last executing test programs: 14.714136696s ago: executing program 0 (id=758): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c00008008000180040003"], 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847"], 0x2c}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = getpid() ptrace$setopts(0x4206, r3, 0xbef9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, 0x0, &(0x7f00000003c0)=r5}, 0x1c) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x50, 0xb, 0x0, {0x7, 0x27, 0x0, 0x1040, 0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.241986423s ago: executing program 4 (id=761): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x90, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x90}, 0x1, 0xba01}, 0x810) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$key(0xf, 0x3, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3345}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$userio(0xffffff9c, &(0x7f00000000c0), 0x103040, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014000280080001000800000006ef02000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 13.918884924s ago: executing program 4 (id=764): syz_usb_connect(0x0, 0xc23, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000bcc38110050b91175704010203010902110c04fd00000009049d04057e4f3b080824060000468c120524007f000d240f01a40000000008f6150505241503000a24070805000200050006240600009205240002000d240f010800000000000004fd0524010004072414b80607000c241b060000000602ff7f0397241309ebfbc8a5ceb8e4440105a21c6da2920dfaed363d5291381d818a6a02f02972921fd5d1c5d696265ed6e193ae0e9fefff021d83191bec527571e36080f9d9a14d99a769dba779c88541dce68c266b9643eb14f129b4fb9aa68b24f6f6a8cd18e3bbe00a0c2a0b786bf33749521b633cc1a22ca203091f5f3284859539786af97428a8b3222ebea899f74c16822a0d59329a518309058b1f2000040820072501800001010905071000020407a307250102fa0700f611a15112d5db9111bca3e1876f8f2b36053f50531982fe0926db2f674b2d567146594690ae05ecc9195aeac3c127ab94c2a961df0c2538e5493482e5a26fe70ebbaa28e019d07cc0ededf506f37b734a31f1db7a9bf13f162b96f5123531e6586f9a30f53ba96c97d644b9b5462fc5b6745858b2e2e932d1ee5f8c5b2ce8ccd086006960c37ea6ce01454a1d6b08effdd34db9e3ad0d66e611cfd653aefc90eb52c607d5c8306709d98a5663e7f8a6cf5f67a3b68c9e92408fa1de0d95662ba0690d0b93eb0493b7899989c16efd3960f37153e0d124010f15df7b4baa6ea2666f44c212ccbdd89f67a14f08a7374746026a1f0ade09050d400800b80b03310248d4c4e81350d1fa5bbce7829076c9589882f0706e31550f367cbdd00d1a608ddf2ec93da1bc96981d5eb67003cabf090504000002f902200725018205070009050d8508000600080904d5090e0e0100f2112402010202"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x84, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xf, 0x7, 0x3b, 0x8}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}]}]}]}, 0x84}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@local}) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x4, 0xc0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x64, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x27, 0xff, 0x1, {0x22, 0x359}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xf, 0x9, 0xb, 0x8, 0x9}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "dcab456d1ef909322dc7b94904a38868"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xff, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x0, 0x42, 0x2, 0x9, 0x13, 0xd}]}, 0x2, [{0x2c, &(0x7f0000000100)=@string={0x2c, 0x3, "ee98a31aa6fef0b8f252413d62b046f7f4e123a558a3f7a30e291fe536ae4509262869265800895c3bf7"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x7528bf031b58c437}}]}) 11.58495943s ago: executing program 0 (id=770): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') read$FUSE(r1, &(0x7f0000003e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'rr\x00', 0x25, 0x4, 0xfffffffd}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0502103, &(0x7f00000001c0)) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x28, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000240)={0xfffffffb, 0x1, {r3}, {r2}, 0x7, 0x3}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000300)={'#! ', './file1/file0', [{0x20, 'memory.events\x00'}], 0xa, "d161050000000000000074bdca9720dfcc73de5b223a3c160f225bcf4c83ef6cefab8104649d48cdb9a6c7669fce915c6e7588a6259b6eb774f58cd31674f96d061a0a52557ef17ec0c8dd11d285470d6593ad67b8abeffaefcf36c8627e38b8b9bcee53"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x7, 0x3, 0x1, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000004c0)={0x0, 0x0, {0x8, 0x3f, 0x3002, 0x9, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000028000000996d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.081185915s ago: executing program 1 (id=773): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 10.809184399s ago: executing program 4 (id=774): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delrng={0x10, 0x14, 0x220, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x400c0) r1 = socket$igmp(0x2, 0x3, 0x2) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x200, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x4, 0xfe, 0x26, 0x9, 0x5, 0x6, 0xfe, 0x81, 0x5, 0x7, 0x4, 0x2, 0xca, 0x9}, 0xe) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00') 10.763169383s ago: executing program 3 (id=775): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c0d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x24000854) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "ca0400"}]}}, 0x0}, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000280)={0x6, 0x1, [{0x1, 0x1}]}) r3 = socket(0xa, 0x2, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f000000000000000020000043ad00030076ee2db880c5c87b91d09556ba38b2bd9563a60a47601579bd5a2ca2c70da73b396be27ec7639196ece147f63845455f5834b50218170197edd5843fbcd3a695e361dc9cf91b3ee709c16997531cdc", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) 10.561069051s ago: executing program 4 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r1, r2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000d80)={0x1f, 0xb, 0x0, "2ac0749f7a19d71029970ac5e8092a6c6bd27d45d01f1af84d4f7d0b48a36eb2"}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r6, @in={{0x2, 0x4e22, @empty}}, 0x0, 0xffff}, 0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={r6, 0x9, 0x10, 0x7, 0x100000001}, &(0x7f0000000100)=0x18) close_range(0xffffffffffffffff, r0, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x25dfdbfd, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x48842) 10.431514875s ago: executing program 4 (id=778): io_setup(0x9, &(0x7f0000000040)) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12082505a8a440000102030109021b0001010000000904000001070101005abe24e98802f15886000000000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0) 10.206808355s ago: executing program 1 (id=779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) r4 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) 9.184865641s ago: executing program 1 (id=780): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c00008008000180040003"], 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847"], 0x2c}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = getpid() ptrace$setopts(0x4206, r3, 0xbef9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, 0x0, &(0x7f00000003c0)=r5}, 0x1c) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x50, 0xb, 0x0, {0x7, 0x27, 0x0, 0x1040, 0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.156895278s ago: executing program 2 (id=781): r0 = openat$fb0(0xffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x2f, 0x1}) set_mempolicy(0x4, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.030779785s ago: executing program 2 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 8.932746521s ago: executing program 2 (id=783): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2ec, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0xbc, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x84, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x15}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x31}]}]}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x188, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x11c, 0x6, [@m_connmark={0x118, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x40, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2ec}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) (fail_nth: 4) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x8, @pix={0x2000, 0x0, 0x34565348, 0x5, 0x0, 0x5}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00', @ANYRESHEX=0x0, @ANYBLOB="0100000000000000000034000000", @ANYRES32, @ANYBLOB="14005500f2a061aa1180009b0e07efaadd67505c0a0006"], 0x4c}, 0x1, 0x0, 0x0, 0xffd53e6684c53ef9}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000100), 0x4) 8.626812211s ago: executing program 2 (id=784): syz_usb_connect(0x0, 0xc23, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000bcc38110050b91175704010203010902110c04fd00000009049d04057e4f3b080824060000468c120524007f000d240f01a40000000008f6150505241503000a24070805000200050006240600009205240002000d240f010800000000000004fd0524010004072414b80607000c241b060000000602ff7f0397241309ebfbc8a5ceb8e4440105a21c6da2920dfaed363d5291381d818a6a02f02972921fd5d1c5d696265ed6e193ae0e9fefff021d83191bec527571e36080f9d9a14d99a769dba779c88541dce68c266b9643eb14f129b4fb9aa68b24f6f6a8cd18e3bbe00a0c2a0b786bf33749521b633cc1a22ca203091f5f3284859539786af97428a8b3222ebea899f74c16822a0d59329a518309058b1f2000040820072501800001010905071000020407a307250102fa0700f611a15112d5db9111bca3e1876f8f2b36053f50531982fe0926db2f674b2d567146594690ae05ecc9195aeac3c127ab94c2a961df0c2538e5493482e5a26fe70ebbaa28e019d07cc0ededf506f37b734a31f1db7a9bf13f162b96f5123531e6586f9a30f53ba96c97d644b9b5462fc5b6745858b2e2e932d1ee5f8c5b2ce8ccd086006960c37ea6ce01454a1d6b08effdd34db9e3ad0d66e611cfd653aefc90eb52c607d5c8306709d98a5663e7f8a6cf5f67a3b68c9e92408fa1de0d95662ba0690d0b93eb0493b7899989c16efd3960f37153e0d124010f15df7b4baa6ea2666f44c212ccbdd89f67a14f08a7374746026a1f0ade09050d400800b80b03310248d4c4e81350d1fa5bbce7829076c9589882f0706e31550f367cbdd00d1a608ddf2ec93da1bc96981d5eb67003cabf090504000002f902200725018205070009050d8508000600080904d5090e0e0100f2112402010202"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x84, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xf, 0x7, 0x3b, 0x8}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}]}]}]}, 0x84}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@local}) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x4, 0xc0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x64, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x27, 0xff, 0x1, {0x22, 0x359}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xf, 0x9, 0xb, 0x8, 0x9}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "dcab456d1ef909322dc7b94904a38868"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xff, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x0, 0x42, 0x2, 0x9, 0x13, 0xd}]}, 0x2, [{0x2c, &(0x7f0000000100)=@string={0x2c, 0x3, "ee98a31aa6fef0b8f252413d62b046f7f4e123a558a3f7a30e291fe536ae4509262869265800895c3bf7"}}, {0x0, 0x0}]}) 8.621638907s ago: executing program 3 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)=@expire={0x138, 0x18, 0x1, 0x70bd29, 0x0, {{{@in=@multicast1, @in=@loopback}, {@in=@broadcast}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x0, 0xfffffffffffffffd}, {0x6}}}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x65}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.48115045s ago: executing program 0 (id=786): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') lseek(r0, 0x3ff, 0x20) 8.473398467s ago: executing program 0 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) r3 = syz_io_uring_setup(0xf3b, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async, rerun: 32) io_uring_enter(r3, 0x6b1e, 0x0, 0x4, 0x0, 0x0) (async) read$eventfd(r2, &(0x7f0000000f40), 0x8) (async, rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 8.374788848s ago: executing program 3 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r1, r2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000d80)={0x1f, 0xb, 0x0, "2ac0749f7a19d71029970ac5e8092a6c6bd27d45d01f1af84d4f7d0b48a36eb2"}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r6, @in={{0x2, 0x4e22, @empty}}, 0x0, 0xffff}, 0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={r6, 0x9, 0x10, 0x7, 0x100000001}, &(0x7f0000000100)=0x18) close_range(0xffffffffffffffff, r0, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x25dfdbfd, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x48842) 8.19645474s ago: executing program 3 (id=789): r0 = socket$packet(0x11, 0x3, 0x300) r1 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000001c0)=""/13) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r3, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xffffffbd}}}}, 0x28}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xf1, 0x100000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.125320783s ago: executing program 3 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) 7.856816912s ago: executing program 3 (id=791): pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, 0xffffffffffffffff, 0x0) 4.425638864s ago: executing program 2 (id=792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000000080002400000090000000840000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r1 = syz_io_uring_setup(0x5a60, &(0x7f0000000080)={0x0, 0xfffffffc, 0x2, 0x0, 0xfd}, &(0x7f0000000100), &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x34eb, &(0x7f0000000140)={0x0, 0xcaab, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00', 0x60}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr={{0x18, 0x29, 0x43, {0x0, 0x0, 0x2}}}], 0x18}, 0x8000) keyctl$session_to_parent(0x12) io_uring_enter(r1, 0x2003, 0x0, 0x0, 0x0, 0x0) 4.403133954s ago: executing program 1 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 4.20062941s ago: executing program 0 (id=794): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000003c0)={0x7, 0xb32, 0x0, &(0x7f00000013c0)="08d27964236601a2bb23ea470402", 0x0, 0xe}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r3, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r4 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r4, 0x541b, &(0x7f0000000ec0)) 3.422175548s ago: executing program 4 (id=795): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) lseek(r0, 0xfffffffffffdffff, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x80000, @local}, 0x0, {[0x6]}}, 0x5c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffe43, 0x8000}, 0xfffffdef}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 3.345625324s ago: executing program 1 (id=796): r0 = semget$private(0x0, 0x2, 0x251) semctl$GETVAL(r0, 0x4, 0xc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r1, &(0x7f0000000040)="9f38b6bedc3c1481c52c55ab508d19ed14ed9aac5a56d20ddd7f65f463ee79f120a001a06d5572fd483231e7096f3bb322ff489b4d87c11c1a3768bfbf987b050222714546085ea3c9e2e5b53c4d5b27994a54f267ac613f81521a935645cef7489bd066ce42f5af193941b0baef12ae460195ea4a53a461b48bb5124d3e16f90bc7c3c5ca3391f23a0b8e93f41923d748adbcd176b8", 0x96, 0x24058800, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() syz_emit_ethernet(0x36, &(0x7f0000000100)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @generic={0x311, 0x6007, 0x6, 0xd, 0x3, @remote, "79116dea0a4d3424e12085c19e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, "3e6aaa"}}}}, &(0x7f00000001c0)={0x1, 0x3, [0x8bb, 0x5dc, 0xb2f, 0xcab]}) read$FUSE(r1, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 1.480889912s ago: executing program 0 (id=797): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000200)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\x804\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U\xe8ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000010000008de068c9ea4531de4864a8362f2923b43eade0f03fbcb1baf8f93ea05b443b5120ccd259cadc72f1e8988c5d6c078913bc01b27ffd4ee23ed95c1171b803d077351920e3132e8d334aa395077df25a82ec4e44b4e73f6f09d34b2b9989b13c483b50130140be5d8bc720de6f56570f9eb16183572579282ae1b9a7d86e153bb4a04431c8d3f9c8e6c863c5bb22d7e259e1d9a4aee445ea74193c3d783fb63dfdfe1a470d3f", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000010000000000"]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x1e, 0x23, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r10 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ftruncate(r10, 0x10001) 1.182248191s ago: executing program 2 (id=798): socket(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x6) r4 = openat$vicodec0(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r4, 0xc0405619, &(0x7f0000000200)={0x5, 0x4, "9b69c171416bf57c6b549adceb172f01ad4c66f7bef6142c", {0xfffffffd, 0x7}, 0xfffffff7}) sendto$inet6(r3, &(0x7f00000001c0)="d972ab2e7c88ef2f3afc4c7005d47677c5a953ed579fd216970f4d64b39dbd205003b1cb9e8d4388499567ea9e7b343699a1909f4ec0523466a78862434b39fb86990c55ead15b6486d9e318b5903bff96a19c", 0x53, 0x80, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x95}, 0x1c) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x2, 0x2, 0x3, 0x4, 0x7, 0x28a3ad31}, 0x1c) 0s ago: executing program 1 (id=799): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) kernel console output (not intermixed with test programs): _after_hwframe+0x84/0x8e [ 314.187213][ T7799] RIP: 0023:0xf7fd5579 [ 314.191296][ T7799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.210926][ T7799] RSP: 002b:00000000f57565a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 314.219360][ T7799] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5756620 [ 314.227345][ T7799] RDX: 000000000000000f RSI: 00000000f745bff4 RDI: 0000000000000000 [ 314.235345][ T7799] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 314.243328][ T7799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.251310][ T7799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.259301][ T7799] [ 314.401841][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.456864][ T4621] Bluetooth: hci4: command 0x0c1a tx timeout [ 314.466680][ T4621] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.541348][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 314.618328][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.711915][ T5287] r8712u: register rtl8712_netdev_ops to netdev_ops [ 314.719046][ T5287] usb 4-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 314.728832][ T11] hsr_slave_0: left promiscuous mode [ 314.734636][ T11] hsr_slave_1: left promiscuous mode [ 314.747627][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.765485][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.780718][ T5287] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 314.788966][ T5287] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 314.796513][ T5287] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 314.805404][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.821711][ T5287] usb 4-1: USB disconnect, device number 43 [ 314.841593][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.919803][ T11] veth0_macvtap: left promiscuous mode [ 314.934811][ T11] veth1_vlan: left promiscuous mode [ 314.949166][ T11] veth0_vlan: left promiscuous mode [ 315.896917][ T4621] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.082084][ T11] team0 (unregistering): Port device team_slave_1 removed [ 316.154783][ T11] team0 (unregistering): Port device team_slave_0 removed [ 316.269279][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 316.456863][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 316.469905][ T25] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 316.479777][ T25] usb 2-1: config 0 has no interface number 0 [ 316.485981][ T25] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 316.497827][ T25] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 316.510493][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 316.520108][ T25] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 316.529259][ T25] usb 2-1: Product: syz [ 316.533736][ T25] usb 2-1: Manufacturer: syz [ 316.536809][ T4621] Bluetooth: hci4: command 0x0c1a tx timeout [ 316.541598][ T25] usb 2-1: SerialNumber: syz [ 316.552687][ T25] usb 2-1: config 0 descriptor?? [ 316.564904][ T25] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 316.573404][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 316.584686][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 316.602986][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 316.618402][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 316.623338][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 316.634253][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 316.662528][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 316.683284][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 316.704234][ T25] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 316.724794][ T25] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 317.003036][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 317.024656][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.032148][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.046993][ T7759] bridge_slave_0: entered allmulticast mode [ 317.053916][ T7759] bridge_slave_0: entered promiscuous mode [ 317.086725][ T7819] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 317.179765][ T7819] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.201774][ T7820] netlink: 'syz.3.548': attribute type 15 has an invalid length. [ 317.203270][ T5233] usb 2-1: USB disconnect, device number 33 [ 317.224770][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 317.237214][ T7820] netlink: 666 bytes leftover after parsing attributes in process `syz.3.548'. [ 317.256377][ T5233] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 317.269806][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.292496][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.301965][ T5233] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 317.326103][ T7759] bridge_slave_1: entered allmulticast mode [ 317.337954][ T5233] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 317.362279][ T7759] bridge_slave_1: entered promiscuous mode [ 317.396163][ T5233] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 317.422906][ T5233] keyspan 2-1:0.107: device disconnected [ 317.528081][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.534572][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552356][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.588927][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.661359][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.553'. [ 317.686881][ T5287] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 317.708748][ T7759] team0: Port device team_slave_0 added [ 317.726832][ T5301] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 317.738611][ T7759] team0: Port device team_slave_1 added [ 317.790309][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.805460][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.860226][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.860398][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.886275][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.896936][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.903934][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.926622][ T5287] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 317.939364][ T5290] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 317.959516][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.967776][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.980416][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.990539][ T5301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.994816][ T5287] usb 5-1: config 0 descriptor?? [ 318.010801][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.033258][ T5301] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 318.079358][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.109696][ T5301] usb 3-1: config 0 descriptor?? [ 318.119498][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.141314][ T5290] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 318.169798][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.171335][ T7759] hsr_slave_0: entered promiscuous mode [ 318.199846][ T5290] usb 4-1: config 0 descriptor?? [ 318.201805][ T7759] hsr_slave_1: entered promiscuous mode [ 318.256744][ T7759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.284824][ T7759] Cannot create hsr debugfs directory [ 318.558536][ T5301] corsair-psu 0003:1B1C:1C0D.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 318.617207][ T4621] Bluetooth: hci4: command 0x0c1a tx timeout [ 318.637435][ T5301] corsair-psu 0003:1B1C:1C0D.001B: unable to initialize device (-38) [ 318.639571][ T5287] usbhid 5-1:0.0: can't add hid device: -71 [ 318.666832][ T5301] corsair-psu 0003:1B1C:1C0D.001B: probe with driver corsair-psu failed with error -38 [ 318.688170][ T5287] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.703121][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 318.719235][ T5287] usb 5-1: USB disconnect, device number 26 [ 318.796861][ T5290] usb 3-1: USB disconnect, device number 32 [ 318.834869][ T5233] usb 4-1: USB disconnect, device number 44 [ 319.016999][ T5299] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 319.177272][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 319.196760][ T5299] usb 2-1: config 253 has an invalid interface number: 157 but max is 3 [ 319.206967][ T5299] usb 2-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 319.216166][ T7759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.223493][ T5299] usb 2-1: config 253 has an invalid interface number: 213 but max is 3 [ 319.234775][ T7759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.241696][ T5299] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 319.252617][ T5299] usb 2-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 319.257350][ T7759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.271643][ T5299] usb 2-1: config 253 has no interface number 0 [ 319.272662][ T7759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.286207][ T5299] usb 2-1: config 253 has no interface number 1 [ 319.293165][ T5299] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 319.305595][ T5299] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 319.317969][ T5299] usb 2-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 319.341595][ T5299] usb 2-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 319.376254][ T5299] usb 2-1: config 253 interface 157 has no altsetting 0 [ 319.440379][ T5299] usb 2-1: config 253 interface 213 has no altsetting 0 [ 319.486724][ T5299] usb 2-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 319.506208][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.532987][ T5299] usb 2-1: Product: syz [ 319.551671][ T5299] usb 2-1: Manufacturer: syz [ 319.572650][ T5299] usb 2-1: SerialNumber: syz [ 319.623805][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.674791][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.719545][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.726749][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.817086][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.824357][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.840404][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 319.878136][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.940044][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.988491][ T7759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.007919][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 320.023837][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 320.038266][ T5299] r8712u: register rtl8712_netdev_ops to netdev_ops [ 320.054554][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.067615][ T5299] usb 2-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 320.091769][ T8] usb 3-1: Product: syz [ 320.103237][ T5299] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 320.120631][ T8] usb 3-1: Manufacturer: syz [ 320.125414][ T8] usb 3-1: SerialNumber: syz [ 320.149745][ T5299] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 320.169814][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.174374][ T5299] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 320.200569][ T8] usb 3-1: config 0 descriptor?? [ 320.225067][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 320.243711][ T5299] usb 2-1: Found UVC 0.00 device syz (0b05:1791) [ 320.250733][ T5299] usb 2-1: No valid video chain found. [ 320.257144][ T5299] r8712u: register rtl8712_netdev_ops to netdev_ops [ 320.263823][ T5299] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 320.272324][ T5299] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 320.279188][ T5299] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 320.291656][ T5299] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 320.312948][ T5299] usb 2-1: USB disconnect, device number 34 [ 320.514646][ T7759] veth0_vlan: entered promiscuous mode [ 320.591286][ T7759] veth1_vlan: entered promiscuous mode [ 320.741772][ T7759] veth0_macvtap: entered promiscuous mode [ 320.776989][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 320.787454][ T7759] veth1_macvtap: entered promiscuous mode [ 320.972754][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.000196][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.017692][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.031107][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.044312][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.055418][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.109033][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.143617][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.192517][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.232213][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.256619][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.276498][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.296618][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.343913][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.419371][ T8] gspca_sonixj: reg_w1 err -71 [ 321.426200][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.478897][ T7759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.496925][ T8] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 321.514543][ T8] usb 3-1: USB disconnect, device number 33 [ 321.586758][ T7759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.623027][ T7759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.658207][ T7759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.879269][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.907102][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.035918][ T2566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.088953][ T2566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.148234][ T5301] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 322.358328][ T7923] FAULT_INJECTION: forcing a failure. [ 322.358328][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.376661][ T5301] usb 2-1: Using ep0 maxpacket: 8 [ 322.417903][ T7923] CPU: 1 UID: 0 PID: 7923 Comm: syz.2.565 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 322.428583][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.438711][ T7923] Call Trace: [ 322.442045][ T7923] [ 322.445020][ T7923] dump_stack_lvl+0x241/0x360 [ 322.449735][ T7923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.454975][ T7923] ? __pfx__printk+0x10/0x10 [ 322.459715][ T7923] ? __pfx_lock_release+0x10/0x10 [ 322.464796][ T7923] should_fail_ex+0x3b0/0x4e0 [ 322.469533][ T7923] _copy_from_iter+0x1ed/0x1d60 [ 322.474433][ T7923] ? __virt_addr_valid+0x183/0x530 [ 322.479587][ T7923] ? __pfx_lock_release+0x10/0x10 [ 322.484656][ T7923] ? __alloc_skb+0x28f/0x440 [ 322.489315][ T7923] ? __pfx__copy_from_iter+0x10/0x10 [ 322.494654][ T7923] ? __virt_addr_valid+0x183/0x530 [ 322.499799][ T7923] ? __virt_addr_valid+0x183/0x530 [ 322.505114][ T7923] ? __virt_addr_valid+0x45f/0x530 [ 322.510258][ T7923] ? __check_object_size+0x48e/0x900 [ 322.515609][ T7923] netlink_sendmsg+0x73d/0xcb0 [ 322.520564][ T7923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.525916][ T7923] ? __pfx_lock_release+0x10/0x10 [ 322.531049][ T7923] ? aa_sock_msg_perm+0x91/0x160 [ 322.536040][ T7923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.541656][ T7923] __sock_sendmsg+0x221/0x270 [ 322.546378][ T7923] ____sys_sendmsg+0x52a/0x7e0 [ 322.551198][ T7923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.556545][ T7923] __sys_sendmsg+0x292/0x380 [ 322.561183][ T7923] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.566354][ T7923] ? __pfx_vfs_write+0x10/0x10 [ 322.571294][ T7923] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.577966][ T7923] ? lockdep_hardirqs_on+0x99/0x150 [ 322.583246][ T7923] __do_fast_syscall_32+0xb4/0x110 [ 322.588413][ T7923] ? exc_page_fault+0x590/0x8c0 [ 322.593357][ T7923] do_fast_syscall_32+0x34/0x80 [ 322.598288][ T7923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.604677][ T7923] RIP: 0023:0xf747d579 [ 322.608792][ T7923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.628559][ T7923] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 322.637035][ T7923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 322.645062][ T7923] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.653089][ T7923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.661118][ T7923] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.669140][ T7923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.677190][ T7923] [ 322.757278][ T5301] usb 2-1: config 254 has an invalid interface number: 167 but max is 0 [ 322.795332][ T5301] usb 2-1: config 254 has no interface number 0 [ 322.920688][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 323.071766][ T5301] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 323.086094][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.128400][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.566'. [ 323.137682][ T7935] netlink: 'syz.4.566': attribute type 7 has an invalid length. [ 323.145445][ T7935] netlink: 'syz.4.566': attribute type 8 has an invalid length. [ 323.154054][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 323.175588][ T7935] syz_tun: entered promiscuous mode [ 323.206677][ T7935] batadv_slave_1: entered promiscuous mode [ 323.216138][ T7935] gretap0: entered promiscuous mode [ 323.223274][ T5301] usb 2-1: Product: syz [ 323.274939][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 323.287868][ T5301] usb 2-1: Manufacturer: syz [ 323.324350][ T5301] usb 2-1: SerialNumber: syz [ 323.574966][ T5301] mxuport 2-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-32) [ 323.622421][ T5301] mxuport 2-1:254.167: probe with driver mxuport failed with error -32 [ 323.707387][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 323.861989][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.875380][ T5301] usb 2-1: USB disconnect, device number 35 [ 323.940717][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.017818][ T8] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 324.114968][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.156212][ T8] usb 3-1: config 0 descriptor?? [ 324.602857][ T6989] syz_tun (unregistering): left promiscuous mode [ 324.825488][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 324.848743][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.917961][ T8] usb 3-1: USB disconnect, device number 34 [ 324.936760][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 325.131248][ T2566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.691191][ T2566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.775029][ T7975] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 