has an invalid length. [ 559.117183][T10842] FAULT_INJECTION: forcing a failure. [ 559.117183][T10842] name failslab, interval 1, probability 0, space 0, times 0 [ 559.130802][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.3.1264 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 559.130832][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.130846][T10842] Call Trace: [ 559.130854][T10842] [ 559.130863][T10842] dump_stack_lvl+0x189/0x250 [ 559.130894][T10842] ? __pfx____ratelimit+0x10/0x10 [ 559.130917][T10842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.130941][T10842] ? __pfx__printk+0x10/0x10 [ 559.130975][T10842] ? __pfx___might_resched+0x10/0x10 [ 559.130997][T10842] ? fs_reclaim_acquire+0x7d/0x100 [ 559.131023][T10842] should_fail_ex+0x414/0x560 [ 559.131051][T10842] should_failslab+0xa8/0x100 [ 559.131084][T10842] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 559.131114][T10842] ? kasprintf+0xd4/0x120 [ 559.131149][T10842] kvasprintf+0xdc/0x190 [ 559.131180][T10842] ? __pfx_kvasprintf+0x10/0x10 [ 559.131207][T10842] ? do_raw_spin_lock+0x121/0x290 [ 559.131250][T10842] kasprintf+0xd4/0x120 [ 559.131279][T10842] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 559.131305][T10842] ? __pfx_kasprintf+0x10/0x10 [ 559.131331][T10842] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 559.131375][T10842] ieee80211_alloc_led_names+0xa4/0x2b0 [ 559.131408][T10842] ieee80211_alloc_hw_nm+0x18ca/0x1f20 [ 559.131451][T10842] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 559.131488][T10842] ? __pfx____ratelimit+0x10/0x10 [ 559.131512][T10842] ? __pfx__printk+0x10/0x10 [ 559.131535][T10842] ? ___sys_sendmsg+0x21f/0x2a0 [ 559.131561][T10842] ? nla_get_range_unsigned+0x294/0x4b0 [ 559.131591][T10842] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 559.131619][T10842] ? __nla_validate_parse+0x2400/0x2d40 [ 559.131643][T10842] ? __sock_sendmsg+0x219/0x270 [ 559.131665][T10842] ? ____sys_sendmsg+0x505/0x830 [ 559.131696][T10842] hwsim_new_radio_nl+0xea4/0x1b10 [ 559.131730][T10842] ? __pfx___nla_validate_parse+0x10/0x10 [ 559.131770][T10842] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 559.131804][T10842] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 559.131837][T10842] ? __nla_parse+0x40/0x60 [ 559.131871][T10842] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 559.131904][T10842] genl_family_rcv_msg_doit+0x215/0x300 [ 559.131937][T10842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 559.131975][T10842] ? bpf_lsm_capable+0x9/0x20 [ 559.132002][T10842] ? security_capable+0x7e/0x2e0 [ 559.132032][T10842] genl_rcv_msg+0x60e/0x790 [ 559.132061][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.132081][T10842] ? ref_tracker_free+0x63a/0x7d0 [ 559.132103][T10842] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 559.132134][T10842] ? __pfx_ref_tracker_free+0x10/0x10 [ 559.132169][T10842] netlink_rcv_skb+0x208/0x470 [ 559.132200][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.132224][T10842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.132271][T10842] ? down_read+0x1ad/0x2e0 [ 559.132298][T10842] genl_rcv+0x28/0x40 [ 559.132317][T10842] netlink_unicast+0x75c/0x8e0 [ 559.132362][T10842] netlink_sendmsg+0x805/0xb30 [ 559.132402][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.132434][T10842] ? __import_iovec+0x5d4/0x7f0 [ 559.132460][T10842] ? aa_sock_msg_perm+0x94/0x160 [ 559.132483][T10842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.132504][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.132533][T10842] __sock_sendmsg+0x219/0x270 [ 559.132556][T10842] ____sys_sendmsg+0x505/0x830 [ 559.132574][T10842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.132602][T10842] ___sys_sendmsg+0x21f/0x2a0 [ 559.132618][T10842] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.132660][T10842] ? __fget_files+0x2a/0x420 [ 559.132675][T10842] ? __fget_files+0x3a0/0x420 [ 559.132697][T10842] __sys_sendmsg+0x164/0x220 [ 559.132712][T10842] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.132737][T10842] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 559.132755][T10842] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.132773][T10842] __do_fast_syscall_32+0xb6/0x2b0 [ 559.132791][T10842] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.132810][T10842] do_fast_syscall_32+0x34/0x80 [ 559.132827][T10842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.132846][T10842] RIP: 0023:0xf709e539 [ 559.132859][T10842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 559.132873][T10842] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 559.132889][T10842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 559.132899][T10842] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.132908][T10842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.132916][T10842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 559.132924][T10842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.132945][T10842] [ 559.884650][ T5917] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 560.021131][ T24] usb 3-1: USB disconnect, device number 64 [ 560.186317][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 560.196077][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.209785][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.296944][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.297007][ T5917] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.297033][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.309215][ T5917] usb 5-1: config 0 descriptor?? [ 560.626355][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.671291][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.689181][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.700703][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.785934][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 561.115871][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 