last executing test programs: 28.554253542s ago: executing program 0 (id=1467): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6400000010001fff000002ee0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000010088520300440012800b000100697036e07122661d9112a7800800c244", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000bb14000300ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 5.709618485s ago: executing program 0 (id=1482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x0, 0xc, 0x7, 0x1, 0x9, 0x8, 0x92, 0x7f, 0x3, 0xf, 0x3, 0x0, 0xcc}, 0xe) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.446693317s ago: executing program 0 (id=1529): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000080)={0xa, 0x4e20, 0x2342, @local, 0x80000001}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="9d2847c212c3cff3b39a425a8ab0d716a45d1885f656a89438da36cb6b407b6bd3593796f708f8a80a5912ddfe3ab2692d63204c41eff68dfb882efddcf588dd7ea05c1c4b5cb52f707e75438c74ec22cb69b8b034a0d4803ac7fbb521619db27a7c0d5214fd209ba41007200b991c0d8ffb5e9307317cb72be0adf7611fdabeea7ccf15fa8d02d91b038842f876b2c7da9fe29457200bcf109e4c1f297e78a2a7970da0952cefbe59880a04cb1629c6d735400f12a963199e", 0xb9}, {&(0x7f00000001c0)="c64a4d79067131957f3a38", 0xb}, {&(0x7f0000000200)="2d269a8550b9cc52e871635a01fe6bf0e3f0bd99ba07813748066e9c81dce8f4571daef98dbea27a20fbaaa548f3086198ce487ed85c3a8d54e59fbd56e677cc", 0x40}], 0x3, &(0x7f0000000d80)=[@rthdr_2292={{0x64, 0x29, 0x39, {0xc, 0xa, 0x1, 0x6, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @loopback, @remote]}}}, @dstopts={{0x113c, 0x29, 0x37, {0x89, 0x225, '\x00', [@generic={0x3, 0xd6, "3bf050a9e71b666d9b607c4dc9b6a527fbbc43a8c32609f4fb9085d7e838d05dfae2e0dc5a78e3387532a05795eadd10bfec964963651eb1a50830a77f771a54f2d9e99653fc05e47a169012a224aac70583eacec9330b7cfa0335baf5d76d0ee390863e3eab48ec1ead96ba3382f7201a50e64dbbb61679ee2e8e08e8b050f8da0945a8152f6fc9b27969aefdb394eef76890bd231d7fbce3fe686a60f23c63857d692327f4ef8cf69871eb94ded0bfa65e82ddd92ec799d36f78a877d0487662ceb89f6d3edbb25b221f34f895da357a13f508b218"}, @pad1, @ra, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xa, 0x38, "458cb7f8bda0ed8f328324393ee5321b57c426b2fd512204b7b4472344b58e244a803ff7b02f78d6a8214d17ef92d19caecb693ca27375b6"}, @generic={0x1, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdrdstopts={{0x2c, 0x29, 0x37, {0x5c, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}}}, @rthdr={{0x34, 0x29, 0x39, {0xc, 0x4, 0x1, 0x41, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}], 0x1200}, 0x5) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_4={0x3, 0x0, 0xb, "0577f5d2"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.390737674s ago: executing program 4 (id=1538): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x80000) r0 = syz_io_uring_setup(0x4af4, &(0x7f0000000080)={0x0, 0xcc20, 0x8, 0x3}, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x1010, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 4.263930188s ago: executing program 4 (id=1539): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x917}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x80ffff) 4.037799305s ago: executing program 2 (id=1541): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000130005000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x8c}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000080000004300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}}) 3.961906357s ago: executing program 4 (id=1542): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0xc, &(0x7f00000000c0)={0x0, 0x31, 0x8e, {0x8e, 0xd, "94e84ca3ca5b2ef70aefe0b19bac77c526644e2489a035d01e1cae8209b3343caac308d4fa9dab643a32da7b77a323fe72f600ba9bcee099a6d217be8a6db3fdafb9138d94b82a0770869ddceea3051599c02301e7b946debbf836e7e30fd7e18eac81a022ae19b6d55deb8414aa299e048287b95ca3da41115b5d94eeeb48fba73600f210b42d8eb260a1f2"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x10, &(0x7f0000000300)={0x20, 0x15, 0x33, "f5c6f8c8f91f90b9fd411b1e13884a3863440b78b17d4c086d63197fba401c977a9cb57b1dcda113b1cd0784bc867582b9d74c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x18, &(0x7f0000001100)={0x0, 0x0, 0x4, "9c6e5906"}, 0x0, 0x0, 0x0, 0x0}) 3.767152693s ago: executing program 2 (id=1544): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x2000) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.505072546s ago: executing program 2 (id=1545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) setns(r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="ea3d10736cfeffffffffffffff84e6cebb9d450c0b76000000000001090224000100000000090400000303000000092120000001224b247f328d225ea47707"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000000001010400000000000000000200000024000180140001800800013410efdac9ff80d17c000000000008000200e01000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e000000208000740000000000c0097d025cddf5f324d5300"], 0x70}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x462000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x1ffffe, 0x1, 0x0, 0x3, 0x0, r4}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffdd) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x100, 0x0, 0x0, {0x2, 0x14, 0x0, 0xfd, 0x0, 0x4, 0xc8}}, 0x1c}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800400120005001600020000000600180000"], 0x54}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc2) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x26c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x180, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x965, 0x8, 0x2, 0x28, 0x80000001, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0xc9, 0xf, 0x19, 0x4, 0x1, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x8, 0xa839]}}, {{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x40, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x2}}, {0x8, 0x2, [0x4, 0x2]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}]}]}, 0x26c}}, 0x0) 3.132641262s ago: executing program 3 (id=1546): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffff, 0x40) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r3, 0x200}, {r2, 0x4}, {r1, 0x345}], 0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000400)=0x7000220) 3.127836341s ago: executing program 4 (id=1547): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1653]}}) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070013000b000000000551"], 0x0}, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="faf4ceb0350689621a591ca72fde78a236", 0x11}, {&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb4067ab22fccd16dab6b0416f4b91b89414a67a83cbfcae17db95e9608f4babaa8e26db9ccd33b4d990b3335fc877386a42a048e85fe13735653f5dc6a50f69daff639872adff92fa2553c3a0a85a879576bc223c105571fc143ed0821500e1f522f14cda2967fa4c88b112d574ade8c01d2e7758804757feae278d1eb4ef41ecd6ce5089b6dba007c20825bf781caec663385fbef14106aa320ac804e6a1ee47b202731ea", 0xc4}, {&(0x7f0000000300)="9f6d6c08bb34cc9b518293dd75ee50dd93a53f0e51ffa4ebae3fb241caf823aba01aa0e010e47bb2199cc92dcf9decd9ea13f179e5f53871ab70aae77fc1459ce454586f7b18501336c32ae455fa8b04cd31b1396e57b983d7914e02a68e8e537595dcf502797e3a4d7a990e4b293eb77b73d75a7b1ef0413b6255e849b4", 0x7e}, {&(0x7f0000000380)="dc7e2b4b9bb2aab402bf2ea914dc3d9012974cbcbcc38802d296", 0x1a}, {&(0x7f00000003c0)="91", 0x1}], 0x5}}], 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002a00090000000000000000000400002c040019"], 0x18}, 0x1, 0x3000000, 0x0, 0x20020001}, 0x0) 2.383576391s ago: executing program 3 (id=1548): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = io_uring_setup(0x34d, &(0x7f0000000300)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1b, 0x20000007, r4) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="54ec514cecf8427e9b8d1a71000000000000000000", 0x15) openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x149201, 0x70) 2.232638472s ago: executing program 0 (id=1549): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x80000) r0 = syz_io_uring_setup(0x4af4, &(0x7f0000000080)={0x0, 0xcc20, 0x8, 0x3}, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x1010, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 2.232333012s ago: executing program 3 (id=1550): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x40, 0x3137}) ioctl$BLKTRACESTART(r0, 0x1276, 0x7000000) 2.090840842s ago: executing program 0 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c010000020701010000000008000000020000070c00034000000000000000080c00034000000000000000094c0007800800014000000003080002"], 0x12c}}, 0x0) 1.90041396s ago: executing program 3 (id=1553): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x5a0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "ac8237c2c9c3a770547e015e8edf74a0981fd22e54fb9ab1ce095204445d576784e100a1c6"}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "9a01b34ffe9bfca03ef7fa8266809732d12607afe9eb29e30157013a09ff2de524a647d7d64d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x71, 0x3, "748c077dc2494bc8e4606f88d89a1b4f621d3004afd8edb2a1c577bcae3853cc89967b45c4a12edfee9263c3a89b50dc0df1bb40d71e0e941d0b0bbc1709a1d48cc7f360cb9c8c188458022cb1ad389f6b8c9a7dc270d846d081eb2e401e360167a6832b89e4a43eff9f52e3dd"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x154, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53ce}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf8fc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private2, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @local, 0x9}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1d9d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2a5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bd411a5e0034506abe338c73abee83cb0eede6538effd887ac986c7b"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "002607e3dc2b0ec9990d0d2f5a788bfea638789a28b9421fc66e465affcea161"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "64d225538ea788a1271ba6925f31ae57e66ff4a6b9ce90eb743f6f7c0343"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6, 0x3, "90c3"}, @TIPC_NLA_NODE_ID={0x80, 0x3, "31198e4e8ab74f20b0e53ffa2d19963f79705a0d41fbc80b1740df6fd4da49d99506c889ebfaec19a5a971f44d0ad62703b2b092db1b2e0030c5d7544427ca3b087de3b6b0573d65b6d24dbb3369685e07515d8ee9e86612b34afb69eff0dd7e401d0dd42ac65eb25e3bcae5d11806ebb01dc28594bc54aca69a78ff"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ca7ff11167bd7395b01eac6a921ea4e5d4826dbe9d68e1187ccb7e71b4df"}}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) 1.880377204s ago: executing program 0 (id=1554): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) (fail_nth: 8) 1.700197795s ago: executing program 1 (id=1555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c010000020701010000000008000000020000070c00034000000000000000080c00034000000000000000094c0007800800014000000003080002"], 0x12c}}, 0x0) (fail_nth: 2) 1.576423047s ago: executing program 3 (id=1556): fanotify_init(0x0, 0x8000) (async) socket$netlink(0x10, 0x3, 0x9) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044020) (rerun: 32) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x0, 0x75f000}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x2) (rerun: 64) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) (async, rerun: 32) write$proc_mixer(r3, 0x0, 0xf7) (async, rerun: 32) dup3(0xffffffffffffffff, r3, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 1.280023428s ago: executing program 3 (id=1557): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000059c0), 0x0, 0x0) preadv2(r0, &(0x7f0000005d00)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x6, 0xfdaf, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100000900000032151b0100000000000109022400010400000103000200092100000500094e2798b70000ff00000000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x45, &(0x7f0000000380)=[{0x8006, 0x1, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000002080)=[{{&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=0x0, @ANYBLOB="180002000000000000000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0], 0x28}}], 0x1, 0x4000) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r11, &(0x7f0000000300)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r10}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f00000004c0)={0x2, r13, r10}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205007dc859bfe14845754c16fff62959812d7b9f3af5baa79487ea68107fe5ee56f98b6fb7a0a2fd4a7adaae31b898ea0482f040ac324e80b8ab83cf685282fa019564951219e9c9045b63e90f714a382610627abbd9"], 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)="d1e39a06346da58fcaff182869b3c02f89c982b9f721ebddc18c5474ff397d8b279dd33618443ced360a3b56a5d4a6b1adf47ce996becf2954afc5ef1783f1f98a2a603c5f26c09791d290079465716e805085067123b1f1f379887b75f0ffffff15e34d7aff59950e09750177aee097466c4fd4d22e0000", 0x70) r14 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r15, &(0x7f0000000100)='./file0\x00') openat(r15, &(0x7f0000000040)='./file0\x00', 0x20c40, 0x0) 1.263175024s ago: executing program 1 (id=1558): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) futex_waitv(&(0x7f0000002940)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000001240)}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000001380)}, {0x0, 0x0}, {0x0, &(0x7f0000001400)}, {0x0, 0x0}, {0x0, &(0x7f0000001480)}, {0x0, 0x0}, {0x0, &(0x7f0000001500)}, {0x0, 0x0}, {0x0, &(0x7f0000001580)}, {0x0, 0x0}, {0x0, &(0x7f0000001600)}, {0x0, 0x0}, {0x0, &(0x7f0000001680)}, {0x0, 0x0}, {0x0, &(0x7f0000001700)}, {0x0, 0x0}, {0x0, &(0x7f0000001780)}, {0x0, 0x0}, {0x0, &(0x7f0000001800)}, {0x0, 0x0}, {0x0, &(0x7f0000001880)}, {0x0, 0x0}, {0x0, &(0x7f0000001900)}, {0x0, 0x0}, {0x0, &(0x7f0000001980)}, {0x0, 0x0}, {0x0, &(0x7f0000001a00)}, {0x0, 0x0}, {0x0, &(0x7f0000001a80)}, {0x0, 0x0}, {0x0, &(0x7f0000001b00)}, {0x0, 0x0}, {0x0, &(0x7f0000001b80)}, {0x0, 0x0}, {0x0, &(0x7f0000001c00)}, {0x0, 0x0}, {0x0, &(0x7f0000001c80)}, {0x0, 0x0}, {0x0, &(0x7f0000001d00)}, {0x0, 0x0}, {0x0, &(0x7f0000001d80)}, {0x0, 0x0}, {0x0, &(0x7f0000001e00)}, {0x0, 0x0}, {0x0, &(0x7f0000001e80)}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000001f80)}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000002140)}], 0x40, 0x0, &(0x7f0000003300), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x300, 0x31364d4e, 0x33565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x6}], 0x0, 0x0, 0x7, 0x0, 0x6}}) 874.90214ms ago: executing program 4 (id=1559): unshare(0x62040200) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc600400214002000003053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x0, 0x0, 0x3f]}, &(0x7f0000000140)=0x54) 656.563202ms ago: executing program 1 (id=1560): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffc, 0x30}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0xc00) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000d80)='R', 0x1, 0x8000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x10000000}, 0xc) sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x4c}}, 0x0) 519.293614ms ago: executing program 1 (id=1561): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00*\x00\t\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYRESDEC], 0x5c}, 0x1, 0x3000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="28005a80240001"], 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x2040000) 390.695266ms ago: executing program 2 (id=1562): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x80000) r0 = syz_io_uring_setup(0x4af4, &(0x7f0000000080)={0x0, 0xcc20, 0x8, 0x3}, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x1010, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 283.946888ms ago: executing program 4 (id=1563): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r9 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[r1, r8, r6, r9, r6, r3]}, 0x6) 219.386581ms ago: executing program 2 (id=1564): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="f4000000000001c5c501"]) 163.300853ms ago: executing program 1 (id=1565): r0 = io_uring_setup(0x2026, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000200000000000c0002"], 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x12) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x3000000, 0x9, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0, 0xfffffffffffffecf}], 0x0, 0x11a}, 0x20) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xcbe, 0x100) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x109000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x7, {0x0, 0x0, 0x0, 0xbc8c, 0x8, 0x0, 0x5, 0x3, 