325.806863][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.831415][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.843973][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.855108][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.865908][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.880164][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.923391][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.936413][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.023269][ T4621] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 326.055542][ T7975] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 326.161115][ T2566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.329343][ T2566] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.905462][ T2566] bridge_slave_1: left allmulticast mode [ 326.943217][ T2566] bridge_slave_1: left promiscuous mode [ 326.976975][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.071719][ T2566] bridge_slave_0: left allmulticast mode [ 327.078218][ T2566] bridge_slave_0: left promiscuous mode [ 327.112183][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.614703][ T2566] gretap0 (unregistering): left promiscuous mode [ 327.635420][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.669829][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.846853][ T5285] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 327.976814][ T4621] Bluetooth: hci4: command tx timeout [ 328.016957][ T5285] usb 2-1: device descriptor read/64, error -71 [ 328.199419][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.208640][ T5233] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 328.253760][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.289895][ T5285] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 328.293638][ T2566] bond0 (unregistering): Released all slaves [ 328.366741][ T5233] usb 4-1: Using ep0 maxpacket: 16 [ 328.375223][ T7981] chnl_net:caif_netlink_parms(): no params data found [ 328.410724][ T5233] usb 4-1: config 253 has an invalid interface number: 157 but max is 3 [ 328.453358][ T5233] usb 4-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 328.485509][ T5233] usb 4-1: config 253 has an invalid interface number: 213 but max is 3 [ 328.496938][ T5285] usb 2-1: device descriptor read/64, error -71 [ 328.512842][ T5233] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 328.542195][ T5233] usb 4-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 328.555754][ T5233] usb 4-1: config 253 has no interface number 0 [ 328.570092][ T5233] usb 4-1: config 253 has no interface number 1 [ 328.583943][ T5233] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 328.599890][ T5233] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 328.623780][ T5285] usb usb2-port1: attempt power cycle [ 328.638235][ T5233] usb 4-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 328.713682][ T5233] usb 4-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 328.755691][ T5233] usb 4-1: config 253 interface 157 has no altsetting 0 [ 328.765309][ T5233] usb 4-1: config 253 interface 213 has no altsetting 0 [ 328.785322][ T5233] usb 4-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 328.816407][ T5233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.867549][ T5233] usb 4-1: Product: syz [ 328.890807][ T5233] usb 4-1: Manufacturer: syz [ 328.916907][ T5233] usb 4-1: SerialNumber: syz [ 329.006800][ T5285] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 329.007706][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.051000][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.059363][ T5285] usb 2-1: device descriptor read/8, error -71 [ 329.063094][ T7981] bridge_slave_0: entered allmulticast mode [ 329.082131][ T7981] bridge_slave_0: entered promiscuous mode [ 329.331633][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.347113][ T5285] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 329.386871][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.399849][ T5285] usb 2-1: device descriptor read/8, error -71 [ 329.418320][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.425256][ T7981] bridge_slave_1: entered allmulticast mode [ 329.467909][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.475846][ T7981] bridge_slave_1: entered promiscuous mode [ 329.518262][ T5285] usb usb2-port1: unable to enumerate USB device [ 329.621837][ T5233] r8712u: register rtl8712_netdev_ops to netdev_ops [ 329.661176][ T5233] usb 4-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 329.704194][ T2566] batadv_slave_1: left promiscuous mode [ 329.730615][ T5233] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 329.769979][ T5233] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 329.777662][ T2566] hsr_slave_0: left promiscuous mode [ 329.793612][ T2566] hsr_slave_1: left promiscuous mode [ 329.799216][ T5233] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 329.809270][ T2566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.835299][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.850962][ T5233] usb 4-1: Found UVC 0.00 device syz (0b05:1791) [ 329.858361][ T5233] usb 4-1: No valid video chain found. [ 329.865399][ T5233] r8712u: register rtl8712_netdev_ops to netdev_ops [ 329.873603][ T2566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.882679][ T5233] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 329.889754][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.900659][ T5233] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 329.919235][ T5233] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 329.941508][ T2566] veth1_macvtap: left promiscuous mode [ 329.949776][ T5233] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 329.959227][ T2566] veth0_macvtap: left promiscuous mode [ 329.974092][ T5233] usb 4-1: USB disconnect, device number 45 [ 329.980552][ T2566] veth1_vlan: left promiscuous mode [ 329.995934][ T2566] veth0_vlan: left promiscuous mode [ 330.057160][ T4621] Bluetooth: hci4: command tx timeout [ 330.197525][ T7977] syz.2.574 (7977): drop_caches: 1 [ 330.369937][ T8029] FAULT_INJECTION: forcing a failure. [ 330.369937][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 330.405169][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.3.580 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 330.415962][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.426160][ T8029] Call Trace: [ 330.429463][ T8029] [ 330.432416][ T8029] dump_stack_lvl+0x241/0x360 [ 330.437123][ T8029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.442432][ T8029] ? __pfx__printk+0x10/0x10 [ 330.447053][ T8029] ? ref_tracker_alloc+0x332/0x490 [ 330.452189][ T8029] should_fail_ex+0x3b0/0x4e0 [ 330.456903][ T8029] ? skb_clone+0x20c/0x390 [ 330.461343][ T8029] should_failslab+0xac/0x100 [ 330.466070][ T8029] ? skb_clone+0x20c/0x390 [ 330.470528][ T8029] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 330.475956][ T8029] skb_clone+0x20c/0x390 [ 330.480221][ T8029] __netlink_deliver_tap+0x3cc/0x7c0 [ 330.485530][ T8029] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.490760][ T8029] netlink_deliver_tap+0x19d/0x1b0 [ 330.495914][ T8029] netlink_unicast+0x7c4/0x990 [ 330.500732][ T8029] ? __pfx_netlink_unicast+0x10/0x10 [ 330.506038][ T8029] ? __virt_addr_valid+0x183/0x530 [ 330.511168][ T8029] ? __check_object_size+0x48e/0x900 [ 330.516507][ T8029] netlink_sendmsg+0x8e4/0xcb0 [ 330.521343][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.526652][ T8029] ? __pfx_lock_release+0x10/0x10 [ 330.531699][ T8029] ? aa_sock_msg_perm+0x91/0x160 [ 330.536658][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.541963][ T8029] __sock_sendmsg+0x221/0x270 [ 330.546670][ T8029] ____sys_sendmsg+0x52a/0x7e0 [ 330.551459][ T8029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.556812][ T8029] __sys_sendmsg+0x292/0x380 [ 330.561515][ T8029] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.566658][ T8029] ? __pfx_vfs_write+0x10/0x10 [ 330.571509][ T8029] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 330.578132][ T8029] ? lockdep_hardirqs_on+0x99/0x150 [ 330.583359][ T8029] __do_fast_syscall_32+0xb4/0x110 [ 330.588583][ T8029] ? exc_page_fault+0x590/0x8c0 [ 330.593464][ T8029] do_fast_syscall_32+0x34/0x80 [ 330.598332][ T8029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.604684][ T8029] RIP: 0023:0xf7fb6579 [ 330.608797][ T8029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 330.628595][ T8029] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 330.637036][ T8029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 330.645038][ T8029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.653134][ T8029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.661124][ T8029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 330.669144][ T8029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.677144][ T8029] [ 330.684858][ T8029] netlink: 'syz.3.580': attribute type 11 has an invalid length. [ 330.905641][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 330.973751][ T29] audit: type=1326 audit(1728867399.976:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.000929][ T29] audit: type=1326 audit(1728867399.976:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.051715][ T29] audit: type=1326 audit(1728867399.976:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.112787][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.125706][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.140894][ T29] audit: type=1326 audit(1728867399.986:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.184054][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.192092][ T29] audit: type=1326 audit(1728867399.986:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.225421][ T29] audit: type=1326 audit(1728867399.986:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.253816][ T29] audit: type=1326 audit(1728867399.986:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.276447][ T25] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 331.284151][ T29] audit: type=1326 audit(1728867399.986:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.315519][ T29] audit: type=1326 audit(1728867399.986:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.343064][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.390159][ T29] audit: type=1326 audit(1728867399.986:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 331.444668][ T25] usb 3-1: config 0 descriptor?? [ 331.889824][ T25] corsair-psu 0003:1B1C:1C0D.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 332.016948][ T25] corsair-psu 0003:1B1C:1C0D.001D: unable to initialize device (-38) [ 332.065972][ T25] corsair-psu 0003:1B1C:1C0D.001D: probe with driver corsair-psu failed with error -38 [ 332.138346][ T4621] Bluetooth: hci4: command tx timeout [ 332.172986][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 332.233578][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 333.334659][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.374841][ T5287] usb 3-1: USB disconnect, device number 35 [ 333.445122][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.585219][ T7981] team0: Port device team_slave_0 added [ 333.603096][ T7981] team0: Port device team_slave_1 added [ 333.711255][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.721915][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.748556][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.761386][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.768700][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.795140][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.909845][ T7981] hsr_slave_0: entered promiscuous mode [ 333.929345][ T7981] hsr_slave_1: entered promiscuous mode [ 333.948981][ T7981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.977390][ T7981] Cannot create hsr debugfs directory [ 334.217157][ T4621] Bluetooth: hci4: command tx timeout [ 334.256211][ T8075] program syz.2.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.291634][ T4621] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 334.786769][ T5233] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 334.939091][ T7981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.966703][ T5233] usb 3-1: Using ep0 maxpacket: 8 [ 334.986983][ T5233] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 335.015377][ T7981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.028927][ T5233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.058161][ T7981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.066050][ T5233] usb 3-1: Product: syz [ 335.076482][ T7981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.100398][ T5233] usb 3-1: Manufacturer: syz [ 335.115310][ T5233] usb 3-1: SerialNumber: syz [ 335.152306][ T5233] usb 3-1: config 0 descriptor?? [ 335.175163][ T5233] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 335.383026][ T7981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.460697][ T7981] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.591309][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.598608][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.638343][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.645571][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.972957][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.220279][ T7981] veth0_vlan: entered promiscuous mode [ 336.294025][ T7981] veth1_vlan: entered promiscuous mode [ 336.417223][ T5233] gspca_sonixj: reg_w1 err -71 [ 336.424446][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.473635][ T7981] veth0_macvtap: entered promiscuous mode [ 336.519286][ T7981] veth1_macvtap: entered promiscuous mode [ 336.593713][ T5233] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 336.652108][ T5233] usb 3-1: USB disconnect, device number 36 [ 336.675918][ T7981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.714684][ T7981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.753260][ T7981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.773078][ T7981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.808717][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.819946][ T7981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.830814][ T7981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.840795][ T7981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.852937][ T7981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.862954][ T7981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.873508][ T7981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.884915][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.895400][ T7981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.904360][ T7981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.916731][ T7981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.925503][ T7981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.210444][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.226394][ T8139] FAULT_INJECTION: forcing a failure. [ 337.226394][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 337.245210][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.257559][ T8139] CPU: 0 UID: 0 PID: 8139 Comm: syz.1.607 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 337.268332][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.278640][ T8139] Call Trace: [ 337.281954][ T8139] [ 337.284910][ T8139] dump_stack_lvl+0x241/0x360 [ 337.289631][ T8139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.294954][ T8139] ? __pfx__printk+0x10/0x10 [ 337.299585][ T8139] ? __kmalloc_node_noprof+0xb7/0x440 [ 337.305004][ T8139] ? __pfx___might_resched+0x10/0x10 [ 337.310326][ T8139] should_fail_ex+0x3b0/0x4e0 [ 337.315046][ T8139] should_failslab+0xac/0x100 [ 337.320204][ T8139] __kmalloc_node_noprof+0xdf/0x440 [ 337.325451][ T8139] ? __kvmalloc_node_noprof+0x72/0x190 [ 337.330968][ T8139] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 337.336482][ T8139] __kvmalloc_node_noprof+0x72/0x190 [ 337.341811][ T8139] alloc_netdev_mqs+0x9b/0x1000 [ 337.346695][ T8139] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 337.352194][ T8139] ip6_tnl_locate+0x607/0x820 [ 337.357046][ T8139] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 337.362299][ T8139] ? __might_fault+0xc6/0x120 [ 337.367029][ T8139] ? ip6_tnl_siocdevprivate+0x9c3/0x1700 [ 337.372714][ T8139] ip6_tnl_siocdevprivate+0x9e9/0x1700 [ 337.378244][ T8139] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 337.384189][ T8139] ? full_name_hash+0x93/0xe0 [ 337.389019][ T8139] dev_ifsioc+0xaec/0xe70 [ 337.393400][ T8139] ? __pfx_dev_ifsioc+0x10/0x10 [ 337.398291][ T8139] ? dev_load+0x21/0x1f0 [ 337.402570][ T8139] dev_ioctl+0x881/0x1340 [ 337.406931][ T8139] sock_ioctl+0x7ef/0x8e0 [ 337.411305][ T8139] ? __pfx_sock_ioctl+0x10/0x10 [ 337.416200][ T8139] compat_sock_ioctl+0x291/0xf20 [ 337.421181][ T8139] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 337.426741][ T8139] ? __fget_files+0x29/0x470 [ 337.431358][ T8139] ? __fget_files+0x3f3/0x470 [ 337.436072][ T8139] __se_compat_sys_ioctl+0x510/0xc90 [ 337.441418][ T8139] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 337.447260][ T8139] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.453281][ T8139] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.459692][ T8139] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 337.466352][ T8139] ? lockdep_hardirqs_on+0x99/0x150 [ 337.471584][ T8139] __do_fast_syscall_32+0xb4/0x110 [ 337.476726][ T8139] ? exc_page_fault+0x590/0x8c0 [ 337.481610][ T8139] do_fast_syscall_32+0x34/0x80 [ 337.486523][ T8139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.492896][ T8139] RIP: 0023:0xf7fdf579 [ 337.496987][ T8139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 337.516658][ T8139] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 337.525116][ T8139] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 337.533127][ T8139] RDX: 0000000020000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.541123][ T8139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.549133][ T8139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 337.557126][ T8139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.565133][ T8139] [ 337.620498][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 