561.132316][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.189215][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.201590][ T24] usb 3-1: config 0 has no interfaces? [ 561.245915][ T5931] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 561.437507][ T5931] usb 1-1: config index 0 descriptor too short (expected 17156, got 18) [ 561.437544][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.437568][ T5931] usb 1-1: config 0 has no interfaces? [ 561.441759][ T5931] usb 1-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 561.441796][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.441817][ T5931] usb 1-1: Product: syz [ 561.441834][ T5931] usb 1-1: Manufacturer: syz [ 561.441850][ T5931] usb 1-1: SerialNumber: syz [ 561.475349][ T5931] usb 1-1: config 0 descriptor?? [ 561.516059][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 561.516097][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.516128][ T24] usb 3-1: Product: syz [ 561.516171][ T24] usb 3-1: Manufacturer: syz [ 561.516189][ T24] usb 3-1: SerialNumber: syz [ 561.603095][ T24] usb 3-1: config 0 descriptor?? [ 562.137270][T10878] binder: 10859:10878 ioctl 40046210 0 returned -14 [ 562.164062][T10877] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1272'. [ 562.326519][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 562.326644][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 562.387624][ T5917] usb 5-1: USB disconnect, device number 56 [ 562.752320][ T30] audit: type=1326 audit(1753452380.036:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1273" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 563.083738][T10889] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 563.096179][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 563.257238][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 563.267968][ T24] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 563.280521][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.288908][ T24] usb 5-1: Product: syz [ 563.295479][ T24] usb 5-1: Manufacturer: syz [ 563.304191][ T24] usb 5-1: SerialNumber: syz [ 563.325048][ T24] usb 5-1: config 0 descriptor?? [ 563.352489][ T24] usb 5-1: bad CDC descriptors [ 563.826550][ T5932] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 564.014583][ T9] usb 3-1: USB disconnect, device number 65 [ 564.418888][ T5932] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 564.793762][ T5931] usb 1-1: USB disconnect, device number 64 [ 564.991631][ T24] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 565.024919][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 565.158268][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.169579][ T5932] usb 2-1: Product: syz [ 565.173976][ T5932] usb 2-1: Manufacturer: syz [ 565.189506][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 565.197929][ T5932] usb 2-1: SerialNumber: syz [ 565.214879][ T24] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 565.250093][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.328946][ T24] usb 3-1: config 0 has no interfaces? [ 565.380595][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.402607][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 565.413078][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.424648][ T9] usb 4-1: Product: syz [ 565.431007][ T9] usb 4-1: Manufacturer: syz [ 565.444375][ T9] usb 4-1: SerialNumber: syz [ 565.496113][ T24] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 565.505283][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.514471][ T24] usb 3-1: Product: syz [ 565.520119][ T24] usb 3-1: Manufacturer: syz [ 565.525018][ T24] usb 3-1: SerialNumber: syz [ 565.586508][ T24] usb 3-1: config 0 descriptor?? [ 565.675353][ T5931] usb 5-1: USB disconnect, device number 57 [ 567.876337][ T5931] usb 2-1: USB disconnect, device number 70 [ 568.027290][ T24] usb 3-1: USB disconnect, device number 66 [ 568.052996][T10927] input: syz0 as /devices/virtual/input/input35 [ 568.326497][ T24] usb 4-1: USB disconnect, device number 60 [ 568.383355][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.392207][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.536121][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1288'. [ 569.470548][T10953] syz.0.1292: attempt to access beyond end of device [ 569.470548][T10953] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 570.332546][T10964] tipc: Enabled bearer , priority 0 [ 570.350124][T10964] syzkaller0: entered promiscuous mode [ 570.382043][T10964] syzkaller0: entered allmulticast mode [ 570.496258][ T5917] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 570.637751][T10969] fuse: Bad value for 'fd' [ 570.653970][T10969] fuse: Unknown parameter 'f0xffffffffffffffff' [ 570.667874][T10967] tipc: Resetting bearer [ 570.695020][T10962] tipc: Resetting bearer [ 570.821714][ T5917] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 570.885607][T10962] tipc: Disabling bearer [ 570.920593][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 570.970097][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.039097][ T5917] usb 3-1: Product: syz [ 571.084647][ T5917] usb 3-1: Manufacturer: syz [ 571.101625][ T5917] usb 3-1: SerialNumber: syz [ 571.172847][T10977] hsr0: entered promiscuous mode [ 571.425970][ T9] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 572.091340][ T9] usb 2-1: config 50 has an invalid interface number: 222 but max is 0 [ 572.112360][ T9] usb 2-1: config 50 has no interface number 0 [ 572.130733][ T9] usb 2-1: config 50 interface 222 has no altsetting 0 [ 572.159428][ T9] usb 2-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=b2.e6 [ 572.170895][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.183056][ T9] usb 2-1: Product: syz [ 572.200057][ T9] usb 2-1: Manufacturer: syz [ 572.211456][T10982] input: syz0 as /devices/virtual/input/input36 [ 572.235177][ T9] usb 2-1: SerialNumber: syz [ 572.500241][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 572.517855][ T9] mos7840 2-1:50.222: required endpoints missing [ 572.536382][ T9] usb 2-1: USB disconnect, device number 71 [ 573.536376][ T9] usb 3-1: USB disconnect, device number 67 [ 574.063117][ T5917] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 574.182234][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 574.227842][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 574.322481][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.334546][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.363517][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.411026][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.461988][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.487980][ T5917] usb 2-1: config 0 descriptor?? [ 575.028459][T11034] syz.4.1314: attempt to access beyond end of device [ 575.028459][T11034] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 575.156622][T11035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1311'. [ 575.346524][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 575.503990][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 575.759214][ T5917] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 575.805930][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 575.842317][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.915077][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 576.016207][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.050802][ T9] usb 1-1: config 0 descriptor?? [ 576.405930][T11040] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1306'. [ 576.565041][ T9] logitech 0003:046D:C626.0027: unbalanced delimiter at end of report description [ 576.612994][ T9] logitech 0003:046D:C626.0027: parse failed [ 576.628301][ T9] logitech 0003:046D:C626.0027: probe with driver logitech failed with error -22 [ 577.018594][ T5990] usb 1-1: USB disconnect, device number 65 [ 577.445909][ T9] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 577.577320][ T9] usb 2-1: device descriptor read/64, error -32 [ 577.587447][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 578.125933][ T9] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 578.267891][ T9] usb 2-1: device descriptor read/64, error -32 [ 578.506684][ T9] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 578.565984][ T5931] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 578.579145][ T9] usb 2-1: device descriptor read/8, error -71 [ 578.752845][ T5931] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 578.880934][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 578.945954][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.954120][ T5931] usb 4-1: Product: syz [ 579.033401][ T5931] usb 4-1: Manufacturer: syz [ 579.065865][ T5931] usb 4-1: SerialNumber: syz [ 579.719614][ T5932] usb 2-1: USB disconnect, device number 72 [ 580.781813][T11088] fuse: Unknown parameter 'gr"id' [ 581.146529][ T5990] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 581.275158][T11099] xt_ecn: cannot match TCP bits for non-tcp packets [ 581.424742][T11101] syz.4.1329: attempt to access beyond end of device [ 581.424742][T11101] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 581.471214][ T5990] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 581.494180][ T5990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 581.504907][ T5917] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 581.513443][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.526016][ T5990] usb 3-1: Product: syz [ 581.530469][ T5990] usb 3-1: Manufacturer: syz [ 581.544023][ T5990] usb 3-1: SerialNumber: syz [ 581.672041][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 581.684597][ T5917] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 581.693621][ T5917] usb 2-1: config 0 has no interface number 0 [ 581.700327][ T5917] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 581.892246][ T5917] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 581.931158][ T5917] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 581.941827][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 581.950393][ T5917] usb 2-1: Product: syz [ 581.954862][ T5917] usb 2-1: SerialNumber: syz [ 581.962211][ T5917] usb 2-1: config 0 descriptor?? [ 582.480822][ T5917] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 582.538639][ T5917] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input37 [ 582.621364][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 582.644377][ T5932] usb 4-1: USB disconnect, device number 61 [ 583.867352][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 583.867458][ T5932] usb 2-1: USB disconnect, device number 73 [ 583.874363][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 583.909591][ T5917] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 583.949790][ T5932] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 583.986721][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 583.999988][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 584.063052][T11125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'. [ 584.130828][ T5990] usb 3-1: USB disconnect, device number 68 [ 584.237493][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.305535][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 584.321413][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'. [ 584.323896][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.365487][ T5917] usb 4-1: Product: syz [ 584.386612][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.392885][ T5917] usb 4-1: Manufacturer: syz [ 584.429863][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 584.439174][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.453573][ T9] usb 5-1: Product: syz [ 584.501687][ T9] usb 5-1: Manufacturer: syz [ 584.526594][ T9] usb 5-1: SerialNumber: syz [ 584.784315][ T5917] usb 4-1: SerialNumber: syz [ 585.383574][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 585.587359][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 585.603990][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 585.620031][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.738034][ T9] usb 2-1: config 0 descriptor?? [ 585.842122][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 586.216724][ T9] gspca_sonixj: reg_r err -71 [ 586.231778][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 586.282404][ T9] usb 2-1: USB disconnect, device number 74 [ 586.851359][ T9] usb 5-1: USB disconnect, device number 58 [ 586.965939][ T5603] usb 4-1: USB disconnect, device number 62 [ 587.176364][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 587.228529][T11163] netlink: 'syz.2.1348': attribute type 5 has an invalid length. [ 587.256130][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1348'. [ 587.339672][T11166] syz.4.1345: attempt to access beyond end of device [ 587.339672][T11166] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 587.375518][T11163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 587.409423][T11163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 587.452729][T11163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 587.481981][T11163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 587.551250][T11163] geneve2: entered promiscuous mode [ 587.570139][T11163] geneve2: entered allmulticast mode [ 588.215323][T11181] input: syz0 as /devices/virtual/input/input38 [ 588.285940][ T5603] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 588.533399][ T5603] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.572106][ T5603] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.827905][ T5603] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.865946][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.889859][ T5603] usb 3-1: SerialNumber: syz [ 589.075954][ T5932] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 589.120315][ T5603] usb 3-1: 0:2 : does not exist [ 589.128467][ T5603] usb 3-1: unit 5: unexpected type 0x0b [ 589.213629][ T5603] usb 3-1: USB disconnect, device number 69 [ 589.316967][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.337571][ T5932] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 589.352110][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.374405][ T5932] usb 2-1: config 0 has no interfaces? [ 589.405145][ T5932] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 589.816405][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.845600][ T5932] usb 2-1: Product: syz [ 589.869752][ T5932] usb 2-1: Manufacturer: syz [ 589.878735][ T5932] usb 2-1: SerialNumber: syz [ 589.911959][ T5932] usb 2-1: config 0 descriptor?? [ 590.016213][ T5603] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 590.024720][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 590.164038][T11200] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1357'. [ 590.211190][ T5603] usb 5-1: config index 0 descriptor too short (expected 17156, got 18) [ 590.220113][ T5603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.239694][ T5603] usb 5-1: config 0 has no interfaces? [ 590.250818][ T5603] usb 5-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 590.310260][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.327191][T11198] hsr_slave_1 (unregistering): left promiscuous mode [ 590.340372][ T5603] usb 5-1: Product: syz [ 590.347033][ T5603] usb 5-1: Manufacturer: syz [ 590.355260][ T5603] usb 5-1: SerialNumber: syz [ 590.386369][ T5603] usb 5-1: config 0 descriptor?? [ 590.640963][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1358'. [ 590.756492][ T5931] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 591.014142][ T5931] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 591.490752][ T5931] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 591.511898][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.542933][ T5931] usb 4-1: config 0 descriptor?? [ 591.576295][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 591.589841][ T5931] pwc: Creative Labs Webcam Pro Ex detected. [ 591.616111][ T5931] pwc: Warning: more than 1 configuration available. [ 591.767944][ T9] usb 1-1: config index 0 descriptor too short (expected 17156, got 18) [ 591.776647][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.792750][ T9] usb 1-1: config 0 has no interfaces? [ 591.793737][T11202] binder: 11201:11202 ioctl 400c620e 80000180 returned -22 [ 591.838894][ T9] usb 1-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 591.850108][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.859427][ T9] usb 1-1: Product: syz [ 591.866614][ T9] usb 1-1: Manufacturer: syz [ 591.878244][ T9] usb 1-1: SerialNumber: syz [ 591.931249][ T9] usb 1-1: config 0 descriptor?? [ 592.127285][ T5932] usb 2-1: USB disconnect, device number 75 [ 592.337103][T11224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1365'. [ 592.537498][ T5931] pwc: Failed to set LED on/off time (-71) [ 592.610699][ T5931] pwc: send_video_command error -71 [ 592.661450][ T5931] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 592.699775][ T5931] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 592.744931][ T5931] usb 4-1: USB disconnect, device number 63 [ 593.227812][ T5603] usb 5-1: USB disconnect, device number 59 [ 593.833130][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1372'. [ 593.871296][ T30] audit: type=1326 audit(1753452411.156:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.4.1370" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 593.908453][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 594.164081][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 594.205892][ T5931] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 