last executing test programs: 9.022280757s ago: executing program 3 (id=6579): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003c) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0xa080, 0x0) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200408, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r5 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x1000000000000401, 0xbc, 0x1000040000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x800, 0xff}, 0x8, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000440)="0f380b42b4d301ba4300ed0f01cabaf80c66b8f565ec8366efbafc0cec2e82092fba610066b83d00000066ef0f01c80fc76bba9a0f007300", 0x38}], 0x1, 0x2, &(0x7f00000004c0), 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000600)='wg2\x00', 0x4) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7.836582509s ago: executing program 3 (id=6585): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48400) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440), 0x0, 0x80) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0xc0c5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, 0x0, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local, 0x207}, {0xa, 0x0, 0x8, @empty, 0x5}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES8, @ANYRES64=r3, @ANYRES32, @ANYRES64=r0, @ANYRESOCT=r7], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r10 = dup3(r1, r2, 0x0) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000440)={0x60, 0xcbe984f22ef07542, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x91, 0x0, 0x0, 0x8000000000006, 0x0, 0x0, 0x39}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 7.088032967s ago: executing program 3 (id=6587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) syz_emit_ethernet(0x0, 0x0, 0x0) 6.304009637s ago: executing program 0 (id=6590): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280), 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r8, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cdc1e633f792"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7bb05078f081"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="66f1de48231d"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x60) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r9, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f00000001c0)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) (async) syz_fuse_handle_req(r9, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.128250378s ago: executing program 3 (id=6591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004000)=""/4096, 0x1000}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)}, 0xf}], 0x2, 0x12000, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb5d25a98010fc3c7e8e6eb254451832f7b5944de95d2b2608b9c4ba8fd75f6c9d98007df452e472f9b1e9d30b90779ee42fcd88e8b4175066b73858f4164bd1bb22ebd829dc8d90fd8516187e40417efc5c759ada70450be2efd08b40ed4e77ea41920c381dcf69fd6a", 0xdd}, {&(0x7f00000002c0)="53812f25b1e42e134f4e75a76aad6ce9d6e1727644d2179fdb23bdb4a90dedb3ddcde79706ee102d63e1589cb57c5d038803359f1e3a928b0a61189782f3b37c9680813d0ab217665df4b2d515c27f4e8df80a0dfee70129ebab9d4779a5ad4260a674b13a1b364ec09325f6a7e51e6a732d376442cba82eed6473ef3c162e12dff86e8ec888be76181667ca6b360f1ae6160f821780abbb17c558d25a1ae439710b5f", 0xa3}, {&(0x7f00000012c0)="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", 0xe61}], 0x3) 6.039075713s ago: executing program 3 (id=6592): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x8031, 0xffffffffffffffff, 0xc08cd000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0xec}}, 0x0) unshare(0x2c020400) syz_io_uring_setup(0xf04, 0x0, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000540)={0x2, "2a123b084c7f8324cc76356ea2c2ef76068115ecfb56b46998cd6a640317a26f", 0x0, 0x0, 0x1, 0x400000, 0x2060501}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 5.32419866s ago: executing program 4 (id=6593): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x5, 0x0, '\x00', {0x0, @reserved}}) r2 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000001440)={0xa, 0x4e21, 0x8020, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000002900000a08000000000000000000000014"], 0x30}}], 0x1, 0x840) fstatfs(r2, &(0x7f00000003c0)=""/146) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f00000001c0)={0x8, r4}) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x32) close_range(r5, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r8, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000002c0)="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", 0x101}], 0x1}, 0x4000001) 4.949070429s ago: executing program 0 (id=6594): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4a8981, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000180), 0x0) 4.642463544s ago: executing program 4 (id=6595): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003c) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0xa080, 0x0) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200408, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r5 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x1000000000000401, 0xbc, 0x1000040000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x800, 0xff}, 0x8, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000440)="0f380b42b4d301ba4300ed0f01cabaf80c66b8f565ec8366efbafc0cec2e82092fba610066b83d00000066ef0f01c80fc76bba9a0f007300", 0x38}], 0x1, 0x2, &(0x7f00000004c0), 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000600)='wg2\x00', 0x4) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.280923064s ago: executing program 1 (id=6596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f0000000480)=""/83, 0x53, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', r4, 0x2f, 0x46, 0x2, 0x2, 0x4, @local, @local, 0x8000, 0x7, 0x17c0, 0x43a}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080), 0xf) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x0, 0x3, 0x5}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 3.512033453s ago: executing program 4 (id=6599): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8300, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@l={0x92, 0x5, 0xd0, 0x17, 0x7, 0x62, 0x5}) 3.267038836s ago: executing program 0 (id=6600): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000024000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000608000140000000110900010073797a300000000014000000110001"], 0xe0}}, 0x0) 3.141185806s ago: executing program 1 (id=6601): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000003729000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) 2.996164069s ago: executing program 4 (id=6602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004000)=""/4096, 0x1000}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)}, 0xf}], 0x2, 0x12000, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb5d25a98010fc3c7e8e6eb254451832f7b5944de95d2b2608b9c4ba8fd75f6c9d98007df452e472f9b1e9d30b90779ee42fcd88e8b4175066b73858f4164bd1bb22ebd829dc8d90fd8516187e40417efc5c759ada70450be2efd08b40ed4e77ea41920c381dcf69fd6a", 0xdd}, {&(0x7f00000002c0)="53812f25b1e42e134f4e75a76aad6ce9d6e1727644d2179fdb23bdb4a90dedb3ddcde79706ee102d63e1589cb57c5d038803359f1e3a928b0a61189782f3b37c9680813d0ab217665df4b2d515c27f4e8df80a0dfee70129ebab9d4779a5ad4260a674b13a1b364ec09325f6a7e51e6a732d376442cba82eed6473ef3c162e12dff86e8ec888be76181667ca6b360f1ae6160f821780abbb17c558d25a1ae439710b5f", 0xa3}, {&(0x7f00000012c0)="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", 0xe61}], 0x3) 2.926211263s ago: executing program 1 (id=6603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001009cffffff000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000040002801400000011"], 0xcc}}, 0x0) 2.909777392s ago: executing program 0 (id=6604): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f727400050004000000000009000200"], 0x6c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg$unix(r0, &(0x7f00000025c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/251, 0xfb}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000380)=""/78, 0x4e}], 0x4, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/83, 0x53}], 0x3}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/184, 0xb8}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/46, 0x2e}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000a40)=""/145, 0x91}, {&(0x7f0000000b00)=""/237, 0xed}], 0x4, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/93, 0x5d}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/113, 0x71}, {&(0x7f0000000f40)=""/146, 0x92}, {&(0x7f0000001000)=""/73, 0x49}, {&(0x7f00000010c0)=""/239, 0xef}, {&(0x7f00000011c0)=""/251, 0xfb}, {&(0x7f00000012c0)=""/176, 0xb0}], 0x9, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001440)=""/29, 0x1d}], 0x1, &(0x7f00000016c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/30, 0x1e}, {&(0x7f0000001800)=""/68, 0x44}, {&(0x7f0000001880)=""/216, 0xd8}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/148, 0x94}, {&(0x7f0000001a80)=""/206, 0xce}], 0x6}}, {{&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001c80)=""/174, 0xae}, {&(0x7f0000001d40)=""/190, 0xbe}, {&(0x7f0000001e00)=""/179, 0xb3}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/194, 0xc2}, {&(0x7f0000002000)=""/51, 0x33}, {&(0x7f0000002040)=""/243, 0xf3}, {&(0x7f0000002140)=""/30, 0x1e}, {&(0x7f0000002180)=""/21, 0x15}, {&(0x7f00000021c0)=""/107, 0x6b}], 0xa, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000023c0)=""/84, 0x54}], 0x1, &(0x7f0000002480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}], 0x9, 0x103, 0x0) unshare(0x4000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x13ea, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0x100001, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000e80)=0x4, 0x4) ioctl$VIDIOC_QBUF(r10, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x900000, 0xe, 0x4, 0x40, 0x100, {0x0, 0xea60}, {0x2, 0x0, 0x4, 0x4, 0x80, 0x1, "9ca04de1"}, 0x2, 0x4, {0x0}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100004800c00058008"], 0x34}}, 0x0) 2.631646079s ago: executing program 4 (id=6607): r0 = socket$igmp(0x2, 0x3, 0x2) fadvise64(r0, 0x100, 0x1, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@remote, @local, 0x0, 0xffffff00, 0x0, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8dd, 0x800, 0xfff, 0x400, 0xffff, 0xdd, 'syzkaller0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xffffff82, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, 0x0, 0x0, 0x2, 0xd, {@mac, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="39d9791192f8", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x94, 0x1, 0xfdd, 0x8, 0x5, 'bond_slave_1\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x43}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x700}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000200)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x800, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x6f8, [0x0, 0x2000000018c0, 0x200000001af4, 0x200000001b24], 0x0, &(0x7f0000000080), &(0x7f00000018c0)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x5, 0x2, 0x8, 'pimreg0\x00', 'tunl0\x00', '\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x0, {0x5}}}}}, {0x3, 0x60, 0x88ca, 'bridge_slave_1\x00', 'macsec0\x00', 'pimreg\x00', 'wg0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="a5d87bc910e5", [0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x116, 0x14e, [@owner={{'owner\x00', 0x0, 0x18}, {{r1, r2, r3, 0xee01, 0x2, 0x2}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x7, 0xa01, 0x1, 0x7}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0}}}], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0x25, 0x800, 'veth1_virt_wifi\x00', 'gretap0\x00', 'pim6reg\x00', 'veth0_to_team\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff], 0x2a6, 0x2f6, 0x346, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xa, [{0x7, 0x7, 0x3, 0x5}, {0x1, 0x35, 0xe, 0x2db}, {0xe, 0x6, 0x9, 0xd1fe}, {0x5, 0x9, 0x9, 0x92d}, {0x5c00, 0x9, 0x5, 0xfffffffc}, {0x8, 0x7, 0x1, 0x4}, {0xd, 0x10, 0x80, 0x2}, {0x33b, 0xfa, 0x80, 0x8000}, {0x9, 0x8, 0x6, 0x1}, {0x7, 0xca, 0x3, 0xf}, {0x7703, 0x1, 0x6, 0x2}, {0xb, 0x4, 0x4, 0x42}, {0xd61e, 0x6, 0x2, 0x5}, {0x101, 0x3, 0x1, 0x7fffffff}, {0x5, 0x3, 0x70, 0x1ff}, {0x1, 0x5, 0xb, 0x9}, {0x3, 0xb6, 0xd, 0xffff}, {0x81, 0x4, 0x8, 0xc55}, {0x8, 0x6, 0x7, 0x9c9}, {0x8000, 0x4, 0xc8}, {0xf, 0x4, 0x47, 0xe}, {0xc78d, 0x7, 0x6e, 0x9}, {0x0, 0x4, 0x5, 0x3}, {0x2, 0x7, 0x8, 0x80000001}, {0x7ff, 0x5, 0x9, 0x9}, {0x1f, 0xa6, 0x6, 0x6}, {0x9b7c, 0x1, 0x3}, {0x8, 0x5, 0x1, 0x8}, {0x1ff, 0x0, 0x1, 0x2}, {0x5, 0x8, 0x10, 0xfffffffd}, {0x1, 0x4, 0x6, 0x5}, {0x0, 0x40, 0x2, 0x1fd}, {0x4, 0x3, 0x5, 0x9}, {0xc238, 0xb3, 0x2, 0x8000}, {0x8, 0x6, 0x0, 0x6854a359}, {0x1ff, 0x3, 0x4, 0x8}, {0x0, 0x3, 0xff, 0x2}, {0x5, 0x6, 0x0, 0x40}, {0x0, 0x8, 0x6, 0x5}, {0x4, 0x3, 0xfd, 0x6}, {0x9, 0xb4, 0xab, 0xed}, {0x6, 0xff, 0x2, 0xf55d}, {0x101, 0x1, 0xff, 0xffff}, {0x4, 0x9, 0x8, 0x2}, {0x3, 0x81, 0x80, 0x8001}, {0x5, 0x8, 0x7}, {0x6, 0x0, 0x10, 0x7fff}, {0x7, 0x0, 0x0, 0x9}, {0x6, 0x6, 0x5, 0x6}, {0x58c, 0xf, 0x9, 0x4}, {0x11, 0xb, 0x3, 0xff}, {0x9, 0xff, 0x9, 0x5}, {0xb1, 0x2, 0x2, 0x40}, {0x5, 0x3, 0x26, 0x6}, {0x2a, 0xe, 0x9, 0xb5}, {0x8, 0x8, 0x6, 0x3}, {0x0, 0x5, 0x1, 0x6}, {0xfff, 0x4, 0x4, 0x4524}, {0x2, 0x6, 0xff, 0xfffffff9}, {0x6, 0x80, 0x1, 0x7fff}, {0xf801, 0x4, 0x4, 0xd252}, {0x2, 0x1, 0x2a, 0x10001}, {0x7, 0x14, 0x1, 0x56}, {0x8, 0x81, 0x5, 0x690}], {0x7}}}}], [@common=@log={'log\x00', 0x28, {{0xec, "48b345fe0e0b96692fc7694d675bdc7eb7da2d54321d2252562f3f1615be", 0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1c000, 'syz1\x00', {0x3}}}}}, {0x3, 0x10, 0x6002, 'bond0\x00', 'wg2\x00', 'bond_slave_1\x00', 'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe6, 0xe6, 0x11e, [@mac={{'mac\x00', 0x0, 0x10}, {{@remote, 0x1}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x8}, {0x200}], 0x2, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}}]}]}, 0x770) r4 = syz_open_pts(0xffffffffffffffff, 0x40100) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2402c0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000000000000000000000000000fdff00000000fc02000000000000000000000000000000a800000000000005"], 0x0) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fcntl$setsig(r5, 0x404, 0x21) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0xffffffff) 2.630976606s ago: executing program 1 (id=6608): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x6, 0x1, 0x0, 0x0, {0x0, 0x2000000}, {0x8eff}, {}, {}, 0x0, 0x1c1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 2.541648163s ago: executing program 3 (id=6609): rt_sigprocmask(0x1, &(0x7f0000000400)={[0x400]}, 0x0, 0x8) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x41, @remote, @loopback={0x8000000, 0xffff888101827518}, 0x0, 0x0, 0x200000, 0x9541}}) r2 = gettid() unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) tkill(r2, 0x12) rt_sigsuspend(&(0x7f0000000100)={[0x1]}, 0x8) 2.395097306s ago: executing program 0 (id=6610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r7, r7, 0x0, 0x200000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.288302666s ago: executing program 1 (id=6611): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xc3, 0x6f, 0x81, 0x40, 0x5fc9, 0x63, 0xb827, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6c, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0xb, 0x53, 0xfd, 0x8, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0xc0, 0x3, 0xfe}}]}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) fremovexattr(r0, &(0x7f0000000080)=@random={'os2.', 'ns/time\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 2.288039235s ago: executing program 2 (id=6612): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x4f8, 0x340, 0x25, 0x148, 0x340, 0x60, 0x460, 0x2a8, 0x2a8, 0x460, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x1d, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x7, 0x6, 0x1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x558) 2.224495505s ago: executing program 4 (id=6613): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4a8981, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000180), 0x0) 1.744686574s ago: executing program 2 (id=6614): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x20, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0x8}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x80800) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="3b2a00001fc7cb0a280000000300000018120000", @ANYRESHEX, @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r11}, 0x20) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x401, 0x4000012, 0x7, 0xe, 0x0, 0x2, 0x0, 0x0, 0x2, 0xff}}, 0x50) (async) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x401, 0x4000012, 0x7, 0xe, 0x0, 0x2, 0x0, 0x0, 0x2, 0xff}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 932.200124ms ago: executing program 2 (id=6615): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0xfffffffffffffc86, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@rand_addr=0x64010100, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {}]}}) 733.866999ms ago: executing program 2 (id=6616): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x5, 0x0, '\x00', {0x0, @reserved}}) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) sendmmsg$inet6(r2, &(0x7f0000000a40)=[{{&(0x7f0000001440)={0xa, 0x4e21, 0x8020, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000002900000a08000000000000000000000014"], 0x30}}], 0x1, 0x840) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/146) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f00000001c0)={0x8, r4}) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x32) close_range(r5, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r8, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000002c0)="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", 0x101}], 0x1}, 0x4000001) 462.750612ms ago: executing program 1 (id=6617): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x10, 0x10, 0x7fffffffffffffff, 0x6, 0x1, 0xc152, 0xaf64, 0x6, 0x9, 0x90000000, 0x8, 0xce27, 0x8, 0xfffffffffffff6c8, 0xabe, 0xdc], 0xf000, 