337.668277][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 337.691963][ T8137] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 337.722561][ T8144] netlink: 104 bytes leftover after parsing attributes in process `syz.2.609'. [ 337.732836][ T8144] netlink: 104 bytes leftover after parsing attributes in process `syz.2.609'. [ 337.749706][ T5363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.766706][ T5363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.937674][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 337.937706][ T29] audit: type=1326 audit(1728867406.946:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.020009][ T29] audit: type=1326 audit(1728867406.946:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.043345][ T29] audit: type=1326 audit(1728867407.036:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.065741][ T29] audit: type=1326 audit(1728867407.036:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.067249][ T8157] usb usb1: usbfs: process 8157 (syz.2.613) did not claim interface 0 before use [ 338.089463][ T29] audit: type=1326 audit(1728867407.036:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.121103][ T29] audit: type=1326 audit(1728867407.036:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.143719][ T29] audit: type=1326 audit(1728867407.036:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.165815][ T29] audit: type=1326 audit(1728867407.036:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.188006][ T29] audit: type=1326 audit(1728867407.036:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.210035][ T29] audit: type=1326 audit(1728867407.036:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 338.466713][ T5287] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 338.656648][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 338.744369][ T5287] usb 2-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 338.877146][ T5287] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 338.886271][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.945939][ T5287] usb 2-1: Product: syz [ 338.958923][ T5287] usb 2-1: Manufacturer: syz [ 338.963616][ T5287] usb 2-1: SerialNumber: syz [ 338.998950][ T5287] usb 2-1: config 0 descriptor?? [ 339.027241][ T5287] usb 2-1: bad CDC descriptors [ 339.032610][ T5287] usb 2-1: unsupported MDLM descriptors [ 339.335520][ T8] usb 2-1: USB disconnect, device number 40 [ 339.625525][ T8193] FAULT_INJECTION: forcing a failure. [ 339.625525][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.654955][ T8195] FAULT_INJECTION: forcing a failure. [ 339.654955][ T8195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.679173][ T8193] CPU: 0 UID: 0 PID: 8193 Comm: syz.4.621 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 339.689931][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.700007][ T8193] Call Trace: [ 339.703301][ T8193] [ 339.706247][ T8193] dump_stack_lvl+0x241/0x360 [ 339.710952][ T8193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.716168][ T8193] ? __pfx__printk+0x10/0x10 [ 339.720801][ T8193] ? snprintf+0xda/0x120 [ 339.725076][ T8193] should_fail_ex+0x3b0/0x4e0 [ 339.729795][ T8193] _copy_to_user+0x2f/0xb0 [ 339.734247][ T8193] simple_read_from_buffer+0xca/0x150 [ 339.739646][ T8193] proc_fail_nth_read+0x1e9/0x250 [ 339.744690][ T8193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.750253][ T8193] ? rw_verify_area+0x55e/0x6f0 [ 339.755120][ T8193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.760681][ T8193] vfs_read+0x201/0xbc0 [ 339.764847][ T8193] ? __pfx_lock_release+0x10/0x10 [ 339.769899][ T8193] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 339.775480][ T8193] ? __pfx_vfs_read+0x10/0x10 [ 339.780189][ T8193] ? __fget_files+0x3f3/0x470 [ 339.784901][ T8193] ? fdget_pos+0x24e/0x320 [ 339.789329][ T8193] ksys_read+0x183/0x2b0 [ 339.793578][ T8193] ? __pfx_ksys_read+0x10/0x10 [ 339.798348][ T8193] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 339.804979][ T8193] ? lockdep_hardirqs_on+0x99/0x150 [ 339.810194][ T8193] __do_fast_syscall_32+0xb4/0x110 [ 339.815312][ T8193] ? exc_page_fault+0x590/0x8c0 [ 339.820189][ T8193] do_fast_syscall_32+0x34/0x80 [ 339.825052][ T8193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.831418][ T8193] RIP: 0023:0xf7fb7579 [ 339.835521][ T8193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 339.855153][ T8193] RSP: 002b:00000000f57365a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 339.863607][ T8193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5736620 [ 339.871608][ T8193] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 339.879606][ T8193] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 339.887594][ T8193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.895575][ T8193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.903675][ T8193] [ 339.908233][ T8195] CPU: 0 UID: 0 PID: 8195 Comm: syz.3.620 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 339.918855][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.928938][ T8195] Call Trace: [ 339.932234][ T8195] [ 339.935175][ T8195] dump_stack_lvl+0x241/0x360 [ 339.939884][ T8195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.945116][ T8195] ? __pfx__printk+0x10/0x10 [ 339.949777][ T8195] ? snprintf+0xda/0x120 [ 339.954044][ T8195] should_fail_ex+0x3b0/0x4e0 [ 339.958760][ T8195] _copy_to_user+0x2f/0xb0 [ 339.963331][ T8195] simple_read_from_buffer+0xca/0x150 [ 339.968743][ T8195] proc_fail_nth_read+0x1e9/0x250 [ 339.973803][ T8195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.979383][ T8195] ? rw_verify_area+0x55e/0x6f0 [ 339.984253][ T8195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.989821][ T8195] vfs_read+0x201/0xbc0 [ 339.993995][ T8195] ? __pfx_lock_release+0x10/0x10 [ 339.999041][ T8195] ? __pfx_vfs_read+0x10/0x10 [ 340.003783][ T8195] ? __fget_files+0x3f3/0x470 [ 340.008529][ T8195] ? fdget_pos+0x24e/0x320 [ 340.012967][ T8195] ksys_read+0x183/0x2b0 [ 340.017228][ T8195] ? __pfx_ksys_read+0x10/0x10 [ 340.022000][ T8195] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 340.028625][ T8195] ? lockdep_hardirqs_on+0x99/0x150 [ 340.033870][ T8195] __do_fast_syscall_32+0xb4/0x110 [ 340.038992][ T8195] ? exc_page_fault+0x590/0x8c0 [ 340.043860][ T8195] do_fast_syscall_32+0x34/0x80 [ 340.048890][ T8195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.055281][ T8195] RIP: 0023:0xf7fb6579 [ 340.059371][ T8195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 340.079211][ T8195] RSP: 002b:00000000f57365a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 340.087660][ T8195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5736620 [ 340.095646][ T8195] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 340.103622][ T8195] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 340.111612][ T8195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 340.119594][ T8195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.127608][ T8195] [ 340.576921][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 340.758839][ T8] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 340.767519][ T8] usb 5-1: config 0 has no interface number 0 [ 340.993283][ T8] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 341.003065][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.013464][ T8] usb 5-1: Product: syz [ 341.021333][ T8] usb 5-1: Manufacturer: syz [ 341.034463][ T8] usb 5-1: SerialNumber: syz [ 341.042163][ T8] usb 5-1: config 0 descriptor?? [ 341.256112][ T8] cx82310_eth 5-1:0.253: probe with driver cx82310_eth failed with error -22 [ 341.465790][ T8] cxacru 5-1:0.253: usbatm_usb_probe: bind failed: -19! [ 341.471727][ T8224] FAULT_INJECTION: forcing a failure. [ 341.471727][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.479208][ T8] usb 5-1: USB disconnect, device number 27 [ 341.493267][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.0.631 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 341.503928][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.514017][ T8224] Call Trace: [ 341.517321][ T8224] [ 341.520290][ T8224] dump_stack_lvl+0x241/0x360 [ 341.524987][ T8224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.530212][ T8224] ? __pfx__printk+0x10/0x10 [ 341.534832][ T8224] ? __pfx_lock_release+0x10/0x10 [ 341.539976][ T8224] should_fail_ex+0x3b0/0x4e0 [ 341.544691][ T8224] _copy_from_user+0x2f/0xe0 [ 341.549308][ T8224] usbdev_ioctl+0xf3b/0x6120 [ 341.553926][ T8224] ? kernel_text_address+0xa7/0xe0 [ 341.559148][ T8224] ? __pfx_usbdev_ioctl+0x10/0x10 [ 341.564190][ T8224] ? unwind_get_return_address+0x4d/0x90 [ 341.569845][ T8224] ? arch_stack_walk+0xfd/0x150 [ 341.574724][ T8224] ? stack_trace_save+0x118/0x1d0 [ 341.579782][ T8224] ? __pfx_stack_trace_save+0x10/0x10 [ 341.585294][ T8224] ? stack_depot_save_flags+0x29/0x830 [ 341.590795][ T8224] ? kasan_save_track+0x51/0x80 [ 341.595659][ T8224] ? kasan_save_track+0x3f/0x80 [ 341.600527][ T8224] ? kasan_save_free_info+0x40/0x50 [ 341.605752][ T8224] ? __kasan_slab_free+0x59/0x70 [ 341.610720][ T8224] ? kfree+0x1a0/0x440 [ 341.614810][ T8224] ? tomoyo_path_number_perm+0x68d/0x880 [ 341.620484][ T8224] ? security_file_ioctl_compat+0xc6/0x2a0 [ 341.626410][ T8224] ? __se_compat_sys_ioctl+0xd6/0xc90 [ 341.631817][ T8224] ? do_vfs_ioctl+0xf08/0x2e40 [ 341.636606][ T8224] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 341.641653][ T8224] ? mark_lock+0x9a/0x360 [ 341.646012][ T8224] ? tomoyo_path_number_perm+0x208/0x880 [ 341.651671][ T8224] ? __pfx_lock_release+0x10/0x10 [ 341.656718][ T8224] ? lockdep_hardirqs_on+0x99/0x150 [ 341.661945][ T8224] ? kfree+0x1a0/0x440 [ 341.666033][ T8224] ? tomoyo_path_number_perm+0x68d/0x880 [ 341.671710][ T8224] ? tomoyo_path_number_perm+0x71a/0x880 [ 341.677373][ T8224] ? tomoyo_path_number_perm+0x208/0x880 [ 341.683037][ T8224] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 341.689056][ T8224] ? __pfx_lock_acquire+0x10/0x10 [ 341.694162][ T8224] ? __fget_files+0x29/0x470 [ 341.698776][ T8224] ? __fget_files+0x3f3/0x470 [ 341.703482][ T8224] __se_compat_sys_ioctl+0x510/0xc90 [ 341.708784][ T8224] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 341.714612][ T8224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.720634][ T8224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.727012][ T8224] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 341.733628][ T8224] ? lockdep_hardirqs_on+0x99/0x150 [ 341.738857][ T8224] __do_fast_syscall_32+0xb4/0x110 [ 341.743988][ T8224] ? exc_page_fault+0x590/0x8c0 [ 341.748869][ T8224] do_fast_syscall_32+0x34/0x80 [ 341.753760][ T8224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.760132][ T8224] RIP: 0023:0xf7f73579 [ 341.764224][ T8224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 341.784195][ T8224] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 341.792652][ T8224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185500 [ 341.800640][ T8224] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.808652][ T8224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.816646][ T8224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 341.825107][ T8224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.833303][ T8224] [ 341.838197][ T25] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 341.923061][ T8227] input: syz0 as /devices/virtual/input/input16 [ 341.996795][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 342.005838][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 342.029779][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.046901][ T25] usb 4-1: Product: syz [ 342.059695][ T25] usb 4-1: Manufacturer: syz [ 342.084557][ T25] usb 4-1: SerialNumber: syz [ 342.107871][ T25] usb 4-1: config 0 descriptor?? [ 342.116931][ T5233] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 342.142212][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 342.280787][ T5233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.294586][ T5233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.308908][ T5233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.334874][ T5233] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 342.345150][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.365963][ T5233] usb 2-1: config 0 descriptor?? [ 342.508982][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 342.666784][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 342.678588][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 342.716186][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.729865][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.738096][ T8] usb 5-1: Product: syz [ 342.742638][ T8] usb 5-1: Manufacturer: syz [ 342.747609][ T8] usb 5-1: SerialNumber: syz [ 342.764261][ T8] usb 5-1: config 0 descriptor?? [ 342.776850][ T8] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 342.786176][ T8] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 342.823322][ T5233] corsair-psu 0003:1B1C:1C0D.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0 [ 342.906719][ T5233] corsair-psu 0003:1B1C:1C0D.001E: unable to initialize device (-38) [ 342.920158][ T5233] corsair-psu 0003:1B1C:1C0D.001E: probe with driver corsair-psu failed with error -38 [ 343.054573][ T5233] usb 2-1: USB disconnect, device number 41 [ 343.162762][ T25] gspca_sonixj: reg_w1 err -71 [ 343.169420][ T8214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.246835][ T25] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 343.267083][ T25] usb 4-1: USB disconnect, device number 46 [ 343.396209][ T8] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 344.126872][ T5289] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 344.136695][ T4621] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.156700][ T5287] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 344.173726][ T5287] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 344.221532][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.276432][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.318278][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.346932][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.360942][ T8] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 344.366833][ T5289] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 344.385717][ T8] em28xx 5-1:0.0: board has no eeprom [ 344.420398][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.446967][ T8306] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.639'. [ 344.467922][ T5289] usb 2-1: config 0 descriptor?? [ 344.481135][ T8] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 344.509355][ T8] em28xx 5-1:0.0: dvb set to bulk mode. [ 344.534386][ T5285] em28xx 5-1:0.0: Binding DVB extension [ 344.559034][ T8] usb 5-1: USB disconnect, device number 28 [ 344.587555][ T8] em28xx 5-1:0.0: Disconnecting em28xx [ 344.678560][ T5285] em28xx 5-1:0.0: Registering input extension [ 344.689249][ T8] em28xx 5-1:0.0: Closing input extension [ 344.762046][ T8] em28xx 5-1:0.0: Freeing device [ 345.107359][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 345.233754][ T5289] usb 2-1: string descriptor 0 read error: -71 [ 345.248932][ T5289] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 345.276031][ T5289] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 345.286784][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 345.303262][ T5289] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 345.304501][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.318759][ T5289] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 345.335365][ T5289] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 345.347706][ T5301] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 345.357660][ T5289] usb 2-1: USB disconnect, device number 42 [ 345.372677][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.417017][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 345.426262][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.461249][ T8] usb 5-1: config 0 descriptor?? [ 345.569045][ T5301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1471, setting to 1024 [ 345.592064][ T5301] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 345.617668][ T5301] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.646159][ T5301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 345.667041][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.675252][ T5301] usb 4-1: Product: ц [ 345.706638][ T5301] usb 4-1: Manufacturer: 㰁 [ 345.711622][ T5301] usb 4-1: SerialNumber: ㏪쮩苇ఠ汽鐆੕룁䡙㰁뭅୓Ḷࣈ뱛跥ꙏ쑃㿖摲䇙ﾁͷ抴ᅟ툒全룇㌍ꤛ [ 345.754709][ T8322] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 345.768369][ T8322] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 345.944236][ T8] kye 0003:0458:5016.