594.385986][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 594.420674][ T5931] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 594.445418][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.489059][ T5931] usb 5-1: Product: syz [ 594.515005][ T5931] usb 5-1: Manufacturer: syz [ 594.552107][ T5931] usb 5-1: SerialNumber: syz [ 594.575590][ T9] usb 1-1: USB disconnect, device number 66 [ 594.595695][ T5931] usb 5-1: config 0 descriptor?? [ 594.641407][ T5931] usb 5-1: bad CDC descriptors [ 594.946690][T11260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 595.005954][ T5603] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 595.116028][ T5902] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 595.166474][ T5603] usb 3-1: device descriptor read/64, error -71 [ 595.310326][ T5902] usb 2-1: config index 0 descriptor too short (expected 17156, got 18) [ 595.323406][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.353774][ T5902] usb 2-1: config 0 has no interfaces? [ 595.401887][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1378'. [ 595.426984][ T5603] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 595.484429][ T5902] usb 2-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 595.504861][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.536109][ T5902] usb 2-1: Product: syz [ 595.562145][ T5902] usb 2-1: Manufacturer: syz [ 595.573983][ T5902] usb 2-1: SerialNumber: syz [ 595.595899][ T5603] usb 3-1: device descriptor read/64, error -71 [ 595.608617][ T5902] usb 2-1: config 0 descriptor?? [ 595.728467][ T5603] usb usb3-port1: attempt power cycle [ 595.779019][T11277] netlink: 'syz.0.1380': attribute type 27 has an invalid length. [ 596.126002][ T5603] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 596.148623][ T5603] usb 3-1: device descriptor read/8, error -71 [ 596.563440][ T5603] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 596.609809][ T5603] usb 3-1: device descriptor read/8, error -71 [ 596.644142][ T9] usb 5-1: USB disconnect, device number 60 [ 596.737744][ T5603] usb usb3-port1: unable to enumerate USB device [ 597.366099][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 597.534823][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 597.558977][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.568618][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.583909][ T9] usb 5-1: Product: syz [ 597.589788][ T9] usb 5-1: Manufacturer: syz [ 597.594519][ T9] usb 5-1: SerialNumber: syz [ 597.614455][T11288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1384'. [ 597.696224][ T5917] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 598.481340][ T5917] usb 4-1: not running at top speed; connect to a high speed hub [ 598.559524][ T5917] usb 4-1: config 1 interface 0 has no altsetting 0 [ 598.593045][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 598.608987][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.728048][ T5917] usb 4-1: Product: 횾㛘쥥핁㊇琁娌䩭婊ॠ癶䩜⭅ⴗ஀녀푼盢勉⢗莯⁾훬뷬龆厗뮬棛꘿煰㯝괴뙃Ωꐀቭ녟説蠝쯾쪅籶쑅⳥†誛ڞւ㘔ڐ푅ⓛ渵︑퍏䦟옫ꛤ㻺ꎀ绗ｒᝲꇣ犘ᒊ䖨蕚핌咀ꯆꄗ纷ꉄ턁꺤혙촲唂㒏㞬罓쎋꽸鷯༕偟༣켱㪆䯢ৄ叼뉋ᐟ詿㏜㙚喟끺㮄᫚꫁ẉ쪝ෆ톑莫鷅 [ 598.784651][ T5917] usb 4-1: Manufacturer: 琢Ⲍ拥ⵉ䈬堅䭥砎㻵쾈叉뒆ꎉ٩ꐨⰨꠋ喈㏋裤鱷㚡Ӂ୎瘱᭙緧ﻻມ齯넣꺎祥趨ࢨ镕顎ᮥ놤顥㏥ꤷ툯匱桠뾱剽⡌ኛꮹ이禰๿㪩馪꯹䃰紭恆飝謍ⱓ絜㔴㇔칠㽜轙ꫬ修䗾팬缑笠ꌻ죝䊑䷧泈䫸뀬፻ꪞ밭勁⮄섕ࡌᎪꋷ눖恇ꮄ [ 598.861041][ T5917] usb 4-1: SerialNumber: І [ 599.426171][ T5902] usb 2-1: USB disconnect, device number 76 [ 599.451506][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39 [ 599.508838][ T5200] bcm5974 4-1:1.0: could not read from device [ 599.510138][ T5917] usb 4-1: USB disconnect, device number 64 [ 599.616193][ T24] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 599.968914][ T24] usb 3-1: config index 0 descriptor too short (expected 17156, got 18) [ 599.998147][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.018031][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1389'. [ 600.032665][ T24] usb 3-1: config 0 has no interfaces? [ 600.049717][ T24] usb 3-1: New USB device found, idVendor=0446, idProduct=f000, bcdDevice=ab.07 [ 600.059370][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.069091][ T24] usb 3-1: Product: syz [ 600.076479][ T5902] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 600.076500][ T24] usb 3-1: Manufacturer: syz [ 600.076519][ T24] usb 3-1: SerialNumber: syz [ 600.134970][ T24] usb 3-1: config 0 descriptor?? [ 600.208388][ T5917] usb 5-1: USB disconnect, device number 61 [ 600.268462][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.357264][ T5902] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 600.368970][ T30] audit: type=1326 audit(1753452417.646:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.0.1391" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 600.426323][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.493890][ T5902] usb 2-1: config 0 descriptor?? [ 600.734816][ T5917] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 600.776914][T11301] veth1_macvtap: left promiscuous mode [ 600.782608][T11301] macsec0: entered allmulticast mode [ 600.798747][T11301] veth1_macvtap: entered promiscuous mode [ 600.805030][T11301] veth1_macvtap: entered allmulticast mode [ 600.817493][T11301] macsec0: left allmulticast mode [ 600.831983][T11301] veth1_macvtap: left allmulticast mode [ 600.863237][T11319] [ 600.865629][T11319] ===================================================== [ 600.872583][T11319] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 600.880074][T11319] 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 Not tainted [ 600.887205][T11319] ----------------------------------------------------- [ 600.895190][T11319] syz.1.1388/11319 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 600.902944][T11319] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 600.911720][T11319] [ 600.911720][T11319] and this task is already holding: [ 600.919109][T11319] ffff8880324103a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 600.927847][T11319] which would create a new lock dependency: [ 600.933746][T11319] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 600.941389][T11319] [ 600.941389][T11319] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 600.951065][T11319] (&client->buffer_lock){..