0x8182}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) syz_pidfd_open(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r5, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e71148a635dc49e0556303070426015a48a81290ab12168df214047a25c75c65b5d155ea64efdf376ecb9570223c9e356dc1864b237e404ff0030eb6b7cd4bf3b21028ebec9308c4ca66af8eac463d39c28ab158666fa1f573f0fd7aef24d9e6d72198e48046b8a6987a54eb53ee51403eb4f3b424120af0d1"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 335.657299ms ago: executing program 2 (id=6618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xa0211fffe000001}, 0x6}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x10001, 0x2, 0x80000001}, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000080)={"d7c679a2ac5b113f3434a5cdcd756cd7", 0x0, 0x0, {0xbe, 0xffc7b8f8}, {0x100, 0x7}, 0xff, [0x3, 0x4, 0x6, 0x6, 0x3000000000, 0x3, 0x4, 0x2, 0x6, 0x7, 0x4, 0x6, 0xd, 0x0, 0x7f]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) r5 = syz_open_dev$vbi(&(0x7f00000025c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000040)={0x1, @capture={0x0, 0x1, {0x10000, 0x2}, 0xf, 0xa}}) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f00000002c0)=""/42, 0x2a, &(0x7f0000000300)=""/79, 0x2, 0x4}}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"e09fc2ce675424db8e9e7b1c64f94f55", r3, r6, {0x6, 0x8401}, {0x6, 0xfffffffd}, 0x0, [0x5b6a, 0xfffffffffffffffd, 0x8, 0x1000, 0xfffffffffffffff8, 0xffff, 0x6, 0x0, 0x7, 0xfffffffffffffffe, 0x5, 0x4, 0x3, 0x6, 0xc000000000000000, 0x5]}) 178.781127ms ago: executing program 0 (id=6619): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x2400, 0x0) r1 = fanotify_init(0x202, 0x101000) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0xc2a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) dup2(r1, r0) 0s ago: executing program 2 (id=6620): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f81, 0x1, 0x9, 0x1, 0x1347, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x8, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x4, 0xed}}) kernel console output (not intermixed with test programs): 20] usb 3-1: Manufacturer: syz [ 1575.686660][T23020] usb 3-1: SerialNumber: syz [ 1575.749601][T25484] veth0_vlan: entered promiscuous mode [ 1575.767679][T23020] usb 3-1: config 0 descriptor?? [ 1575.824266][T23020] smsc75xx v1.0.0 [ 1575.827950][T23020] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1575.843825][T25484] veth1_vlan: entered promiscuous mode [ 1575.849886][T25571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6109'. [ 1575.857505][T23020] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1575.924546][T25484] veth0_macvtap: entered promiscuous mode [ 1575.960409][T25484] veth1_macvtap: entered promiscuous mode [ 1576.015077][T25484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.034969][T25484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.077222][T25558] binder: 25554:25558 ioctl c0306201 200000000100 returned -11 [ 1576.098840][T25484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.115653][T25484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.130636][T25484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.140991][T25484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.192446][T23022] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1576.366643][T23022] usb 5-1: config index 0 descriptor too short (expected 232, got 77) [ 1576.375612][T23022] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1576.399023][T23022] usb 5-1: config 0 has no interfaces? [ 1576.405212][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.424456][T23022] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1576.435406][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.447896][T23022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.466164][T23022] usb 5-1: Product: syz [ 1576.471000][T23022] usb 5-1: Manufacturer: syz [ 1576.476677][T23022] usb 5-1: SerialNumber: syz [ 1576.500486][T23022] usb 5-1: config 0 descriptor?? [ 1576.615314][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.631699][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.940664][T25583] netlink: 'syz.3.6081': attribute type 12 has an invalid length. [ 1576.951683][T25583] netlink: 'syz.3.6081': attribute type 28 has an invalid length. [ 1576.963008][T25583] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1577.626451][T23018] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 1577.773100][T23018] usb 1-1: USB disconnect, device number 37 [ 1577.846309][T23020] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1578.053974][T23020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1578.073384][T23020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1578.105858][T23039] usb 3-1: USB disconnect, device number 42 [ 1578.127501][T23020] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1578.155657][T23020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.191121][T23020] usb 2-1: config 0 descriptor?? [ 1578.211347][T25595] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1578.427644][T25595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.443998][T25595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.489012][T23020] usbhid 2-1:0.0: can't add hid device: -71 [ 1578.502007][T23020] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1578.527317][T23020] usb 2-1: USB disconnect, device number 28 [ 1578.660148][T25605] tipc: Started in network mode [ 1578.689414][T25605] tipc: Node identity ac14140f, cluster identity 4711 [ 1578.697319][T25605] tipc: New replicast peer: 255.255.255.255 [ 1578.706547][T25605] tipc: Enabled bearer , priority 10 [ 1578.847217][T23020] usb 5-1: USB disconnect, device number 24 [ 1579.013968][T23018] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1579.124269][T25617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1579.172213][T23018] usb 4-1: device descriptor read/64, error -71 [ 1579.442118][T23018] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1579.591925][T23018] usb 4-1: device descriptor read/64, error -71 [ 1579.722958][T23018] usb usb4-port1: attempt power cycle [ 1579.762125][T23022] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1579.871907][T25634] vivid-000: disconnect [ 1579.979745][ T9] tipc: Node number set to 2886997007 [ 1580.176591][T25620] vivid-000: reconnect [ 1580.342455][T23022] usb 2-1: device descriptor read/64, error -71 [ 1580.362585][T25636] fuse: Bad value for 'fd' [ 1580.491944][T23018] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1580.596589][T23018] usb 4-1: device descriptor read/8, error -71 [ 1580.632017][T23022] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1580.652185][T23020] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1580.794843][T23022] usb 2-1: device descriptor read/64, error -71 [ 1580.841935][T23018] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1580.865512][T23020] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 1580.880217][T23020] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 1580.901238][T23020] usb 5-1: Product: syz [ 1580.909432][T23020] usb 5-1: SerialNumber: syz [ 1580.922120][T23022] usb usb2-port1: attempt power cycle [ 1580.950019][T23018] usb 4-1: device descriptor read/8, error -71 [ 1581.007327][T23020] usb 5-1: config 0 descriptor?? [ 1581.062524][T23018] usb usb4-port1: unable to enumerate USB device [ 1581.258809][T25636] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1581.271991][T25636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1581.292050][T23022] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1581.306544][T23020] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1581.316406][T23020] usb 5-1: USB disconnect, device number 25 [ 1581.337412][T23022] usb 2-1: device descriptor read/8, error -71 [ 1581.621967][T23022] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1581.661922][T23022] usb 2-1: device descriptor read/8, error -71 [ 1581.772479][T23022] usb usb2-port1: unable to enumerate USB device [ 1582.162361][T25652] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1582.290862][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6134'. [ 1582.793370][T25662] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 1583.168117][T25674] veth0: entered promiscuous mode [ 1583.200655][T25674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1583.422606][T23020] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1583.583586][T23020] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1583.597004][T23020] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.623025][T23020] usb 2-1: config 171 has no interface number 0 [ 1583.636184][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1583.636485][T23020] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1583.691994][T23020] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 2304, setting to 64 [ 1583.742102][T23020] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1583.776931][T23020] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1583.786521][T23020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.796097][T23020] usb 2-1: Product: syz [ 1583.800549][T23020] usb 2-1: Manufacturer: syz [ 1583.805690][T23020] usb 2-1: SerialNumber: syz [ 1583.881879][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1583.891565][T25672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1583.909677][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1583.931876][T23022] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1583.952782][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1583.971616][ T9] usb 1-1: Product: syz [ 1583.989866][ T9] usb 1-1: Manufacturer: syz [ 1584.002286][ T9] usb 1-1: SerialNumber: syz [ 1584.013377][ T9] usb 1-1: config 0 descriptor?? [ 1584.035264][ T9] usbtest 1-1:0.0: FX2 device [ 1584.040030][ T9] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1584.115606][T23022] usb 3-1: config 0 has no interfaces? [ 1584.130266][T23022] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1584.143004][T23022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.151059][T23022] usb 3-1: Product: syz [ 1584.156412][T23022] usb 3-1: Manufacturer: syz [ 1584.161062][T23022] usb 3-1: SerialNumber: syz [ 1584.182285][T23022] usb 3-1: config 0 descriptor?? [ 1584.257274][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.325355][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.533672][T25701] delete_channel: no stack [ 1584.788831][T23020] ath6kl: Failed to submit usb control message: -71 [ 1584.817685][T23020] ath6kl: unable to send the bmi data to the device: -71 [ 1584.851651][T23020] ath6kl: Unable to send get target info: -71 [ 1584.896683][T23020] ath6kl: Failed to init ath6kl core: -71 [ 1584.957475][T23020] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1584.972487][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1585.104364][T23020] usb 2-1: USB disconnect, device number 33 [ 1585.180478][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1585.287080][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1585.437182][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1585.795834][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.900978][T25703] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1585.962863][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1586.270669][T25703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.284568][T25703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.458247][T23020] usb 1-1: USB disconnect, device number 38 [ 1587.057502][T23039] usb 3-1: USB disconnect, device number 43 [ 1587.612127][T23039] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1587.761680][T23039] usb 2-1: device descriptor read/64, error -71 [ 1588.022150][T23039] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 1588.201982][T23039] usb 2-1: device descriptor read/64, error -71 [ 1588.342330][T23039] usb usb2-port1: attempt power cycle [ 1588.575417][T25734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.645648][T23012] usb 4-1: USB disconnect, device number 28 [ 1588.684192][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1588.725888][T23039] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1588.775379][T23039] usb 2-1: device descriptor read/8, error -71 [ 1589.037528][T23039] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1589.066587][T23039] usb 2-1: device descriptor read/8, error -71 [ 1589.092529][T23020] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1589.182626][T23039] usb usb2-port1: unable to enumerate USB device [ 1589.252887][T23022] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1589.292962][T23020] usb 1-1: Using ep0 maxpacket: 8 [ 1589.321032][T23020] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1589.330980][T23020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.339636][T23020] usb 1-1: Product: syz [ 1589.344420][T23020] usb 1-1: Manufacturer: syz [ 1589.349065][T23020] usb 1-1: SerialNumber: syz [ 1589.421016][T23020] usb 1-1: config 0 descriptor?? [ 1589.426699][T23012] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1589.445363][T23022] usb 5-1: Invalid ep0 maxpacket: 32 [ 1589.581879][T23022] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1589.592041][T23012] usb 3-1: Using ep0 maxpacket: 32 [ 1589.604402][T23012] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1589.618295][T23012] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1589.630559][T23012] usb 3-1: Product: syz [ 1589.640690][T23012] usb 3-1: Manufacturer: syz [ 1589.647094][T23020] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1589.698998][T23012] hub 3-1:4.0: USB hub found [ 1589.756596][T23022] usb 5-1: Invalid ep0 maxpacket: 32 [ 1589.792943][T23022] usb usb5-port1: attempt power cycle [ 1589.972489][T23012] hub 3-1:4.0: 2 ports detected [ 1590.179736][T23022] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1590.426437][T23022] usb 5-1: Invalid ep0 maxpacket: 32 [ 1590.561871][T23022] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 1590.598879][T23022] usb 5-1: Invalid ep0 maxpacket: 32 [ 1590.612297][T23022] usb usb5-port1: unable to enumerate USB device [ 1590.647234][T25748] input: syz0 as /devices/virtual/input/input95 [ 1590.679677][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6166'. [ 1590.712856][T23012] usb 3-1: USB disconnect, device number 44 [ 1591.190881][T25760] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1591.244669][T23020] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1591.278123][T23020] usb 1-1: USB disconnect, device number 39 [ 1591.576225][T25768] blktrace: Concurrent blktraces are not allowed on sg0 [ 1591.638188][T25768] netlink: 'syz.1.6172': attribute type 20 has an invalid length. [ 1591.679508][T25770] delete_channel: no stack [ 1591.741454][T23041] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1591.903744][T23041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1591.917181][T23041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1591.941618][T23041] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1591.951682][T23041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.986560][T23041] usb 3-1: config 0 descriptor?? [ 1592.022305][T23020] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1592.035726][T25762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1592.186707][T23020] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1592.248042][T25762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1592.259093][T23020] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1592.350506][T25762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1592.393006][T23020] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1592.414295][T23020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.464603][T25771] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1592.582048][T23020] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1592.681374][T23041] usbhid 3-1:0.0: can't add hid device: -71 [ 1592.713837][T23041] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1592.812065][T23022] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1592.939526][T25771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.967929][T25771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.981271][T23041] usb 3-1: USB disconnect, device number 45 [ 1593.212176][T23022] usb 5-1: Using ep0 maxpacket: 32 [ 1593.226341][T23022] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1593.240568][T23022] usb 5-1: config 0 has no interface number 0 [ 1593.268434][T23022] usb 5-1: config 0 interface 168 has no altsetting 0 [ 1593.290504][T23022] usb 5-1: New USB device found, idVendor=4855, idProduct=0091, bcdDevice=d1.bd [ 1593.308254][T23022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.328491][T23022] usb 5-1: Product: syz [ 1593.414349][T23022] usb 5-1: Manufacturer: syz [ 1593.432250][T23022] usb 5-1: SerialNumber: syz [ 1593.481159][T23022] usb 5-1: config 0 descriptor?? [ 1594.095187][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6180'. [ 1594.330567][T25796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1594.445144][T25796] ip6gretap0: entered promiscuous mode [ 1594.493746][T25796] ip6gretap0: left promiscuous mode [ 1595.086316][T25800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'. [ 1595.325423][T25800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6183'. [ 1595.911134][T23022] usb 5-1: USB disconnect, device number 30 [ 1596.104440][T23012] usb 4-1: USB disconnect, device number 29 [ 1596.697577][T25824] syz_tun: entered allmulticast mode [ 1596.730749][T25824] syz_tun: left allmulticast mode [ 1597.151710][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1597.176073][T25835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1598.288869][T25862] team_slave_0: entered promiscuous mode [ 1598.294692][T25862] team_slave_1: entered promiscuous mode [ 1598.350505][T25862] macvlan4: entered promiscuous mode [ 1598.387262][T25862] team0: entered promiscuous mode [ 1598.450740][T25862] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1598.482138][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1598.521478][T25862] team0: Device macvlan4 is already an upper device of the team interface [ 1598.561976][T25862] team0: left promiscuous mode [ 1598.579277][T25862] team_slave_0: left promiscuous mode [ 