last executing test programs: 6.206127798s ago: executing program 0 (id=2721): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000040)={@remote, @multicast1, 0x1, "64f39e1107580bff192e2211b9f89b60e8592f6845de6ec17c2f3289ee4e64f0", 0x5, 0x80000001, 0x1, 0x6}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 6.201141903s ago: executing program 0 (id=2722): openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x81, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000b00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x0, 0x1}) 6.195939523s ago: executing program 0 (id=2725): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050015050a"], 0x17) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x1, 0x3e, &(0x7f0000000080), 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0xfffffffffffffe46, 0xffffffffffffffff, {0xfc}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xa, &(0x7f00000005c0)=@raw=[@map_idx_val={0x18, 0x7}, @printk], &(0x7f0000000640)='GPL\x00', 0x3, 0x1e, &(0x7f0000000680)=""/30, 0x28656d2ed8f805b9, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0xfffffff7, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000300)=[{0x1, 0x3, 0x10, 0x9}, {0x4, 0x4, 0x5, 0xb}, {0x3, 0x5, 0xb, 0x6}], 0x10, 0xffffffc0, @void, @value}, 0x90) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000180)) 6.194396405s ago: executing program 0 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create(0x6) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x80000000, 0x2, 0x1}) syz_open_dev$video(&(0x7f0000000580), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80002, 0xa1, 0x19}, 0x18) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02864c3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080002400000000208000140000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 6.193590272s ago: executing program 2 (id=2729): r0 = epoll_create(0x8002) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d4, 0x2f4, 0x1f0, 0x0, 0x2f4, 0x2f4, 0x2f4, 0x4, 0x0, {[{{@arp={@loopback, @multicast2, 0xffff00, 0xff, 0xf, 0xe, {@mac=@random="3fb7dfc3cddd", {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x99b6, 0x80, 0x5, 0x4, 0xfffa, 'veth0\x00', 'veth1\x00', {}, {}, 0x0, 0xc0}, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xf, 0x14a4, 0x1}}}, {{@arp={@remote, @broadcast, 0xffffffff, 0xff, 0xf, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x2, 0x68e1, 0xfff8, 0x7, 0x9, 0xf, 'caif0\x00', 'wg1\x00', {0x101}, {0xff}, 0x0, 0x108}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast2, @multicast1, 0xf, 0x1}}}, {{@arp={@remote, @multicast1, 0xff, 0x0, 0xb, 0xd, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0x4bb84b801cfce66e]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x2, 0x5, 0xa, 0x0, 0x5, 0x9, 'bond0\x00', 'geneve1\x00', {}, {}, 0x0, 0x300}, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1, {0x3}}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x420) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x303f, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009041b00010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000015c0)={0x2c, &(0x7f00000012c0)={0x0, 0x0, 0x5, {0x5, 0x0, "612bd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) openat$procfs(0xffffff9c, &(0x7f00000023c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x64000085) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfefd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4024890}, 0x0) 5.835582373s ago: executing program 3 (id=2733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x10000000, r2, 0x0, 0x2, 0x4}}, 0x20) 5.210235506s ago: executing program 0 (id=2738): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000040)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xb89f}, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) 4.909195839s ago: executing program 1 (id=2740): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x58}}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x15, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xfffffffc}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) 4.611834182s ago: executing program 1 (id=2741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = dup(r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000800)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async) ioctl$KVM_SET_MSRS(r1, 0xc008aec1, &(0x7f0000000100)=ANY=[]) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9d, 0xaf, 0x49, 0x20, 0x10cf, 0x8067, 0x2c27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc3, 0x58, 