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 345.974167][ T8] kye 0003:0458:5016.0020: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 346.005764][ T8] kye 0003:0458:5016.0020: tablet-enabling feature report not found [ 346.024304][ T8] kye 0003:0458:5016.0020: tablet enabling failed [ 346.197168][ T5301] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 346.241153][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.640'. [ 346.297559][ T25] usb 5-1: USB disconnect, device number 29 [ 346.372648][ T8364] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.652'. [ 346.376989][ T4621] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.388483][ T5287] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 346.394715][ T5287] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 346.542494][ T8369] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 346.576609][ T8369] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 346.584618][ T8369] bridge0: port 3(team0) entered blocking state [ 346.608915][ T8369] bridge0: port 3(team0) entered disabled state [ 346.615497][ T8369] team0: entered allmulticast mode [ 346.636595][ T8369] team_slave_0: entered allmulticast mode [ 346.642410][ T8369] team_slave_1: entered allmulticast mode [ 346.659095][ T8369] team0: entered promiscuous mode [ 346.664420][ T8369] team_slave_0: entered promiscuous mode [ 346.675072][ T8369] team_slave_1: entered promiscuous mode [ 346.941464][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 346.941485][ T29] audit: type=1326 audit(1728867415.956:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 346.977006][ T29] audit: type=1326 audit(1728867415.956:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.000197][ T29] audit: type=1326 audit(1728867415.976:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.026311][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 347.035803][ T29] audit: type=1326 audit(1728867415.976:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.043500][ T8376] usb usb1: usbfs: process 8376 (syz.2.656) did not claim interface 0 before use [ 347.070648][ T29] audit: type=1326 audit(1728867415.976:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.112410][ T29] audit: type=1326 audit(1728867415.976:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.134645][ T29] audit: type=1326 audit(1728867415.976:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.193154][ T29] audit: type=1326 audit(1728867415.976:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.236470][ T29] audit: type=1326 audit(1728867415.976:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.287218][ T29] audit: type=1326 audit(1728867415.976:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 347.346686][ T5289] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 347.357541][ T8386] mmap: syz.0.657 (8386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 347.506769][ T5289] usb 5-1: Using ep0 maxpacket: 32 [ 347.515409][ T5289] usb 5-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 347.559535][ T5289] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 347.575912][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.597756][ T5289] usb 5-1: Product: syz [ 347.602461][ T5289] usb 5-1: Manufacturer: syz [ 347.609017][ T5289] usb 5-1: SerialNumber: syz [ 347.619929][ T5289] usb 5-1: config 0 descriptor?? [ 347.629654][ T5289] usb 5-1: bad CDC descriptors [ 347.634962][ T5289] usb 5-1: unsupported MDLM descriptors [ 347.826834][ T5301] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 347.873734][ T5289] usb 5-1: USB disconnect, device number 30 [ 347.996752][ T5301] usb 3-1: Using ep0 maxpacket: 16 [ 348.012182][ T5301] usb 3-1: config 253 has an invalid interface number: 157 but max is 3 [ 348.036155][ T5301] usb 3-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 348.045249][ T5301] usb 3-1: config 253 has an invalid interface number: 213 but max is 3 [ 348.053794][ T5301] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 348.060646][ T5289] usb 4-1: USB disconnect, device number 47 [ 348.069873][ T5301] usb 3-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 348.085765][ T5301] usb 3-1: config 253 has no interface number 0 [ 348.093126][ T5301] usb 3-1: config 253 has no interface number 1 [ 348.105228][ T5289] usblp0: removed [ 348.123412][ T5301] usb 3-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 348.149400][ T5301] usb 3-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 348.178512][ T5301] usb 3-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 348.207387][ T5301] usb 3-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 348.234121][ T5301] usb 3-1: config 253 interface 157 has no altsetting 0 [ 348.241350][ T5301] usb 3-1: config 253 interface 213 has no altsetting 0 [ 348.256478][ T5301] usb 3-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 348.272627][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.280910][ T5301] usb 3-1: Product: syz [ 348.285282][ T5301] usb 3-1: Manufacturer: syz [ 348.295136][ T5301] usb 3-1: SerialNumber: syz [ 348.553508][ T4621] Bluetooth: hci1: command 0x041b tx timeout [ 348.569881][ T5287] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 348.577127][ T5287] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 348.609525][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.646156][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.731224][ T5301] r8712u: register rtl8712_netdev_ops to netdev_ops [ 348.743995][ T5301] usb 3-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 348.752698][ T5301] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 348.772367][ T5301] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 348.787476][ T5301] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 348.827582][ T5301] usb 3-1: Found UVC 0.00 device syz (0b05:1791) [ 348.847501][ T5301] usb 3-1: No valid video chain found. [ 348.856821][ T5301] r8712u: register rtl8712_netdev_ops to netdev_ops [ 348.875033][ T5301] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 348.885527][ T5301] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 348.895704][ T5301] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 348.903665][ T5301] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 348.924755][ T5301] usb 3-1: USB disconnect, device number 37 [ 349.132197][ T8415] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.666'. [ 350.231537][ T5233] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 350.298185][ T5301] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 350.408528][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.433497][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.444366][ T5233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.457660][ T5233] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 350.477932][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.479334][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.512451][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.515194][ T5233] usb 3-1: config 0 descriptor?? [ 350.541323][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.563152][ T5301] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 350.572813][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 350.580779][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.598910][ T5301] usb 2-1: config 0 descriptor?? [ 350.649700][ T8441] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4154471757 (8308943514 ns) > initial count (334709606 ns). Using initial count to start timer. [ 350.696955][ T4621] Bluetooth: hci4: command 0x0c1a tx timeout [ 350.699255][ T5287] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 350.717357][ T5287] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 350.770534][ T8] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 350.781330][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.791335][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.803655][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.820933][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.831653][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.843282][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.851921][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.861758][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.873472][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.882236][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.891907][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.903376][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.911828][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.923414][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.936046][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.946417][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.956432][ T5233] corsair-psu 0003:1B1C:1C0D.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 350.969302][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.980803][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.989634][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.999325][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.010955][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.019093][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.028344][ T5233] corsair-psu 0003:1B1C:1C0D.0021: unable to initialize device (-38) [ 351.040801][ T5233] corsair-psu 0003:1B1C:1C0D.0021: probe with driver corsair-psu failed with error -38 [ 351.043827][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.062099][ T5301] corsair-psu 0003:1B1C:1C0D.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0 [ 351.074753][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.090093][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.099570][ T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 351.108451][ T8] usb 4-1: Product: syz [ 351.112653][ T8] usb 4-1: Manufacturer: syz [ 351.117386][ T8] usb 4-1: SerialNumber: syz [ 351.123848][ T8] usb 4-1: config 0 descriptor?? [ 351.129182][ T5301] corsair-psu 0003:1B1C:1C0D.0022: unable to initialize device (-38) [ 351.142039][ T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 351.150736][ T5301] corsair-psu 0003:1B1C:1C0D.0022: probe with driver corsair-psu failed with error -38 [ 351.211469][ T5233] usb 3-1: USB disconnect, device number 38 [ 351.306254][ T8] usb 2-1: USB disconnect, device number 43 [ 351.410814][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 351.411218][ T5233] usb 4-1: USB disconnect, device number 48 [ 351.429958][ T5233] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 351.576840][ T5287] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 351.728598][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.740557][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.752248][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.764048][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.777514][ T5287] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.787984][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.810051][ T5287] usb 5-1: config 0 descriptor?? [ 351.819245][ T8446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 351.962364][ T8449] IPVS: Scheduler module ip_vs_ not found [ 352.206239][ T8454] fuse: Bad value for 'fd' [ 354.567536][ T5287] usbhid 5-1:0.0: can't add hid device: -71 [ 354.576920][ T5287] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 354.588990][ T5287] usb 5-1: USB disconnect, device number 31 [ 354.854046][ T8494] tun0: tun_chr_ioctl cmd 1074025677 [ 354.860224][ T8494] tun0: linktype set to 773 [ 355.228442][ T8500] loop4: detected capacity change from 0 to 524288000 [ 356.796662][ T5233] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 356.966891][ T5233] usb 3-1: Using ep0 maxpacket: 8 [ 356.985330][ T5233] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 357.017903][ T5233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.064718][ T5233] usb 3-1: Product: syz [ 357.079359][ T5233] usb 3-1: Manufacturer: syz [ 357.084041][ T5233] usb 3-1: SerialNumber: syz [ 357.112918][ T5233] usb 3-1: config 0 descriptor?? [ 357.125232][ T5233] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 358.191622][ T5299] usb 3-1: USB disconnect, device number 39 [ 358.263476][ T8531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.699823][ T8566] FAULT_INJECTION: forcing a failure. [ 358.699823][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 358.714589][ T8562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.717'. [ 358.724374][ T8562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.717'. [ 358.732429][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.1.715 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 358.743890][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.754017][ T8566] Call Trace: [ 358.757345][ T8566] [ 358.760321][ T8566] dump_stack_lvl+0x241/0x360 [ 358.765052][ T8566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.770317][ T8566] ? __pfx__printk+0x10/0x10 [ 358.775008][ T8566] ? ref_tracker_alloc+0x332/0x490 [ 358.780450][ T8566] should_fail_ex+0x3b0/0x4e0 [ 358.785216][ T8566] ? skb_clone+0x20c/0x390 [ 358.789698][ T8566] should_failslab+0xac/0x100 [ 358.794442][ T8566] ? skb_clone+0x20c/0x390 [ 358.798950][ T8566] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 358.804400][ T8566] skb_clone+0x20c/0x390 [ 358.808717][ T8566] __netlink_deliver_tap+0x3cc/0x7c0 [ 358.814072][ T8566] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.819461][ T8566] netlink_deliver_tap+0x19d/0x1b0 [ 358.824621][ T8566] netlink_unicast+0x7c4/0x990 [ 358.829486][ T8566] ? __pfx_netlink_unicast+0x10/0x10 [ 358.834836][ T8566] ? __virt_addr_valid+0x183/0x530 [ 358.840015][ T8566] ? __check_object_size+0x48e/0x900 [ 358.845378][ T8566] netlink_sendmsg+0x8e4/0xcb0 [ 358.850217][ T8566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.855835][ T8566] ? __pfx_lock_release+0x10/0x10 [ 358.860948][ T8566] ? aa_sock_msg_perm+0x91/0x160 [ 358.866016][ T8566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.871371][ T8566] __sock_sendmsg+0x221/0x270 [ 358.876128][ T8566] ____sys_sendmsg+0x52a/0x7e0 [ 358.880969][ T8566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.886342][ T8566] __sys_sendmsg+0x292/0x380 [ 358.891001][ T8566] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.896190][ T8566] ? __pfx_vfs_write+0x10/0x10 [ 358.901049][ T8566] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 358.907723][ T8566] ? lockdep_hardirqs_on+0x99/0x150 [ 358.913012][ T8566] __do_fast_syscall_32+0xb4/0x110 [ 358.918224][ T8566] ? exc_page_fault+0x590/0x8c0 [ 358.923170][ T8566] do_fast_syscall_32+0x34/0x80 [ 358.928090][ T8566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.934488][ T8566] RIP: 0023:0xf7fdf579 [ 358.938639][ T8566] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 358.958297][ T8566] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 358.966748][ T8566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 358.974778][ T8566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.982793][ T8566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.990866][ T8566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 358.998888][ T8566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.006915][ T8566] [ 359.105044][ T8573] sg_write: process 323 (syz.3.720) changed security contexts after opening file descriptor, this is not allowed. [ 359.166759][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 359.347264][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.370691][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.398813][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.428082][ T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 359.451381][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.497786][ T8] usb 5-1: config 0 descriptor?? [ 359.796725][ T5233] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 359.931875][ T8] corsair-psu 0003:1B1C:1C0D.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 359.976870][ T5233] usb 4-1: Using ep0 maxpacket: 32 [ 360.016746][ T8] corsair-psu 0003:1B1C:1C0D.0023: unable to initialize device (-38) [ 360.018864][ T5233] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 360.038586][ T8] corsair-psu 0003:1B1C:1C0D.0023: probe with driver corsair-psu failed with error -38 [ 360.116911][ T5233] usb 4-1: config 32 has 0 interfaces, different from the descriptor's value: 1 [ 360.167860][ T8565] usb usb1: usbfs: process 8565 (syz.4.716) did not claim interface 0 before use [ 360.177874][ T5233] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 360.187231][ T5233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.195408][ T5233] usb 4-1: Product: syz [ 360.200181][ T5233] usb 4-1: Manufacturer: syz [ 360.204888][ T5233] usb 4-1: SerialNumber: syz [ 360.388327][ T8] usb 5-1: USB disconnect, device number 32 [ 360.425788][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.449649][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.473497][ T5233] usb 4-1: USB disconnect, device number 49 [ 361.053195][ T8613] FAULT_INJECTION: forcing a failure. [ 361.053195][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 361.067538][ T8613] CPU: 0 UID: 0 PID: 8613 Comm: syz.2.733 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 361.068463][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 361.068482][ T29] audit: type=1326 audit(1728867430.086:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.3.735" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x0 [ 361.078188][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.078214][ T8613] Call Trace: [ 361.078224][ T8613] [ 361.078235][ T8613] dump_stack_lvl+0x241/0x360 [ 361.078271][ T8613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.078295][ T8613] ? __pfx__printk+0x10/0x10 [ 361.078332][ T8613] ? __kmalloc_noprof+0xb0/0x400 [ 361.078365][ T8613] ? __pfx___might_resched+0x10/0x10 [ 361.078402][ T8613] should_fail_ex+0x3b0/0x4e0 [ 361.078438][ T8613] ? kobject_get_path+0xb8/0x230 [ 361.078460][ T8613] should_failslab+0xac/0x100 [ 361.078490][ T8613] ? kobject_get_path+0xb8/0x230 [ 361.078512][ T8613] __kmalloc_noprof+0xd8/0x400 [ 361.078551][ T8613] kobject_get_path+0xb8/0x230 [ 361.078588][ T8613] kobject_uevent_env+0x2a5/0x8e0 [ 361.078625][ T8613] device_release_driver_internal+0x6e3/0x7c0 [ 361.186812][ T8613] proc_ioctl+0x2b5/0x660 [ 361.191176][ T8613] usbdev_ioctl+0x2cf8/0x6120 [ 361.195875][ T8613] ? kernel_text_address+0xa7/0xe0 [ 361.201008][ T8613] ? __pfx_usbdev_ioctl+0x10/0x10 [ 361.206047][ T8613] ? unwind_get_return_address+0x4d/0x90 [ 361.211717][ T8613] ? arch_stack_walk+0xfd/0x150 [ 361.216694][ T8613] ? stack_trace_save+0x118/0x1d0 [ 361.221740][ T8613] ? __pfx_stack_trace_save+0x10/0x10 [ 361.227132][ T8613] ? stack_depot_save_flags+0x29/0x830 [ 361.232617][ T8613] ? kasan_save_track+0x51/0x80 [ 361.237482][ T8613] ? kasan_save_track+0x3f/0x80 [ 361.242351][ T8613] ? kasan_save_free_info+0x40/0x50 [ 361.247574][ T8613] ? __kasan_slab_free+0x59/0x70 [ 361.252525][ T8613] ? kfree+0x1a0/0x440 [ 361.256623][ T8613] ? tomoyo_path_number_perm+0x68d/0x880 [ 361.262289][ T8613] ? security_file_ioctl_compat+0xc6/0x2a0 [ 361.268119][ T8613] ? __se_compat_sys_ioctl+0xd6/0xc90 [ 361.273506][ T8613] ? do_vfs_ioctl+0xf08/0x2e40 [ 361.278295][ T8613] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 361.283340][ T8613] ? mark_lock+0x9a/0x360 [ 361.287696][ T8613] ? tomoyo_path_number_perm+0x208/0x880 [ 361.293356][ T8613] ? __pfx_lock_release+0x10/0x10 [ 361.298407][ T8613] ? lockdep_hardirqs_on+0x99/0x150 [ 361.303638][ T8613] ? kfree+0x1a0/0x440 [ 361.307737][ T8613] ? tomoyo_path_number_perm+0x68d/0x880 [ 361.313413][ T8613] ? tomoyo_path_number_perm+0x71a/0x880 [ 361.319091][ T8613] ? tomoyo_path_number_perm+0x208/0x880 [ 361.324759][ T8613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 361.330784][ T8613] ? __pfx_lock_acquire+0x10/0x10 [ 361.335858][ T8613] ? __fget_files+0x29/0x470 [ 361.340471][ T8613] ? __fget_files+0x3f3/0x470 [ 361.345177][ T8613] __se_compat_sys_ioctl+0x510/0xc90 [ 361.350487][ T8613] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 361.356325][ T8613] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.362346][ T8613] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.368712][ T8613] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 361.375336][ T8613] ? lockdep_hardirqs_on+0x99/0x150 [ 361.380578][ T8613] __do_fast_syscall_32+0xb4/0x110 [ 361.385715][ T8613] ? exc_page_fault+0x590/0x8c0 [ 361.390605][ T8613] do_fast_syscall_32+0x34/0x80 [ 361.395475][ T8613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.401823][ T8613] RIP: 0023:0xf747d579 [ 361.405912][ T8613] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.425633][ T8613] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 361.434071][ T8613] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0105512 [ 361.442061][ T8613] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.450056][ T8613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.458057][ T8613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 361.466077][ T8613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.474079][ T8613] [ 361.488219][ T8616] hub 9-0:1.0: USB hub found [ 361.501110][ T8616] hub 9-0:1.0: 8 ports detected [ 361.672826][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 361.778310][ T5287] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 361.836746][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 361.836746][ T5233] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 361.855954][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 361.865417][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.873873][ T8] usb 5-1: Product: syz [ 361.878423][ T8] usb 5-1: Manufacturer: syz [ 361.883253][ T8] usb 5-1: SerialNumber: syz [ 361.890851][ T8] usb 5-1: config 0 descriptor?? [ 361.899668][ T8] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 361.906782][ T46] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 361.938587][ T5287] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 361.947201][ T5287] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 361.955417][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.965783][ T5287] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.974998][ T5287] usb 4-1: config 0 has no interface number 0 [ 361.982125][ T5287] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 361.993290][ T5287] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.003353][ T5233] usb 3-1: Using ep0 maxpacket: 16 [ 362.008702][ T5287] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.022098][ T5287] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 362.032641][ T5233] usb 3-1: config 253 has an invalid interface number: 157 but max is 3 [ 362.041349][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.049608][ T5233] usb 3-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 362.061650][ T5233] usb 3-1: config 253 has an invalid interface number: 213 but max is 3 [ 362.071482][ T5287] usb 4-1: config 0 descriptor?? [ 362.082890][ T5233] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 362.093674][ T5233] usb 3-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 362.109633][ T5287] gspca_main: spca561-2.14.0 probing abcd:cdee [ 362.116139][ T5233] usb 3-1: config 253 has no interface number 0 [ 362.123978][ T46] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 362.133754][ T5233] usb 3-1: config 253 has no interface number 1 [ 362.140510][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.149006][ T5233] usb 3-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 362.160699][ T46] usb 2-1: Product: syz [ 362.164946][ T46] usb 2-1: Manufacturer: syz [ 362.169826][ T46] usb 2-1: SerialNumber: syz [ 362.174564][ T5233] usb 3-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 362.187375][ T5233] usb 3-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 362.199010][ T5233] usb 3-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 362.212652][ T5233] usb 3-1: config 253 interface 157 has no altsetting 0 [ 362.219879][ T5233] usb 3-1: config 253 interface 213 has no altsetting 0 [ 362.231573][ T46] usb 2-1: config 0 descriptor?? [ 362.239232][ T5233] usb 3-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 362.251441][ T5233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.259865][ T5233] usb 3-1: Product: syz [ 362.264134][ T5233] usb 3-1: Manufacturer: syz [ 362.269723][ T2038] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 362.279097][ T5233] usb 3-1: SerialNumber: syz [ 362.280716][ T2038] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 362.482513][ T5301] usb 5-1: USB disconnect, device number 33 [ 362.525275][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.534065][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.571419][ T5233] r8712u: register rtl8712_netdev_ops to netdev_ops [ 362.581594][ T5233] usb 3-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 362.592047][ T5233] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 362.599331][ T5233] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 362.607750][ T5233] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 362.629550][ T46] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 362.644077][ T5287] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 362.654377][ T5287] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.663613][ T5233] usb 3-1: Found UVC 0.00 device syz (0b05:1791) [ 362.672875][ T5287] usb 4-1: MIDIStreaming interface descriptor not found [ 362.681149][ T46] usb 2-1: USB disconnect, device number 44 [ 362.687521][ T5233] usb 3-1: No valid video chain found. [ 362.695834][ T5233] r8712u: register rtl8712_netdev_ops to netdev_ops [ 362.707149][ T5233] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 362.722983][ T5233] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 362.730029][ T5233] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 362.744188][ T5233] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 362.793214][ T5233] usb 3-1: USB disconnect, device number 40 [ 363.197810][ T8602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.256391][ T8635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.741'. [ 363.799197][ T8656] @: renamed from veth0_vlan (while UP) [ 364.101722][ T46] usb 4-1: USB disconnect, device number 50 [ 364.386731][ T8662] loop6: detected capacity change from 0 to 7 [ 364.422151][ T8662] Dev loop6: unable to read RDB block 7 [ 364.461232][ T8662] loop6: unable to read partition table [ 364.518888][ T8662] loop6: partition table beyond EOD, truncated [ 364.525151][ T8662] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 364.525151][ T8662] ) failed (rc=-5) [ 365.407529][ T5233] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 365.566639][ T5233] usb 4-1: Using ep0 maxpacket: 16 [ 365.629437][ T5233] usb 4-1: config 253 has an invalid interface number: 157 but max is 3 [ 365.657104][ T5233] usb 4-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 365.676426][ T5233] usb 4-1: config 253 has an invalid interface number: 213 but max is 3 [ 365.705307][ T5233] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 365.725643][ T5233] usb 4-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 365.751989][ T5233] usb 4-1: config 253 has no interface number 0 [ 365.776711][ T5233] usb 4-1: config 253 has no interface number 1 [ 365.800093][ T5233] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 365.843290][ T5233] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 365.884266][ T5233] usb 4-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 365.936713][ T5233] usb 4-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 365.966638][ T5233] usb 4-1: config 253 interface 157 has no altsetting 0 [ 365.974900][ T5233] usb 4-1: config 253 interface 213 has no altsetting 0 [ 365.992277][ T5233] usb 4-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 366.006694][ T5233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.036703][ T5233] usb 4-1: Product: syz [ 366.050703][ T5233] usb 4-1: Manufacturer: syz [ 366.069024][ T5233] usb 4-1: SerialNumber: syz [ 366.318039][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.351662][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.419346][ T5233] r8712u: register rtl8712_netdev_ops to netdev_ops [ 366.426091][ T5233] usb 4-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 366.471668][ T5233] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 366.490343][ T5233] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 366.509618][ T5233] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 366.533457][ T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 366.558973][ T5233] usb 4-1: Found UVC 0.00 device syz (0b05:1791) [ 366.583534][ T5233] usb 4-1: No valid video chain found. [ 366.604336][ T5233] r8712u: register rtl8712_netdev_ops to netdev_ops [ 366.627964][ T5233] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 366.657109][ T5233] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 366.683712][ T5233] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 366.716693][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 366.730309][ T8] usb 2-1: config 0 has no interfaces? [ 366.743653][ T5233] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 366.750465][ T8] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 366.774287][ T5233] usb 4-1: USB disconnect, device number 51 [ 366.790207][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.820782][ T8] usb 2-1: Product: syz [ 366.830901][ T8] usb 2-1: Manufacturer: syz [ 366.864511][ T8] usb 2-1: SerialNumber: syz [ 366.902487][ T8] usb 2-1: config 0 descriptor?? [ 367.665137][ T8685] syz.2.755 (8685) used obsolete PPPIOCDETACH ioctl [ 368.359516][ T8695] openvswitch: netlink: Unknown key attributes 2 [ 368.412044][ T8697] Cannot find add_set index 0 as target [ 368.573468][ T8699] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 368.629429][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.825645][ T8701] bridge0: port 3(vlan2) entered blocking state [ 368.836858][ T25] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 368.855022][ T8] usb 2-1: USB disconnect, device number 45 [ 368.875709][ T8701] bridge0: port 3(vlan2) entered disabled state [ 368.896254][ T8701] vlan2: entered allmulticast mode [ 368.918567][ T8701] vlan2: left allmulticast mode [ 369.031493][ T25] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 369.063502][ T25] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65049, setting to 64 [ 369.098131][ T25] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 369.116253][ T25] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 369.126316][ T25] usb 3-1: Manufacturer: syz [ 369.356879][ T8] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 369.365059][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.381067][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.395663][ T25] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 369.412815][ T25] usb 3-1: USB disconnect, device number 41 [ 369.508782][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 369.516126][ T8] usb 4-1: no configurations [ 369.523738][ T8] usb 4-1: can't read configurations, error -22 [ 369.686747][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 369.868350][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 369.877561][ T8] usb 4-1: no configurations [ 369.882227][ T8] usb 4-1: can't read configurations, error -22 [ 369.896123][ T8] usb usb4-port1: attempt power cycle [ 370.269588][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 370.312715][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 370.323679][ T8] usb 4-1: no configurations [ 370.350386][ T8] usb 4-1: can't read configurations, error -22 [ 370.496693][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 370.527289][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 370.533390][ T8] usb 4-1: no configurations [ 370.540517][ T8] usb 4-1: can't read configurations, error -22 [ 370.547631][ T8] usb usb4-port1: unable to enumerate USB device [ 371.368355][ T8730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.768'. [ 371.550806][ T8736] FAULT_INJECTION: forcing a failure. [ 371.550806][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.564417][ T8736] CPU: 0 UID: 0 PID: 8736 Comm: syz.1.772 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 371.575163][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.585274][ T8736] Call Trace: [ 371.588599][ T8736] [ 371.591575][ T8736] dump_stack_lvl+0x241/0x360 [ 371.596308][ T8736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.601586][ T8736] ? __pfx__printk+0x10/0x10 [ 371.606249][ T8736] ? __pfx_lock_release+0x10/0x10 [ 371.611350][ T8736] should_fail_ex+0x3b0/0x4e0 [ 371.616119][ T8736] _copy_from_user+0x2f/0xe0 [ 371.620780][ T8736] sk_setsockopt+0x2d4/0x33b0 [ 371.625522][ T8736] ? __pfx_sk_setsockopt+0x10/0x10 [ 371.630711][ T8736] ? rcu_read_lock_any_held+0xb7/0x160 [ 371.636235][ T8736] ? aa_sk_perm+0x96d/0xab0 [ 371.640797][ T8736] ? sb_end_write+0xe9/0x1c0 [ 371.645478][ T8736] ? __pfx_aa_sk_perm+0x10/0x10 [ 371.650380][ T8736] ? vfs_write+0x7bf/0xc90 [ 371.654845][ T8736] ? aa_sock_opt_perm+0x79/0x120 [ 371.659878][ T8736] do_sock_setsockopt+0x2fb/0x720 [ 371.664966][ T8736] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 371.670571][ T8736] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 371.677146][ T8736] __sys_setsockopt+0x1a2/0x250 [ 371.682053][ T8736] __ia32_sys_setsockopt+0xb5/0xd0 [ 371.687219][ T8736] __do_fast_syscall_32+0xb4/0x110 [ 371.692384][ T8736] ? exc_page_fault+0x590/0x8c0 [ 371.697303][ T8736] do_fast_syscall_32+0x34/0x80 [ 371.702208][ T8736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.708638][ T8736] RIP: 0023:0xf7fdf579 [ 371.712785][ T8736] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 371.732446][ T8736] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 371.740926][ T8736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 371.748948][ T8736] RDX: 0000000000000045 RSI: 0000000020000040 RDI: 0000000000000004 [ 371.756970][ T8736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.764989][ T8736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.773022][ T8736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.781066][ T8736] [ 372.576682][ T5287] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 372.739118][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.765332][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.787896][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.812040][ T5287] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 372.822057][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.833391][ T5287] usb 4-1: config 0 descriptor?? [ 373.282852][ T5287] corsair-psu 0003:1B1C:1C0D.