1598.584903][T25862] team_slave_1: left promiscuous mode [ 1598.671910][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1598.680267][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1598.704471][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1598.725409][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1598.747367][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.769416][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.808907][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1598.916502][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.144238][T23020] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1599.205460][ T9] usb 3-1: usb_control_msg returned -32 [ 1599.216033][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1599.339513][T25877] PKCS7: Unknown OID: [5] (bad) [ 1599.365883][T25877] PKCS7: Only support pkcs7_signedData type [ 1599.402135][T23020] usb 1-1: Using ep0 maxpacket: 32 [ 1599.442437][T23020] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1599.457633][T23020] usb 1-1: config 0 has no interface number 0 [ 1599.526535][T23020] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1599.597579][T23020] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1599.617031][T23020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.630414][T23020] usb 1-1: Product: syz [ 1599.669161][T23020] usb 1-1: Manufacturer: syz [ 1599.678890][T23020] usb 1-1: SerialNumber: syz [ 1599.784678][T23020] usb 1-1: config 0 descriptor?? [ 1599.947496][T23020] smsc75xx v1.0.0 [ 1599.986555][T23020] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1600.157156][T23020] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1600.296384][T25872] binder: 25867:25872 ioctl c0306201 200000000100 returned -11 [ 1600.811994][T23020] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1600.993180][T23020] usb 2-1: Using ep0 maxpacket: 8 [ 1601.001038][T23020] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1601.010130][T23020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.033428][T23020] usb 2-1: config 0 has no interface number 0 [ 1601.045545][T23020] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1601.074104][T23020] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1601.108973][T23020] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1601.119466][T23020] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1601.132682][T23020] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1601.141173][T23020] usb 2-1: Manufacturer: syz [ 1601.150432][T23020] usb 2-1: config 0 descriptor?? [ 1601.463798][ T9] usb 3-1: USB disconnect, device number 46 [ 1602.009147][T23018] usb 1-1: USB disconnect, device number 40 [ 1602.528278][T25917] Cannot find add_set index 0 as target [ 1602.612007][T23012] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1602.792508][T23012] usb 1-1: Using ep0 maxpacket: 8 [ 1602.810922][T23012] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1602.829733][T23012] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1602.855527][T23012] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1602.869751][T23012] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1602.890713][T23012] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1602.917676][T23012] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1602.932776][T23012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.978681][T23018] usb 2-1: USB disconnect, device number 38 [ 1603.155795][T25914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.164830][T25914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.358474][T23020] usb 1-1: USB disconnect, device number 41 [ 1603.512259][T25934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1603.632014][T23012] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1603.812717][T23012] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1603.823859][T23012] usb 4-1: config 0 has no interfaces? [ 1603.836212][T23012] usb 4-1: config 0 has no interfaces? [ 1603.846897][T23012] usb 4-1: config 0 has no interfaces? [ 1603.858595][T23012] usb 4-1: config 0 has no interfaces? [ 1603.869431][T23012] usb 4-1: config 0 has no interfaces? [ 1603.881962][T23012] usb 4-1: config 0 has no interfaces? [ 1603.893118][T23012] usb 4-1: config 0 has no interfaces? [ 1603.905943][T23012] usb 4-1: config 0 has no interfaces? [ 1603.916562][T23012] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1603.926647][T23012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.945993][T23012] usb 4-1: Product: syz [ 1603.955394][T23012] usb 4-1: Manufacturer: syz [ 1603.965744][T23012] usb 4-1: SerialNumber: syz [ 1603.981405][T23012] usb 4-1: config 0 descriptor?? [ 1604.162563][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.181043][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.190448][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.208754][T23012] usb 4-1: USB disconnect, device number 30 [ 1604.215046][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.245614][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.262539][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.270395][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.285702][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.302778][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.321662][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.387238][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.422285][T23020] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1604.422880][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.535230][T25951] vivid-000: disconnect [ 1604.579146][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.594640][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.649097][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.659821][T23020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1604.695568][T23020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1604.728462][T23020] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1604.748091][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.752775][T23012] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1604.772568][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.782131][T23020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.828301][T25939] vivid-000: reconnect [ 1604.853962][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.861952][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.870087][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.875867][T23020] usb 1-1: config 0 descriptor?? [ 1604.882957][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.882997][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.883028][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.883057][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.883086][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.883114][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.883141][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1604.883169][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1605.140845][T23012] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1605.154862][T25943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1605.197092][T23012] usb 4-1: config 0 has no interfaces? [ 1605.208810][T10313] hid-generic 0000:0004:FFFFFFFE.0067: unknown main item tag 0x0 [ 1605.214567][T23012] usb 4-1: config 0 has no interfaces? [ 1605.253342][T23012] usb 4-1: config 0 has no interfaces? [ 1605.269060][T10313] hid-generic 0000:0004:FFFFFFFE.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1605.290242][T23012] usb 4-1: config 0 has no interfaces? [ 1605.321473][T23012] usb 4-1: config 0 has no interfaces? [ 1605.381331][T23012] usb 4-1: config 0 has no interfaces? [ 1605.420822][T23012] usb 4-1: config 0 has no interfaces? [ 1605.443172][T23012] usb 4-1: config 0 has no interfaces? [ 1605.463304][T23012] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1605.510040][T23012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.551260][T23012] usb 4-1: Product: syz [ 1605.564769][T23012] usb 4-1: Manufacturer: syz [ 1605.569454][T23012] usb 4-1: SerialNumber: syz [ 1605.613453][T23012] usb 4-1: config 0 descriptor?? [ 1605.717438][T25956] fido_id[25956]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1606.434639][T23020] usbhid 1-1:0.0: can't add hid device: -71 [ 1606.454422][T23020] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1606.489937][T23020] usb 1-1: USB disconnect, device number 42 [ 1606.929569][T25971] bond_slave_1: entered promiscuous mode [ 1606.948436][T25971] bond_slave_1: left promiscuous mode [ 1607.119389][T25975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1607.301105][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6231'. [ 1607.330937][T25979] vlan2: entered allmulticast mode [ 1607.406345][T25981] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 1607.655462][T23020] usb 4-1: USB disconnect, device number 31 [ 1607.746859][T25990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6241'. [ 1607.775529][T25990] ip6gretap0: entered promiscuous mode [ 1607.799185][T25990] ip6gretap0: left promiscuous mode [ 1608.018094][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.081966][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.119255][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.137490][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.162042][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.835735][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.851889][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.859700][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.868019][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.875913][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.884509][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.893626][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.901591][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1608.909503][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.402942][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.432737][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.499116][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.514868][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6247'. [ 1609.524188][T26013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6247'. [ 1609.555226][T26011] bond_slave_0: entered promiscuous mode [ 1609.561026][T26011] bond_slave_1: entered promiscuous mode [ 1609.567509][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.582273][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.590213][T26011] vlan2: entered promiscuous mode [ 1609.600062][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.611660][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.612879][T26011] bond0: entered promiscuous mode [ 1609.663758][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.857560][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.869135][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.893589][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.913718][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1609.950519][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1610.016192][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1610.151276][T23041] hid-generic 0000:0004:FFFFFFFE.0068: unknown main item tag 0x0 [ 1610.190279][T23041] hid-generic 0000:0004:FFFFFFFE.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1610.561339][T26015] fido_id[26015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1610.726643][T26025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1610.953223][T23018] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1611.156139][T23018] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1611.245991][T23018] usb 5-1: config 0 has no interface number 0 [ 1611.270056][T23018] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1611.291663][T23018] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1611.343512][T23018] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1611.394827][T23018] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1611.413997][T23018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.441165][T23018] usb 5-1: config 0 descriptor?? [ 1611.823989][T23018] usb 5-1: string descriptor 0 read error: -71 [ 1611.893223][T23018] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1612.182594][T23018] usb 5-1: USB disconnect, device number 31 [ 1612.319515][T26052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6261'. [ 1612.864444][T26059] block device autoloading is deprecated and will be removed. [ 1613.122781][T26065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1613.165249][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.173615][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.222762][T26065] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1613.486821][T26071] input: syz0 as /devices/virtual/input/input97 [ 1613.635141][T26071] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1613.770021][T26079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6268'. [ 1614.092324][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1614.092344][ T30] audit: type=1326 audit(1748665621.141:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.273615][ T30] audit: type=1326 audit(1748665621.141:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.352742][ T30] audit: type=1326 audit(1748665621.151:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.511578][ T30] audit: type=1326 audit(1748665621.151:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.541092][ T30] audit: type=1326 audit(1748665621.151:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.565360][ T30] audit: type=1326 audit(1748665621.151:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.587890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.594346][ T30] audit: type=1326 audit(1748665621.151:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.619643][ T30] audit: type=1326 audit(1748665621.151:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.642464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.828123][ T30] audit: type=1326 audit(1748665621.151:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1614.940997][ T30] audit: type=1326 audit(1748665621.151:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26085 comm="syz.4.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff921b8e969 code=0x7ffc0000 [ 1615.287831][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.337708][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.422181][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.430019][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.505620][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.631919][T23022] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1615.680696][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.859909][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1615.955206][T23022] usb 5-1: config 0 has no interfaces? [ 1615.992625][T23022] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1616.001696][T23022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.057778][T23022] usb 5-1: Product: syz [ 1616.145793][T23022] usb 5-1: Manufacturer: syz [ 1616.167557][T23022] usb 5-1: SerialNumber: syz [ 1616.182041][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.244414][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.262642][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.336725][T23041] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1616.345505][T23022] usb 5-1: config 0 descriptor?? [ 1616.412163][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.666611][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.675206][T23041] usb 1-1: Using ep0 maxpacket: 16 [ 1616.704174][T23041] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1616.712625][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.749703][T23041] usb 1-1: config 0 has no interface number 0 [ 1616.773905][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1616.787391][T23041] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1616.809283][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.008996][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.019930][T23041] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1617.057832][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.067656][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.075536][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.085860][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.101161][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.120161][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.138943][T23041] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1617.148299][T23041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.166515][T23041] usb 1-1: Product: syz [ 1617.176970][T23041] usb 1-1: Manufacturer: syz [ 1617.182294][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.193668][T23041] usb 1-1: SerialNumber: syz [ 1617.245523][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.270063][T23041] usb 1-1: config 0 descriptor?? [ 1617.283044][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.296317][T26113] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1617.331108][T26113] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1617.380397][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.439449][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.459451][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.516548][T23012] hid-generic 0000:0004:FFFFFFFE.0069: unknown main item tag 0x0 [ 1617.600257][T23012] hid-generic 0000:0004:FFFFFFFE.