-.}-{3:3} [ 600.951103][T11319] [ 600.951103][T11319] ... which became SOFTIRQ-irq-safe at: [ 600.964212][T11319] lock_acquire+0x120/0x360 [ 600.968845][T11319] _raw_spin_lock+0x2e/0x40 [ 600.973463][T11319] evdev_pass_values+0xb9/0xbd0 [ 600.978411][T11319] evdev_events+0x1e6/0x340 [ 600.983043][T11319] input_pass_values+0x288/0x890 [ 600.988093][T11319] input_event_dispose+0x3e5/0x6b0 [ 600.993305][T11319] input_inject_event+0x1fe/0x320 [ 600.998440][T11319] kd_sound_helper+0x19f/0x210 [ 601.003336][T11319] input_handler_for_each_handle+0x101/0x1c0 [ 601.009426][T11319] call_timer_fn+0x17e/0x5f0 [ 601.014121][T11319] __run_timer_base+0x61a/0x860 [ 601.019083][T11319] run_timer_softirq+0xb7/0x180 [ 601.024039][T11319] handle_softirqs+0x286/0x870 [ 601.028949][T11319] __irq_exit_rcu+0xca/0x1f0 [ 601.033645][T11319] irq_exit_rcu+0x9/0x30 [ 601.037987][T11319] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 601.043722][T11319] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.049812][T11319] pv_native_safe_halt+0x13/0x20 [ 601.054850][T11319] default_idle+0x13/0x20 [ 601.059286][T11319] default_idle_call+0x74/0xb0 [ 601.064156][T11319] do_idle+0x1e8/0x510 [ 601.068337][T11319] cpu_startup_entry+0x44/0x60 [ 601.073215][T11319] rest_init+0x2de/0x300 [ 601.077563][T11319] start_kernel+0x47d/0x500 [ 601.082196][T11319] x86_64_start_reservations+0x24/0x30 [ 601.087764][T11319] x86_64_start_kernel+0x143/0x1c0 [ 601.092976][T11319] common_startup_64+0x13e/0x147 [ 601.098073][T11319] [ 601.098073][T11319] to a SOFTIRQ-irq-unsafe lock: [ 601.105124][T11319] (tasklist_lock){.+.+}-{3:3} [ 601.105164][T11319] [ 601.105164][T11319] ... which became SOFTIRQ-irq-unsafe at: [ 601.117834][T11319] ... [ 601.117848][T11319] lock_acquire+0x120/0x360 [ 601.125058][T11319] _raw_read_lock+0x36/0x50 [ 601.129692][T11319] __do_wait+0xde/0x740 [ 601.133989][T11319] do_wait+0x1f8/0x520 [ 601.138186][T11319] kernel_wait+0xab/0x170 [ 601.142692][T11319] call_usermodehelper_exec_work+0xbe/0x230 [ 601.148708][T11319] process_scheduled_works+0xae1/0x17b0 [ 601.154361][T11319] worker_thread+0x8a0/0xda0 [ 601.159063][T11319] kthread+0x711/0x8a0 [ 601.163235][T11319] ret_from_fork+0x3fc/0x770 [ 601.167942][T11319] ret_from_fork_asm+0x1a/0x30 [ 601.172819][T11319] [ 601.172819][T11319] other info that might help us debug this: [ 601.172819][T11319] [ 601.183058][T11319] Chain exists of: [ 601.183058][T11319] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 601.183058][T11319] [ 601.196315][T11319] Possible interrupt unsafe locking scenario: [ 601.196315][T11319] [ 601.204665][T11319] CPU0 CPU1 [ 601.210040][T11319] ---- ---- [ 601.215416][T11319] lock(tasklist_lock); [ 601.219679][T11319] local_irq_disable(); [ 601.226444][T11319] lock(&client->buffer_lock); [ 601.233924][T11319] lock(&f_owner->lock); [ 601.240795][T11319] [ 601.244286][T11319] lock(&client->buffer_lock); [ 601.249426][T11319] [ 601.249426][T11319] *** DEADLOCK *** [ 601.249426][T11319] [ 601.257740][T11319] 2 locks held by syz.1.1388/11319: [ 601.262964][T11319] #0: ffff8880260786c0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x187/0x5a0 [ 601.271558][T11319] #1: ffff8880324103a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 601.280758][T11319] [ 601.280758][T11319] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 601.291215][T11319] -> (&client->buffer_lock){..-.}-{3:3} { [ 601.297170][T11319] IN-SOFTIRQ-W at: [ 601.301353][T11319] lock_acquire+0x120/0x360 [ 601.307888][T11319] _raw_spin_lock+0x2e/0x40 [ 601.314423][T11319] evdev_pass_values+0xb9/0xbd0 [ 601.321299][T11319] evdev_events+0x1e6/0x340 [ 601.327867][T11319] input_pass_values+0x288/0x890 [ 601.334845][T11319] input_event_dispose+0x3e5/0x6b0 [ 601.341992][T11319] input_inject_event+0x1fe/0x320 [ 601.349047][T11319] kd_sound_helper+0x19f/0x210 [ 601.355837][T11319] input_handler_for_each_handle+0x101/0x1c0 [ 601.363855][T11319] call_timer_fn+0x17e/0x5f0 [ 601.370474][T11319] __run_timer_base+0x61a/0x860 [ 601.377362][T11319] run_timer_softirq+0xb7/0x180 [ 601.384262][T11319] handle_softirqs+0x286/0x870 [ 601.391066][T11319] __irq_exit_rcu+0xca/0x1f0 [ 601.397698][T11319] irq_exit_rcu+0x9/0x30 [ 601.403990][T11319] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 601.411653][T11319] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.419660][T11319] pv_native_safe_halt+0x13/0x20 [ 601.426615][T11319] default_idle+0x13/0x20 [ 601.432963][T11319] default_idle_call+0x74/0xb0 [ 601.439746][T11319] do_idle+0x1e8/0x510 [ 601.445830][T11319] cpu_startup_entry+0x44/0x60 [ 601.452635][T11319] rest_init+0x2de/0x300 [ 601.458892][T11319] start_kernel+0x47d/0x500 [ 601.465448][T11319] x86_64_start_reservations+0x24/0x30 [ 601.472919][T11319] x86_64_start_kernel+0x143/0x1c0 [ 601.480073][T11319] common_startup_64+0x13e/0x147 [ 601.487090][T11319] INITIAL USE at: [ 601.491179][T11319] lock_acquire+0x120/0x360 [ 601.497614][T11319] _raw_spin_lock+0x2e/0x40 [ 601.504044][T11319] evdev_pass_values+0xb9/0xbd0 [ 601.510819][T11319] evdev_events+0x1e6/0x340 [ 601.517249][T11319] input_pass_values+0x288/0x890 [ 601.524114][T11319] input_event_dispose+0x330/0x6b0 [ 601.531184][T11319] input_inject_event+0x1fe/0x320 [ 601.538142][T11319] evdev_write+0x2fc/0x480 [ 601.544499][T11319] vfs_write+0x27b/0xa90 [ 601.550667][T11319] ksys_write+0x145/0x250 [ 601.556931][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 601.563969][T11319] do_fast_syscall_32+0x34/0x80 [ 601.570743][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.579014][T11319] } [ 601.581692][T11319] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 601.590046][T11319] -> (&new->fa_lock){....