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0 [ 373.438047][ T5287] corsair-psu 0003:1B1C:1C0D.0024: unable to initialize device (-38) [ 373.455753][ T8744] usb usb1: usbfs: process 8744 (syz.3.775) did not claim interface 0 before use [ 373.468455][ T5287] corsair-psu 0003:1B1C:1C0D.0024: probe with driver corsair-psu failed with error -38 [ 373.489208][ T5287] usb 4-1: USB disconnect, device number 56 [ 373.822657][ T8762] openvswitch: netlink: Unknown key attributes 2 [ 373.982028][ T8767] FAULT_INJECTION: forcing a failure. [ 373.982028][ T8767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.998273][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.2.783 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 374.008937][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.019025][ T8767] Call Trace: [ 374.022325][ T8767] [ 374.025275][ T8767] dump_stack_lvl+0x241/0x360 [ 374.029966][ T8767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.035197][ T8767] ? __pfx__printk+0x10/0x10 [ 374.039840][ T8767] ? __pfx_lock_release+0x10/0x10 [ 374.044938][ T8767] should_fail_ex+0x3b0/0x4e0 [ 374.049643][ T8767] _copy_from_iter+0x1ed/0x1d60 [ 374.054513][ T8767] ? __virt_addr_valid+0x183/0x530 [ 374.059644][ T8767] ? __pfx_lock_release+0x10/0x10 [ 374.064700][ T8767] ? __alloc_skb+0x28f/0x440 [ 374.069352][ T8767] ? __pfx__copy_from_iter+0x10/0x10 [ 374.074668][ T8767] ? __virt_addr_valid+0x183/0x530 [ 374.079805][ T8767] ? __virt_addr_valid+0x183/0x530 [ 374.084932][ T8767] ? __virt_addr_valid+0x45f/0x530 [ 374.090061][ T8767] ? __check_object_size+0x48e/0x900 [ 374.095397][ T8767] netlink_sendmsg+0x73d/0xcb0 [ 374.100202][ T8767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.105509][ T8767] ? __pfx_lock_release+0x10/0x10 [ 374.110561][ T8767] ? aa_sock_msg_perm+0x91/0x160 [ 374.115523][ T8767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.120826][ T8767] __sock_sendmsg+0x221/0x270 [ 374.125535][ T8767] ____sys_sendmsg+0x52a/0x7e0 [ 374.130331][ T8767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.135656][ T8767] __sys_sendmsg+0x292/0x380 [ 374.140282][ T8767] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.145423][ T8767] ? __pfx_vfs_write+0x10/0x10 [ 374.150231][ T8767] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 374.156849][ T8767] ? lockdep_hardirqs_on+0x99/0x150 [ 374.162079][ T8767] __do_fast_syscall_32+0xb4/0x110 [ 374.167210][ T8767] ? exc_page_fault+0x590/0x8c0 [ 374.172090][ T8767] do_fast_syscall_32+0x34/0x80 [ 374.176959][ T8767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.183306][ T8767] RIP: 0023:0xf747d579 [ 374.187388][ T8767] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 374.207042][ T8767] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 374.215477][ T8767] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 374.223468][ T8767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.231454][ T8767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.239458][ T8767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.247443][ T8767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.255468][ T8767] [ 374.318184][ T5285] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 374.478246][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.496652][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 374.506008][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.527712][ T5285] usb 2-1: config 0 descriptor?? [ 374.646817][ T8] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 374.722730][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 374.754803][ T8783] hub 9-0:1.0: USB hub found [ 374.759899][ T8783] hub 9-0:1.0: 8 ports detected [ 374.840051][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 374.849453][ T8] usb 3-1: config 253 has an invalid interface number: 157 but max is 3 [ 374.858385][ T8] usb 3-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 374.868208][ T8] usb 3-1: config 253 has an invalid interface number: 213 but max is 3 [ 374.877524][ T8] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 374.888102][ T8] usb 3-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 374.897405][ T8] usb 3-1: config 253 has no interface number 0 [ 374.904195][ T8] usb 3-1: config 253 has no interface number 1 [ 374.913499][ T8] usb 3-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 374.936253][ T8] usb 3-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 374.967125][ T8] usb 3-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 375.006649][ T8] usb 3-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 375.045182][ T8] usb 3-1: config 253 interface 157 has no altsetting 0 [ 375.053060][ T8] usb 3-1: config 253 interface 213 has no altsetting 0 [ 375.073719][ T8] usb 3-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 375.102506][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.125907][ T8] usb 3-1: Product: syz [ 375.141671][ T8] usb 3-1: Manufacturer: syz [ 375.156660][ T8] usb 3-1: SerialNumber: syz [ 375.179699][ T5291] usb 2-1: USB disconnect, device number 46 [ 375.451978][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.497685][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.553722][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 375.574878][ T8] usb 3-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 375.609741][ T8] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 375.616727][ T8] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 375.624578][ T8] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 375.695316][ T8] usb 3-1: Found UVC 0.00 device syz (0b05:1791) [ 376.837358][ T8] usb 3-1: No valid video chain found. [ 378.554080][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 378.625848][ T8] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 378.696768][ T8] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 378.703456][ T8] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 378.967107][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.973494][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.247510][ T8] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 379.299088][ T8] usb 3-1: USB disconnect, device number 42 [ 379.551832][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 401.252266][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.286848][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.296751][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.305297][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.313114][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 401.320738][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.416750][ T5285] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 403.423265][ T5285] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 403.440177][ T54] Bluetooth: hci0: command tx timeout [ 403.729886][ T4621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.751916][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.761426][ T4621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.770067][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.860286][ T8820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.870858][ T8820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.879992][ T8820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.888086][ T8820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 403.901358][ T8820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.911252][ T8820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.920742][ T8820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.940669][ T8820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.949588][ T8820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.958577][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.967357][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.986661][ T8820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 403.994017][ T8822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 404.006801][ T8822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.017311][ T8820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 404.027848][ T8822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 404.049755][ T4621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 404.059203][ T8822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.067322][ T4621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.096749][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 404.107824][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.182087][ T8819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.190982][ T8819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.204442][ T8819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.212286][ T8819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 404.221874][ T8819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.136928][ T8819] Bluetooth: hci4: command tx timeout [ 406.216998][ T8819] Bluetooth: hci1: command tx timeout [ 406.223633][ T8819] Bluetooth: hci5: command tx timeout [ 406.296998][ T8819] Bluetooth: hci3: command tx timeout [ 408.216906][ T8819] Bluetooth: hci4: command tx timeout [ 408.298020][ T5234] Bluetooth: hci1: command tx timeout [ 408.306280][ T8819] Bluetooth: hci5: command tx timeout [ 408.377079][ T8819] Bluetooth: hci3: command tx timeout [ 410.296808][ T8819] Bluetooth: hci4: command tx timeout [ 410.379142][ T5234] Bluetooth: hci1: command tx timeout [ 410.386660][ T8819] Bluetooth: hci5: command tx timeout [ 410.456944][ T8819] Bluetooth: hci3: command tx timeout [ 412.378412][ T8819] Bluetooth: hci4: command tx timeout [ 412.456839][ T5234] Bluetooth: hci1: command tx timeout [ 412.462373][ T8819] Bluetooth: hci5: command tx timeout [ 412.536936][ T8819] Bluetooth: hci3: command tx timeout [ 425.047059][ T2038] pvrusb2: request_firmware fatal error with code=-110 [ 425.054006][ T2038] pvrusb2: Failure uploading firmware1 [ 425.109168][ T2038] pvrusb2: Device initialization was not successful. [ 425.115989][ T2038] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 425.194972][ T2038] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 425.230412][ T5301] pvrusb2: Device being rendered inoperable [ 440.383997][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.390456][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.836726][ T4685] udevd[4685]: worker [5627] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 457.850729][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.861602][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.872177][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.880362][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.888704][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 457.900182][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.970466][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.980690][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.989461][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.997647][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 458.012933][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 458.022026][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 458.882815][ T8819] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 458.893642][ T8819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 458.906899][ T8819] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 458.920787][ T8819] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 458.928629][ T8819] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 458.936091][ T8819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 459.035520][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 459.066891][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 459.076662][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 459.087563][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 459.098531][ T5234] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 459.106088][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 459.225382][ T8819] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 459.235380][ T8819] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 459.244827][ T8819] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 459.253406][ T8819] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 459.267408][ T8819] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 459.274816][ T8819] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 459.976727][ T8819] Bluetooth: hci2: command tx timeout [ 460.056834][ T8819] Bluetooth: hci6: command tx timeout [ 461.016707][ T8819] Bluetooth: hci7: command tx timeout [ 461.176715][ T8819] Bluetooth: hci8: command tx timeout [ 461.341451][ T8819] Bluetooth: hci9: command tx timeout [ 462.056714][ T8819] Bluetooth: hci2: command tx timeout [ 462.136762][ T8819] Bluetooth: hci6: command tx timeout [ 463.096741][ T8819] Bluetooth: hci7: command tx timeout [ 463.256893][ T8819] Bluetooth: hci8: command tx timeout [ 463.416743][ T8819] Bluetooth: hci9: command tx timeout [ 464.143283][ T8819] Bluetooth: hci2: command tx timeout [ 464.221456][ T8819] Bluetooth: hci6: command tx timeout [ 465.176694][ T8819] Bluetooth: hci7: command tx timeout [ 465.336848][ T5234] Bluetooth: hci8: command tx timeout [ 465.496729][ T8819] Bluetooth: hci9: command tx timeout [ 466.216819][ T8819] Bluetooth: hci2: command tx timeout [ 466.296795][ T8819] Bluetooth: hci6: command tx timeout [ 467.257129][ T8819] Bluetooth: hci7: command tx timeout [ 467.426792][ T8819] Bluetooth: hci8: command tx timeout [ 467.576792][ T8819] Bluetooth: hci9: command tx timeout [ 501.821957][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.828475][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.928103][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 519.938887][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 519.947835][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 519.957529][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 519.975171][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 519.982794][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 520.071247][ T5234] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 520.100799][ T5234] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 520.110450][ T5234] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 520.119220][ T5234] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 520.130023][ T5234] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 520.137677][ T5234] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 520.207258][ T8819] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 520.223732][ T8819] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 520.234012][ T8819] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 520.242739][ T8819] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 520.252245][ T8819] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 520.264538][ T8819] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 520.348102][ T5234] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 520.365590][ T5234] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 520.374441][ T5234] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 520.387065][ T5234] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 520.415488][ T5234] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 520.426862][ T5234] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 520.554460][ T8819] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 520.566968][ T8819] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 520.575631][ T8819] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 520.589985][ T8819] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 520.608013][ T8819] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 520.621448][ T8819] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 522.056696][ T8819] Bluetooth: hci10: command tx timeout [ 522.226990][ T8819] Bluetooth: hci11: command tx timeout [ 522.376810][ T8819] Bluetooth: hci12: command tx timeout [ 522.541385][ T8819] Bluetooth: hci13: command tx timeout [ 522.696824][ T8819] Bluetooth: hci14: command tx timeout [ 524.136655][ T8819] Bluetooth: hci10: command tx timeout [ 524.301409][ T8819] Bluetooth: hci11: command tx timeout [ 524.456726][ T8819] Bluetooth: hci12: command tx timeout [ 524.616771][ T8819] Bluetooth: hci13: command tx timeout [ 524.777083][ T8819] Bluetooth: hci14: command tx timeout [ 526.216967][ T8819] Bluetooth: hci10: command tx timeout [ 526.376609][ T8819] Bluetooth: hci11: command tx timeout [ 526.536717][ T8819] Bluetooth: hci12: command tx timeout [ 526.696680][ T8819] Bluetooth: hci13: command tx timeout [ 526.856763][ T8819] Bluetooth: hci14: command tx timeout [ 528.298060][ T8819] Bluetooth: hci10: command tx timeout [ 528.466752][ T8819] Bluetooth: hci11: command tx timeout [ 528.616724][ T8819] Bluetooth: hci12: command tx timeout [ 528.776639][ T8819] Bluetooth: hci13: command tx timeout [ 528.940879][ T8819] Bluetooth: hci14: command tx timeout [ 529.526522][ T8819] Bluetooth: hci3: command 0x0406 tx timeout [ 529.532631][ T8819] Bluetooth: hci5: command 0x0406 tx timeout [ 529.538758][ T8820] Bluetooth: hci4: command 0x0406 tx timeout [ 529.544814][ T8820] Bluetooth: hci1: command 0x0406 tx timeout [ 536.376675][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 536.384235][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 536.412677][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 536.427584][ T30] task:kworker/0:0 state:D stack:19856 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 536.451538][ T30] Workqueue: usb_hub_wq hub_event [ 536.465431][ T30] Call Trace: [ 536.476537][ T30] [ 536.479549][ T30] __schedule+0x1895/0x4b30 [ 536.484145][ T30] ? __pfx___schedule+0x10/0x10 [ 536.490363][ T5221] syz-executor (5221) used greatest stack depth: 18832 bytes left [ 536.566570][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 536.572667][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.626055][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.631730][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 536.642129][ T30] ? schedule+0x90/0x320 [ 536.648189][ T30] schedule+0x14b/0x320 [ 536.652435][ T30] schedule_timeout+0xb0/0x310 [ 536.662521][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 536.668909][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 536.674990][ T30] ? wait_for_completion+0x2fe/0x620 [ 536.685653][ T30] ? wait_for_completion+0x2fe/0x620 [ 536.691528][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.701891][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 536.709205][ T30] ? wait_for_completion+0x2fe/0x620 [ 536.714580][ T30] wait_for_completion+0x355/0x620 [ 536.725048][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 536.731200][ T30] ? __flush_work+0xe7/0xc50 [ 536.735856][ T30] __flush_work+0xa37/0xc50 [ 536.745748][ T30] ? __flush_work+0xe7/0xc50 [ 536.750794][ T30] ? __pfx___flush_work+0x10/0x10 [ 536.755880][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 536.766740][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 536.773161][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 536.783070][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.788729][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 536.795142][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 536.806027][ T30] ? __pfx___might_resched+0x10/0x10 [ 536.812965][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 536.825267][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 536.831623][ T30] ? rcu_is_watching+0x15/0xb0 [ 536.836755][ T30] ? trace_contention_end+0x3c/0x120 [ 536.842101][ T30] ? __mutex_lock+0x2ef/0xd70 [ 536.852162][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 536.859006][ T30] unregister_netdevice_queue+0x303/0x370 [ 536.864895][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 536.876688][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 536.882684][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 536.893820][ T30] unregister_netdev+0x1c/0x30 [ 536.899046][ T30] r871xu_dev_remove+0xae/0x450 [ 536.903974][ T30] usb_unbind_interface+0x25e/0x940 [ 536.914431][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 536.920604][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 536.926402][ T30] device_release_driver_internal+0x503/0x7c0 [ 536.939918][ T30] bus_remove_device+0x34f/0x420 [ 536.944940][ T30] device_del+0x57a/0x9b0 [ 536.954658][ T30] ? kobject_put+0x272/0x480 [ 536.959732][ T30] ? __pfx_device_del+0x10/0x10 [ 536.964653][ T30] ? kobject_put+0x44d/0x480 [ 536.974573][ T30] usb_disable_device+0x3bf/0x850 [ 536.980094][ T30] usb_disconnect+0x340/0x950 [ 536.984854][ T30] hub_event+0x1ebc/0x5150 [ 536.996591][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 537.002393][ T30] ? __pfx_hub_event+0x10/0x10 [ 537.013019][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 537.018518][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 537.024578][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 537.036295][ T30] ? process_scheduled_works+0x976/0x1850 [ 537.043594][ T30] process_scheduled_works+0xa63/0x1850 [ 537.054352][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.060855][ T30] ? assign_work+0x364/0x3d0 [ 537.065543][ T30] worker_thread+0x870/0xd30 [ 537.075541][ T30] ? __kthread_parkme+0x169/0x1d0 [ 537.081050][ T30] ? __pfx_worker_thread+0x10/0x10 [ 537.086235][ T30] kthread+0x2f0/0x390 [ 537.095715][ T30] ? __pfx_worker_thread+0x10/0x10 [ 537.103010][ T30] ? __pfx_kthread+0x10/0x10 [ 537.112816][ T30] ret_from_fork+0x4b/0x80 [ 537.118162][ T30] ? __pfx_kthread+0x10/0x10 [ 537.122825][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.132745][ T30] [ 537.136026][ T30] [ 537.136026][ T30] Showing all locks held in the system: [ 537.144991][ T30] 7 locks held by kworker/0:0/8: [ 537.157323][ T30] #0: ffff88801dac6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 537.173912][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 537.199960][ T30] #2: ffff888028339190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 537.210653][ T30] #3: ffff88805e168190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 537.225480][ T30] #4: ffff888030439160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 537.238298][ T30] #5: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 [ 537.251652][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 537.266281][ T30] 1 lock held by khungtaskd/30: [ 537.279797][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 537.295022][ T30] 3 locks held by kworker/0:2/937: [ 537.300591][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 537.316505][ T30] #1: ffffc90003b1fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 537.333905][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 537.351870][ T30] 3 locks held by kworker/u8:5/994: [ 537.362708][ T30] #0: ffff88802e221948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 537.374822][ T30] #1: ffffc90003d47d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 537.395061][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 537.405085][ T30] 2 locks held by getty/4999: [ 537.414959][ T30] #0: ffff8880326790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 537.431276][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 537.443219][ T30] 5 locks held by kworker/1:5/5287: [ 537.453505][ T30] 3 locks held by kworker/0:4/5291: [ 537.459138][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 537.476344][ T30] #1: ffffc90003f67d00 ((check_lifetime_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 537.501803][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: check_lifetime+0x433/0x960 [ 537.516326][ T30] 3 locks held by kworker/0:5/5298: [ 537.522003][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 537.539722][ T30] #1: ffffc90003fd7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 537.552544][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 537.568937][ T30] 4 locks held by udevd/5627: [ 537.573689][ T30] #0: ffff88802d55ed58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 537.586852][ T30] #1: ffff88807d162c88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 537.596407][ T30] #2: ffff8880653044b8 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 537.611611][ T30] #3: ffff88805e168190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 537.627384][ T30] 1 lock held by syz-executor/5834: [ 537.632647][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.646499][ T30] 1 lock held by syz-executor/6151: [ 537.651769][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.665559][ T30] 1 lock held by syz-executor/7759: [ 537.672876][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.687106][ T30] 1 lock held by syz-executor/7981: [ 537.692363][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.705984][ T30] 1 lock held by syz.3.791/8788: [ 537.712693][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.728615][ T30] 2 locks held by syz-executor/8814: [ 537.733964][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.748736][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.761825][ T30] 2 locks held by syz-executor/8823: [ 537.770098][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.784616][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.797685][ T30] 2 locks held by syz-executor/8824: [ 537.803049][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.816000][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.829109][ T30] 2 locks held by syz-executor/8825: [ 537.834457][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.848810][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.861850][ T30] 2 locks held by syz-executor/8827: [ 537.869929][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.882287][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.896828][ T30] 2 locks held by syz-executor/8835: [ 537.902200][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.916843][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.939816][ T30] 2 locks held by syz-executor/8837: [ 537.945178][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.961701][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.973723][ T30] 2 locks held by syz-executor/8842: [ 537.983036][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.994586][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.009909][ T30] 2 locks held by syz-executor/8844: [ 538.015268][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.026587][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.041198][ T30] 2 locks held by syz-executor/8846: [ 538.048134][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.061681][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.074965][ T30] 2 locks held by syz-executor/8854: [ 538.084418][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.095568][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.109812][ T30] 2 locks held by syz-executor/8856: [ 538.115168][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.128737][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.143618][ T30] 2 locks held by syz-executor/8858: [ 538.151059][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.164653][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.176502][ T30] 2 locks held by syz-executor/8859: [ 538.181852][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.197982][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.213287][ T30] 2 locks held by syz-executor/8861: [ 538.228062][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 538.244006][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 538.254696][ T30] 2 locks held by dhcpcd/8864: [ 538.265045][ T30] #0: ffff888070664258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 538.275290][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 538.291619][ T30] 2 locks held by dhcpcd/8865: [ 538.300143][ T30] #0: ffff888056dd8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 538.315081][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 538.327179][ T30] [ 538.329555][ T30] ============================================= [ 538.329555][ T30] [ 538.350982][ T30] NMI backtrace for cpu 0 [ 538.355391][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 538.365944][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.376051][ T30] Call Trace: [ 538.379378][ T30] [ 538.382351][ T30] dump_stack_lvl+0x241/0x360 [ 538.387080][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.392321][ T30] ? __pfx__printk+0x10/0x10 [ 538.396988][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 538.401984][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 538.407491][ T30] ? _printk+0xd5/0x120 [ 538.411705][ T30] ? __pfx__printk+0x10/0x10 [ 538.416363][ T30] ? __wake_up_klogd+0xcc/0x110 [ 538.421271][ T30] ? __pfx__printk+0x10/0x10 [ 538.425927][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 538.431016][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 538.437061][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 538.443184][ T30] watchdog+0xff4/0x1040 [ 538.447485][ T30] ? watchdog+0x1ea/0x1040 [ 538.451954][ T30] ? __pfx_watchdog+0x10/0x10 [ 538.456684][ T30] kthread+0x2f0/0x390 [ 538.460794][ T30] ? __pfx_watchdog+0x10/0x10 [ 538.465518][ T30] ? __pfx_kthread+0x10/0x10 [ 538.470154][ T30] ret_from_fork+0x4b/0x80 [ 538.474627][ T30] ? __pfx_kthread+0x10/0x10 [ 538.479284][ T30] ret_from_fork_asm+0x1a/0x30 [ 538.484129][ T30] [ 538.488008][ T30] Sending NMI from CPU 0 to CPUs 1: [ 538.493287][ C1] NMI backtrace for cpu 1 [ 538.493302][ C1] CPU: 1 UID: 0 PID: 5287 Comm: kworker/1:5 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 538.493325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.493339][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 538.493369][ C1] RIP: 0010:kasan_check_range+0x3a/0x290 [ 538.493396][ C1] Code: f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 02 00 00 48 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb <48> c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 4d [ 538.493413][ C1] RSP: 0018:ffffc90000a17aa0 EFLAGS: 00000002 [ 538.493428][ C1] RAX: 0000000000000001 RBX: ffffffff942c7800 RCX: ffffffff81706bec [ 538.493442][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c7800 [ 538.493454][ C1] RBP: 000000000001ffff R08: ffffffff942c7808 R09: 1ffffffff2858f00 [ 538.493468][ C1] R10: dffffc0000000000 R11: fffffbfff2858f01 R12: 0000000000000000 [ 538.493482][ C1] R13: ffff88802f1928d8 R14: 1ffff11005e32534 R15: ffff88802f1929a0 [ 538.493497][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 538.493512][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.493525][ C1] CR2: 000000002000f000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 538.493541][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 538.493553][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 538.493565][ C1] Call Trace: [ 538.493578][ C1] [ 538.493585][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 538.493609][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 538.493637][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 538.493665][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 538.493691][ C1] ? nmi_handle+0x14f/0x5a0 [ 538.493710][ C1] ? nmi_handle+0x2a/0x5a0 [ 538.493729][ C1] ? kasan_check_range+0x3a/0x290 [ 538.493750][ C1] ? default_do_nmi+0x63/0x160 [ 538.493773][ C1] ? exc_nmi+0x123/0x1f0 [ 538.493795][ C1] ? end_repeat_nmi+0xf/0x53 [ 538.493815][ C1] ? __lock_acquire+0xf3c/0x2050 [ 538.493842][ C1] ? kasan_check_range+0x3a/0x290 [ 538.493864][ C1] ? kasan_check_range+0x3a/0x290 [ 538.493886][ C1] ? kasan_check_range+0x3a/0x290 [ 538.493907][ C1] [ 538.493913][ C1] [ 538.493921][ C1] __lock_acquire+0xf3c/0x2050 [ 538.493954][ C1] lock_acquire+0x1ed/0x550 [ 538.493980][ C1] ? debug_objects_fill_pool+0x80/0x9f0 [ 538.494007][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 538.494030][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 538.494061][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 538.494079][ C1] ? __lock_acquire+0x1384/0x2050 [ 538.494108][ C1] ? debug_objects_fill_pool+0x80/0x9f0 [ 538.494133][ C1] debug_objects_fill_pool+0xa0/0x9f0 [ 538.494159][ C1] ? debug_objects_fill_pool+0x80/0x9f0 [ 538.494187][ C1] ? ip_finish_output2+0x45f/0x1390 [ 538.494216][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 538.494244][ C1] ? ip_finish_output2+0x45f/0x1390 [ 538.494271][ C1] ? __pfx_lock_release+0x10/0x10 [ 538.494303][ C1] debug_object_activate+0x135/0x510 [ 538.494329][ C1] ? ip_finish_output2+0x45f/0x1390 [ 538.494358][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 538.494387][ C1] ? rcuref_put_slowpath+0x138/0x340 [ 538.494412][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 538.494431][ C1] call_rcu+0x97/0xa70 [ 538.494465][ C1] ? rcuref_put+0x1e3/0x240 [ 538.494481][ C1] ? __pfx_call_rcu+0x10/0x10 [ 538.494502][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 538.494537][ C1] skb_release_head_state+0x73/0x250 [ 538.494558][ C1] consume_skb+0x60/0xf0 [ 538.494580][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 538.494610][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 538.494638][ C1] ? nf_ip_checksum+0x13a/0x500 [ 538.494667][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 538.494696][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 538.494725][ C1] ? __pfx_validate_chain+0x10/0x10 [ 538.494749][ C1] nft_do_chain+0x4ad/0x1da0 [ 538.494781][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 538.494807][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 538.494842][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 538.494863][ C1] nft_do_chain_inet+0x418/0x6b0 [ 538.494891][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 538.494917][ C1] ? ipt_do_table+0x312/0x1860 [ 538.494949][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 538.494975][ C1] nf_hook_slow+0xc3/0x220 [ 538.494999][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 538.495020][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 538.495041][ C1] NF_HOOK+0x29e/0x450 [ 538.495062][ C1] ? NF_HOOK+0x9a/0x450 [ 538.495081][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 538.495101][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 538.495125][ C1] ? ip_rcv_finish+0x406/0x560 [ 538.495145][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 538.495166][ C1] NF_HOOK+0x3a4/0x450 [ 538.495186][ C1] ? NF_HOOK+0x9a/0x450 [ 538.495206][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 538.495224][ C1] ? ip_rcv_core+0x801/0xd10 [ 538.495245][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 538.495268][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 538.495288][ C1] __netif_receive_skb+0x2bf/0x650 [ 538.495312][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 538.495339][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 538.495361][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 538.495387][ C1] ? __pfx_lock_release+0x10/0x10 [ 538.495414][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 538.495445][ C1] process_backlog+0x662/0x15b0 [ 538.495470][ C1] ? process_backlog+0x33b/0x15b0 [ 538.495497][ C1] ? __pfx_process_backlog+0x10/0x10 [ 538.495520][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 538.495548][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 538.495582][ C1] __napi_poll+0xcb/0x490 [ 538.495606][ C1] net_rx_action+0x89b/0x1240 [ 538.495637][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 538.495662][ C1] ? sched_clock+0x4a/0x70 [ 538.495691][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 538.495723][ C1] handle_softirqs+0x2c5/0x980 [ 538.495748][ C1] ? do_softirq+0x11b/0x1e0 [ 538.495772][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 538.495800][ C1] do_softirq+0x11b/0x1e0 [ 538.495822][ C1] [ 538.495829][ C1] [ 538.495835][ C1] ? __pfx_do_softirq+0x10/0x10 [ 538.495859][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 538.495886][ C1] ? mod_peer_timer+0x21/0x260 [ 538.495906][ C1] ? rcu_is_watching+0x15/0xb0 [ 538.495927][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 538.495952][ C1] ? mod_peer_timer+0x21/0x260 [ 538.495972][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 538.495996][ C1] ? mod_peer_timer+0x21/0x260 [ 538.496018][ C1] ? mod_peer_timer+0x212/0x260 [ 538.496040][ C1] wg_packet_tx_worker+0x160/0x810 [ 538.496065][ C1] ? process_scheduled_works+0x976/0x1850 [ 538.496091][ C1] process_scheduled_works+0xa63/0x1850 [ 538.496126][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 538.496155][ C1] ? assign_work+0x364/0x3d0 [ 538.496180][ C1] worker_thread+0x870/0xd30 [ 538.496208][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 538.496236][ C1] ? __kthread_parkme+0x169/0x1d0 [ 538.496263][ C1] ? __pfx_worker_thread+0x10/0x10 [ 538.496288][ C1] kthread+0x2f0/0x390 [ 538.496305][ C1] ? __pfx_worker_thread+0x10/0x10 [ 538.496331][ C1] ? __pfx_kthread+0x10/0x10 [ 538.496349][ C1] ret_from_fork+0x4b/0x80 [ 538.496375][ C1] ? __pfx_kthread+0x10/0x10 [ 538.496392][ C1] ret_from_fork_asm+0x1a/0x30 [ 538.496424][ C1] [ 539.274637][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 539.281584][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 539.292319][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 539.302433][ T30] Call Trace: [ 539.305853][ T30] [ 539.308927][ T30] dump_stack_lvl+0x241/0x360 [ 539.313664][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.318926][ T30] ? __pfx__printk+0x10/0x10 [ 539.323592][ T30] ? vscnprintf+0x5d/0x90 [ 539.327993][ T30] panic+0x349/0x880 [ 539.331961][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 539.338271][ T30] ? __pfx_panic+0x10/0x10 [ 539.342752][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 539.348191][ T30] ? __irq_work_queue_local+0x137/0x410 [ 539.353890][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 539.359416][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 539.365653][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 539.371982][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 539.378237][ T30] watchdog+0x1033/0x1040 [ 539.382632][ T30] ? watchdog+0x1ea/0x1040 [ 539.387117][ T30] ? __pfx_watchdog+0x10/0x10 [ 539.391847][ T30] kthread+0x2f0/0x390 [ 539.395966][ T30] ? __pfx_watchdog+0x10/0x10 [ 539.400705][ T30] ? __pfx_kthread+0x10/0x10 [ 539.405360][ T30] ret_from_fork+0x4b/0x80 [ 539.409840][ T30] ? __pfx_kthread+0x10/0x10 [ 539.414500][ T30] ret_from_fork_asm+0x1a/0x30 [ 539.419362][ T30] [ 539.422744][ T30] Kernel Offset: disabled [ 539.427093][ T30] Rebooting in 86400 seconds..