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1617.656845][T26111] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1617.665459][T26111] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1617.868754][T26121] fido_id[26121]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1619.195740][T26129] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1619.233368][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1619.233393][ T30] audit: type=1326 audit(1748665626.261:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.358363][ T30] audit: type=1326 audit(1748665626.261:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.380938][ T30] audit: type=1326 audit(1748665626.261:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.404058][ T30] audit: type=1326 audit(1748665626.261:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.426980][ T30] audit: type=1326 audit(1748665626.261:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.449575][ T30] audit: type=1326 audit(1748665626.261:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.480292][ T30] audit: type=1326 audit(1748665626.261:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.525483][T23012] usb 5-1: USB disconnect, device number 32 [ 1619.550065][T26133] loop4: detected capacity change from 0 to 524255232 [ 1619.802343][ T30] audit: type=1326 audit(1748665626.261:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1619.956546][ T30] audit: type=1326 audit(1748665626.341:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1620.045377][T26138] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6283'. [ 1620.130753][ T30] audit: type=1326 audit(1748665626.341:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26126 comm="syz.2.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ef8e969 code=0x7ffc0000 [ 1620.211881][T10313] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1620.392328][T10313] usb 5-1: Using ep0 maxpacket: 16 [ 1620.424138][T10313] usb 5-1: config 255 has an invalid interface number: 47 but max is 0 [ 1620.451846][T10313] usb 5-1: config 255 has no interface number 0 [ 1620.462357][T26143] tap0: tun_chr_ioctl cmd 1074025677 [ 1620.486819][T23041] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1620.497594][T26143] tap0: linktype set to 805 [ 1620.498763][T10313] usb 5-1: config 255 interface 47 has no altsetting 0 [ 1620.533630][T23041] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1620.544520][T10313] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 1620.563596][T10313] usb 5-1: New USB device strings: Mfr=1, Product=208, SerialNumber=3 [ 1620.582179][T23041] asix 1-1:0.251: probe with driver asix failed with error -5 [ 1620.603463][T10313] usb 5-1: Product: syz [ 1620.607832][T10313] usb 5-1: Manufacturer: syz [ 1620.639951][T23041] usb 1-1: USB disconnect, device number 43 [ 1620.641583][T10313] usb 5-1: SerialNumber: syz [ 1621.165854][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6288'. [ 1621.194220][T23041] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1621.222308][T10313] legousbtower 5-1:255.47: interrupt endpoints not found [ 1621.241434][T10313] usb 5-1: USB disconnect, device number 33 [ 1621.381920][T23041] usb 4-1: device descriptor read/64, error -71 [ 1621.422120][T23012] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1621.631849][T23012] usb 1-1: Using ep0 maxpacket: 32 [ 1621.661943][T23041] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1621.682216][T23012] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1621.705896][T23012] usb 1-1: config 0 has no interface number 0 [ 1621.733774][T23012] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1621.755387][T23012] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1621.771874][T23012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.791953][T23041] usb 4-1: device descriptor read/64, error -71 [ 1621.829238][T23012] usb 1-1: Product: syz [ 1621.870347][T23012] usb 1-1: Manufacturer: syz [ 1621.900835][T23012] usb 1-1: SerialNumber: syz [ 1621.906224][T23041] usb usb4-port1: attempt power cycle [ 1621.944172][T23012] usb 1-1: config 0 descriptor?? [ 1621.954816][T23012] smsc75xx v1.0.0 [ 1621.958538][T23012] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1621.992134][T23012] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1622.272058][T23041] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1622.330657][T23041] usb 4-1: device descriptor read/8, error -71 [ 1622.399994][T26153] binder: 26149:26153 ioctl c0306201 200000000100 returned -11 [ 1622.409324][T23012] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1622.602502][T23041] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1622.612883][T23012] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.624639][T23012] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1622.640948][T23041] usb 4-1: device descriptor read/8, error -71 [ 1622.663225][T23012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1622.696843][T23012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1622.734443][T23012] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1622.762411][T23041] usb usb4-port1: unable to enumerate USB device [ 1622.789406][T23012] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1622.798815][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1622.809877][T23012] usb 5-1: Product: syz [ 1622.814272][T23012] usb 5-1: Manufacturer: syz [ 1622.824721][T23012] usb 5-1: SerialNumber: syz [ 1622.850423][T23012] usb 5-1: config 0 descriptor?? [ 1623.072499][T23012] radio-si470x 5-1:0.0: DeviceID=0xd318 ChipID=0x30a9 [ 1623.522474][T23012] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1623.531354][T23012] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1623.551197][T23012] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1623.841235][T23012] usb 5-1: USB disconnect, device number 34 [ 1624.077637][T26176] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1624.425104][T23018] usb 1-1: USB disconnect, device number 44 [ 1624.427861][T26182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6297'. [ 1624.771982][T23039] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1625.805337][T26205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6305'. [ 1625.891015][T26207] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1626.395864][T26216] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1626.536408][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1626.618881][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1626.972153][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1627.254464][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1627.308071][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1627.358571][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1627.384028][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1627.624655][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.119806][T26234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6311'. [ 1628.300502][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.331978][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.361203][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.501942][T20940] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1628.557642][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.642454][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.649930][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.711448][T23012] hid-generic FFF9:0000:0203.006A: unknown main item tag 0x0 [ 1628.752661][T20940] usb 5-1: Using ep0 maxpacket: 32 [ 1628.771233][T20940] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1628.780959][T23012] hid-generic FFF9:0000:0203.006A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1628.803226][T20940] usb 5-1: config 0 has no interface number 0 [ 1628.834059][T20940] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1628.977187][T20940] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1628.988092][T20940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.008989][T20940] usb 5-1: Product: syz [ 1629.017942][T20940] usb 5-1: Manufacturer: syz [ 1629.050571][T20940] usb 5-1: SerialNumber: syz [ 1629.114526][T20940] usb 5-1: config 0 descriptor?? [ 1629.175603][T20940] smsc75xx v1.0.0 [ 1629.179356][T20940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1629.212313][T23039] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1629.222783][T23039] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1629.230382][T23039] usb 3-1: can't read configurations, error -71 [ 1629.253131][T20940] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1629.260929][T26236] fido_id[26236]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1629.527072][T26241] binder: 26225:26241 ioctl c0306201 200000000100 returned -11 [ 1629.752564][T26234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.761107][T26234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.783488][T26234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.791199][T26234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.946754][T26251] delete_channel: no stack [ 1630.259163][T26256] fuse: Bad value for 'fd' [ 1630.582159][T23020] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1630.795362][T23039] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1630.817853][T23020] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1631.098410][T23020] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1631.140031][T23020] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1631.188980][T23020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.242737][T26263] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1631.252112][T23039] usb 2-1: Using ep0 maxpacket: 8 [ 1631.277750][T23039] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1631.303059][T26254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1631.314606][T26263] binder: BINDER_SET_CONTEXT_MGR already set [ 1631.320733][T26263] binder: 26262:26263 ioctl 4018620d 200000000040 returned -16 [ 1631.331325][T23039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.349544][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6319'. [ 1631.460202][T23039] usb 2-1: Product: syz [ 1631.483035][T10313] usb 5-1: USB disconnect, device number 35 [ 1631.502899][T23039] usb 2-1: Manufacturer: syz [ 1631.507689][T23039] usb 2-1: SerialNumber: syz [ 1631.536742][T23020] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1631.585140][T23039] usb 2-1: config 0 descriptor?? [ 1631.864309][T23039] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1631.882779][T26254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.893640][T26254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.146071][T23039] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1632.166600][T26276] bond_slave_1: entered promiscuous mode [ 1632.177441][T26276] bond_slave_1: left promiscuous mode [ 1632.273058][T23039] usb 2-1: USB disconnect, device number 39 [ 1632.553467][T26285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.584210][T26285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.794941][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1632.923698][T20940] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1632.992582][ T9] usb 4-1: device descriptor read/64, error -71 [ 1633.285340][T20940] usb 5-1: config 0 has no interfaces? [ 1633.313411][T20940] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1633.322830][T20940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.335430][T20940] usb 5-1: Product: syz [ 1633.339628][T20940] usb 5-1: Manufacturer: syz [ 1633.363973][T20940] usb 5-1: SerialNumber: syz [ 1633.371922][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1633.404300][T20940] usb 5-1: config 0 descriptor?? [ 1633.633536][ T9] usb 4-1: device descriptor read/64, error -71 [ 1633.763256][ T9] usb usb4-port1: attempt power cycle [ 1634.056685][T23020] usb 1-1: USB disconnect, device number 45 [ 1634.112359][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1634.152582][ T9] usb 4-1: device descriptor read/8, error -71 [ 1634.653117][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1634.696731][ T9] usb 4-1: device descriptor read/8, error -71 [ 1634.804811][T26286] syz.1.6324 (26286) used greatest stack depth: 18328 bytes left [ 1634.828804][ T9] usb usb4-port1: unable to enumerate USB device [ 1635.251483][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6331'. [ 1635.336705][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1635.511855][T23020] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1635.728209][T13118] Bluetooth: hci4: command 0x0406 tx timeout [ 1635.923047][T10313] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1636.100379][T23020] usb 2-1: Using ep0 maxpacket: 32 [ 1636.122975][T10313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.156890][T23020] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1636.162477][T10313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1636.190882][T23020] usb 2-1: config 0 has no interface number 0 [ 1636.198486][T20940] usb 5-1: USB disconnect, device number 36 [ 1636.216893][T23020] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1636.237314][T23020] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1636.246999][T23020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.247680][T10313] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1636.257205][T23020] usb 2-1: Product: syz [ 1636.319056][T23020] usb 2-1: Manufacturer: syz [ 1636.329961][T23020] usb 2-1: SerialNumber: syz [ 1636.364439][T23020] usb 2-1: config 0 descriptor?? [ 1636.385550][T23020] smsc75xx v1.0.0 [ 1636.389245][T23020] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1636.441114][T23020] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1636.590041][T10313] usb 4-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 1636.617233][T26304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.625463][T26304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.637746][T10313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.676204][T26304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.685708][T26304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.693075][T10313] usb 4-1: Product: syz [ 1636.693100][T10313] usb 4-1: Manufacturer: syz [ 1636.693118][T10313] usb 4-1: SerialNumber: syz [ 1636.711977][T10313] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1636.760110][T10313] cdc_ncm 4-1:1.0: bind() failure [ 1637.374158][T26331] fuse: Unknown parameter './file0' [ 1638.121890][T20940] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1639.154978][ T9] usb 4-1: USB disconnect, device number 40 [ 1639.661165][T23020] usb 2-1: USB disconnect, device number 40 [ 1639.759973][T26349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6347'. [ 1639.801050][T26353] FAULT_INJECTION: forcing a failure. [ 1639.801050][T26353] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.818495][T26353] CPU: 0 UID: 0 PID: 26353 Comm: syz.4.6349 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1639.818527][T26353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1639.818543][T26353] Call Trace: [ 1639.818553][T26353] [ 1639.818564][T26353] dump_stack_lvl+0x189/0x250 [ 1639.818605][T26353] ? __pfx____ratelimit+0x10/0x10 [ 1639.818629][T26353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.818664][T26353] ? __pfx__printk+0x10/0x10 [ 1639.818694][T26353] ? __pfx___might_resched+0x10/0x10 [ 1639.818728][T26353] should_fail_ex+0x414/0x560 [ 1639.818759][T26353] should_failslab+0xa8/0x100 [ 1639.818790][T26353] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 1639.818821][T26353] ? __get_vm_area_node+0x13f/0x300 [ 1639.818855][T26353] __get_vm_area_node+0x13f/0x300 [ 1639.818891][T26353] __vmalloc_node_range_noprof+0x301/0x1340 [ 1639.818925][T26353] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1639.818954][T26353] ? is_bpf_text_address+0x26/0x2b0 [ 1639.819008][T26353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1639.819040][T26353] ? __might_fault+0xb0/0x130 [ 1639.819079][T26353] ? _parse_integer_limit+0x1ae/0x1f0 [ 1639.819111][T26353] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1639.819135][T26353] __vmalloc_noprof+0xb1/0xf0 [ 1639.819166][T26353] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1639.819196][T26353] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1639.819228][T26353] bpf_prog_alloc+0x3c/0x1a0 [ 1639.819258][T26353] bpf_prog_load+0x735/0x1930 [ 1639.819296][T26353] ? __pfx_bpf_prog_load+0x10/0x10 [ 1639.819347][T26353] ? bpf_lsm_bpf+0x9/0x20 [ 1639.819373][T26353] ? security_bpf+0x7e/0x300 [ 1639.819398][T26353] __sys_bpf+0x5f1/0x860 [ 1639.819425][T26353] ? __pfx___sys_bpf+0x10/0x10 [ 1639.819463][T26353] ? ksys_write+0x22a/0x250 [ 1639.819493][T26353] ? __pfx_ksys_write+0x10/0x10 [ 1639.819516][T26353] ? rcu_is_watching+0x15/0xb0 [ 1639.819553][T26353] __x64_sys_bpf+0x7c/0x90 [ 1639.819576][T26353] do_syscall_64+0xfa/0x3b0 [ 1639.819598][T26353] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.819620][T26353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.819642][T26353] ? clear_bhb_loop+0x60/0xb0 [ 1639.819669][T26353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.819691][T26353] RIP: 0033:0x7ff921b8e969 [ 1639.819712][T26353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.819733][T26353] RSP: 002b:00007ff9229b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1639.819757][T26353] RAX: ffffffffffffffda RBX: 00007ff921db5fa0 RCX: 00007ff921b8e969 [ 1639.819774][T26353] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1639.819789][T26353] RBP: 00007ff9229b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.819803][T26353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.819817][T26353] R13: 0000000000000001 R14: 00007ff921db5fa0 R15: 00007ff921edfa28 [ 1639.819851][T26353] [ 1639.836751][T26353] syz.4.6349: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1640.142925][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1640.188137][T26353] ,cpuset=syz4,mems_allowed=0-1 [ 1640.197952][T26353] CPU: 0 UID: 0 PID: 26353 Comm: syz.4.6349 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1640.197984][T26353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1640.197999][T26353] Call Trace: [ 1640.198009][T26353] [ 1640.198019][T26353] dump_stack_lvl+0x189/0x250 [ 1640.198058][T26353] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1640.198083][T26353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1640.198117][T26353] ? __pfx__printk+0x10/0x10 [ 1640.198141][T26353] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1640.198173][T26353] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1640.198230][T26353] warn_alloc+0x214/0x310 [ 1640.198270][T26353] ? __pfx_warn_alloc+0x10/0x10 [ 1640.198305][T26353] ? __get_vm_area_node+0x13f/0x300 [ 1640.198340][T26353] ? __get_vm_area_node+0x2b5/0x300 [ 1640.198377][T26353] __vmalloc_node_range_noprof+0x326/0x1340 [ 1640.198411][T26353] ? is_bpf_text_address+0x26/0x2b0 [ 1640.198466][T26353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1640.198497][T26353] ? __might_fault+0xb0/0x130 [ 1640.198526][T26353] ? _parse_integer_limit+0x1ae/0x1f0 [ 1640.198558][T26353] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1640.198584][T26353] __vmalloc_noprof+0xb1/0xf0 [ 1640.198612][T26353] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1640.198640][T26353] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1640.198671][T26353] bpf_prog_alloc+0x3c/0x1a0 [ 1640.198700][T26353] bpf_prog_load+0x735/0x1930 [ 1640.198745][T26353] ? __pfx_bpf_prog_load+0x10/0x10 [ 1640.198794][T26353] ? bpf_lsm_bpf+0x9/0x20 [ 1640.198820][T26353] ? security_bpf+0x7e/0x300 [ 1640.198845][T26353] __sys_bpf+0x5f1/0x860 [ 1640.198872][T26353] ? __pfx___sys_bpf+0x10/0x10 [ 1640.198911][T26353] ? ksys_write+0x22a/0x250 [ 1640.198939][T26353] ? __pfx_ksys_write+0x10/0x10 [ 1640.198963][T26353] ? rcu_is_watching+0x15/0xb0 [ 1640.198999][T26353] __x64_sys_bpf+0x7c/0x90 [ 1640.199022][T26353] do_syscall_64+0xfa/0x3b0 [ 1640.199046][T26353] ? lockdep_hardirqs_on+0x9c/0x150 [ 1640.199067][T26353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.199089][T26353] ? clear_bhb_loop+0x60/0xb0 [ 1640.199116][T26353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.199138][T26353] RIP: 0033:0x7ff921b8e969 [ 1640.199159][T26353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.199178][T26353] RSP: 002b:00007ff9229b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1640.199201][T26353] RAX: ffffffffffffffda RBX: 00007ff921db5fa0 RCX: 00007ff921b8e969 [ 1640.199218][T26353] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1640.199240][T26353] RBP: 00007ff9229b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.199254][T26353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1640.199269][T26353] R13: 0000000000000001 R14: 00007ff921db5fa0 R15: 00007ff921edfa28 [ 1640.199303][T26353] [ 1640.200149][T26353] Mem-Info: [ 1640.514027][T26353] active_anon:10770 inactive_anon:0 isolated_anon:0 [ 1640.514027][T26353] active_file:19381 inactive_file:40525 isolated_file:0 [ 1640.514027][T26353] unevictable:768 dirty:183 writeback:0 [ 1640.514027][T26353] slab_reclaimable:8040 slab_unreclaimable:179125 [ 1640.514027][T26353] mapped:32189 shmem:5648 pagetables:1033 [ 1640.514027][T26353] sec_pagetables:0 bounce:0 [ 1640.514027][T26353] kernel_misc_reclaimable:0 [ 1640.514027][T26353] free:1232506 free_pcp:723 free_cma:0 [ 1640.559680][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.962020][T26353] Node 0 active_anon:39980kB inactive_anon:0kB active_file:77504kB inactive_file:161896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128756kB dirty:832kB writeback:0kB shmem:21056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12816kB pagetables:3932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1641.046236][T26353] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1641.119051][T20940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1641.141919][T26353] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.169224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1641.199274][T20940] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1641.208216][T26365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1641.229170][T20940] usb 3-1: can't read configurations, error -71 [ 1641.284690][T26353] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1641.340708][T26353] Node 0 DMA32 free:997476kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:40348kB inactive_anon:0kB active_file:77504kB inactive_file:160064kB unevictable:1536kB writepending:848kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:2312kB local_pcp:1260kB free_cma:0kB [ 1641.417664][T26353] lowmem_reserve[]: 0 0 1 1 1 [ 1641.424978][T26353] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1641.460171][T26353] lowmem_reserve[]: 0 0 0 0 0 [ 1641.522778][T26353] Node 1 Normal free:3921456kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.609522][T26353] lowmem_reserve[]: 0 0 0 0 0 [ 1641.614978][T26353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1641.628350][T26353] Node 0 DMA32: 1247*4kB (UME) 1119*8kB (UME) 801*16kB (UME) 675*32kB (UME) 420*64kB (UME) 105*128kB (UME) 16*256kB (UME) 29*512kB (UME) 135*1024kB (UM) 19*2048kB (UME) 174*4096kB (UM) = 997476kB [ 1641.641952][T20940] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1641.666361][T26353] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1641.736193][T26353] Node 1 Normal: 194*4kB (UE) 51*8kB (UME) 45*16kB (UE) 252*32kB (UME) 107*64kB (UME) 33*128kB (UME) 16*256kB (UM) 6*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 948*4096kB (M) = 3921456kB [ 1641.761915][T26353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.777209][T26353] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1641.789173][T26353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1641.827577][T26353] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1641.847440][T26353] 65552 total pagecache pages [ 1641.857723][T26353] 0 pages in swap cache [ 1641.866663][T26353] Free swap = 124996kB [ 1641.871031][T26353] Total swap = 124996kB [ 1641.875928][T26353] 2097051 pages RAM [ 1641.880924][T26353] 0 pages HighMem/MovableOnly [ 1641.881924][T20940] usb 3-1: Using ep0 maxpacket: 8 [ 1641.894331][T20940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1641.894908][T26353] 424631 pages reserved [ 1641.912425][T26353] 0 pages cma reserved [ 1641.922356][T10313] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1641.981532][T20940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 1642.063044][T20940] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1642.090859][T20940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.104117][T10313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.122022][T20940] usb 3-1: Product: syz [ 1642.126324][T20940] usb 3-1: Manufacturer: syz [ 1642.130975][T20940] usb 3-1: SerialNumber: syz [ 1642.157548][T10313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.168884][T20940] usb 3-1: config 0 descriptor?? [ 1642.210475][T10313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1642.222343][T20940] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 1642.247563][T10313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1642.287634][T10313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.319257][T10313] usb 4-1: config 0 descriptor?? [ 1642.407432][T20940] usb 3-1: USB disconnect, device number 50 [ 1642.502008][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1642.661961][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1642.678137][ T9] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1642.694647][ T9] usb 1-1: config 0 has no interface number 0 [ 1642.706836][ T9] usb 1-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=a3.88 [ 1642.716626][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.725118][ T9] usb 1-1: Product: syz [ 1642.729616][ T9] usb 1-1: Manufacturer: syz [ 1642.735043][ T9] usb 1-1: SerialNumber: syz [ 1642.753673][T10313] plantronics 0003:047F:FFFF.006B: No inputs registered, leaving [ 1642.776460][ T9] usb 1-1: config 0 descriptor?? [ 1642.795649][ T9] hub 1-1:0.133: bad descriptor, ignoring hub [ 1642.802805][T10313] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1642.821185][ T9] hub 1-1:0.133: probe with driver hub failed with error -5 [ 1642.892473][T20940] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1642.991515][ T9] asix 1-1:0.133 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1643.022770][ T9] asix 1-1:0.133: probe with driver asix failed with error -61 [ 1643.072968][T20940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1643.116177][T20940] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1643.133226][T20940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.155058][T20940] usb 2-1: config 0 descriptor?? [ 1643.164236][T26386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1643.325231][ T9] usb 1-1: USB disconnect, device number 46 [ 1643.808552][T20940] usb 2-1: USB disconnect, device number 41 [ 1643.989564][T23012] usb 4-1: USB disconnect, device number 41 [ 1644.391878][T20940] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1644.570902][T20940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1644.596215][T20940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1644.618487][T20940] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1644.630255][T20940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.649327][T20940] usb 1-1: config 0 descriptor?? [ 1644.658503][T26412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1644.801832][T23022] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1644.954098][T23022] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1644.965172][T23022] usb 2-1: config 0 has no interface number 0 [ 1644.972671][T23022] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1644.984602][T23022] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1645.027373][T23022] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1645.046961][T23022] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1645.078507][T23022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.089567][T20940] apple 0003:05AC:0264.006D: bogus close delimiter [ 1645.116381][T20940] apple 0003:05AC:0264.006D: item 0 4 2 10 parsing failed [ 1645.117601][T23022] usb 2-1: config 0 descriptor?? [ 1645.144445][T20940] apple 0003:05AC:0264.006D: parse failed [ 1645.150360][T20940] apple 0003:05AC:0264.006D: probe with driver apple failed with error -22 [ 1645.175361][T23022] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 1645.316117][T23022] usb 1-1: USB disconnect, device number 47 [ 1645.977820][T23022] usb 2-1: USB disconnect, device number 42 [ 1646.017473][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1646.194075][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1646.213129][ T9] usb 3-1: config 0 has no interface number 0 [ 1646.219410][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1646.264422][ T9] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=21.83 [ 1646.274828][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.285222][ T9] usb 3-1: Product: syz [ 1646.304069][ T9] usb 3-1: Manufacturer: syz [ 1646.311392][ T9] usb 3-1: SerialNumber: syz [ 1646.326274][ T9] usb 3-1: config 0 descriptor?? [ 1646.332384][T26457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1646.339792][T26457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1646.367168][ T9] option 3-1:0.21: GSM modem (1-port) converter detected [ 1646.392615][ T9] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1646.422179][T23022] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1646.589314][T20940] usb 3-1: USB disconnect, device number 51 [ 1646.614204][T20940] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1646.632757][T20940] option 3-1:0.21: device disconnected [ 1646.652286][T23022] usb 2-1: Using ep0 maxpacket: 16 [ 1646.664582][T23022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.690413][T23022] usb 2-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 1646.723267][T23022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.754872][T23022] usb 2-1: config 0 descriptor?? [ 1647.393643][T20940] usb 2-1: USB disconnect, device number 43 [ 1648.012146][ T30] audit: type=1326 audit(1748665655.071:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26498 comm="syz.0.6406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3588f8e969 code=0x0 [ 1648.137432][T26510] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6410'. [ 1648.342075][T20940] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1648.505971][T20940] usb 2-1: Using ep0 maxpacket: 32 [ 1648.519086][T20940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.535439][T20940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.566828][T20940] usb 2-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 1648.594598][T20940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.636442][T20940] usb 2-1: config 0 descriptor?? [ 1648.674678][T20940] hub 2-1:0.0: USB hub found [ 1648.879486][T20940] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1648.893727][T26532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1649.042645][T20940] usb 2-1: USB disconnect, device number 44 [ 1649.102145][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1649.342067][T23012] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1649.369224][ T9] usb 3-1: config 0 has no interfaces? [ 1649.379182][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1649.389390][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.402118][ T9] usb 3-1: Product: syz [ 1649.406343][ T9] usb 3-1: Manufacturer: syz [ 1649.411262][ T9] usb 3-1: SerialNumber: syz [ 1649.424713][ T9] usb 3-1: config 0 descriptor?? [ 1649.511997][T10313] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1649.531893][T23012] usb 4-1: Using ep0 maxpacket: 32 [ 1649.661873][T23012] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1649.880386][T23012] usb 4-1: config 0 has no interface number 0 [ 1649.911913][T10313] usb 1-1: Using ep0 maxpacket: 8 [ 1649.938167][T23012] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1649.954201][T10313] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1649.960232][T23012] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1649.972534][T23012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.984185][T23012] usb 4-1: Product: syz [ 1649.988789][T23012] usb 4-1: Manufacturer: syz [ 1649.988799][T10313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.996136][T23012] usb 4-1: SerialNumber: syz [ 1650.089405][T10313] usb 1-1: config 0 has no interface number 0 [ 1650.091068][T23012] usb 4-1: config 0 descriptor?? [ 1650.133575][T23012] smsc75xx v1.0.0 [ 1650.138140][T23012] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1650.153259][T23012] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1650.240647][T10313] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1650.340822][T26532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1650.349066][T26532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.359044][T10313] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1650.380368][T10313] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1650.397668][T10313] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1650.399871][T26532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1650.418847][T26532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.426741][T10313] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1650.509258][T26542] binder: 26527:26542 ioctl c0306201 200000000100 returned -11 [ 1650.556976][T10313] usb 1-1: Manufacturer: syz [ 1650.585697][T10313] usb 1-1: config 0 descriptor?? [ 1650.823051][T23018] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1651.183085][T23018] usb 2-1: config 0 has no interfaces? [ 1651.336730][T23018] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1651.520067][T23018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.592065][T23018] usb 2-1: Product: syz [ 1651.597581][T23018] usb 2-1: Manufacturer: syz [ 1651.626917][T23018] usb 2-1: SerialNumber: syz [ 1651.722362][T23018] usb 2-1: config 0 descriptor?? [ 1651.856667][T10313] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1651.876915][T10313] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1651.927577][T20940] usb 4-1: USB disconnect, device number 42 [ 1652.002208][T10313] usb 1-1: USB disconnect, device number 48 [ 1652.135062][T26543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.145569][T26543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.418860][T20940] usb 2-1: USB disconnect, device number 45 [ 1653.580286][T23039] usb 3-1: USB disconnect, device number 52 [ 1653.846744][T26557] vivid-000: disconnect [ 1654.018028][T26544] vivid-000: reconnect [ 1654.692221][ T30] audit: type=1326 audit(1748665661.741:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26568 comm="syz.3.6433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f283cf8e969 code=0x0 [ 1654.894893][T26578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6434'. [ 1655.032549][T23018] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1655.180473][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1655.293136][T23018] usb 2-1: Using ep0 maxpacket: 8 [ 1655.323799][T23018] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1655.336168][T23018] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.347026][T20940] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1655.350069][T23018] usb 2-1: config 0 has no interface number 0 [ 1655.362028][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1655.377145][T23018] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1655.421182][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1655.437681][T23018] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1655.457885][ T9] usb 1-1: config 0 has no interface number 0 [ 1655.465510][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1655.465569][T23018] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1655.502700][T23018] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1655.538203][T23018] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1655.549054][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1655.558825][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.567443][ T9] usb 1-1: Product: syz [ 1655.591966][T23018] usb 2-1: Manufacturer: syz [ 1655.597213][ T9] usb 1-1: Manufacturer: syz [ 1655.624878][T20940] usb 5-1: config 0 has no interfaces? [ 1655.628091][ T9] usb 1-1: SerialNumber: syz [ 1655.644850][T20940] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1655.650004][T23018] usb 2-1: config 0 descriptor?? [ 1655.655338][T20940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.690004][T20940] usb 5-1: Product: syz [ 1655.735533][ T9] usb 1-1: config 0 descriptor?? [ 