0x8, "565513261dab26d3e47c06b57908739a23b6cd9061521a9869daf32066ca4cbc0ff901ee3978339f9887ab1fe23a30679f786e4e863f73f840bcdbcc145f77e0", "6afe15656ac55d86409f150f1cbfb537c587ebbb4f3768b925a142395351ad47dd579f459334ed472f21857922959d49347d001a55ae37f46122e25976e129f9", "4fb747a9ae0de3209349c96de17b2fac2c17b6e87db048f4e7c5f83ec3124781", [0x4, 0xd3fe]}}) 243.057µs ago: executing program 1 (id=1566): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000048000), 0x3000000) 0s ago: executing program 2 (id=1567): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000000030600710a06069d856829c2f5d7a3c3b954c224baf5a405000000143d6ab27e0b6d80aa934dc082", 0x32}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x4c040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x5d5c, 0x9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xbb5e}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000480)={&(0x7f0000000080)=[0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], r5, 0x0, '\x00', 0x1, 0x9}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000300)=0x732) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r0, 0x100300) kernel console output (not intermixed with test programs): 488822][T11867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.504359][T11867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.608145][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.630419][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.664656][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.680854][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.801949][ T5285] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 437.963875][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 437.975115][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 438.005219][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 438.019829][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.046901][ T5285] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.060201][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 438.071383][ T5285] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 438.086658][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.098999][ T5285] usb 2-1: config 0 descriptor?? [ 438.115948][T11990] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 438.281708][ T5286] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 438.481747][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 438.488110][T12028] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1372'. [ 438.502558][ T5286] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 438.515089][ T5286] usb 3-1: config 0 has no interface number 0 [ 438.521238][ T5286] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 438.545563][ T5286] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 438.558801][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.567660][ T5286] usb 3-1: Product: syz [ 438.577638][ T5286] usb 3-1: Manufacturer: syz [ 438.582708][ T5286] usb 3-1: SerialNumber: syz [ 438.592165][ T5286] usb 3-1: config 0 descriptor?? [ 438.732271][ T4624] Bluetooth: hci4: command tx timeout [ 438.800014][ T5286] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 438.806980][ T5285] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 438.815000][ T5286] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 438.976436][ T5285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.987062][ T5285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.997190][ T5285] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.006533][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.015131][ T5285] usb 4-1: SerialNumber: syz [ 439.229101][ T5285] usb 4-1: 0:2 : does not exist [ 439.235090][ T5285] usb 4-1: unit 5 not found! [ 439.247895][ T5285] usb 4-1: USB disconnect, device number 78 [ 439.279483][ T5234] udevd[5234]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.378483][ T5247] usb 5-1: USB disconnect, device number 77 [ 439.528608][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1373'. [ 440.176681][ T4624] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 440.176749][ T4624] CPU: 1 UID: 0 PID: 4624 Comm: kworker/u9:1 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 440.176780][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 440.176807][ T4624] Workqueue: hci2 hci_rx_work [ 440.176843][ T4624] Call Trace: [ 440.176854][ T4624] [ 440.176865][ T4624] dump_stack_lvl+0x241/0x360 [ 440.176898][ T4624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.176924][ T4624] ? __pfx__printk+0x10/0x10 [ 440.176963][ T4624] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 440.176999][ T4624] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 440.177038][ T4624] sysfs_create_dir_ns+0x2ce/0x3a0 [ 440.177076][ T4624] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 440.177121][ T4624] kobject_add_internal+0x435/0x8d0 [ 440.177155][ T4624] kobject_add+0x152/0x220 [ 440.177180][ T4624] ? do_raw_spin_unlock+0x13c/0x8b0 [ 440.177214][ T4624] ? device_add+0x3e7/0xbf0 [ 440.177252][ T4624] ? __pfx_kobject_add+0x10/0x10 [ 440.177278][ T4624] ? _raw_spin_unlock+0x28/0x50 [ 440.177317][ T4624] ? get_device_parent+0x165/0x410 [ 440.177359][ T4624] device_add+0x4e5/0xbf0 [ 440.177403][ T4624] hci_conn_add_sysfs+0xe8/0x200 [ 440.177433][ T4624] le_conn_complete_evt+0xc9f/0x12e0 [ 440.177472][ T4624] ? trace_contention_end+0x3c/0x120 [ 440.177506][ T4624] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 440.177541][ T4624] ? __mutex_unlock_slowpath+0x21d/0x750 [ 440.177568][ T4624] ? __copy_skb_header+0x437/0x5b0 [ 440.177597][ T4624] ? skb_pull_data+0x112/0x230 [ 440.177635][ T4624] hci_le_enh_conn_complete_evt+0x185/0x420 [ 440.177677][ T4624] hci_event_packet+0xa55/0x1540 [ 440.177712][ T4624] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 440.177753][ T4624] ? __pfx_hci_event_packet+0x10/0x10 [ 440.177799][ T4624] ? user_pairing_resp+0x4e0/0x580 [ 440.177828][ T4624] ? kcov_remote_start+0x97/0x7d0 [ 440.177867][ T4624] hci_rx_work+0x3fe/0xd80 [ 440.177906][ T4624] ? process_scheduled_works+0x976/0x1850 [ 440.177942][ T4624] process_scheduled_works+0xa63/0x1850 [ 440.178007][ T4624] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.178053][ T4624] ? assign_work+0x364/0x3d0 [ 440.178093][ T4624] worker_thread+0x870/0xd30 [ 440.178143][ T4624] ? __kthread_parkme+0x169/0x1d0 [ 440.178184][ T4624] ? __pfx_worker_thread+0x10/0x10 [ 440.178219][ T4624] kthread+0x2f0/0x390 [ 440.178243][ T4624] ? __pfx_worker_thread+0x10/0x10 [ 440.178278][ T4624] ? __pfx_kthread+0x10/0x10 [ 440.178304][ T4624] ret_from_fork+0x4b/0x80 [ 440.178339][ T4624] ? __pfx_kthread+0x10/0x10 [ 440.178365][ T4624] ret_from_fork_asm+0x1a/0x30 [ 440.178415][ T4624] [ 440.178647][ T4624] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 440.178685][ T4624] Bluetooth: hci2: failed to register connection device [ 440.192593][ T936] usb 2-1: USB disconnect, device number 83 [ 440.253036][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.253151][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.845465][ T5305] usb 3-1: USB disconnect, device number 67 [ 440.865621][ T6548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.865689][ T6548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.922045][ T936] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 440.990411][ T6548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.990451][ T6548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.052117][ T936] usb 5-1: device descriptor read/64, error -71 [ 441.183118][ T6548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.209672][ T6548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.292926][ T936] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 441.346361][ T6548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.360635][ T6548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.390145][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.404959][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.417440][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.429147][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.436511][ T936] usb 5-1: device descriptor read/64, error -71 [ 441.452196][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 441.460823][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.589149][ T936] usb usb5-port1: attempt power cycle [ 441.940483][T12073] FAULT_INJECTION: forcing a failure. [ 441.940483][T12073] name failslab, interval 1, probability 0, space 0, times 0 [ 441.954131][ T5247] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 441.962192][T12073] CPU: 0 UID: 0 PID: 12073 Comm: syz.3.1385 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 441.973024][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.983091][T12073] Call Trace: [ 441.986392][T12073] [ 441.989331][T12073] dump_stack_lvl+0x241/0x360 [ 441.994029][T12073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.999240][T12073] ? __pfx__printk+0x10/0x10 [ 442.003851][T12073] ? __kmalloc_node_noprof+0xb7/0x440 [ 442.009241][T12073] ? __pfx___might_resched+0x10/0x10 [ 442.014640][T12073] should_fail_ex+0x3b0/0x4e0 [ 442.019361][T12073] should_failslab+0xac/0x100 [ 442.024057][T12073] __kmalloc_node_noprof+0xdf/0x440 [ 442.029272][T12073] ? __kvmalloc_node_noprof+0x72/0x190 [ 442.034750][T12073] __kvmalloc_node_noprof+0x72/0x190 [ 442.040048][T12073] __kvm_mmu_topup_memory_cache+0x4d9/0x6b0 [ 442.045956][T12073] ? __lock_acquire+0x1384/0x2050 [ 442.051004][T12073] kvm_mmu_load+0x115/0x26e0 [ 442.055618][T12073] ? pfn_valid+0xf6/0x450 [ 442.059962][T12073] ? __pfx_kvm_mmu_load+0x10/0x10 [ 442.065000][T12073] ? vmx_set_apic_access_page_addr+0x58a/0x7c0 [ 442.071168][T12073] ? pfn_valid+0xf6/0x450 [ 442.075512][T12073] ? kvm_lapic_sync_to_vapic+0x2e6/0xbb0 [ 442.081185][T12073] ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10 [ 442.087190][T12073] ? vmx_update_cr8_intercept+0x14d/0x340 [ 442.092921][T12073] vcpu_run+0x5bbc/0x8900 [ 442.097264][T12073] ? mark_lock+0x9a/0x360 [ 442.101668][T12073] ? __pfx_vcpu_run+0x10/0x10 [ 442.106362][T12073] ? __local_bh_enable_ip+0x168/0x200 [ 442.111754][T12073] ? lockdep_hardirqs_on+0x99/0x150 [ 442.116974][T12073] ? __pfx_lock_acquire+0x10/0x10 [ 442.122015][T12073] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 442.127314][T12073] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 442.133051][T12073] ? xfd_validate_state+0x6e/0x150 [ 442.138183][T12073] ? rcu_is_watching+0x15/0xb0 [ 442.142971][T12073] ? rcu_is_watching+0x15/0xb0 [ 442.147752][T12073] kvm_arch_vcpu_ioctl_run+0xa73/0x19d0 [ 442.153317][T12073] ? mark_lock+0x9a/0x360 [ 442.157666][T12073] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x19d0 [ 442.163403][T12073] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 442.169416][T12073] ? __pfx_lock_acquire+0x10/0x10 [ 442.174461][T12073] ? get_task_pid+0x23/0x310 [ 442.179061][T12073] ? __pfx_lock_release+0x10/0x10 [ 442.184102][T12073] ? kvm_vcpu_ioctl+0x1da/0xea0 [ 442.188980][T12073] ? get_task_pid+0x23/0x310 [ 442.193603][T12073] kvm_vcpu_ioctl+0x91a/0xea0 [ 442.198300][T12073] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 442.203544][T12073] ? tomoyo_path_number_perm+0x208/0x880 [ 442.209186][T12073] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.215206][T12073] ? __pfx_lock_acquire+0x10/0x10 [ 442.220272][T12073] kvm_vcpu_compat_ioctl+0x23f/0x450 [ 442.225580][T12073] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 442.231401][T12073] ? __fget_files+0x3f3/0x470 [ 442.236107][T12073] __se_compat_sys_ioctl+0x510/0xc90 [ 442.241403][T12073] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 442.247232][T12073] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 442.253241][T12073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.259611][T12073] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 442.266231][T12073] ? lockdep_hardirqs_on+0x99/0x150 [ 442.271452][T12073] __do_fast_syscall_32+0xb4/0x110 [ 442.276596][T12073] ? exc_page_fault+0x590/0x8c0 [ 442.281478][T12073] do_fast_syscall_32+0x34/0x80 [ 442.286340][T12073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.292682][T12073] RIP: 0023:0xf741d579 [ 442.296758][T12073] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 442.316373][T12073] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 442.324817][T12073] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 442.332799][T12073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.340793][T12073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.348777][T12073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 442.356756][T12073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.364769][T12073] [ 442.367936][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.379381][ T936] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 442.387852][ T5231] Bluetooth: hci2: command tx timeout [ 442.419337][ T936] usb 5-1: device descriptor read/8, error -71 [ 442.577711][ T5247] usb 3-1: Using ep0 maxpacket: 8 [ 442.602572][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 442.612608][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 442.650034][ T5247] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ea.7a [ 442.659821][ T5247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.668343][ T5247] usb 3-1: Product: syz [ 442.672899][ T5247] usb 3-1: Manufacturer: syz [ 442.673691][ T936] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 442.677542][ T5247] usb 3-1: SerialNumber: syz [ 442.698740][ T5247] usb 3-1: config 0 descriptor?? [ 442.704358][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.714288][ T936] usb 5-1: device descriptor read/8, error -71 [ 442.720523][ T5247] HFC-S_USB 3-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 442.731780][ T6548] bond_slave_0: left promiscuous mode [ 442.737417][ T6548] bond_slave_0: left allmulticast mode [ 442.756622][ T6548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.773165][ T6548] bond_slave_1: left promiscuous mode [ 442.778721][ T6548] bond_slave_1: left allmulticast mode [ 442.786502][ T6548] bond0 (unregistering): Released all slaves [ 442.824658][ T936] usb usb5-port1: unable to enumerate USB device [ 442.853575][ T6226] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 443.002055][ T6226] usb 4-1: device descriptor read/64, error -71 [ 443.007552][T12069] program syz.2.