}-{3:3} { [ 601.595287][T11319] INITIAL USE at: [ 601.599280][T11319] lock_acquire+0x120/0x360 [ 601.605533][T11319] _raw_write_lock_irq+0xa2/0xf0 [ 601.612241][T11319] fasync_remove_entry+0xf1/0x1c0 [ 601.619026][T11319] __fput+0x89f/0xa70 [ 601.624761][T11319] task_work_run+0x1d4/0x260 [ 601.631114][T11319] exit_to_user_mode_loop+0xec/0x110 [ 601.638147][T11319] __do_fast_syscall_32+0x1f4/0x2b0 [ 601.645100][T11319] do_fast_syscall_32+0x34/0x80 [ 601.651703][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.659788][T11319] INITIAL READ USE at: [ 601.664224][T11319] lock_acquire+0x120/0x360 [ 601.670938][T11319] _raw_read_lock_irqsave+0xaf/0x100 [ 601.678439][T11319] kill_fasync+0x199/0x4d0 [ 601.685137][T11319] evdev_pass_values+0x627/0xbd0 [ 601.692279][T11319] evdev_events+0x1e6/0x340 [ 601.699007][T11319] input_pass_values+0x288/0x890 [ 601.706162][T11319] input_event_dispose+0x330/0x6b0 [ 601.713498][T11319] input_inject_event+0x1fe/0x320 [ 601.720722][T11319] evdev_write+0x2fc/0x480 [ 601.727326][T11319] vfs_write+0x27b/0xa90 [ 601.733767][T11319] ksys_write+0x145/0x250 [ 601.740287][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 601.747590][T11319] do_fast_syscall_32+0x34/0x80 [ 601.754632][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.763182][T11319] } [ 601.765785][T11319] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 601.774594][T11319] ... acquired at: [ 601.778500][T11319] lock_acquire+0x120/0x360 [ 601.783230][T11319] _raw_read_lock_irqsave+0xaf/0x100 [ 601.788718][T11319] kill_fasync+0x199/0x4d0 [ 601.793354][T11319] evdev_pass_values+0x627/0xbd0 [ 601.798503][T11319] evdev_events+0x1e6/0x340 [ 601.803225][T11319] input_pass_values+0x288/0x890 [ 601.808365][T11319] input_event_dispose+0x330/0x6b0 [ 601.813680][T11319] input_inject_event+0x1fe/0x320 [ 601.818916][T11319] evdev_write+0x2fc/0x480 [ 601.823541][T11319] vfs_write+0x27b/0xa90 [ 601.828013][T11319] ksys_write+0x145/0x250 [ 601.832642][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 601.837956][T11319] do_fast_syscall_32+0x34/0x80 [ 601.843033][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.849554][T11319] [ 601.851892][T11319] -> (&f_owner->lock){....}-{3:3} { [ 601.857129][T11319] INITIAL USE at: [ 601.861047][T11319] lock_acquire+0x120/0x360 [ 601.867137][T11319] _raw_write_lock_irq+0xa2/0xf0 [ 601.873657][T11319] __f_setown+0x67/0x370 [ 601.879476][T11319] fcntl_dirnotify+0x3fa/0x6a0 [ 601.885827][T11319] do_fcntl+0x6d0/0x1910 [ 601.891694][T11319] do_compat_fcntl64+0x477/0x720 [ 601.898237][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 601.904945][T11319] do_fast_syscall_32+0x34/0x80 [ 601.911398][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.919407][T11319] INITIAL READ USE at: [ 601.923769][T11319] lock_acquire+0x120/0x360 [ 601.930298][T11319] _raw_read_lock_irqsave+0xaf/0x100 [ 601.937607][T11319] send_sigio+0x38/0x370 [ 601.943866][T11319] kill_fasync+0x24d/0x4d0 [ 601.950307][T11319] lease_break_callback+0x26/0x30 [ 601.957351][T11319] __break_lease+0x6a2/0x1620 [ 601.964041][T11319] do_dentry_open+0xd62/0x1970 [ 601.970842][T11319] vfs_open+0x3b/0x340 [ 601.976923][T11319] dentry_open+0x61/0xa0 [ 601.983364][T11319] do_mq_open+0x59e/0x780 [ 601.989751][T11319] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 601.997529][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 602.004668][T11319] do_fast_syscall_32+0x34/0x80 [ 602.011545][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.019898][T11319] } [ 602.022411][T11319] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 602.031284][T11319] ... acquired at: [ 602.035110][T11319] lock_acquire+0x120/0x360 [ 602.039810][T11319] _raw_read_lock_irqsave+0xaf/0x100 [ 602.045332][T11319] send_sigio+0x38/0x370 [ 602.049761][T11319] kill_fasync+0x24d/0x4d0 [ 602.054367][T11319] lease_break_callback+0x26/0x30 [ 602.059588][T11319] __break_lease+0x6a2/0x1620 [ 602.064462][T11319] do_dentry_open+0xd62/0x1970 [ 602.069425][T11319] vfs_open+0x3b/0x340 [ 602.073678][T11319] dentry_open+0x61/0xa0 [ 602.078103][T11319] do_mq_open+0x59e/0x780 [ 602.082632][T11319] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 602.088466][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 602.093771][T11319] do_fast_syscall_32+0x34/0x80 [ 602.098812][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.105351][T11319] [ 602.107705][T11319] [ 602.107705][T11319] the dependencies between the lock to be acquired [ 602.107719][T11319] and SOFTIRQ-irq-unsafe lock: [ 602.121282][T11319] -> (tasklist_lock){.+.+}-{3:3} { [ 602.126460][T11319] HARDIRQ-ON-R at: [ 602.130475][T11319] lock_acquire+0x120/0x360 [ 602.136671][T11319] _raw_read_lock+0x36/0x50 [ 602.142868][T11319] __do_wait+0xde/0x740 [ 602.148728][T11319] do_wait+0x1f8/0x520 [ 602.154479][T11319] kernel_wait+0xab/0x170 [ 602.160485][T11319] call_usermodehelper_exec_work+0xbe/0x230 [ 602.168066][T11319] process_scheduled_works+0xae1/0x17b0 [ 602.175283][T11319] worker_thread+0x8a0/0xda0 [ 602.181542][T11319] kthread+0x711/0x8a0 [ 602.187290][T11319] ret_from_fork+0x3fc/0x770 [ 602.193559][T11319] ret_from_fork_asm+0x1a/0x30 [ 602.200000][T11319] SOFTIRQ-ON-R at: [ 602.204003][T11319] lock_acquire+0x120/0x360 [ 602.210200][T11319] _raw_read_lock+0x36/0x50 [ 602.216386][T11319] __do_wait+0xde/0x740 [ 602.222266][T11319] do_wait+0x1f8/0x520 [ 602.228056][T11319] kernel_wait+0xab/0x170 [ 602.234082][T11319] call_usermodehelper_exec_work+0xbe/0x230 [ 602.241653][T11319] process_scheduled_works+0xae1/0x17b0 [ 602.248893][T11319] worker_thread+0x8a0/0xda0 [ 602.255177][T11319] kthread+0x711/0x8a0 [ 602.260932][T11319] ret_from_fork+0x3fc/0x770 [ 602.267208][T11319] ret_from_fork_asm+0x1a/0x30 [ 602.273657][T11319] INITIAL USE at: [ 602.277566][T11319] lock_acquire+0x120/0x360 [ 602.283655][T11319] _raw_write_lock_irq+0xa2/0xf0 [ 602.290175][T11319] copy_process+0x21d5/0x3b80 [ 602.296447][T11319] kernel_clone+0x21e/0x870 [ 602.302553][T11319] user_mode_thread+0xdd/0x140 [ 602.308903][T11319] rest_init+0x23/0x300 [ 602.314658][T11319] start_kernel+0x47d/0x500 [ 602.320747][T11319] x86_64_start_reservations+0x24/0x30 [ 602.327784][T11319] x86_64_start_kernel+0x143/0x1c0 [ 602.334483][T11319] common_startup_64+0x13e/0x147 [ 602.341010][T11319] INITIAL READ USE at: [ 602.345350][T11319] lock_acquire+0x120/0x360 [ 602.351880][T11319] _raw_read_lock+0x36/0x50 [ 602.358416][T11319] __do_wait+0xde/0x740 [ 602.364594][T11319] do_wait+0x1f8/0x520 [ 602.370682][T11319] kernel_wait+0xab/0x170 [ 602.377035][T11319] call_usermodehelper_exec_work+0xbe/0x230 [ 602.384957][T11319] process_scheduled_works+0xae1/0x17b0 [ 602.392519][T11319] worker_thread+0x8a0/0xda0 [ 602.399136][T11319] kthread+0x711/0x8a0 [ 602.405224][T11319] ret_from_fork+0x3fc/0x770 [ 602.411828][T11319] ret_from_fork_asm+0x1a/0x30 [ 602.418618][T11319] } [ 602.421127][T11319] ... key at: [] tasklist_lock+0x18/0x40 [ 602.428867][T11319] ... acquired at: [ 602.432676][T11319] lock_acquire+0x120/0x360 [ 602.437371][T11319] _raw_read_lock+0x36/0x50 [ 602.442059][T11319] send_sigurg+0x12b/0x420 [ 602.446840][T11319] sk_send_sigurg+0x6c/0x2e0 [ 602.451622][T11319] queue_oob+0x490/0x5a0 [ 602.456079][T11319] unix_stream_sendmsg+0xaf9/0xc90 [ 602.461385][T11319] __sock_sendmsg+0x219/0x270 [ 602.466269][T11319] ____sys_sendmsg+0x505/0x830 [ 602.471213][T11319] ___sys_sendmsg+0x21f/0x2a0 [ 602.476076][T11319] __sys_sendmsg+0x164/0x220 [ 602.480851][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 602.486173][T11319] do_fast_syscall_32+0x34/0x80 [ 602.491217][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.497768][T11319] [ 602.500106][T11319] [ 602.500106][T11319] stack backtrace: [ 602.506028][T11319] CPU: 0 UID: 0 PID: 11319 Comm: syz.1.1388 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 602.506050][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.506062][T11319] Call Trace: [ 602.506070][T11319] [ 602.506079][T11319] dump_stack_lvl+0x189/0x250 [ 602.506108][T11319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.506127][T11319] ? __pfx__printk+0x10/0x10 [ 602.506154][T11319] validate_chain+0x1f05/0x2140 [ 602.506185][T11319] __lock_acquire+0xab9/0xd20 [ 602.506204][T11319] ? send_sigurg+0x12b/0x420 [ 602.506225][T11319] lock_acquire+0x120/0x360 [ 602.506244][T11319] ? send_sigurg+0x12b/0x420 [ 602.506262][T11319] ? _raw_read_lock_irqsave+0xbb/0x100 [ 602.506283][T11319] _raw_read_lock+0x36/0x50 [ 602.506298][T11319] ? send_sigurg+0x12b/0x420 [ 602.506315][T11319] send_sigurg+0x12b/0x420 [ 602.506335][T11319] sk_send_sigurg+0x6c/0x2e0 [ 602.506357][T11319] queue_oob+0x490/0x5a0 [ 602.506388][T11319] ? __pfx_queue_oob+0x10/0x10 [ 602.506411][T11319] ? kasan_save_free_info+0x46/0x50 [ 602.506429][T11319] ? __pfx___might_resched+0x10/0x10 [ 602.506448][T11319] ? security_file_ioctl_compat+0xcb/0x2d0 [ 602.506476][T11319] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 602.506508][T11319] unix_stream_sendmsg+0xaf9/0xc90 [ 602.506535][T11319] ? aa_sk_perm+0x81e/0x950 [ 602.506553][T11319] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 602.506577][T11319] ? __asan_memset+0x22/0x50 [ 602.506596][T11319] ? __import_iovec+0x5d4/0x7f0 [ 602.506620][T11319] ? aa_sock_msg_perm+0x94/0x160 [ 602.506642][T11319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.506660][T11319] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 602.506684][T11319] __sock_sendmsg+0x219/0x270 [ 602.506706][T11319] ____sys_sendmsg+0x505/0x830 [ 602.506723][T11319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.506744][T11319] ___sys_sendmsg+0x21f/0x2a0 [ 602.506760][T11319] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.506777][T11319] ? do_raw_spin_lock+0x121/0x290 [ 602.506816][T11319] ? __fget_files+0x2a/0x420 [ 602.506830][T11319] ? __fget_files+0x3a0/0x420 [ 602.506848][T11319] __sys_sendmsg+0x164/0x220 [ 602.506862][T11319] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.506880][T11319] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.506894][T11319] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 602.506926][T11319] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 602.506946][T11319] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.506965][T11319] __do_fast_syscall_32+0xb6/0x2b0 [ 602.506988][T11319] do_fast_syscall_32+0x34/0x80 [ 602.507007][T11319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.507029][T11319] RIP: 0023:0xf7ff5539 [ 602.507046][T11319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 602.507064][T11319] RSP: 002b:00000000f50f555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 602.507082][T11319] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 602.507095][T11319] RDX: 00000000240408c1 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.507105][T11319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.507116][T11319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 602.507126][T11319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.507142][T11319] [ 602.855873][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 603.270720][ T5917] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 603.281885][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.296054][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 603.305707][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 603.380824][ T5902] usb 2-1: USB disconnect, device number 77 [ 603.381206][ T5917] usb 1-1: Product: syz [ 603.415623][ T5917] usb 1-1: Manufacturer: syz [ 603.441704][ T5917] usb 1-1: SerialNumber: syz [ 603.451916][ T5917] usb 1-1: config 0 descriptor?? [ 603.467125][ T5917] usb 1-1: can't set config #0, error -71 [ 603.487708][ T5917] usb 1-1: USB disconnect, device number 67 [ 603.523751][ T24] usb 3-1: USB disconnect, device number 74