1655.737881][T20940] usb 5-1: Manufacturer: syz [ 1655.786119][T20940] usb 5-1: SerialNumber: syz [ 1655.818063][T20940] usb 5-1: config 0 descriptor?? [ 1655.840872][ T9] smsc75xx v1.0.0 [ 1655.963503][T26578] binder: 26572:26578 ioctl c0306201 200000000100 returned -11 [ 1656.017441][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1656.052248][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1656.450582][T23018] usb 2-1: Can not set alternate setting to 1, error: -71 [ 1656.504248][T23018] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1656.549869][T23018] usb 2-1: USB disconnect, device number 46 [ 1656.564989][T25021] udevd[25021]: setting mode of /dev/bus/usb/002/046 to 020664 failed: No such file or directory [ 1656.648715][T25021] udevd[25021]: setting owner of /dev/bus/usb/002/046 to uid=0, gid=0 failed: No such file or directory [ 1657.265122][T26596] vivid-000: disconnect [ 1657.563859][T26587] vivid-000: reconnect [ 1658.397931][T23039] usb 5-1: USB disconnect, device number 37 [ 1658.484583][T23012] usb 1-1: USB disconnect, device number 49 [ 1658.615537][T26610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6446'. [ 1658.992161][T23012] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1659.160179][T23012] usb 3-1: config 0 has no interfaces? [ 1659.280297][T23012] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1659.307645][T23012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.502633][T23012] usb 3-1: Product: syz [ 1659.528336][T23012] usb 3-1: Manufacturer: syz [ 1659.561955][T23012] usb 3-1: SerialNumber: syz [ 1659.570700][T26620] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6447'. [ 1659.572120][T20940] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1659.591934][T26620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6447'. [ 1659.615604][T23012] usb 3-1: config 0 descriptor?? [ 1659.865022][T20940] usb 1-1: Using ep0 maxpacket: 8 [ 1659.885136][T20940] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1659.903491][T20940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.981136][T20940] usb 1-1: config 0 has no interface number 0 [ 1659.988005][T20940] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1660.070234][T20940] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1660.097166][T20940] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1660.106637][T20940] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1660.120831][T20940] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1660.129858][T20940] usb 1-1: Manufacturer: syz [ 1660.292565][T20940] usb 1-1: config 0 descriptor?? [ 1660.599642][T23039] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1660.766753][T23039] usb 2-1: config 0 has no interfaces? [ 1660.782503][T23039] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1660.792421][T23039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.814731][T23039] usb 2-1: Product: syz [ 1660.868361][T23039] usb 2-1: Manufacturer: syz [ 1660.890432][T23039] usb 2-1: SerialNumber: syz [ 1660.919264][T23039] usb 2-1: config 0 descriptor?? [ 1661.495456][T23022] usb 3-1: USB disconnect, device number 53 [ 1661.731677][T20940] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1661.760952][T20940] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1661.809595][T20940] usb 1-1: USB disconnect, device number 50 [ 1662.742656][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6463'. [ 1663.258421][T26677] netlink: 'syz.4.6466': attribute type 12 has an invalid length. [ 1663.268268][T26677] netlink: 'syz.4.6466': attribute type 28 has an invalid length. [ 1663.297491][T26677] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1663.832220][T23022] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1664.041969][T23012] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1664.550409][T23012] usb 5-1: Using ep0 maxpacket: 8 [ 1664.555456][T23018] usb 2-1: USB disconnect, device number 47 [ 1664.609504][T23012] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1664.637868][T23012] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.649231][T23012] usb 5-1: config 0 has no interface number 0 [ 1664.662274][T23012] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1664.701124][T23012] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1664.719645][T23012] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1664.754763][T23012] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1664.789762][T23012] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1664.798663][T23012] usb 5-1: Manufacturer: syz [ 1664.827119][T23012] usb 5-1: config 0 descriptor?? [ 1664.851210][ T30] audit: type=1400 audit(1748665671.901:2416): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=BA pid=26689 comm="syz.1.6472" [ 1665.818513][T23012] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1665.838847][T23012] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1665.884839][T23012] usb 5-1: USB disconnect, device number 38 [ 1666.446534][T24720] Bluetooth: hci0: command 0x0406 tx timeout [ 1667.221894][T23018] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1667.231233][T23022] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1667.273451][T23022] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1667.284204][T23022] usb 3-1: can't read configurations, error -71 [ 1667.542707][T23018] usb 5-1: config 0 has no interfaces? [ 1667.705990][T26716] netlink: 'syz.2.6477': attribute type 1 has an invalid length. [ 1667.778546][T23018] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1667.837766][T23018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.901333][T23018] usb 5-1: Product: syz [ 1667.921633][T23018] usb 5-1: Manufacturer: syz [ 1668.021445][T23018] usb 5-1: SerialNumber: syz [ 1668.090903][T23018] usb 5-1: config 0 descriptor?? [ 1670.039945][T23018] usb 5-1: USB disconnect, device number 39 [ 1671.390457][T23022] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1671.452412][T23018] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1671.582268][T23022] usb 1-1: Using ep0 maxpacket: 8 [ 1671.592758][T23022] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1671.607580][T23022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.898623][T23018] usb 2-1: config 0 has no interfaces? [ 1671.913902][T23018] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1671.923314][T23018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.931332][T23018] usb 2-1: Product: syz [ 1671.947345][T23018] usb 2-1: Manufacturer: syz [ 1671.952652][T23022] usb 1-1: config 0 has no interface number 0 [ 1671.990252][T23018] usb 2-1: SerialNumber: syz [ 1671.996763][T23022] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1672.072302][T20940] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1672.138970][T23018] usb 2-1: config 0 descriptor?? [ 1672.170815][T23022] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1672.290519][T20940] usb 5-1: config 0 has no interfaces? [ 1672.309210][T20940] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1672.318574][T20940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.326994][T20940] usb 5-1: Product: syz [ 1672.331768][T20940] usb 5-1: Manufacturer: syz [ 1672.337202][T20940] usb 5-1: SerialNumber: syz [ 1672.337227][T23022] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1672.352023][T23022] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1672.367885][T20940] usb 5-1: config 0 descriptor?? [ 1672.432626][T23022] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1672.461820][T23022] usb 1-1: Manufacturer: syz [ 1672.557775][T23022] usb 1-1: config 0 descriptor?? [ 1674.197833][T23022] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1674.210512][T23022] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1674.292028][T23022] usb 1-1: USB disconnect, device number 51 [ 1674.595743][ T9] usb 5-1: USB disconnect, device number 40 [ 1674.660643][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.667687][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.315448][T26779] netlink: 'syz.3.6493': attribute type 12 has an invalid length. [ 1675.340267][T26779] netlink: 'syz.3.6493': attribute type 28 has an invalid length. [ 1675.373269][T26779] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6493'. [ 1675.501895][T10313] usb 2-1: USB disconnect, device number 48 [ 1675.651504][T26785] binder: 26784:26785 ioctl 80089418 200000000040 returned -22 [ 1675.708819][T26785] binder: 26784:26785 ioctl 50009417 200000000080 returned -22 [ 1675.719411][T26789] binder: 26784:26789 ioctl 50009417 200000000080 returned -22 [ 1675.768324][T26792] x_tables: duplicate underflow at hook 1 [ 1675.834637][T26785] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1676.509836][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6504'. [ 1676.589172][T26822] program syz.2.6505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1676.678182][T23039] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1676.874252][T23039] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 1676.941194][T23039] usb 4-1: config 0 has no interface number 0 [ 1676.977256][T23039] usb 4-1: config 0 interface 160 has no altsetting 0 [ 1676.991885][T10313] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1677.027842][T23039] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1677.071888][T23039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.124724][T23039] usb 4-1: Product: syz [ 1677.151318][T23039] usb 4-1: Manufacturer: syz [ 1677.190558][T23039] usb 4-1: SerialNumber: syz [ 1677.248461][T23039] usb 4-1: config 0 descriptor?? [ 1677.292713][T10313] usb 5-1: config 0 has no interfaces? [ 1677.302016][T23039] usb-storage 4-1:0.160: USB Mass Storage device detected [ 1677.309857][T10313] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1677.321650][T10313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.365686][T10313] usb 5-1: Product: syz [ 1677.369916][T10313] usb 5-1: Manufacturer: syz [ 1677.397485][T10313] usb 5-1: SerialNumber: syz [ 1677.515833][T10313] usb 5-1: config 0 descriptor?? [ 1677.636962][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1677.639579][T26808] netlink: 'syz.3.6501': attribute type 3 has an invalid length. [ 1677.681584][ T30] audit: type=1326 audit(1748665684.731:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.3.6501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f283cf8e969 code=0x0 [ 1677.711918][T23039] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1677.855053][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1677.864989][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.871925][T23039] usb 2-1: Using ep0 maxpacket: 8 [ 1677.879848][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1677.884080][T23039] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.940049][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1677.956923][T23039] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1677.957478][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.975089][T23039] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1677.979970][ T9] usb 1-1: Product: syz [ 1677.988570][T23039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.989158][ T9] usb 1-1: Manufacturer: syz [ 1678.005361][ T9] usb 1-1: SerialNumber: syz [ 1678.010264][T23039] usb 2-1: Product: syz [ 1678.020422][T23039] usb 2-1: Manufacturer: syz [ 1678.030540][T23039] usb 2-1: SerialNumber: syz [ 1678.373805][ T9] usb 1-1: 0:2 : does not exist [ 1678.463899][T23039] usb 2-1: 0:2 : does not exist [ 1678.482824][ T9] usb 1-1: USB disconnect, device number 52 [ 1678.498515][T23039] usb 2-1: USB disconnect, device number 49 [ 1678.603637][T25021] udevd[25021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1678.726265][T25019] udevd[25019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1679.092651][T23039] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1679.285492][T23012] usb 4-1: USB disconnect, device number 43 [ 1679.529875][T23039] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1679.572296][T23039] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 1679.671376][T23039] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1679.696146][T23039] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1679.707066][T23039] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 1679.719108][T23039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.732433][ T5887] kworker/0:5 (5887) used greatest stack depth: 14216 bytes left [ 1679.732613][T23039] usb 3-1: Product: syz [ 1679.798992][T23039] usb 3-1: Manufacturer: syz [ 1679.806698][T23039] usb 3-1: SerialNumber: syz [ 1679.823486][T26854] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1680.058106][T23039] usbhid 3-1:1.0: can't add hid device: -71 [ 1680.078485][T23039] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1680.155909][T23039] usb 3-1: USB disconnect, device number 56 [ 1680.195862][ T9] usb 5-1: USB disconnect, device number 41 [ 1680.791061][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6522'. [ 1681.071899][T23022] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1681.232158][T23039] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1681.243010][T23022] usb 3-1: Using ep0 maxpacket: 32 [ 1681.259468][T23022] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1681.269376][T23022] usb 3-1: config 0 has no interface number 0 [ 1681.275831][T23022] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1681.288276][T23022] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1681.298294][T23022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.322185][T23022] usb 3-1: Product: syz [ 1681.328955][T23022] usb 3-1: Manufacturer: syz [ 1681.349618][T23022] usb 3-1: SerialNumber: syz [ 1681.433389][T23022] usb 3-1: config 0 descriptor?? [ 1681.478672][T23039] usb 1-1: Using ep0 maxpacket: 8 [ 1681.495885][T23039] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1681.507996][T23039] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.522669][T23039] usb 1-1: config 0 has no interface number 0 [ 1681.529341][T23039] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1681.531139][T23022] smsc75xx v1.0.0 [ 1681.549707][T23039] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1681.582234][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1681.586046][T23039] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1681.764161][T23022] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1681.786169][T26885] binder: 26880:26885 ioctl c0306201 200000000100 returned -11 [ 1681.855881][T23039] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1681.882152][T23039] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1681.941161][T23039] usb 1-1: Manufacturer: syz [ 1681.981788][T23039] usb 1-1: config 0 descriptor?? [ 1682.072068][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1682.231926][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1682.243711][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.276456][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1682.356059][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1682.384002][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.441824][ T9] usb 5-1: Product: syz [ 1682.469665][ T9] usb 5-1: Manufacturer: syz [ 1682.513607][ T9] usb 5-1: SerialNumber: syz [ 1683.007630][T26908] bridge4: entered promiscuous mode [ 1684.003296][ T9] usb 5-1: 0:2 : does not exist [ 1684.148127][ T9] usb 5-1: USB disconnect, device number 42 [ 1684.445090][T25021] udevd[25021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1684.657394][T23039] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1684.801250][T23039] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1684.847793][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1684.972214][T23039] usb 1-1: USB disconnect, device number 53 [ 1685.081969][T10313] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1685.194098][ T9] usb 3-1: USB disconnect, device number 57 [ 1685.671866][T23039] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1685.738380][T26931] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6533'. [ 1685.867383][T23039] usb 1-1: config 0 has no interfaces? [ 1685.989896][T23039] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1686.014352][T23039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.045817][T26936] FAULT_INJECTION: forcing a failure. [ 1686.045817][T26936] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.059692][T23039] usb 1-1: Product: syz [ 1686.067905][T23039] usb 1-1: Manufacturer: syz [ 1686.081988][T23039] usb 1-1: SerialNumber: syz [ 1686.099624][T23039] usb 1-1: config 0 descriptor?? [ 1686.111031][T26936] CPU: 0 UID: 0 PID: 26936 Comm: syz.2.6537 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1686.111074][T26936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1686.111087][T26936] Call Trace: [ 1686.111097][T26936] [ 1686.111106][T26936] dump_stack_lvl+0x189/0x250 [ 1686.111144][T26936] ? __pfx____ratelimit+0x10/0x10 [ 1686.111165][T26936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1686.111199][T26936] ? __pfx__printk+0x10/0x10 [ 1686.111229][T26936] ? __pfx___might_resched+0x10/0x10 [ 1686.111261][T26936] should_fail_ex+0x414/0x560 [ 1686.111290][T26936] should_failslab+0xa8/0x100 [ 1686.111320][T26936] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1686.111350][T26936] ? __alloc_skb+0x112/0x2d0 [ 1686.111383][T26936] __alloc_skb+0x112/0x2d0 [ 1686.111415][T26936] netlink_dump+0x22b/0xe20 [ 1686.111474][T26936] ? __pfx_netlink_dump+0x10/0x10 [ 1686.111517][T26936] ? __inet_diag_dump_start+0x89a/0xa10 [ 1686.111543][T26936] ? netlink_lookup+0x30/0x200 [ 1686.111578][T26936] __netlink_dump_start+0x5cb/0x7e0 [ 1686.111616][T26936] inet_diag_handler_cmd+0x1bf/0x290 [ 1686.111645][T26936] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 1686.111669][T26936] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 1686.111691][T26936] ? __pfx_inet_diag_dump+0x10/0x10 [ 1686.111713][T26936] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1686.111743][T26936] ? sock_diag_lock_handler+0x19/0x290 [ 1686.111781][T26936] ? sock_diag_lock_handler+0x19/0x290 [ 1686.111813][T26936] sock_diag_rcv_msg+0x4cc/0x600 [ 