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.025729][T12061] chnl_net:caif_netlink_parms(): no params data found [ 443.037395][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 443.037415][ T29] audit: type=1326 audit(1728460340.296:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.2.1384" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 443.204945][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.215635][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.230294][T12061] bridge_slave_0: entered allmulticast mode [ 443.240692][T12061] bridge_slave_0: entered promiscuous mode [ 443.253809][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.261014][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.268526][ T6226] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 443.268922][T12061] bridge_slave_1: entered allmulticast mode [ 443.283971][T12061] bridge_slave_1: entered promiscuous mode [ 443.367252][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.412587][ T6226] usb 4-1: device descriptor read/64, error -71 [ 443.420414][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.512076][T12061] team0: Port device team_slave_0 added [ 443.521103][T12061] team0: Port device team_slave_1 added [ 443.529050][ T6226] usb usb4-port1: attempt power cycle [ 443.541695][ T4624] Bluetooth: hci0: command tx timeout [ 443.577939][ T6548] hsr_slave_0: left promiscuous mode [ 443.587888][ T6548] hsr_slave_1: left promiscuous mode [ 443.594623][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.602348][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.610376][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.618806][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.627067][ T6548] batman_adv: batadv0: Removing interface: ipvlan1 [ 443.707828][ T6548] veth1_macvtap: left promiscuous mode [ 443.714757][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.740052][ T6548] veth0_macvtap: left promiscuous mode [ 443.746245][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.747528][ T6548] veth1_vlan: left promiscuous mode [ 443.759536][ T6548] veth0_vlan: left promiscuous mode [ 443.872174][ T6226] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 443.893644][ T6226] usb 4-1: device descriptor read/8, error -71 [ 444.142104][ T6226] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 444.184126][ T6226] usb 4-1: device descriptor read/8, error -71 [ 444.304203][ T6226] usb usb4-port1: unable to enumerate USB device [ 444.459369][ T6548] team0 (unregistering): Port device team_slave_1 removed [ 444.510020][ T6548] team0 (unregistering): Port device team_slave_0 removed [ 445.043955][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.051276][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.080922][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.154535][ T5247] usb 3-1: USB disconnect, device number 68 [ 445.177806][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.191178][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.221426][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.457748][T12061] hsr_slave_0: entered promiscuous mode [ 445.467234][T12061] hsr_slave_1: entered promiscuous mode [ 445.480984][T12061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.497070][T12061] Cannot create hsr debugfs directory [ 445.612074][ T4624] Bluetooth: hci0: command tx timeout [ 446.056446][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.200058][T12117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.212211][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.223778][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.257555][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.264952][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.287165][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.298473][T12128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1395'. [ 446.308312][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.326387][T12124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.339052][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 446.358618][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.380059][T12124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 446.406352][T12124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.618372][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 446.634620][ T6548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.764168][T12136] netlink: 'syz.2.1397': attribute type 10 has an invalid length. [ 446.889332][ T6548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.037100][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 447.202652][ T6548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.427361][ T6548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.427806][T12170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1405'. [ 447.691625][ T5231] Bluetooth: hci0: command tx timeout [ 447.750344][T12180] FAULT_INJECTION: forcing a failure. [ 447.750344][T12180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.752338][T12061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.769428][T12180] CPU: 1 UID: 0 PID: 12180 Comm: syz.3.1407 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 447.781517][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 447.791607][T12180] Call Trace: [ 447.794907][T12180] [ 447.797846][T12180] dump_stack_lvl+0x241/0x360 [ 447.802554][T12180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.807767][T12180] ? __pfx__printk+0x10/0x10 [ 447.812378][T12180] ? __pfx_lock_release+0x10/0x10 [ 447.817425][T12180] should_fail_ex+0x3b0/0x4e0 [ 447.822132][T12180] _copy_from_iter+0x1ed/0x1d60 [ 447.827015][T12180] ? __virt_addr_valid+0x183/0x530 [ 447.832191][T12180] ? __pfx_lock_release+0x10/0x10 [ 447.837267][T12180] ? __alloc_skb+0x28f/0x440 [ 447.841879][T12180] ? __pfx__copy_from_iter+0x10/0x10 [ 447.847192][T12180] ? __virt_addr_valid+0x183/0x530 [ 447.852323][T12180] ? __virt_addr_valid+0x183/0x530 [ 447.857463][T12180] ? __virt_addr_valid+0x45f/0x530 [ 447.862603][T12180] ? __check_object_size+0x48e/0x900 [ 447.867907][T12180] netlink_sendmsg+0x73d/0xcb0 [ 447.872685][T12180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.877979][T12180] ? __pfx_lock_release+0x10/0x10 [ 447.883023][T12180] ? aa_sock_msg_perm+0x91/0x160 [ 447.887973][T12180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.893271][T12180] __sock_sendmsg+0x221/0x270 [ 447.897966][T12180] ____sys_sendmsg+0x52a/0x7e0 [ 447.902745][T12180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.908047][T12180] __sys_sendmsg+0x292/0x380 [ 447.912663][T12180] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.917785][T12180] ? __pfx_vfs_write+0x10/0x10 [ 447.922569][T12180] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 447.929183][T12180] ? lockdep_hardirqs_on+0x99/0x150 [ 447.934417][T12180] __do_fast_syscall_32+0xb4/0x110 [ 447.939559][T12180] ? exc_page_fault+0x590/0x8c0 [ 447.944443][T12180] do_fast_syscall_32+0x34/0x80 [ 447.949331][T12180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.955689][T12180] RIP: 0023:0xf741d579 [ 447.959809][T12180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 447.979444][T12180] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 447.987906][T12180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 447.995893][T12180] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.003881][T12180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.011891][T12180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.019895][T12180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.027898][T12180] [ 448.035755][ T5285] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 448.048998][T12130] chnl_net:caif_netlink_parms(): no params data found [ 448.109848][T12061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.127589][T12061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.167178][T12061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.206822][ T5285] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 448.227070][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.243952][T12131] chnl_net:caif_netlink_parms(): no params data found [ 448.251721][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.283639][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.300441][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.322245][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.345042][ T6548] bridge_slave_1: left allmulticast mode [ 448.351050][ T6548] bridge_slave_1: left promiscuous mode [ 448.351845][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.358566][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.375320][ T6548] bridge_slave_0: left allmulticast mode [ 448.381023][ T6548] bridge_slave_0: left promiscuous mode [ 448.389401][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.390191][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.407875][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.441380][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.461004][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.477984][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.505801][ T5231] Bluetooth: hci3: command tx timeout [ 448.505811][T12124] Bluetooth: hci1: command tx timeout [ 448.525030][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.534097][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.555189][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.566296][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.576429][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.585670][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.599585][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.608142][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.617405][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.628997][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.637128][ T5285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.646498][ T5285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.658826][ T5285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.667749][ T5285] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 448.677062][ T5285] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 448.685598][ T5285] usb 3-1: Product: syz [ 448.690264][ T5285] usb 3-1: Manufacturer: syz [ 448.701539][ T5285] usb 3-1: SerialNumber: syz [ 448.710649][ T5285] usb 3-1: config 0 descriptor?? [ 448.730602][ T5285] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 449.183890][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.196654][ T6548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.210217][ T6548] bond0 (unregistering): Released all slaves [ 449.232091][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 449.258121][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.265949][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.281984][T12130] bridge_slave_0: entered allmulticast mode [ 449.301243][T12130] bridge_slave_0: entered promiscuous mode [ 449.439234][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.470443][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.493222][T12130] bridge_slave_1: entered allmulticast mode [ 449.528536][T12130] bridge_slave_1: entered promiscuous mode [ 449.664920][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.674861][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.688911][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.700702][T12131] bridge_slave_0: entered allmulticast mode [ 449.717182][T12131] bridge_slave_0: entered promiscuous mode [ 449.782058][ T5231] Bluetooth: hci0: command tx timeout [ 449.819007][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.836786][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.848499][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.877567][T12131] bridge_slave_1: entered allmulticast mode [ 449.899871][T12131] bridge_slave_1: entered promiscuous mode [ 449.976183][ T5286] usb 3-1: USB disconnect, device number 69 [ 449.997331][ T5286] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 450.036565][T12131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.096475][T12130] team0: Port device team_slave_0 added [ 450.154709][T12131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.210272][T12130] team0: Port device team_slave_1 added [ 450.220033][T12211] batadv0: entered promiscuous mode [ 450.341408][ T6548] hsr_slave_0: left promiscuous mode [ 450.352485][ T6548] hsr_slave_1: left promiscuous mode [ 450.358879][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.367451][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.382813][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.390394][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.438208][ T6548] veth1_macvtap: left promiscuous mode [ 450.445050][ T6548] veth0_macvtap: left promiscuous mode [ 450.450993][ T6548] veth1_vlan: left promiscuous mode [ 450.456686][ T6548] veth0_vlan: left promiscuous mode [ 450.572325][ T5231] Bluetooth: hci3: command tx timeout [ 450.572828][T12124] Bluetooth: hci1: command tx timeout [ 450.591865][ T5285] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 450.747525][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.766570][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.811202][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.830918][ T5285] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 450.857596][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.916988][ T5285] usb 4-1: config 0 descriptor?? [ 451.084495][T12224] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1421'. [ 451.104955][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'. [ 451.689201][ T6548] team0 (unregistering): Port device team_slave_1 removed [ 451.749308][ T6548] team0 (unregistering): Port device team_slave_0 removed [ 452.461901][T12131] team0: Port device team_slave_0 added [ 452.534860][T12131] team0: Port device team_slave_1 added [ 452.543720][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.551855][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.579187][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.593843][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.600838][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.637435][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.652111][T12124] Bluetooth: hci1: command tx timeout [ 452.658797][ T5231] Bluetooth: hci3: command tx timeout [ 452.750292][ T5285] usbhid 4-1:0.0: can't add hid device: -71 [ 452.757051][ T5285] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 452.770938][ T5285] usb 4-1: USB disconnect, device number 83 [ 452.802787][T12131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.809778][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.872560][T12131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.926527][T12131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.942277][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.999941][T12131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.152949][T12131] hsr_slave_0: entered promiscuous mode [ 453.159776][T12131] hsr_slave_1: entered promiscuous mode [ 453.174065][T12131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.191266][T12131] Cannot create hsr debugfs directory [ 453.262770][T12061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.292461][T12130] hsr_slave_0: entered promiscuous mode [ 453.299891][T12130] hsr_slave_1: entered promiscuous mode [ 453.327064][T12130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.334791][T12130] Cannot create hsr debugfs directory [ 453.466182][T12061] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.493221][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.500395][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.573663][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.580827][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.834300][T12263] openvswitch: netlink: Message has 8 unknown bytes. [ 454.112485][ T5305] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 454.186445][T12131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.261193][T12061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.292826][ T5305] usb 3-1: Using ep0 maxpacket: 32 [ 454.306993][ T5305] usb 3-1: config 1 interface 0 altsetting 241 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.325699][ T5305] usb 3-1: config 1 interface 0 altsetting 241 bulk endpoint 0x82 has invalid maxpacket 1024 [ 454.338159][ T5305] usb 3-1: config 1 interface 0 altsetting 241 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.352646][ T5305] usb 3-1: config 1 interface 0 has no altsetting 0 [ 454.362546][ T5305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.365274][T12131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.373005][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.397285][ T5305] usb 3-1: Product: syz [ 454.403392][ T5305] usb 3-1: Manufacturer: ⊶é²åžëž¯ä¤¤ì¹†ï®å§¹é²—ä®ï§§æ’ìž· [ 454.429072][ T5305] usb 3-1: SerialNumber: syz [ 454.452787][T12263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.469734][T12263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.523002][T12131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.545284][T12061] veth0_vlan: entered promiscuous mode [ 454.566493][T12061] veth1_vlan: entered promiscuous mode [ 454.712441][T12061] veth0_macvtap: entered promiscuous mode [ 454.733271][ T5231] Bluetooth: hci1: command tx timeout [ 454.733290][T12124] Bluetooth: hci3: command tx timeout [ 454.770695][T12061] veth1_macvtap: entered promiscuous mode [ 454.890335][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.908486][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.938419][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.949287][T12292] binder: 12260:12292 ioctl 4028af11 20000140 returned -22 [ 454.949984][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.987325][T12061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.020531][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.048579][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.067290][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.078321][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.102854][T12061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.190063][T12131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.210200][T12131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.222112][ T936] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 455.244884][T12061] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.264169][T12061] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.281513][T12061] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.290277][T12061] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.317979][T12131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.329964][T12131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.372650][ T936] usb 4-1: Using ep0 maxpacket: 8 [ 455.389871][ T936] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 455.414324][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.428115][ T936] usb 4-1: config 0 descriptor?? [ 455.630121][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.649041][ T936] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 455.659107][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.679624][ T936] asix 4-1:0.0: probe with driver asix failed with error -32 [ 455.780453][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.808767][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.841637][T12131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.957002][T12131] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.967296][T12130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 455.978818][T12130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 455.994692][T12130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.006101][T12130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.030846][ T5281] usb 4-1: USB disconnect, device number 84 [ 456.096054][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.103291][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.139318][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.146527][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.367010][T12130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.417388][T12130] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.451415][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.458665][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.506155][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.513485][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.563537][T12131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.714956][T12131] veth0_vlan: entered promiscuous mode [ 456.739204][T12131] veth1_vlan: entered promiscuous mode [ 456.776754][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.812988][ T5305] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 456.847291][T12131] veth0_macvtap: entered promiscuous mode [ 456.863627][T12131] veth1_macvtap: entered promiscuous mode [ 456.868222][ T5305] usb 3-1: USB disconnect, device number 70 [ 456.942613][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.959343][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.970711][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.985672][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.995796][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.006741][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.025237][T12131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.042834][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.057342][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.067878][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.078522][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.089189][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.106988][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.118614][T12131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.130544][T12130] veth0_vlan: entered promiscuous mode [ 457.153156][T12131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.162882][T12131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.173991][T12131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.183567][T12131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.201008][T12130] veth1_vlan: entered promiscuous mode [ 457.326487][T12130] veth0_macvtap: entered promiscuous mode [ 457.332393][ T5305] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 457.351257][T12130] veth1_macvtap: entered promiscuous mode [ 457.383375][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.409135][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.439767][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.445125][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.458529][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.458594][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.475911][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.486523][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.496789][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.504167][ T5305] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 457.517800][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.526629][ T5305] usb 3-1: config 0 has no interface number 0 [ 457.527803][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.545083][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.556912][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.571591][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.573236][ T5305] usb 3-1: config 0 interface 6 has no altsetting 0 [ 457.582160][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.582191][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.582213][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.582232][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.582250][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.582271][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.582288][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.583919][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.610388][ T5305] usb 3-1: New USB device found, idVendor=0403, idProduct=da74, bcdDevice=3a.4c [ 457.610426][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.624392][T12130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.686732][ T5305] usb 3-1: config 0 descriptor?? [ 457.702866][T12130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.712453][T12130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.721188][T12130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.916954][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.948702][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.980674][T12323] binder: 12322:12323 ioctl c0306201 20000240 returned -22 [ 457.995197][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.003359][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.157651][T12327] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 458.541701][ T6226] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 458.705188][ T6226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.716828][ T6226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.727869][ T6226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.742063][ T6226] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 458.751785][ T6226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.763917][ T6226] usb 5-1: config 0 descriptor?? [ 459.283437][ T6226] usbhid 5-1:0.0: can't add hid device: -71 [ 459.289596][ T6226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 459.326802][ T6226] usb 5-1: USB disconnect, device number 82 [ 459.686746][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.836879][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.861854][ T5285] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 460.013109][ T5305] usb 3-1: string descriptor 0 read error: -71 [ 460.024465][ T5285] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 460.034121][ T5305] usb 3-1: NDI device with a latency value of 1 [ 460.044700][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.052729][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.058378][ T5305] ftdi_sio 3-1:0.6: FTDI USB Serial Device converter detected [ 460.080056][ T5305] ftdi_sio ttyUSB0: unknown device type: 0x3a4c [ 460.102679][ T5285] usb 4-1: config 0 descriptor?? [ 460.120538][ T5285] cp210x 4-1:0.0: cp210x converter detected [ 460.152706][ T5305] usb 3-1: USB disconnect, device number 71 [ 460.165106][ T5305] ftdi_sio 3-1:0.6: device disconnected [ 460.181182][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.200447][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.216810][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.229878][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.247297][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.256069][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 460.269200][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.459226][ T80] bridge_slave_1: left allmulticast mode [ 460.467102][ T80] bridge_slave_1: left promiscuous mode [ 460.473491][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.484261][ T80] bridge_slave_0: left allmulticast mode [ 460.489969][ T80] bridge_slave_0: left promiscuous mode [ 460.498119][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.582818][ T5305] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 460.762046][ T5305] usb 3-1: Using ep0 maxpacket: 16 [ 460.769534][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.798628][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.809085][ T5305] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 460.822501][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.850658][ T5305] usb 3-1: config 0 descriptor?? [ 461.158177][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.175004][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.189357][ T80] bond0 (unregistering): Released all slaves [ 461.216174][T12335] netlink: 'syz.3.1435': attribute type 5 has an invalid length. [ 461.240907][ T5285] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 461.248783][ T5285] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 461.268467][ T5285] usb 4-1: cp210x converter now attached to ttyUSB0 [ 461.303294][ T5285] usb 4-1: USB disconnect, device number 85 [ 461.328728][ T5285] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 461.337178][ T5285] cp210x 4-1:0.0: device disconnected [ 461.362678][ T5305] usb 3-1: string descriptor 0 read error: -71 [ 461.401191][T12355] FAULT_INJECTION: forcing a failure. [ 461.401191][T12355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.410867][ T5305] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 461.417697][T12355] CPU: 1 UID: 0 PID: 12355 Comm: syz.2.1443 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 461.432670][ T5305] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -32 [ 461.433954][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.453359][T12355] Call Trace: [ 461.456663][T12355] [ 461.459633][T12355] dump_stack_lvl+0x241/0x360 [ 461.464354][T12355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.469593][T12355] ? __pfx__printk+0x10/0x10 [ 461.469779][ T5305] usb 3-1: USB disconnect, device number 72 [ 461.474216][T12355] ? __pfx_lock_release+0x10/0x10 [ 461.474257][T12355] ? __lock_acquire+0x1384/0x2050 [ 461.474300][T12355] should_fail_ex+0x3b0/0x4e0 [ 461.474342][T12355] _copy_from_user+0x2f/0xe0 [ 461.474377][T12355] kstrtouint_from_user+0xc6/0x190 [ 461.474407][T12355] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 461.474438][T12355] ? __pfx_lock_acquire+0x10/0x10 [ 461.474485][T12355] proc_fail_nth_write+0xaa/0x2d0 [ 461.474523][T12355] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 461.474554][T12355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 461.474597][T12355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 461.474637][T12355] vfs_write+0x29c/0xc90 [ 461.474671][T12355] ? __pfx_vfs_write+0x10/0x10 [ 461.474701][T12355] ? __fget_files+0x3f3/0x470 [ 461.474750][T12355] ? fdget_pos+0x24e/0x320 [ 461.474780][T12355] ksys_write+0x183/0x2b0 [ 461.474805][T12355] ? __pfx_ksys_write+0x10/0x10 [ 461.474830][T12355] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 461.571790][T12355] ? lockdep_hardirqs_on+0x99/0x150 [ 461.577033][T12355] __do_fast_syscall_32+0xb4/0x110 [ 461.582164][T12355] ? exc_page_fault+0x590/0x8c0 [ 461.587048][T12355] do_fast_syscall_32+0x34/0x80 [ 461.591919][T12355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.598273][T12355] RIP: 0023:0xf7f42579 [ 461.602369][T12355] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 461.622014][T12355] RSP: 002b:00000000f56c65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 461.630458][T12355] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56c6620 [ 461.638440][T12355] RDX: 0000000000000001 RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 461.646435][T12355] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 461.654419][T12355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 461.662403][T12355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.670394][T12355] [ 461.744376][T12357] netlink: 'syz.2.1444': attribute type 6 has an invalid length. [ 461.852915][T12357] veth0_vlan: left promiscuous mode [ 461.870331][T12357] veth0_vlan: entered promiscuous mode [ 461.993174][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 462.332133][T12124] Bluetooth: hci0: command tx timeout [ 462.366828][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.378232][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.389159][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.397951][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.408016][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 462.433368][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.744913][T12349] chnl_net:caif_netlink_parms(): no params data found [ 462.837633][ T80] hsr_slave_0: left promiscuous mode [ 462.845028][ T80] hsr_slave_1: left promiscuous mode [ 462.851027][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.859086][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.869327][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.877239][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.901402][ T80] veth1_macvtap: left promiscuous mode [ 462.907173][ T80] veth0_macvtap: left promiscuous mode [ 462.913036][ T80] veth1_vlan: left promiscuous mode [ 462.918385][ T80] veth0_vlan: left promiscuous mode [ 463.196325][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.204636][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.213761][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.221300][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.228935][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.237912][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.247821][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.257829][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.259474][ T5285] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 463.267130][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.288673][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.310287][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.325943][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.339113][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.363248][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.370770][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.385955][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.410076][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.418303][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.426724][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.437160][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.445350][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.445662][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.461573][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.465355][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.482906][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.490441][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.494008][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.499074][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.520833][ T5281] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 463.540069][ T5285] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 463.544662][ T5281] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 463.552624][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.580634][ T5285] usb 4-1: config 0 descriptor?? [ 463.842286][ T80] team0 (unregistering): Port device team_slave_1 removed [ 463.892639][T12397] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 463.916866][ T80] team0 (unregistering): Port device team_slave_0 removed [ 464.423441][ T5231] Bluetooth: hci0: command tx timeout [ 464.495019][ T5231] Bluetooth: hci3: command tx timeout [ 464.789544][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.797651][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.805572][T12349] bridge_slave_0: entered allmulticast mode [ 464.822063][ T5286] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 464.823497][T12349] bridge_slave_0: entered promiscuous mode [ 464.847860][T12349] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.855961][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.883218][T12349] bridge_slave_1: entered allmulticast mode [ 464.899288][ T5285] usbhid 4-1:0.0: can't add hid device: -71 [ 464.903895][T12349] bridge_slave_1: entered promiscuous mode [ 464.929575][ T5285] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 464.948699][ T5285] usb 4-1: USB disconnect, device number 86 [ 464.993935][T12374] chnl_net:caif_netlink_parms(): no params data found [ 465.013987][ T5286] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 465.038666][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.041589][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.068656][ T5286] usb 3-1: config 0 descriptor?? [ 465.093669][ T5286] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 465.119530][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.265397][T12374] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.273850][T12374] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.283641][T12374] bridge_slave_0: entered allmulticast mode [ 465.290847][T12374] bridge_slave_0: entered promiscuous mode [ 465.306333][T12349] team0: Port device team_slave_0 added [ 465.325307][T12374] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.341843][T12374] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.354551][T12374] bridge_slave_1: entered allmulticast mode [ 465.363251][T12374] bridge_slave_1: entered promiscuous mode [ 465.385257][T12349] team0: Port device team_slave_1 added [ 465.519045][T12349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.550761][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.602065][T12349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.627929][T12374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.641369][T12374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.652264][T12349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.659291][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.690270][T12349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.746139][ T80] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.821838][ T5285] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 465.894460][ T80] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.917656][T12374] team0: Port device team_slave_0 added [ 465.950298][T12374] team0: Port device team_slave_1 added [ 465.979746][ T80] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.992053][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 466.004724][ T5285] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 466.019342][T12349] hsr_slave_0: entered promiscuous mode [ 466.021101][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.041804][ T5285] usb 4-1: config 0 has no interface number 0 [ 466.049620][ T5285] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.063464][T12349] hsr_slave_1: entered promiscuous mode [ 466.075730][ T5285] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 466.086788][T12349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.093767][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 466.105261][ T5285] usb 4-1: Product: syz [ 466.110003][ T5285] usb 4-1: SerialNumber: syz [ 466.115778][T12349] Cannot create hsr debugfs directory [ 466.124906][ T5285] usb 4-1: config 0 descriptor?? [ 466.142460][ T5285] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 466.214705][ T80] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.243391][T12374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.250735][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.280697][T12374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.316592][ T5286] gspca_cpia1: usb_control_msg 03, error -71 [ 466.329636][ T5286] gspca_cpia1: usb_control_msg 04, error -71 [ 466.350138][ T5286] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 466.352825][T12374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.377850][ T5286] usb 3-1: USB disconnect, device number 73 [ 466.398719][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.463049][T12374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.502508][ T5231] Bluetooth: hci0: command tx timeout [ 466.573013][ T5231] Bluetooth: hci3: command tx timeout [ 466.580416][T12437] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551608) [ 466.592682][T12437] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 466.764483][T12374] hsr_slave_0: entered promiscuous mode [ 466.793922][T12374] hsr_slave_1: entered promiscuous mode [ 466.814855][T12374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.848294][T12374] Cannot create hsr debugfs directory [ 467.039716][ T80] bridge_slave_1: left allmulticast mode [ 467.050388][ T80] bridge_slave_1: left promiscuous mode [ 467.063971][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.090258][ T80] bridge_slave_0: left allmulticast mode [ 467.109508][ T80] bridge_slave_0: left promiscuous mode [ 467.135844][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.656818][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.669073][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.684962][ T80] bond0 (unregistering): Released all slaves [ 467.700567][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1463'. [ 467.886408][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1465'. [ 467.904879][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1465'. [ 468.442495][ T80] hsr_slave_0: left promiscuous mode [ 468.482962][ T80] hsr_slave_1: left promiscuous mode [ 468.504476][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.520351][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.550484][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.582288][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.592273][ T5231] Bluetooth: hci0: command tx timeout [ 468.651657][ T5231] Bluetooth: hci3: command tx timeout [ 468.690812][ T80] veth1_macvtap: left promiscuous mode [ 468.717197][ T80] veth0_macvtap: left promiscuous mode [ 468.777451][ T80] veth1_vlan: left promiscuous mode [ 468.806697][ T80] veth0_vlan: left promiscuous mode [ 468.873983][ T5285] usb 4-1: USB disconnect, device number 87 [ 469.141978][ T5286] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 469.331709][ T5285] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 469.341337][ T5286] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 469.358188][ T5286] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 469.388687][ T5286] usb 3-1: config 0 has no interface number 0 [ 469.416923][ T5286] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 469.431083][ T5286] usb 3-1: config 0 interface 128 altsetting 6 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 469.471716][ T5286] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x8E has invalid maxpacket 65535, setting to 64 [ 469.495643][ T5286] usb 3-1: config 0 interface 128 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 469.511615][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 469.525513][ T5286] usb 3-1: config 0 interface 128 has no altsetting 0 [ 469.549362][ T5285] usb 4-1: config 0 has no interfaces? [ 469.566329][ T5285] usb 4-1: New USB device found, idVendor=0ccd, idProduct=1039, bcdDevice=a6.13 [ 469.580064][ T5286] usb 3-1: New USB device found, idVendor=fdc5, idProduct=819a, bcdDevice=95.91 [ 469.591523][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.599606][ T5286] usb 3-1: Product: syz [ 469.610708][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.620162][ T5286] usb 3-1: Manufacturer: syz [ 469.641045][ T5286] usb 3-1: SerialNumber: syz [ 469.651867][ T5285] usb 4-1: Product: syz [ 469.660116][ T5285] usb 4-1: Manufacturer: syz [ 469.667697][ T5286] usb 3-1: config 0 descriptor?? [ 469.701081][ T5285] usb 4-1: SerialNumber: syz [ 469.707252][T12487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.737442][ T5285] usb 4-1: config 0 descriptor?? [ 470.000989][ T5285] usb 4-1: USB disconnect, device number 88 [ 470.564232][ T80] team0 (unregistering): Port device team_slave_1 removed [ 470.633443][ T80] team0 (unregistering): Port device team_slave_0 removed [ 470.734954][ T5231] Bluetooth: hci3: command tx timeout [ 471.363064][T12495] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 472.346426][T12349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.362342][ T5285] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 472.374713][T12349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.450115][T12349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.484029][T12349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.541987][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 472.556052][ T5285] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.577109][ T5285] usb 4-1: config 0 has no interface number 0 [ 472.592330][ T5285] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.604212][ T5285] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 472.613381][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.661170][ T5285] usb 4-1: config 0 descriptor?? [ 472.691853][ T5285] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 472.903929][ T5286] usb 3-1: USB disconnect, device number 74 [ 472.949711][T12349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.980234][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.039246][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.057607][T12349] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.128322][T12505] macvlan2: entered allmulticast mode [ 473.159581][T12505] mac80211_hwsim hwsim106 wlan0: entered promiscuous mode [ 473.179411][T12505] mac80211_hwsim hwsim106 wlan0: entered allmulticast mode [ 473.215975][T12505] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 473.277150][T12507] bond0: entered promiscuous mode [ 473.291178][T12507] bond_slave_0: entered promiscuous mode [ 473.298883][T12507] bond_slave_1: entered promiscuous mode [ 473.313918][T12507] macvlan2: entered promiscuous mode [ 473.350268][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.357561][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.370299][ T5305] usb 4-1: USB disconnect, device number 89 [ 473.371721][ T5286] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 473.389932][ T5305] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 473.414319][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.421555][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.434485][T12374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.497568][T12374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.515826][T12374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.560391][T12374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.601617][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 473.610993][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.633072][T12349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.655688][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.683174][ T5286] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 473.709494][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.753765][ T5286] usb 3-1: config 0 descriptor?? [ 473.765482][T12349] veth0_vlan: entered promiscuous mode [ 473.832883][T12349] veth1_vlan: entered promiscuous mode [ 473.883711][T12374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.971350][T12374] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.998931][ T5286] elecom 0003:056E:00E6.0015: item fetching failed at offset 0/2 [ 474.032403][ T5286] elecom 0003:056E:00E6.0015: probe with driver elecom failed with error -22 [ 474.037263][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.048482][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.108184][T12349] veth0_macvtap: entered promiscuous mode [ 474.133584][T12349] veth1_macvtap: entered promiscuous mode [ 474.147245][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.154585][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.201824][ T5285] usb 3-1: USB disconnect, device number 75 [ 474.238832][T12526] macvlan3: entered allmulticast mode [ 474.248518][T12526] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 474.331355][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.345245][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.357580][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.384631][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.402771][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.417081][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.438803][T12349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.497235][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.527873][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.556959][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.576117][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.599453][T12349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.615824][T12349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.643243][T12349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.697634][T12349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.707617][T12349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.727899][T12349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.751665][T12349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.816959][T12374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.994068][ T6546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.016079][T12374] veth0_vlan: entered promiscuous mode [ 475.033382][ T6546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.049317][T12374] veth1_vlan: entered promiscuous mode [ 475.080803][T12374] veth0_macvtap: entered promiscuous mode [ 475.082184][ T5283] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 475.090431][T12374] veth1_macvtap: entered promiscuous mode [ 475.110794][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.121607][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.132194][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.142806][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.153426][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.163951][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.173868][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.184422][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.195893][T12374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.209180][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.220244][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.230418][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.241025][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.250939][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.261600][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.271572][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.282182][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.293772][T12374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.326887][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.334188][T12374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.355961][T12374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.372218][T12374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.372925][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.380954][T12374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.449062][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.469351][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.494486][ T5283] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 475.502456][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.565911][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.584888][ T5283] usb 4-1: config 0 descriptor?? [ 475.752444][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.778562][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.892122][ T6546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.900554][ T6546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.011826][ T5285] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 476.189326][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 476.206753][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.229846][ T5283] usbhid 4-1:0.0: can't add hid device: -71 [ 476.232252][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.254523][ T5283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 476.268290][ T5285] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.288067][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.293722][ T5283] usb 4-1: USB disconnect, device number 90 [ 476.321927][ T936] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 476.340372][ T5285] usb 2-1: config 0 descriptor?? [ 476.496657][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.519768][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.548911][ T936] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 476.589362][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.614290][ T936] usb 5-1: config 0 descriptor?? [ 476.878185][ T5285] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input56 [ 476.961848][ T5285] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 477.237085][T12562] FAULT_INJECTION: forcing a failure. [ 477.237085][T12562] name failslab, interval 1, probability 0, space 0, times 0 [ 477.251659][T12562] CPU: 1 UID: 0 PID: 12562 Comm: syz.4.1446 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 477.262517][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 477.272618][T12562] Call Trace: [ 477.275935][T12562] [ 477.278899][T12562] dump_stack_lvl+0x241/0x360 [ 477.283680][T12562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.288932][T12562] ? __pfx__printk+0x10/0x10 [ 477.293594][T12562] ? __kmalloc_node_noprof+0xb7/0x440 [ 477.299026][T12562] ? __pfx___might_resched+0x10/0x10 [ 477.304369][T12562] should_fail_ex+0x3b0/0x4e0 [ 477.309104][T12562] should_failslab+0xac/0x100 [ 477.313836][T12562] __kmalloc_node_noprof+0xdf/0x440 [ 477.319101][T12562] ? __kvmalloc_node_noprof+0x72/0x190 [ 477.324607][T12562] ? __nf_register_net_hook+0x1ef/0x8d0 [ 477.330198][T12562] ? __pfx___mutex_trylock_common+0x10/0x10 [ 477.336146][T12562] __kvmalloc_node_noprof+0x72/0x190 [ 477.341478][T12562] nf_hook_entries_grow+0x288/0x720 [ 477.346763][T12562] __nf_register_net_hook+0x278/0x8d0 [ 477.352208][T12562] nf_register_net_hook+0xb0/0x190 [ 477.357383][T12562] nf_register_net_hooks+0x41/0x1a0 [ 477.362632][T12562] nf_defrag_ipv4_enable+0x85/0x110 [ 477.367876][T12562] socket_mt_v3_check+0x93/0x1e0 [ 477.372871][T12562] xt_check_match+0x368/0xa40 [ 477.377690][T12562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.383721][T12562] ? __pfx_xt_check_match+0x10/0x10 [ 477.388981][T12562] ? xt_find_match+0x1d3/0x210 [ 477.393808][T12562] translate_table+0x15c5/0x2260 [ 477.398848][T12562] ? __pfx_translate_table+0x10/0x10 [ 477.404195][T12562] ? __mutex_unlock_slowpath+0x21d/0x750 [ 477.409887][T12562] ? translate_compat_table+0x1ff3/0x2e00 [ 477.415667][T12562] translate_compat_table+0x22d6/0x2e00 [ 477.421293][T12562] ? __pfx_translate_compat_table+0x10/0x10 [ 477.427258][T12562] ? __might_fault+0xc6/0x120 [ 477.431997][T12562] ? _copy_from_user+0xa6/0xe0 [ 477.436809][T12562] ? copy_from_sockptr_offset+0x6b/0xb0 [ 477.442469][T12562] do_ipt_set_ctl+0xc23/0x1250 [ 477.447295][T12562] ? __pfx___might_resched+0x10/0x10 [ 477.452633][T12562] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 477.457883][T12562] ? __pfx_lock_release+0x10/0x10 [ 477.462964][T12562] ? rcu_is_watching+0x15/0xb0 [ 477.467847][T12562] ? trace_contention_end+0x3c/0x120 [ 477.473196][T12562] ? __mutex_lock+0x2ef/0xd70 [ 477.477927][T12562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.483956][T12562] ? aa_sk_perm+0x96d/0xab0 [ 477.488508][T12562] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.493401][T12562] nf_setsockopt+0x295/0x2c0 [ 477.498053][T12562] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 477.504010][T12562] do_sock_setsockopt+0x3af/0x720 [ 477.509087][T12562] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 477.514676][T12562] ? __fget_files+0x3f3/0x470 [ 477.519399][T12562] ? __fget_files+0x29/0x470 [ 477.524049][T12562] __sys_setsockopt+0x1a2/0x250 [ 477.528963][T12562] __ia32_sys_setsockopt+0xb5/0xd0 [ 477.534130][T12562] __do_fast_syscall_32+0xb4/0x110 [ 477.539290][T12562] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.545502][T12562] ? lockdep_hardirqs_on+0x99/0x150 [ 477.550760][T12562] do_fast_syscall_32+0x34/0x80 [ 477.555655][T12562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.562025][T12562] RIP: 0023:0xf7fe0579 [ 477.566144][T12562] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 477.585796][T12562] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 477.594266][T12562] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 477.602281][T12562] RDX: 0000000000000040 RSI: 0000000020000140 RDI: 00000000000002f8 [ 477.610301][T12562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.618312][T12562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 477.626339][T12562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.634370][T12562] [ 477.662041][ T5282] usb 2-1: USB disconnect, device number 84 [ 477.728331][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 478.407572][ T936] usbhid 5-1:0.0: can't add hid device: -71 [ 478.415071][ T936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 478.522155][ T936] usb 5-1: USB disconnect, device number 83 [ 478.876734][T12605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 478.936223][T12605] loop0: detected capacity change from 0 to 524288000 [ 479.017564][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 479.107485][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.132546][T12124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.165755][T12605] xt_connbytes: Forcing CT accounting to be enabled [ 479.196446][T12124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.212827][T12124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.216122][T12605] Cannot find del_set index 0 as target [ 479.243641][T12124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.258721][T12124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.267291][T12124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.403536][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.625481][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.788944][ T5286] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 479.860556][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.975004][ T5286] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 479.992992][ T5286] usb 3-1: config 0 has no interface number 0 [ 480.002074][ T936] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 480.045992][ T5286] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 480.117259][ T5286] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 480.138993][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.173059][ T936] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 480.190584][ T936] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 480.193471][ T5286] usb 3-1: Product: syz [ 480.211997][ T936] usb 4-1: can't read configurations, error -61 [ 480.219202][T12658] netlink: 'syz.1.1494': attribute type 13 has an invalid length. [ 480.224729][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 480.227883][ T5286] usb 3-1: Manufacturer: syz [ 480.257034][ T5286] usb 3-1: SerialNumber: syz [ 480.266894][T12658] macvtap0: entered allmulticast mode [ 480.275004][ T5286] usb 3-1: config 0 descriptor?? [ 480.280643][T12625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.285063][T12658] veth0_macvtap: entered allmulticast mode [ 480.295121][ T5286] usb-storage 3-1:0.20: USB Mass Storage device detected [ 480.304049][T12658] macvtap0: refused to change device tx_queue_len [ 480.310577][T12657] netlink: 'syz.1.1494': attribute type 13 has an invalid length. [ 480.314664][ T5286] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 480.329601][T12657] macvtap0: refused to change device tx_queue_len [ 480.379206][T12619] chnl_net:caif_netlink_parms(): no params data found [ 480.386866][ T936] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 480.499509][ T35] bridge_slave_1: left allmulticast mode [ 480.519566][ T35] bridge_slave_1: left promiscuous mode [ 480.526231][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.545769][ T5286] scsi host1: usb-storage 3-1:0.20 [ 480.557385][ T936] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 480.566582][ T35] bridge_slave_0: left allmulticast mode [ 480.585983][ T5286] usb 3-1: USB disconnect, device number 76 [ 480.602760][ T35] bridge_slave_0: left promiscuous mode [ 480.603601][ T936] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 480.633292][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.652657][ T936] usb 4-1: can't read configurations, error -61 [ 480.691356][ T936] usb usb4-port1: attempt power cycle [ 480.943616][T12677] FAULT_INJECTION: forcing a failure. [ 480.943616][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.975977][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.4.1497 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 480.986873][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.996982][T12677] Call Trace: [ 481.000296][T12677] [ 481.003261][T12677] dump_stack_lvl+0x241/0x360 [ 481.007982][T12677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.013219][T12677] ? __pfx__printk+0x10/0x10 [ 481.017869][T12677] should_fail_ex+0x3b0/0x4e0 [ 481.022598][T12677] _copy_from_user+0x2f/0xe0 [ 481.027234][T12677] move_addr_to_kernel+0x82/0x150 [ 481.032307][T12677] __sys_sendto+0x29f/0x4f0 [ 481.036857][T12677] ? __pfx___sys_sendto+0x10/0x10 [ 481.041933][T12677] ? __might_fault+0xaa/0x120 [ 481.046643][T12677] ? vfs_write+0x7bf/0xc90 [ 481.051122][T12677] ? __might_fault+0xc6/0x120 [ 481.055842][T12677] __se_compat_sys_socketcall+0xb18/0x1430 [ 481.061691][T12677] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 481.068003][T12677] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 481.074650][T12677] ? lockdep_hardirqs_on+0x99/0x150 [ 481.079895][T12677] __do_fast_syscall_32+0xb4/0x110 [ 481.085045][T12677] ? exc_page_fault+0x590/0x8c0 [ 481.089932][T12677] do_fast_syscall_32+0x34/0x80 [ 481.094798][T12677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.101143][T12677] RIP: 0023:0xf7fe0579 [ 481.105224][T12677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 481.124844][T12677] RSP: 002b:00000000f5765440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 481.133280][T12677] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5765454 [ 481.141264][T12677] RDX: 0000000000000000 RSI: 00000000f5765570 RDI: 00000000f746bff4 [ 481.149245][T12677] RBP: 00000000f5765570 R08: 0000000000000000 R09: 0000000000000000 [ 481.157234][T12677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 481.165394][T12677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.173388][T12677] [ 481.235807][ T5285] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 481.252099][ T936] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 481.292327][T12124] Bluetooth: hci1: command tx timeout [ 481.313190][ T936] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 481.350170][ T936] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 481.370658][ T936] usb 4-1: can't read configurations, error -61 [ 481.463239][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 481.520256][ T5285] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 481.543941][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.552652][ T936] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 481.584247][ T936] usb 4-1: too many configurations: 155, using maximum allowed: 8 [ 481.610237][ T5285] usb 2-1: config 0 descriptor?? [ 481.614453][ T936] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 481.641413][ T5285] usb 2-1: Found UVC 0.00 device (2833:0201) [ 481.642809][ T936] usb 4-1: can't read configurations, error -61 [ 481.649589][ T5285] usb 2-1: No valid video chain found. [ 481.702501][ T936] usb usb4-port1: unable to enumerate USB device [ 481.742068][ T5281] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 481.792075][ T5283] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 481.907221][ T5281] usb 5-1: config 1 has an invalid interface number: 166 but max is 0 [ 481.909195][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 481.927771][ T5281] usb 5-1: config 1 has no interface number 0 [ 481.936430][ T5281] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b6.97 [ 481.956478][ T5283] usb 3-1: Using ep0 maxpacket: 16 [ 481.962787][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.990990][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.005173][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.028959][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 482.057456][ T5283] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 482.080132][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.106384][ T5283] usb 3-1: config 0 descriptor?? [ 482.206464][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.218872][ T5281] cdc_subset 5-1:1.166: probe with driver cdc_subset failed with error -22 [ 482.238267][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.253885][ T35] bond0 (unregistering): Released all slaves [ 482.436058][ T5281] usb 5-1: USB disconnect, device number 84 [ 482.562595][ T5283] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 482.703476][ T5283] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 482.730031][ T5283] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 482.767366][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.782639][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.804625][T12619] bridge_slave_0: entered allmulticast mode [ 482.821044][T12619] bridge_slave_0: entered promiscuous mode [ 482.992692][ T5282] usb 2-1: USB disconnect, device number 85 [ 483.036613][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.070129][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.088511][T12619] bridge_slave_1: entered allmulticast mode [ 483.118407][T12619] bridge_slave_1: entered promiscuous mode [ 483.155856][T12710] FAULT_INJECTION: forcing a failure. [ 483.155856][T12710] name failslab, interval 1, probability 0, space 0, times 0 [ 483.171794][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.4.1502 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 483.172800][ T5305] usb 3-1: USB disconnect, device number 77 [ 483.182611][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.182634][T12710] Call Trace: [ 483.182644][T12710] [ 483.182656][T12710] dump_stack_lvl+0x241/0x360 [ 483.182690][T12710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.182715][T12710] ? __pfx__printk+0x10/0x10 [ 483.182753][T12710] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 483.182789][T12710] ? __pfx___might_resched+0x10/0x10 [ 483.182828][T12710] should_fail_ex+0x3b0/0x4e0 [ 483.182870][T12710] should_failslab+0xac/0x100 [ 483.182900][T12710] ? rtnl_newlink+0xf2/0x20a0 [ 483.182934][T12710] __kmalloc_cache_noprof+0x6c/0x2c0 [ 483.182974][T12710] rtnl_newlink+0xf2/0x20a0 [ 483.183017][T12710] ? __pfx_lock_acquire+0x10/0x10 [ 483.183055][T12710] ? __mutex_lock+0x9a1/0xd70 [ 483.183080][T12710] ? __pfx_lock_release+0x10/0x10 [ 483.183115][T12710] ? do_raw_spin_lock+0x14f/0x370 [ 483.183149][T12710] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.183180][T12710] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.183220][T12710] ? __mutex_lock+0x9ab/0xd70 [ 483.183248][T12710] ? __mutex_lock+0x52a/0xd70 [ 483.183273][T12710] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 483.189362][ T936] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 483.199203][T12710] ? __pfx___mutex_lock+0x10/0x10 [ 483.199245][T12710] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.199276][T12710] rtnetlink_rcv_msg+0x73f/0xcf0 [ 483.199309][T12710] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 483.199346][T12710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.199386][T12710] ? ref_tracker_free+0x643/0x7e0 [ 483.199419][T12710] netlink_rcv_skb+0x1e3/0x430 [ 483.199458][T12710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.199493][T12710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.199553][T12710] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.199593][T12710] netlink_unicast+0x7f6/0x990 [ 483.199635][T12710] ? __pfx_netlink_unicast+0x10/0x10 [ 483.199667][T12710] ? __virt_addr_valid+0x183/0x530 [ 483.199698][T12710] ? __check_object_size+0x48e/0x900 [ 483.199733][T12710] netlink_sendmsg+0x8e4/0xcb0 [ 483.199782][T12710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.199807][T12710] ? __pfx_lock_release+0x10/0x10 [ 483.199840][T12710] ? aa_sock_msg_perm+0x91/0x160 [ 483.199871][T12710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.199892][T12710] __sock_sendmsg+0x221/0x270 [ 483.199935][T12710] ____sys_sendmsg+0x52a/0x7e0 [ 483.199971][T12710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.200014][T12710] __sys_sendmsg+0x292/0x380 [ 483.200043][T12710] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.200083][T12710] ? __pfx_vfs_write+0x10/0x10 [ 483.200139][T12710] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 483.200177][T12710] ? lockdep_hardirqs_on+0x99/0x150 [ 483.200214][T12710] __do_fast_syscall_32+0xb4/0x110 [ 483.200239][T12710] ? exc_page_fault+0x590/0x8c0 [ 483.200275][T12710] do_fast_syscall_32+0x34/0x80 [ 483.200297][T12710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.215842][ T936] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 483.216649][T12710] RIP: 0023:0xf7fe0579 [ 483.216676][T12710] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.221393][ T936] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 483.226711][T12710] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 483.226741][T12710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 483.226758][T12710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.226773][T12710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.226789][T12710] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.226804][T12710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.226834][T12710] [ 483.322320][T12713] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 483.361126][ T936] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 483.426014][T12124] Bluetooth: hci1: command tx timeout [ 483.465467][T12713] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1503'. [ 483.660565][ T35] hsr_slave_0: left promiscuous mode [ 483.678334][ T35] hsr_slave_1: left promiscuous mode [ 483.710957][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.723229][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.743365][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.752516][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.824712][ T35] veth1_macvtap: left promiscuous mode [ 483.830276][ T35] veth0_macvtap: left promiscuous mode [ 483.844082][ T35] veth1_vlan: left promiscuous mode [ 483.850213][ T35] veth0_vlan: left promiscuous mode [ 484.669211][ T5286] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 484.688341][T12717] dccp_close: ABORT with 32 bytes unread [ 484.872371][ T5286] usb 4-1: Using ep0 maxpacket: 32 [ 484.901207][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.946561][ T5286] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 484.995025][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.050711][ T5286] usb 4-1: Product: syz [ 485.061551][ T5286] usb 4-1: Manufacturer: syz [ 485.066294][ T5286] usb 4-1: SerialNumber: syz [ 485.316322][T12747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.371934][T12747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.453100][T12124] Bluetooth: hci1: command tx timeout [ 485.631242][ T35] team0 (unregistering): Port device team_slave_1 removed [ 485.750168][ T35] team0 (unregistering): Port device team_slave_0 removed [ 485.964851][ T5282] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 486.187811][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.208302][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.218813][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.231921][ T5282] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 486.241000][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.263176][ T5282] usb 3-1: config 0 descriptor?? [ 486.474533][T12619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.543730][T12619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.697978][T12760] fuse: Bad value for 'user_id' [ 486.708088][T12760] fuse: Bad value for 'user_id' [ 486.760436][T12619] team0: Port device team_slave_0 added [ 486.835268][T12619] team0: Port device team_slave_1 added [ 486.927367][ T5282] usbhid 3-1:0.0: can't add hid device: -71 [ 486.934222][ T5282] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.964408][ T5282] usb 3-1: USB disconnect, device number 78 [ 487.012864][T12619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.049708][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.075723][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.104414][T12619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.129690][T12619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.149219][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.175311][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.188800][T12619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.336512][T12619] hsr_slave_0: entered promiscuous mode [ 487.357637][ T5286] empeg 4-1:1.0: empeg converter detected [ 487.364031][T12619] hsr_slave_1: entered promiscuous mode [ 487.370214][ T5286] empeg 4-1:1.0: probe with driver empeg failed with error -71 [ 487.400563][ T5286] usb 4-1: USB disconnect, device number 95 [ 487.407102][T12619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.417149][T12619] Cannot create hsr debugfs directory [ 487.483889][T12778] fuse: Bad value for 'fd' [ 487.531711][T12124] Bluetooth: hci1: command tx timeout [ 487.885220][T12794] IPv6: sit1: Disabled Multicast RS [ 487.992270][ T5305] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 488.162925][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 488.186970][ T5305] usb 3-1: unable to get BOS descriptor or descriptor too short [ 488.225228][ T5305] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 488.262749][ T5305] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.286542][ T5305] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 488.303970][ T5305] usb 3-1: config 1 has no interface number 1 [ 488.310365][ T5305] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 488.325092][ T5281] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 488.336298][ T5305] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 488.348548][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1520'. [ 488.360281][T12619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 488.369848][ T5305] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 488.383136][T12619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 488.404492][ T5305] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.405688][T12619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 488.432878][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.441056][ T5305] usb 3-1: Product: syz [ 488.447358][T12619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 488.449754][ T5305] usb 3-1: Manufacturer: syz [ 488.459306][ T5305] usb 3-1: SerialNumber: syz [ 488.482207][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 488.493457][ T5281] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 488.537495][ T5281] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 488.550934][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.577351][ T5281] usb 4-1: Product: syz [ 488.590035][ T5281] usb 4-1: Manufacturer: syz [ 488.602195][ T5281] usb 4-1: SerialNumber: syz [ 488.623734][ T5281] usb 4-1: config 0 descriptor?? [ 488.636683][T12800] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 488.668825][ T29] audit: type=1326 audit(1728460385.916:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 488.716969][T12619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.729247][ T29] audit: type=1326 audit(1728460385.916:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 488.779737][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.795864][ T5305] usb 3-1: USB disconnect, device number 79 [ 488.812143][ T5281] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.820971][ T29] audit: type=1326 audit(1728460385.916:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 488.860072][T12733] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.867300][T12733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.870207][ T29] audit: type=1326 audit(1728460385.916:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 488.884289][T12733] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.904434][T12733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.952439][ T29] audit: type=1326 audit(1728460385.916:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 488.986113][ T5281] usb 4-1: USB disconnect, device number 96 [ 489.024192][ T29] audit: type=1326 audit(1728460385.916:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 489.066987][ T5333] udevd[5333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 489.103998][ T29] audit: type=1326 audit(1728460385.916:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 489.198074][ T29] audit: type=1326 audit(1728460385.916:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 489.208245][T12619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.280840][ T29] audit: type=1326 audit(1728460385.916:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 489.313017][ T29] audit: type=1326 audit(1728460385.916:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 489.319127][T12619] veth0_vlan: entered promiscuous mode [ 489.408851][T12619] veth1_vlan: entered promiscuous mode [ 489.467573][T12619] veth0_macvtap: entered promiscuous mode [ 489.489586][T12619] veth1_macvtap: entered promiscuous mode [ 489.565982][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.630860][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.647500][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.689740][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.737742][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.781567][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.814993][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.849930][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.853709][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 489.873558][T12619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.953967][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.969613][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.990347][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.010540][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.035580][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.042549][ T5305] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 490.060755][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.081380][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.097924][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.119812][T12619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.151715][ T5285] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 490.160624][T12619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.183891][T12619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.201590][T12619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.220720][T12619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.321644][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 490.335860][ T5285] usb 5-1: config 0 has no interfaces? [ 490.498578][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.532946][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.679298][T12730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.698234][T12730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.760408][ T5285] usb 5-1: string descriptor 0 read error: -71 [ 490.782310][ T5285] usb 5-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 490.843547][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.880361][ T5285] usb 5-1: config 0 descriptor?? [ 490.906111][ T5285] usb 5-1: can't set config #0, error -71 [ 490.926156][ T5285] usb 5-1: USB disconnect, device number 85 [ 491.059940][ T5305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 491.075024][ T5305] usb 4-1: no configurations [ 491.079733][ T5305] usb 4-1: can't read configurations, error -22 [ 491.373752][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1531'. [ 491.404027][T12884] netlink: 24062 bytes leftover after parsing attributes in process `syz.2.1531'. [ 491.430342][T12884] netlink: 188348 bytes leftover after parsing attributes in process `syz.2.1531'. [ 491.612041][ T5282] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 491.625222][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 491.678703][T12891] bridge_slave_1: left allmulticast mode [ 491.706190][T12891] bridge_slave_1: left promiscuous mode [ 491.720933][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.740461][T12891] bridge_slave_0: left allmulticast mode [ 491.748932][T12891] bridge_slave_0: left promiscuous mode [ 491.757055][T12898] loop2: detected capacity change from 0 to 7 [ 491.757411][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.776593][T12898] Dev loop2: unable to read RDB block 7 [ 491.787096][ T5282] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.bb [ 491.806639][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.821750][T12898] loop2: unable to read partition table [ 491.832851][T12898] loop2: partition table beyond EOD, truncated [ 491.839201][ T5282] usb 2-1: Product: syz [ 491.849365][ T5282] usb 2-1: Manufacturer: syz [ 491.857339][T12898] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.867484][ T5282] usb 2-1: SerialNumber: syz [ 491.874999][ T5282] usb 2-1: config 0 descriptor?? [ 491.883275][ T5282] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 492.530986][T12933] input: syz0 as /devices/virtual/input/input59 [ 492.668151][T12940] loop2: detected capacity change from 0 to 7 [ 492.694815][T12940] Dev loop2: unable to read RDB block 7 [ 492.712279][T12940] loop2: unable to read partition table [ 492.718137][T12940] loop2: partition table beyond EOD, truncated [ 492.739292][T12940] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.991709][ T5282] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 493.141823][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 493.154351][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.167782][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.184374][ T5282] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 493.195289][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.216453][ T5282] usb 5-1: config 0 descriptor?? [ 493.239536][ T5282] hub 5-1:0.0: USB hub found [ 493.431299][ T5282] hub 5-1:0.0: 1 port detected [ 493.441737][ T5305] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 493.470392][ T5282] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 493.486390][ T5282] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 493.511848][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 493.526416][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.592218][ T5305] usb 3-1: device descriptor read/64, error -71 [ 493.730969][ T5282] usb 5-1: reset high-speed USB device number 86 using dummy_hcd [ 493.742109][ T5282] usb 5-1: device reset changed ep0 maxpacket size! [ 493.757289][ T5282] usb 5-1: USB disconnect, device number 86 [ 493.831903][ T5305] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 493.961978][ T5305] usb 3-1: device descriptor read/64, error -71 [ 494.072126][ T5305] usb usb3-port1: attempt power cycle [ 494.081988][ T5282] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 494.264618][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.281656][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.297091][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.313150][ T5282] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 494.323991][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.352648][ T5282] usb 5-1: config 0 descriptor?? [ 494.422100][ T5305] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 494.463508][ T5305] usb 3-1: device descriptor read/8, error -71 [ 494.509741][ T5283] usb 2-1: USB disconnect, device number 86 [ 494.635802][T12970] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1552'. [ 494.649637][T12970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1552'. [ 494.764563][ T5305] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 494.829891][ T5305] usb 3-1: device descriptor read/8, error -71 [ 494.952435][ T5305] usb usb3-port1: unable to enumerate USB device [ 494.983260][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 494.998275][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 495.012413][ T5282] usb 5-1: USB disconnect, device number 87 [ 495.027066][T12980] FAULT_INJECTION: forcing a failure. [ 495.027066][T12980] name failslab, interval 