1686.111843][T26936] netlink_rcv_skb+0x208/0x470 [ 1686.111874][T26936] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1686.111902][T26936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1686.111946][T26936] ? netlink_deliver_tap+0x2e/0x1b0 [ 1686.111975][T26936] ? netlink_deliver_tap+0x2e/0x1b0 [ 1686.112010][T26936] netlink_unicast+0x75b/0x8d0 [ 1686.112050][T26936] netlink_sendmsg+0x805/0xb30 [ 1686.112090][T26936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1686.112124][T26936] ? aa_sock_msg_perm+0x94/0x160 [ 1686.112159][T26936] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1686.112183][T26936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1686.112215][T26936] __sock_sendmsg+0x21c/0x270 [ 1686.112243][T26936] sock_write_iter+0x258/0x330 [ 1686.112268][T26936] ? __pfx_sock_write_iter+0x10/0x10 [ 1686.112304][T26936] ? __pfx_aa_file_perm+0x10/0x10 [ 1686.112339][T26936] do_iter_readv_writev+0x515/0x6e0 [ 1686.112372][T26936] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1686.112407][T26936] ? bpf_lsm_file_permission+0x9/0x20 [ 1686.112433][T26936] ? security_file_permission+0x75/0x290 [ 1686.112468][T26936] ? rw_verify_area+0x258/0x650 [ 1686.112498][T26936] vfs_writev+0x31a/0x960 [ 1686.112534][T26936] ? __lock_acquire+0xab9/0xd20 [ 1686.112561][T26936] ? __pfx_vfs_writev+0x10/0x10 [ 1686.112610][T26936] ? __fget_files+0x2a/0x420 [ 1686.112646][T26936] ? __fget_files+0x3a0/0x420 [ 1686.112675][T26936] ? __fget_files+0x2a/0x420 [ 1686.112716][T26936] do_writev+0x14d/0x2d0 [ 1686.112751][T26936] ? __pfx_do_writev+0x10/0x10 [ 1686.112793][T26936] ? rcu_is_watching+0x15/0xb0 [ 1686.112827][T26936] ? do_syscall_64+0xbe/0x3b0 [ 1686.112856][T26936] do_syscall_64+0xfa/0x3b0 [ 1686.112878][T26936] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.112900][T26936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.112921][T26936] ? clear_bhb_loop+0x60/0xb0 [ 1686.112948][T26936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.112970][T26936] RIP: 0033:0x7f518ef8e969 [ 1686.112991][T26936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1686.113010][T26936] RSP: 002b:00007f518fe89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1686.113081][T26936] RAX: ffffffffffffffda RBX: 00007f518f1b5fa0 RCX: 00007f518ef8e969 [ 1686.113101][T26936] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000007 [ 1686.113117][T26936] RBP: 00007f518fe89090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.113133][T26936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.113149][T26936] R13: 0000000000000000 R14: 00007f518f1b5fa0 R15: 00007f518f2dfa28 [ 1686.113187][T26936] [ 1687.438277][T26951] vivid-000: disconnect [ 1687.780040][T26937] vivid-000: reconnect [ 1687.941839][T23039] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1688.000366][T10313] usb 1-1: USB disconnect, device number 54 [ 1688.076964][T26955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1688.092091][T26955] netlink: 'syz.1.6541': attribute type 9 has an invalid length. [ 1688.116703][T26955] macvlan4: entered allmulticast mode [ 1688.132045][T23039] usb 3-1: Using ep0 maxpacket: 8 [ 1688.137271][T23020] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1688.152206][T23039] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.169559][T23039] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1688.182656][T23039] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1688.192802][T23039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.200849][T23039] usb 3-1: Product: syz [ 1688.214758][T23039] usb 3-1: Manufacturer: syz [ 1688.687491][T26961] delete_channel: no stack [ 1688.753385][T23039] usb 3-1: SerialNumber: syz [ 1688.841841][T23020] usb 5-1: Using ep0 maxpacket: 8 [ 1688.849013][T23020] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1688.857288][T23020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.870306][T23020] usb 5-1: config 0 has no interface number 0 [ 1688.933828][T23020] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1689.002316][T23020] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1689.038003][T23020] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1689.082580][T23020] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1689.094141][T23020] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1689.112531][T23020] usb 5-1: Manufacturer: syz [ 1689.135119][T23020] usb 5-1: config 0 descriptor?? [ 1689.148200][T23039] usb 3-1: 0:2 : does not exist [ 1689.162096][T23022] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1689.198199][T23039] usb 3-1: USB disconnect, device number 58 [ 1689.241995][T10313] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1689.333513][T23022] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1689.335575][T25021] udevd[25021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1689.381853][T23022] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1689.489236][T10313] usb 2-1: config 0 has no interfaces? [ 1689.512042][T10313] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1689.525269][T23022] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1689.700517][T10313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.719902][T10313] usb 2-1: Product: syz [ 1689.731236][T23022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.745046][T10313] usb 2-1: Manufacturer: syz [ 1689.754298][T10313] usb 2-1: SerialNumber: syz [ 1689.783588][T26965] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1689.806804][T10313] usb 2-1: config 0 descriptor?? [ 1689.818420][T23022] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1690.045748][T26959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.142289][T26959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.541969][T23020] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1690.566974][T23020] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1690.639516][T23020] usb 5-1: USB disconnect, device number 44 [ 1691.262087][T20940] usb 4-1: USB disconnect, device number 44 [ 1691.391914][T23022] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1691.562261][T23022] usb 3-1: Using ep0 maxpacket: 32 [ 1691.600084][T23022] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1691.650211][T23022] usb 3-1: config 0 has no interface number 0 [ 1691.695928][T23022] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1691.714021][T23022] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1691.723420][T23022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.760917][T23022] usb 3-1: Product: syz [ 1691.769555][T23022] usb 3-1: Manufacturer: syz [ 1691.929984][T23022] usb 3-1: SerialNumber: syz [ 1691.947665][T20940] usb 2-1: USB disconnect, device number 50 [ 1691.948061][T23022] usb 3-1: config 0 descriptor?? [ 1691.969809][T23022] smsc75xx v1.0.0 [ 1692.032652][T24720] Bluetooth: hci3: command 0x0406 tx timeout [ 1692.732079][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1692.781820][T23020] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1692.931820][T23020] usb 2-1: Using ep0 maxpacket: 8 [ 1692.935553][ T9] usb 5-1: config 0 has no interfaces? [ 1692.948004][T23020] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.958946][T23020] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1692.961149][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1692.985049][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.999698][T23020] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1693.002503][ T9] usb 5-1: Product: syz [ 1693.013575][ T9] usb 5-1: Manufacturer: syz [ 1693.018384][T23020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.018512][ T9] usb 5-1: SerialNumber: syz [ 1693.036053][T23020] usb 2-1: Product: syz [ 1693.040297][T23020] usb 2-1: Manufacturer: syz [ 1693.044948][ T9] usb 5-1: config 0 descriptor?? [ 1693.059477][T23020] usb 2-1: SerialNumber: syz [ 1693.254963][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1693.330141][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1693.364838][T23020] usb 2-1: 0:2 : does not exist [ 1693.379605][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1693.437028][T23020] usb 2-1: USB disconnect, device number 51 [ 1693.451113][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1693.500968][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1693.540445][T25019] udevd[25019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1693.576462][T27012] ALSA: mixer_oss: invalid OSS volume 'ZyM/jb-))Wu' [ 1693.585178][T27012] ALSA: mixer_oss: invalid OSS volume '?Թ痈Y{UD' [ 1693.595303][T27012] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 1693.604314][T27012] ALSA: mixer_oss: invalid OSS volume 'lg' [ 1693.610766][T27012] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 1693.619785][T27012] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 1693.667184][T23022] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1693.717755][T23022] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1693.735045][T27012] ALSA: mixer_oss: invalid OSS volume '' [ 1693.741142][T27012] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 1693.755265][T27012] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 1693.778170][T27012] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 1693.812262][T23022] usb 3-1: USB disconnect, device number 59 [ 1693.850555][T27012] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 1693.891931][T23012] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1693.909884][T27012] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 1693.951491][T27012] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 1693.965696][T27012] ALSA: mixer_oss: invalid OSS volume 'x\E79@ar4b2]jG' [ 1694.143694][T27016] delete_channel: no stack [ 1694.211915][T23012] usb 1-1: Using ep0 maxpacket: 8 [ 1694.235335][T23012] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1694.345887][T23012] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.359892][T23012] usb 1-1: config 0 has no interface number 0 [ 1694.380564][T23012] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1694.397018][T23012] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1694.415098][T23012] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1694.425567][T23012] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1694.438202][T23012] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1694.448190][T23012] usb 1-1: Manufacturer: syz [ 1694.530276][T23012] usb 1-1: config 0 descriptor?? [ 1694.601830][T10313] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1694.900649][T10313] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1695.110017][T10313] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1695.169833][T10313] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1695.238666][T10313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.297926][T27022] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1695.429836][T10313] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1695.639698][T27016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.650794][T27016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.878295][T23022] usb 5-1: USB disconnect, device number 45 [ 1696.184612][T27034] netlink: 'syz.4.6562': attribute type 12 has an invalid length. [ 1696.270790][T23012] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1696.291814][T27034] netlink: 'syz.4.6562': attribute type 29 has an invalid length. [ 1696.299862][T27034] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1696.468938][T23012] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1696.581226][T23012] usb 1-1: USB disconnect, device number 55 [ 1697.042266][T23022] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1697.082307][T10313] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1697.194192][T23022] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1697.255201][T23022] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1697.277813][T10313] usb 4-1: Using ep0 maxpacket: 16 [ 1697.341774][T23022] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1697.351281][ T9] usb 3-1: USB disconnect, device number 60 [ 1697.369454][T10313] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.391266][T23022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.439904][T23022] usb 5-1: config 0 descriptor?? [ 1697.477851][T23022] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1697.541253][T10313] usb 4-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 1697.577633][T10313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.596275][T27053] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6568'. [ 1697.614843][T10313] usb 4-1: Product: syz [ 1697.628469][T10313] usb 4-1: Manufacturer: syz [ 1697.640249][T10313] usb 4-1: SerialNumber: syz [ 1697.754263][T23022] usb 5-1: USB disconnect, device number 46 [ 1697.772193][T23012] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1697.952391][T23012] usb 1-1: Using ep0 maxpacket: 8 [ 1697.962351][T23012] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1697.975447][T23012] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.991218][T23012] usb 1-1: config 6 has no interface number 0 [ 1698.008520][T23012] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1698.037508][T23012] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1698.354591][T23012] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1698.364426][T23012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.381480][T23012] usb 1-1: Product: syz [ 1699.344771][T23012] usb 1-1: Manufacturer: syz [ 1699.349610][T23012] usb 1-1: SerialNumber: syz [ 1699.376105][T23012] hso 1-1:6.2: Failed to find INT IN ep [ 1699.631984][T23012] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1699.794483][T23020] usb 1-1: USB disconnect, device number 56 [ 1699.811337][T23012] usb 5-1: config 0 has no interfaces? [ 1699.830165][T23012] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1699.839849][T23012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.855379][T23012] usb 5-1: Product: syz [ 1699.859674][T23012] usb 5-1: Manufacturer: syz [ 1699.866556][T23012] usb 5-1: SerialNumber: syz [ 1699.880489][T23012] usb 5-1: config 0 descriptor?? [ 1700.892977][T27076] ptrace attach of "./syz-executor exec"[24157] was attempted by "./syz-executor exec"[27076] [ 1701.214237][T10313] ftdi_sio 4-1:64.0: Ignoring interface reserved for JTAG [ 1701.280913][T10313] usb 4-1: USB disconnect, device number 45 [ 1701.454657][T27083] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6576'. [ 1702.901830][T10313] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1702.993227][T23020] usb 5-1: USB disconnect, device number 47 [ 1703.229224][T27110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6585'. [ 1703.246913][T10313] usb 2-1: config 0 has no interfaces? [ 1703.377070][ T30] audit: type=1326 audit(1748665710.431:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27109 comm="syz.3.6585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283cf8e969 code=0x7ffc0000 [ 1703.401497][T10313] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1703.421267][T10313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.450276][T10313] usb 2-1: Product: syz [ 1703.455993][T10313] usb 2-1: Manufacturer: syz [ 1703.460971][T10313] usb 2-1: SerialNumber: syz [ 1703.470718][T10313] usb 2-1: config 0 descriptor?? [ 1703.491800][ T30] audit: type=1326 audit(1748665710.461:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27109 comm="syz.3.6585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f283cf8e969 code=0x7ffc0000 [ 1703.524680][ T30] audit: type=1326 audit(1748665710.471:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27109 comm="syz.3.6585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283cf8e969 code=0x7ffc0000 [ 1703.719864][ T30] audit: type=1326 audit(1748665710.471:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27109 comm="syz.3.6585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f283cf8e969 code=0x7ffc0000 [ 1703.881849][ T30] audit: type=1326 audit(1748665710.471:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27109 comm="syz.3.6585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283cf8e969 code=0x7ffc0000 [ 1704.080922][T27119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6588'. [ 1704.095768][T27119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6588'. [ 1704.481859][T27123] fuse: Bad value for 'fd' [ 1705.518971][T10313] usb 2-1: USB disconnect, device number 52 [ 1705.602313][T23020] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1708.243557][T27174] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1708.646044][T27186] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6610' sets config #0 [ 1708.663302][T27186] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.6610' sets config #1 [ 1708.891908][T23012] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1709.086910][T23012] usb 2-1: not running at top speed; connect to a high speed hub [ 1709.203363][T23012] usb 2-1: config 108 interface 0 has no altsetting 0 [ 1709.215925][T23012] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=b8.27 [ 1709.229761][T23012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.279072][T27191] sctp: [Deprecated]: syz.2.6614 (pid 27191) Use of int in max_burst socket option deprecated. [ 1709.279072][T27191] Use struct sctp_assoc_value instead [ 1709.443804][T23012] usb 2-1: Product: syz [ 1709.448048][T23012] usb 2-1: Manufacturer: syz [ 1709.460617][T23012] usb 2-1: SerialNumber: syz [ 1709.710284][T23012] usb 2-1: USB disconnect, device number 53 [ 1710.603432][T23012] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1710.781423][T23012] usb 2-1: Using ep0 maxpacket: 32 [ 1710.798839][T23012] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1710.810200][T23012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.833476][T23012] usb 2-1: config 0 descriptor?? [ 1710.866023][T27210] [ 1710.868384][T27210] ===================================================== [ 1710.875309][T27210] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1710.882811][T27210] 6.15.0-syzkaller-09113-g8477ab143069 #0 Not tainted [ 1710.889586][T27210] ----------------------------------------------------- [ 1710.896545][T27210] syz.0.6619/27210 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1710.904293][T27210] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1710.913024][T27210] [ 1710.913024][T27210] and this task is already holding: [ 1710.920442][T27210] ffff88814c0e8fa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1710.929167][T27210] which would create a new lock dependency: [ 1710.935051][T27210] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1710.942638][T27210] [ 1710.942638][T27210] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1710.952104][T27210] (&client->buffer_lock){..-.}-{3:3} [ 1710.952133][T27210] [ 1710.952133][T27210] ... which became SOFTIRQ-irq-safe at: [ 1710.965200][T27210] lock_acquire+0x120/0x360 [ 1710.969794][T27210] _raw_spin_lock+0x2e/0x40 [ 1710.974389][T27210] evdev_pass_values+0xb9/0xbd0 [ 1710.979343][T27210] evdev_events+0x1e6/0x340 [ 1710.983947][T27210] input_pass_values+0x288/0x890 [ 1710.988979][T27210] input_event_dispose+0x3e5/0x6b0 [ 1710.994209][T27210] input_event+0x8c/0xc0 [ 1710.998551][T27210] hidinput_hid_event+0x132c/0x1c90 [ 1711.003866][T27210] hid_process_event+0x4be/0x620 [ 1711.008900][T27210] hid_report_raw_event+0xe91/0x16d0 [ 1711.014298][T27210] hid_input_report+0x43e/0x520 [ 1711.019338][T27210] hid_irq_in+0x47e/0x6d0 [ 1711.023769][T27210] __usb_hcd_giveback_urb+0x41a/0x690 [ 1711.029237][T27210] dummy_timer+0x862/0x4550 [ 1711.033858][T27210] __hrtimer_run_queues+0x529/0xc60 [ 1711.039154][T27210] hrtimer_run_softirq+0x187/0x2b0 [ 1711.044368][T27210] handle_softirqs+0x286/0x870 [ 1711.049221][T27210] __irq_exit_rcu+0xca/0x1f0 [ 1711.053900][T27210] irq_exit_rcu+0x9/0x30 [ 1711.058249][T27210] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1711.063980][T27210] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1711.070060][T27210] sched_core_balance+0x156/0xf00 [ 1711.075185][T27210] finish_task_switch+0x3a4/0x950 [ 1711.080312][T27210] __schedule+0x16fd/0x4d00 [ 1711.084919][T27210] schedule_idle+0x52/0x90 [ 1711.089441][T27210] do_idle+0x4ad/0x510 [ 1711.093621][T27210] cpu_startup_entry+0x44/0x60 [ 1711.098481][T27210] start_secondary+0x101/0x110 [ 1711.103351][T27210] common_startup_64+0x13e/0x147 [ 1711.108397][T27210] [ 1711.108397][T27210] to a SOFTIRQ-irq-unsafe lock: [ 1711.115415][T27210] (tasklist_lock){.+.+}-{3:3} [ 1711.115445][T27210] [ 1711.115445][T27210] ... which became SOFTIRQ-irq-unsafe at: [ 1711.128190][T27210] ... [ 1711.128201][T27210] lock_acquire+0x120/0x360 [ 1711.135392][T27210] _raw_read_lock+0x36/0x50 [ 1711.139987][T27210] __do_wait+0xde/0x740 [ 1711.144227][T27210] do_wait+0x1f8/0x520 [ 1711.148388][T27210] kernel_wait+0xab/0x170 [ 1711.152816][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1711.158795][T27210] process_scheduled_works+0xae1/0x17b0 [ 1711.164451][T27210] worker_thread+0x8a0/0xda0 [ 1711.169157][T27210] kthread+0x70e/0x8a0 [ 1711.173344][T27210] ret_from_fork+0x3fc/0x770 [ 1711.178034][T27210] ret_from_fork_asm+0x1a/0x30 [ 1711.182917][T27210] [ 1711.182917][T27210] other info that might help us debug this: [ 1711.182917][T27210] [ 1711.193156][T27210] Chain exists of: [ 1711.193156][T27210] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1711.193156][T27210] [ 1711.206384][T27210] Possible interrupt unsafe locking scenario: [ 1711.206384][T27210] [ 1711.214707][T27210] CPU0 CPU1 [ 1711.220072][T27210] ---- ---- [ 1711.225447][T27210] lock(tasklist_lock); [ 1711.229694][T27210] local_irq_disable(); [ 1711.236458][T27210] lock(&client->buffer_lock); [ 1711.243856][T27210] lock(&f_owner->lock); [ 1711.250720][T27210] [ 1711.254265][T27210] lock(&client->buffer_lock); [ 1711.259292][T27210] [ 1711.259292][T27210] *** DEADLOCK *** [ 1711.259292][T27210] [ 1711.267465][T27210] 2 locks held by syz.0.6619/27210: [ 1711.272674][T27210] #0: ffff88807c2e9740 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x17d/0x8a0 [ 1711.281255][T27210] #1: ffff88814c0e8fa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1711.290413][T27210] [ 1711.290413][T27210] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1711.300945][T27210] -> (&client->buffer_lock){..-.}-{3:3} { [ 1711.306871][T27210] IN-SOFTIRQ-W at: [ 1711.311034][T27210] lock_acquire+0x120/0x360 [ 1711.317542][T27210] _raw_spin_lock+0x2e/0x40 [ 1711.324062][T27210] evdev_pass_values+0xb9/0xbd0 [ 1711.330924][T27210] evdev_events+0x1e6/0x340 [ 1711.337434][T27210] input_pass_values+0x288/0x890 [ 1711.344375][T27210] input_event_dispose+0x3e5/0x6b0 [ 1711.351489][T27210] input_event+0x8c/0xc0 [ 1711.357738][T27210] hidinput_hid_event+0x132c/0x1c90 [ 1711.364949][T27210] hid_process_event+0x4be/0x620 [ 1711.371911][T27210] hid_report_raw_event+0xe91/0x16d0 [ 1711.379221][T27210] hid_input_report+0x43e/0x520 [ 1711.386077][T27210] hid_irq_in+0x47e/0x6d0 [ 1711.392528][T27210] __usb_hcd_giveback_urb+0x41a/0x690 [ 1711.399910][T27210] dummy_timer+0x862/0x4550 [ 1711.406418][T27210] __hrtimer_run_queues+0x529/0xc60 [ 1711.413619][T27210] hrtimer_run_softirq+0x187/0x2b0 [ 1711.420738][T27210] handle_softirqs+0x286/0x870 [ 1711.427514][T27210] __irq_exit_rcu+0xca/0x1f0 [ 1711.434136][T27210] irq_exit_rcu+0x9/0x30 [ 1711.440399][T27210] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1711.448040][T27210] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1711.456030][T27210] sched_core_balance+0x156/0xf00 [ 1711.463063][T27210] finish_task_switch+0x3a4/0x950 [ 1711.470109][T27210] __schedule+0x16fd/0x4d00 [ 1711.476625][T27210] schedule_idle+0x52/0x90 [ 1711.483056][T27210] do_idle+0x4ad/0x510 [ 1711.489145][T27210] cpu_startup_entry+0x44/0x60 [ 1711.495929][T27210] start_secondary+0x101/0x110 [ 1711.502691][T27210] common_startup_64+0x13e/0x147 [ 1711.509642][T27210] INITIAL USE at: [ 1711.513712][T27210] lock_acquire+0x120/0x360 [ 1711.520130][T27210] _raw_spin_lock+0x2e/0x40 [ 1711.526574][T27210] evdev_pass_values+0xb9/0xbd0 [ 1711.533349][T27210] evdev_events+0x1e6/0x340 [ 1711.539774][T27210] input_pass_values+0x288/0x890 [ 1711.546624][T27210] input_event_dispose+0x330/0x6b0 [ 1711.553672][T27210] input_inject_event+0x1fe/0x320 [ 1711.560607][T27210] evdev_write+0x2fc/0x480 [ 1711.567030][T27210] vfs_write+0x27e/0xa90 [ 1711.573188][T27210] ksys_write+0x145/0x250 [ 1711.579433][T27210] do_syscall_64+0xfa/0x3b0 [ 1711.585846][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.593647][T27210] } [ 1711.596319][T27210] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1711.604650][T27210] -> (&new->fa_lock){....}-{3:3} { [ 1711.609867][T27210] INITIAL USE at: [ 1711.613846][T27210] lock_acquire+0x120/0x360 [ 1711.620091][T27210] _raw_write_lock_irq+0xa2/0xf0 [ 1711.626762][T27210] fasync_remove_entry+0xf1/0x1c0 [ 1711.633517][T27210] sock_fasync+0x85/0xf0 [ 1711.639489][T27210] __fput+0x89f/0xa70 [ 1711.645375][T27210] task_work_run+0x1d1/0x260 [ 1711.651715][T27210] do_exit+0x8d1/0x2550 [ 1711.657695][T27210] do_group_exit+0x21c/0x2d0 [ 1711.664049][T27210] get_signal+0x1286/0x1340 [ 1711.670309][T27210] arch_do_signal_or_restart+0x9a/0x750 [ 1711.677587][T27210] exit_to_user_mode_loop+0x75/0x110 [ 1711.684613][T27210] do_syscall_64+0x2bd/0x3b0 [ 1711.690952][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.698575][T27210] INITIAL READ USE at: [ 1711.702986][T27210] lock_acquire+0x120/0x360 [ 1711.709656][T27210] _raw_read_lock_irqsave+0xaf/0x100 [ 1711.717135][T27210] kill_fasync+0x199/0x4d0 [ 1711.723742][T27210] sock_wake_async+0x137/0x160 [ 1711.730681][T27210] sock_def_error_report+0x332/0x390 [ 1711.738137][T27210] sk_error_report+0x45/0x290 [ 1711.745007][T27210] unix_dgram_connect+0x997/0xce0 [ 1711.752222][T27210] __sys_connect+0x316/0x440 [ 1711.759000][T27210] __x64_sys_connect+0x7a/0x90 [ 1711.765939][T27210] do_syscall_64+0xfa/0x3b0 [ 1711.772619][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.780706][T27210] } [ 1711.783306][T27210] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1711.792072][T27210] ... acquired at: [ 1711.795955][T27210] lock_acquire+0x120/0x360 [ 1711.800635][T27210] _raw_read_lock_irqsave+0xaf/0x100 [ 1711.806102][T27210] kill_fasync+0x199/0x4d0 [ 1711.810691][T27210] evdev_pass_values+0x627/0xbd0 [ 1711.815813][T27210] evdev_events+0x1e6/0x340 [ 1711.820607][T27210] input_pass_values+0x288/0x890 [ 1711.825720][T27210] input_event_dispose+0x330/0x6b0 [ 1711.831002][T27210] input_inject_event+0x1fe/0x320 [ 1711.836196][T27210] evdev_write+0x2fc/0x480 [ 1711.840791][T27210] vfs_write+0x27e/0xa90 [ 1711.845207][T27210] ksys_write+0x145/0x250 [ 1711.849717][T27210] do_syscall_64+0xfa/0x3b0 [ 1711.854400][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.860462][T27210] [ 1711.862787][T27210] -> (&f_owner->lock){....}-{3:3} { [ 1711.868044][T27210] INITIAL USE at: [ 1711.871941][T27210] lock_acquire+0x120/0x360 [ 1711.878035][T27210] _raw_write_lock_irq+0xa2/0xf0 [ 1711.884562][T27210] __f_setown+0x67/0x370 [ 1711.890376][T27210] f_setown+0x23a/0x300 [ 1711.896101][T27210] do_fcntl+0x11d/0x1910 [ 1711.901902][T27210] __se_sys_fcntl+0xc8/0x150 [ 1711.908067][T27210] do_syscall_64+0xfa/0x3b0 [ 1711.914141][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.921596][T27210] INITIAL READ USE at: [ 1711.925922][T27210] lock_acquire+0x120/0x360 [ 1711.932427][T27210] _raw_read_lock_irqsave+0xaf/0x100 [ 1711.939730][T27210] send_sigio+0x38/0x370 [ 1711.945971][T27210] dnotify_handle_event+0x169/0x440 [ 1711.953261][T27210] fsnotify+0x1814/0x1a80 [ 1711.959587][T27210] fsnotify_access+0x22b/0x2a0 [ 1711.966352][T27210] iterate_dir+0x600/0x770 [ 1711.972766][T27210] __se_sys_getdents64+0xe4/0x260 [ 1711.980054][T27210] do_syscall_64+0xfa/0x3b0 [ 1711.986554][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.994442][T27210] } [ 1711.996934][T27210] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1712.005798][T27210] ... acquired at: [ 1712.009608][T27210] lock_acquire+0x120/0x360 [ 1712.014296][T27210] _raw_read_lock_irqsave+0xaf/0x100 [ 1712.019766][T27210] send_sigio+0x38/0x370 [ 1712.024185][T27210] kill_fasync+0x24d/0x4d0 [ 1712.028778][T27210] lease_break_callback+0x26/0x30 [ 1712.033987][T27210] __break_lease+0x6a2/0x1620 [ 1712.038840][T27210] do_dentry_open+0xd62/0x1970 [ 1712.043787][T27210] vfs_open+0x3b/0x340 [ 1712.048039][T27210] path_openat+0x2ee5/0x3830 [ 1712.052796][T27210] do_filp_open+0x1fa/0x410 [ 1712.057467][T27210] do_sys_openat2+0x121/0x1c0 [ 1712.062316][T27210] __x64_sys_open+0x11e/0x150 [ 1712.067165][T27210] do_syscall_64+0xfa/0x3b0 [ 1712.071843][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.077908][T27210] [ 1712.080225][T27210] [ 1712.080225][T27210] the dependencies between the lock to be acquired [ 1712.080235][T27210] and SOFTIRQ-irq-unsafe lock: [ 1712.093730][T27210] -> (tasklist_lock){.+.+}-{3:3} { [ 1712.098860][T27210] HARDIRQ-ON-R at: [ 1712.102849][T27210] lock_acquire+0x120/0x360 [ 1712.109002][T27210] _raw_read_lock+0x36/0x50 [ 1712.115167][T27210] __do_wait+0xde/0x740 [ 1712.120974][T27210] do_wait+0x1f8/0x520 [ 1712.126688][T27210] kernel_wait+0xab/0x170 [ 1712.132694][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1712.140246][T27210] process_scheduled_works+0xae1/0x17b0 [ 1712.147461][T27210] worker_thread+0x8a0/0xda0 [ 1712.153709][T27210] kthread+0x70e/0x8a0 [ 1712.159447][T27210] ret_from_fork+0x3fc/0x770 [ 1712.165692][T27210] ret_from_fork_asm+0x1a/0x30 [ 1712.172124][T27210] SOFTIRQ-ON-R at: [ 1712.176109][T27210] lock_acquire+0x120/0x360 [ 1712.182258][T27210] _raw_read_lock+0x36/0x50 [ 1712.188415][T27210] __do_wait+0xde/0x740 [ 1712.194238][T27210] do_wait+0x1f8/0x520 [ 1712.200068][T27210] kernel_wait+0xab/0x170 [ 1712.206045][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1712.213590][T27210] process_scheduled_works+0xae1/0x17b0 [ 1712.220788][T27210] worker_thread+0x8a0/0xda0 [ 1712.227052][T27210] kthread+0x70e/0x8a0 [ 1712.232863][T27210] ret_from_fork+0x3fc/0x770 [ 1712.239110][T27210] ret_from_fork_asm+0x1a/0x30 [ 1712.245527][T27210] INITIAL USE at: [ 1712.249419][T27210] lock_acquire+0x120/0x360 [ 1712.255588][T27210] _raw_write_lock_irq+0xa2/0xf0 [ 1712.262177][T27210] copy_process+0x224f/0x3c00 [ 1712.268431][T27210] kernel_clone+0x21e/0x870 [ 1712.274534][T27210] user_mode_thread+0xdd/0x140 [ 1712.280910][T27210] rest_init+0x23/0x300 [ 1712.286658][T27210] start_kernel+0x478/0x500 [ 1712.292740][T27210] x86_64_start_reservations+0x24/0x30 [ 1712.299768][T27210] x86_64_start_kernel+0x143/0x1c0 [ 1712.306470][T27210] common_startup_64+0x13e/0x147 [ 1712.312991][T27210] INITIAL READ USE at: [ 1712.317317][T27210] lock_acquire+0x120/0x360 [ 1712.323820][T27210] _raw_read_lock+0x36/0x50 [ 1712.330346][T27210] __do_wait+0xde/0x740 [ 1712.336499][T27210] do_wait+0x1f8/0x520 [ 1712.342571][T27210] kernel_wait+0xab/0x170 [ 1712.348909][T27210] call_usermodehelper_exec_work+0xbe/0x230 [ 1712.356800][T27210] process_scheduled_works+0xae1/0x17b0 [ 1712.364350][T27210] worker_thread+0x8a0/0xda0 [ 1712.370962][T27210] kthread+0x70e/0x8a0 [ 1712.377053][T27210] ret_from_fork+0x3fc/0x770 [ 1712.383657][T27210] ret_from_fork_asm+0x1a/0x30 [ 1712.390426][T27210] } [ 1712.392926][T27210] ... key at: [] tasklist_lock+0x18/0x40 [ 1712.400655][T27210] ... acquired at: [ 1712.404451][T27210] lock_acquire+0x120/0x360 [ 1712.409130][T27210] _raw_read_lock+0x36/0x50 [ 1712.413870][T27210] send_sigurg+0x12b/0x420 [ 1712.418460][T27210] sk_send_sigurg+0x6c/0x2e0 [ 1712.423223][T27210] queue_oob+0x699/0x8a0 [ 1712.427646][T27210] unix_stream_sendmsg+0xaf9/0xc90 [ 1712.432933][T27210] __sock_sendmsg+0x21c/0x270 [ 1712.437779][T27210] ____sys_sendmsg+0x505/0x830 [ 1712.442720][T27210] ___sys_sendmsg+0x21f/0x2a0 [ 1712.447572][T27210] __x64_sys_sendmsg+0x19b/0x260 [ 1712.452684][T27210] do_syscall_64+0xfa/0x3b0 [ 1712.457360][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.463428][T27210] [ 1712.465743][T27210] [ 1712.465743][T27210] stack backtrace: [ 1712.471622][T27210] CPU: 1 UID: 0 PID: 27210 Comm: syz.0.6619 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1712.471642][T27210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1712.471654][T27210] Call Trace: [ 1712.471662][T27210] [ 1712.471670][T27210] dump_stack_lvl+0x189/0x250 [ 1712.471709][T27210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.471746][T27210] ? __pfx__printk+0x10/0x10 [ 1712.471766][T27210] validate_chain+0x1f05/0x2140 [ 1712.471796][T27210] __lock_acquire+0xab9/0xd20 [ 1712.471816][T27210] ? send_sigurg+0x12b/0x420 [ 1712.471830][T27210] lock_acquire+0x120/0x360 [ 1712.471847][T27210] ? send_sigurg+0x12b/0x420 [ 1712.471862][T27210] ? _raw_read_lock_irqsave+0xbb/0x100 [ 1712.471889][T27210] _raw_read_lock+0x36/0x50 [ 1712.471912][T27210] ? send_sigurg+0x12b/0x420 [ 1712.471926][T27210] send_sigurg+0x12b/0x420 [ 1712.471942][T27210] sk_send_sigurg+0x6c/0x2e0 [ 1712.471959][T27210] queue_oob+0x699/0x8a0 [ 1712.471990][T27210] ? __pfx_queue_oob+0x10/0x10 [ 1712.472012][T27210] ? rcu_is_watching+0x15/0xb0 [ 1712.472032][T27210] ? __pfx___might_resched+0x10/0x10 [ 1712.472051][T27210] ? trace_sched_exit_tp+0x38/0x120 [ 1712.472067][T27210] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1712.472087][T27210] unix_stream_sendmsg+0xaf9/0xc90 [ 1712.472111][T27210] ? aa_sk_perm+0x81e/0x950 [ 1712.472126][T27210] ? preempt_schedule_common+0x83/0xd0 [ 1712.472141][T27210] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1712.472165][T27210] ? aa_sock_msg_perm+0x94/0x160 [ 1712.472182][T27210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1712.472198][T27210] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1712.472220][T27210] __sock_sendmsg+0x21c/0x270 [ 1712.472237][T27210] ____sys_sendmsg+0x505/0x830 [ 1712.472261][T27210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1712.472286][T27210] ? import_iovec+0x74/0xa0 [ 1712.472311][T27210] ___sys_sendmsg+0x21f/0x2a0 [ 1712.472333][T27210] ? __pfx____sys_sendmsg+0x10/0x10 [ 1712.472367][T27210] ? __fget_files+0x2a/0x420 [ 1712.472389][T27210] ? __fget_files+0x3a0/0x420 [ 1712.472413][T27210] __x64_sys_sendmsg+0x19b/0x260 [ 1712.472437][T27210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1712.472463][T27210] ? rcu_is_watching+0x15/0xb0 [ 1712.472483][T27210] ? do_syscall_64+0xbe/0x3b0 [ 1712.472501][T27210] do_syscall_64+0xfa/0x3b0 [ 1712.472517][T27210] ? lockdep_hardirqs_on+0x9c/0x150 [ 1712.472532][T27210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.472547][T27210] ? clear_bhb_loop+0x60/0xb0 [ 1712.472565][T27210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.472581][T27210] RIP: 0033:0x7f3588f8e969 [ 1712.472596][T27210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1712.472610][T27210] RSP: 002b:00007f3589eb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1712.472628][T27210] RAX: ffffffffffffffda RBX: 00007f35891b5fa0 RCX: 00007f3588f8e969 [ 1712.472640][T27210] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000006 [ 1712.472651][T27210] RBP: 00007f3589010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1712.472661][T27210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.472671][T27210] R13: 0000000000000000 R14: 00007f35891b5fa0 R15: 00007f35892dfa28 [ 1712.472688][T27210] [ 1712.787972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1712.805208][T23012] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1712.814567][T23012] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1712.827375][T23012] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1712.835281][T23012] usb 2-1: media controller created [ 1712.849806][T23012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1713.744435][T27205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.753358][T27205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.971854][T23012] stb0899_attach: Driver disabled by Kconfig [ 1713.978487][T23012] az6027: no front-end attached [ 1713.978487][T23012] [ 1713.987797][T23012] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1713.996070][T23012] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 1714.008715][T23012] dvb-usb: schedule remote query interval to 400 msecs. [ 1714.015922][T23012] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1714.192357][T23012] usb 2-1: USB disconnect, device number 54 [ 1714.217338][T23012] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.