1, probability 0, space 0, times 0 [ 495.044827][T12980] CPU: 1 UID: 0 PID: 12980 Comm: syz.1.1555 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 495.055678][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 495.065788][T12980] Call Trace: [ 495.069123][T12980] [ 495.072076][T12980] dump_stack_lvl+0x241/0x360 [ 495.076808][T12980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.082056][T12980] ? __pfx__printk+0x10/0x10 [ 495.086700][T12980] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 495.092741][T12980] ? __pfx___might_resched+0x10/0x10 [ 495.098079][T12980] should_fail_ex+0x3b0/0x4e0 [ 495.102800][T12980] should_failslab+0xac/0x100 [ 495.107540][T12980] ? __alloc_skb+0x1c3/0x440 [ 495.112172][T12980] kmem_cache_alloc_node_noprof+0x71/0x320 [ 495.118006][T12980] __alloc_skb+0x1c3/0x440 [ 495.122466][T12980] ? __pfx___alloc_skb+0x10/0x10 [ 495.127460][T12980] ? netlink_autobind+0xd6/0x2f0 [ 495.132431][T12980] ? netlink_autobind+0x2b0/0x2f0 [ 495.137491][T12980] netlink_sendmsg+0x638/0xcb0 [ 495.142284][T12980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.147583][T12980] ? __pfx_lock_release+0x10/0x10 [ 495.152627][T12980] ? aa_sock_msg_perm+0x91/0x160 [ 495.157579][T12980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.162873][T12980] __sock_sendmsg+0x221/0x270 [ 495.167571][T12980] ____sys_sendmsg+0x52a/0x7e0 [ 495.172355][T12980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.177665][T12980] __sys_sendmsg+0x292/0x380 [ 495.182285][T12980] ? __pfx___sys_sendmsg+0x10/0x10 [ 495.187442][T12980] ? __pfx_vfs_write+0x10/0x10 [ 495.192245][T12980] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 495.198855][T12980] ? lockdep_hardirqs_on+0x99/0x150 [ 495.204080][T12980] __do_fast_syscall_32+0xb4/0x110 [ 495.209206][T12980] ? exc_page_fault+0x590/0x8c0 [ 495.214086][T12980] do_fast_syscall_32+0x34/0x80 [ 495.218957][T12980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.225301][T12980] RIP: 0023:0xf73ad579 [ 495.229382][T12980] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 495.249010][T12980] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 495.257450][T12980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 495.265447][T12980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.273427][T12980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.281415][T12980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.289412][T12980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.297413][T12980] [ 495.645484][ T47] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 495.783275][ T47] usb 4-1: device descriptor read/64, error -71 [ 496.032489][ T47] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 496.191751][ T47] usb 4-1: device descriptor read/64, error -71 [ 496.341944][ T47] usb usb4-port1: attempt power cycle [ 496.526488][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 496.594697][ T5285] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 496.681640][ T47] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 496.712870][ T47] usb 4-1: device descriptor read/8, error -71 [ 496.784255][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 496.793813][ T5285] usb 5-1: config 0 has no interfaces? [ 496.801343][ T5285] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.810864][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.821313][ T5285] usb 5-1: Product: syz [ 496.829408][ T5285] usb 5-1: Manufacturer: syz [ 496.834383][ T5285] usb 5-1: SerialNumber: syz [ 496.840766][ T5285] usb 5-1: config 0 descriptor?? [ 496.952009][ T5305] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 496.965566][ T47] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 496.992287][ T47] usb 4-1: device descriptor read/8, error -71 [ 497.059065][T13002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.068390][T13002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.079703][T13002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.088637][T13002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.103090][ T47] usb usb4-port1: unable to enumerate USB device [ 497.123871][ T5305] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 497.123905][ T5305] usb 2-1: config 0 has no interface number 0 [ 497.123949][ T5305] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 497.123981][ T5305] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 497.127472][ T5305] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 497.127513][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 497.127540][ T5305] usb 2-1: Product: syz [ 497.127559][ T5305] usb 2-1: SerialNumber: syz [ 497.130040][ T5305] usb 2-1: config 0 descriptor?? [ 497.140070][ T5305] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 497.216469][T13016] team_slave_0: entered promiscuous mode [ 497.216574][T13016] team_slave_1: entered promiscuous mode [ 497.216714][T13016] vlan2: entered promiscuous mode [ 497.216732][T13016] team0: entered promiscuous mode [ 497.217188][T13016] vlan2: entered allmulticast mode [ 497.217208][T13016] team0: entered allmulticast mode [ 497.217225][T13016] team_slave_0: entered allmulticast mode [ 497.217473][T13016] team_slave_1: entered allmulticast mode [ 497.242322][ T5305] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input60 [ 497.247303][T13016] team0: left allmulticast mode [ 497.258349][ T5305] ------------[ cut here ]------------ [ 497.258592][ T5305] URB ffff88802fa53200 submitted while active [ 497.259431][ T5305] WARNING: CPU: 0 PID: 5305 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 [ 497.266975][T13016] team_slave_0: left allmulticast mode [ 497.270605][ T5305] Modules linked in: [ 497.277119][T13016] team_slave_1: left allmulticast mode [ 497.287487][ T5305] [ 497.293112][T13016] team0: left promiscuous mode [ 497.298209][ T5305] CPU: 0 UID: 0 PID: 5305 Comm: kworker/0:6 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 497.298246][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 497.306376][T13016] team_slave_0: left promiscuous mode [ 497.315216][ T5305] Workqueue: usb_hub_wq hub_event [ 497.320766][T13016] team_slave_1: left promiscuous mode [ 497.325192][ T5305] [ 497.381226][ T5305] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 497.381273][ T5305] Code: 00 eb 66 e8 f9 ac 5d fa e9 79 f0 ff ff e8 ef ac 5d fa c6 05 b7 7e cf 08 01 90 48 c7 c7 60 19 b1 8c 4c 89 ee e8 d8 a7 1e fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 c9 ac 5d fa eb 12 e8 c2 ac 5d fa 41 [ 497.381298][ T5305] RSP: 0018:ffffc90004376b58 EFLAGS: 00010246 [ 497.381328][ T5305] RAX: 92dd39a12af3bc00 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 497.381349][ T5305] RDX: ffffc90014db6000 RSI: 000000000003f9c5 RDI: 000000000003f9c6 [ 497.381370][ T5305] RBP: ffff88802fa53208 R08: ffffffff8155e402 R09: 1ffffffff2858b32 [ 497.381391][ T5305] R10: dffffc0000000000 R11: fffffbfff2858b33 R12: 1ffff1100faca70a [ 497.381413][ T5305] R13: ffff88802fa53200 R14: dffffc0000000000 R15: ffff88807d653810 [ 497.457863][ T5305] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 497.457895][ T5305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.457914][ T5305] CR2: 0000000020002000 CR3: 000000005baa8000 CR4: 00000000003526f0 [ 497.457938][ T5305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.457955][ T5305] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 497.457975][ T5305] Call Trace: [ 497.457986][ T5305] [ 497.458001][ T5305] ? __warn+0x168/0x4e0 [ 497.458035][ T5305] ? usb_submit_urb+0x1039/0x1930 [ 497.458074][ T5305] ? report_bug+0x2b3/0x500 [ 497.458111][ T5305] ? usb_submit_urb+0x1039/0x1930 [ 497.527206][ T5305] ? handle_bug+0x60/0x90 [ 497.527247][ T5305] ? exc_invalid_op+0x1a/0x50 [ 497.527278][ T5305] ? asm_exc_invalid_op+0x1a/0x20 [ 497.527320][ T5305] ? __warn_printk+0x292/0x360 [ 497.527354][ T5305] ? usb_submit_urb+0x1039/0x1930 [ 497.527390][ T5305] ? usb_submit_urb+0x1038/0x1930 [ 497.527426][ T5305] ? __pm_runtime_resume+0x12d/0x180 [ 497.527474][ T5305] cm109_input_open+0x1f9/0x470 [ 497.527523][ T5305] input_open_device+0x191/0x2e0 [ 497.527567][ T5305] kbd_connect+0xe9/0x130 [ 497.527604][ T5305] input_register_device+0xd3b/0x1110 [ 497.527654][ T5305] cm109_usb_probe+0x10cd/0x1600 [ 497.527720][ T5305] usb_probe_interface+0x645/0xbb0 [ 497.527762][ T5305] ? __pfx_usb_probe_interface+0x10/0x10 [ 497.527788][ T5305] really_probe+0x2b8/0xad0 [ 497.527836][ T5305] __driver_probe_device+0x1a2/0x390 [ 497.527872][ T5305] driver_probe_device+0x50/0x430 [ 497.527906][ T5305] __device_attach_driver+0x2d6/0x530 [ 497.527942][ T5305] bus_for_each_drv+0x24e/0x2e0 [ 497.527979][ T5305] ? __pfx___device_attach_driver+0x10/0x10 [ 497.528010][ T5305] ? __pfx_bus_for_each_drv+0x10/0x10 [ 497.528059][ T5305] __device_attach+0x333/0x520 [ 497.528088][ T5305] ? __pfx_lock_release+0x10/0x10 [ 497.528134][ T5305] ? __pfx___device_attach+0x10/0x10 [ 497.528164][ T5305] ? do_raw_spin_unlock+0x13c/0x8b0 [ 497.528211][ T5305] bus_probe_device+0x189/0x260 [ 497.528252][ T5305] device_add+0x856/0xbf0 [ 497.528300][ T5305] usb_set_configuration+0x1976/0x1fb0 [ 497.528368][ T5305] usb_generic_driver_probe+0x88/0x140 [ 497.528408][ T5305] usb_probe_device+0x1b8/0x380 [ 497.528451][ T5305] ? __pfx_usb_probe_device+0x10/0x10 [ 497.528489][ T5305] really_probe+0x2b8/0xad0 [ 497.528528][ T5305] __driver_probe_device+0x1a2/0x390 [ 497.528562][ T5305] driver_probe_device+0x50/0x430 [ 497.528596][ T5305] __device_attach_driver+0x2d6/0x530 [ 497.528632][ T5305] bus_for_each_drv+0x24e/0x2e0 [ 497.528669][ T5305] ? __pfx___device_attach_driver+0x10/0x10 [ 497.528700][ T5305] ? __pfx_bus_for_each_drv+0x10/0x10 [ 497.528749][ T5305] __device_attach+0x333/0x520 [ 497.528785][ T5305] ? __pfx___device_attach+0x10/0x10 [ 497.528834][ T5305] bus_probe_device+0x189/0x260 [ 497.528876][ T5305] device_add+0x856/0xbf0 [ 497.528925][ T5305] usb_new_device+0x104a/0x19a0 [ 497.528983][ T5305] ? __pfx_usb_new_device+0x10/0x10 [ 497.529022][ T5305] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.529059][ T5305] ? lockdep_hardirqs_on+0x99/0x150 [ 497.529103][ T5305] hub_event+0x2d6d/0x5150 [ 497.529202][ T5305] ? __pfx_hub_event+0x10/0x10 [ 497.529246][ T5305] ? __pfx_lock_acquire+0x10/0x10 [ 497.529288][ T5305] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.529334][ T5305] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.529389][ T5305] ? process_scheduled_works+0x976/0x1850 [ 497.529429][ T5305] process_scheduled_works+0xa63/0x1850 [ 497.529501][ T5305] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.529551][ T5305] ? assign_work+0x364/0x3d0 [ 497.529630][ T5305] worker_thread+0x870/0xd30 [ 497.529682][ T5305] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 497.529728][ T5305] ? __kthread_parkme+0x169/0x1d0 [ 497.529775][ T5305] ? __pfx_worker_thread+0x10/0x10 [ 497.529816][ T5305] kthread+0x2f0/0x390 [ 497.529849][ T5305] ? __pfx_worker_thread+0x10/0x10 [ 497.529888][ T5305] ? __pfx_kthread+0x10/0x10 [ 497.529919][ T5305] ret_from_fork+0x4b/0x80 [ 497.529960][ T5305] ? __pfx_kthread+0x10/0x10 [ 497.529989][ T5305] ret_from_fork_asm+0x1a/0x30 [ 497.530048][ T5305] [ 497.530079][ T5305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.530096][ T5305] CPU: 0 UID: 0 PID: 5305 Comm: kworker/0:6 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 497.530125][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 497.530141][ T5305] Workqueue: usb_hub_wq hub_event [ 497.530181][ T5305] Call Trace: [ 497.530192][ T5305] [ 497.530204][ T5305] dump_stack_lvl+0x241/0x360 [ 497.530238][ T5305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.530266][ T5305] ? __pfx__printk+0x10/0x10 [ 497.530302][ T5305] ? _printk+0xd5/0x120 [ 497.530343][ T5305] ? __init_begin+0x41000/0x41000 [ 497.530376][ T5305] ? vscnprintf+0x5d/0x90 [ 497.530411][ T5305] panic+0x349/0x880 [ 497.530453][ T5305] ? __warn+0x177/0x4e0 [ 497.530483][ T5305] ? __pfx_panic+0x10/0x10 [ 497.530518][ T5305] ? show_trace_log_lvl+0x3b2/0x410 [ 497.530563][ T5305] ? ret_from_fork_asm+0x1a/0x30 [ 497.530608][ T5305] __warn+0x34b/0x4e0 [ 497.530636][ T5305] ? usb_submit_urb+0x1039/0x1930 [ 497.530674][ T5305] report_bug+0x2b3/0x500 [ 497.530710][ T5305] ? usb_submit_urb+0x1039/0x1930 [ 497.530759][ T5305] handle_bug+0x60/0x90 [ 497.530786][ T5305] exc_invalid_op+0x1a/0x50 [ 497.530814][ T5305] asm_exc_invalid_op+0x1a/0x20 [ 497.530858][ T5305] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 497.530890][ T5305] Code: 00 eb 66 e8 f9 ac 5d fa e9 79 f0 ff ff e8 ef ac 5d fa c6 05 b7 7e cf 08 01 90 48 c7 c7 60 19 b1 8c 4c 89 ee e8 d8 a7 1e fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 c9 ac 5d fa eb 12 e8 c2 ac 5d fa 41 [ 497.530914][ T5305] RSP: 0018:ffffc90004376b58 EFLAGS: 00010246 [ 497.530938][ T5305] RAX: 92dd39a12af3bc00 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 497.530958][ T5305] RDX: ffffc90014db6000 RSI: 000000000003f9c5 RDI: 000000000003f9c6 [ 497.530977][ T5305] RBP: ffff88802fa53208 R08: ffffffff8155e402 R09: 1ffffffff2858b32 [ 497.530998][ T5305] R10: dffffc0000000000 R11: fffffbfff2858b33 R12: 1ffff1100faca70a [ 497.531019][ T5305] R13: ffff88802fa53200 R14: dffffc0000000000 R15: ffff88807d653810 [ 497.531048][ T5305] ? __warn_printk+0x292/0x360 [ 497.531086][ T5305] ? usb_submit_urb+0x1038/0x1930 [ 497.531121][ T5305] ? __pm_runtime_resume+0x12d/0x180 [ 497.531168][ T5305] cm109_input_open+0x1f9/0x470 [ 497.531214][ T5305] input_open_device+0x191/0x2e0 [ 497.531255][ T5305] kbd_connect+0xe9/0x130 [ 497.531292][ T5305] input_register_device+0xd3b/0x1110 [ 497.531339][ T5305] cm109_usb_probe+0x10cd/0x1600 [ 497.531402][ T5305] usb_probe_interface+0x645/0xbb0 [ 497.531454][ T5305] ? __pfx_usb_probe_interface+0x10/0x10 [ 497.531478][ T5305] really_probe+0x2b8/0xad0 [ 497.531516][ T5305] __driver_probe_device+0x1a2/0x390 [ 497.531549][ T5305] driver_probe_device+0x50/0x430 [ 497.531581][ T5305] __device_attach_driver+0x2d6/0x530 [ 497.531615][ T5305] bus_for_each_drv+0x24e/0x2e0 [ 497.531650][ T5305] ? __pfx___device_attach_driver+0x10/0x10 [ 497.531680][ T5305] ? __pfx_bus_for_each_drv+0x10/0x10 [ 497.531728][ T5305] __device_attach+0x333/0x520 [ 497.531753][ T5305] ? __pfx_lock_release+0x10/0x10 [ 497.531797][ T5305] ? __pfx___device_attach+0x10/0x10 [ 497.531824][ T5305] ? do_raw_spin_unlock+0x13c/0x8b0 [ 497.531876][ T5305] bus_probe_device+0x189/0x260 [ 497.531913][ T5305] device_add+0x856/0xbf0 [ 497.531960][ T5305] usb_set_configuration+0x1976/0x1fb0 [ 497.532026][ T5305] usb_generic_driver_probe+0x88/0x140 [ 497.532062][ T5305] usb_probe_device+0x1b8/0x380 [ 497.532103][ T5305] ? __pfx_usb_probe_device+0x10/0x10 [ 497.532140][ T5305] really_probe+0x2b8/0xad0 [ 497.532177][ T5305] __driver_probe_device+0x1a2/0x390 [ 497.532210][ T5305] driver_probe_device+0x50/0x430 [ 497.532242][ T5305] __device_attach_driver+0x2d6/0x530 [ 497.532274][ T5305] bus_for_each_drv+0x24e/0x2e0 [ 497.532309][ T5305] ? __pfx___device_attach_driver+0x10/0x10 [ 497.532338][ T5305] ? __pfx_bus_for_each_drv+0x10/0x10 [ 497.532385][ T5305] __device_attach+0x333/0x520 [ 497.532418][ T5305] ? __pfx___device_attach+0x10/0x10 [ 497.532457][ T5305] bus_probe_device+0x189/0x260 [ 497.532497][ T5305] device_add+0x856/0xbf0 [ 497.532542][ T5305] usb_new_device+0x104a/0x19a0 [ 497.532596][ T5305] ? __pfx_usb_new_device+0x10/0x10 [ 497.532633][ T5305] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.532669][ T5305] ? lockdep_hardirqs_on+0x99/0x150 [ 497.532709][ T5305] hub_event+0x2d6d/0x5150 [ 497.532805][ T5305] ? __pfx_hub_event+0x10/0x10 [ 497.532852][ T5305] ? __pfx_lock_acquire+0x10/0x10 [ 497.532892][ T5305] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.532935][ T5305] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.532989][ T5305] ? process_scheduled_works+0x976/0x1850 [ 497.533027][ T5305] process_scheduled_works+0xa63/0x1850 [ 497.533098][ T5305] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.533146][ T5305] ? assign_work+0x364/0x3d0 [ 497.533189][ T5305] worker_thread+0x870/0xd30 [ 497.533233][ T5305] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 497.533275][ T5305] ? __kthread_parkme+0x169/0x1d0 [ 497.533318][ T5305] ? __pfx_worker_thread+0x10/0x10 [ 497.533358][ T5305] kthread+0x2f0/0x390 [ 497.533385][ T5305] ? __pfx_worker_thread+0x10/0x10 [ 497.533420][ T5305] ? __pfx_kthread+0x10/0x10 [ 497.533448][ T5305] ret_from_fork+0x4b/0x80 [ 497.533484][ T5305] ? __pfx_kthread+0x10/0x10 [ 497.533511][ T5305] ret_from_fork_asm+0x1a/0x30 [ 497.533583][ T5305] [ 497.534761][ T5305] Kernel Offset: disabled