0xf5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) 4.229892694s ago: executing program 3 (id=2742): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x42, 0x0) 4.179873804s ago: executing program 3 (id=2743): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x1, {0xa, 0x4e20, 0x8, @empty, 0x800}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r3, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xf38b03}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffff9c, &(0x7f0000000180), 0x422000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000400", @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x2c, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000430001"], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000003000000054a0006040000000a000000080000000d00000068360000130000000900000008000000690d0000020000000500000010000000000000"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) r6 = socket$kcm(0x2, 0x2, 0x84) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000001280)='bic\x00', 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490788583b8bdac1414aa00000000", @ANYRESDEC=r6, @ANYRES32=0x41424344, @ANYBLOB="ba000000907800090b6f00050200000000000000000002d58838068b91000000e29fabcc4e0cb4f2f5aae201e879d2b2b86eb9fbe2443986f298bd8ed009ceea64f4d7992f156aa6014b32139358026844f33f7fdf40e0680dc50fc736129676a64c887dfc998e3ceb8bdc2bb2bb380806a1de6a42b843bacd1bdc2ea0813010efea708a23cdbb4b62c7a5ada1f256a43335312672d5dcd8f01bcb4bf718af0ab71a701aed86e0a1df2e396ef80082a713091e090b435d4225f338b65b52b83865a7b0126ddc778d9be57a2dc9305153b0687a77efc923eb20515ca440dcd950b2ee8b5c"], 0x4e) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window={0x3, 0x0, 0x5}, @sack_perm, @timestamp, @window={0x3, 0x7f, 0x2}, @timestamp], 0x8) 3.06323628s ago: executing program 2 (id=2747): openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x81, 0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000b00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x0, 0x1}) 3.062506017s ago: executing program 3 (id=2748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet(0x2, 0x5, 0xa03) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000), 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, 0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000300)=0x4, 0x4) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae105134de45d4caeda3b2fd383c501a61fd830ec66dadb4e11f4b40a344868fcea5d536ede849a69b6b0aa5b35904efbf220a4241d79595c06c2e2c8e70871b41294a3b5dd15080100ec3fe7d0cbfd1774516d043f783cb6a2090400641095cb734d3c53305bf8fe8a17524570ce1b62efa4bbf999b6af5c4ab8209ed5d0131ba3", @ANYRES8=r4, @ANYRES64], 0x100000530) sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0xe80}], 0x1}}, {{&(0x7f0000000100)=@nfc_llcp={0x27, r4, 0xffffffffffffffff, 0x4, 0x8, 0x9, "172f715d55d384aaecebe5e2d08d6c2785287f54a189a94a165968e5131220a0e35d402f83e5c6152b21d2760dcf1e65d727246259cf8665b959f42d789a8b", 0x28}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)="caf9a625bc4845594abfec64b45bfd1f5c112080f8eda8e8bcf5e91ef76c95da1b5ecde13c1bb0f5f36c6e1d9e00408d7d7567402d5bb317f76dba04df23d2608bff34e64c9398e6ee4130603fbcb1e679d587c7", 0x54}, {&(0x7f0000000240)="04e63abf08c54e624fd5e6a982916484c573bb0434d5e710c3ec5162f6a39db5a45671e4c1711889978a48a98dfd55de6f30977e0b6e42e45a32721749d0259b7514733bffde89f81797f0570974854da41684448e535a4c26ba5693a4e18ddca3467267dc9a11d1bc9e4da1e640c573d144c65bdf70e09056f11213d5db708fd7d5af3bb8dee817eeee68769d9b20a5aac85f77e4b3eba608947024063cb1da9f93c7ef9a", 0xa5}, {&(0x7f0000000300)="8bf2b17dd044e115a33ebc8334987d408b66f5b00a3b533721e843984e50b0899f6b763643f6346717d8acc5126e2730040256bc81f69de3b89867cda3229d8e45ecd6bf763062fba7c77b018c5a2f1d8002c01b4a516703e03fe03979585a230200d67f2d171306d83ec87a92eec943be6dc89f98019961ecfffa7abd84e3df0524908b94fa3c531a42", 0x8a}, {&(0x7f00000003c0)="e1a70cf6068fe50faa0e11bb964737f15fa632fa3678ed76cb8bb1fdb3378b66066b866f18903d38f8df18c3d7defa984431088da34855f72f54a38b05c6be898c31c6a3eb7c0b46386de7d696974a37b3889ff1196132e18322e4f0a10fe7934b9986ba81bf642ce34545a93815e8a2b9451f11755c3a41784ba37d323c3fda16c60dbb84b144271373aadb1ae74f3592491a910356ce2f5da672b955db9683b9c3d7c47f24d245a2", 0xa9}], 0x4}}], 0x2, 0x0) 2.659615643s ago: executing program 4 (id=2750): r0 = gettid() r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, 0x0, &(0x7f00000000c0)) r2 = getpid() rt_tgsigqueueinfo(r2, r0, 0x1f, &(0x7f0000000300)) getpgrp(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "a7f0d860f70f5161", "1ae5998704f3134b5c0c666aea452037", "41ff0c17", "c455f39b8a7b3d87"}, 0x28) syz_clone3(&(0x7f0000000000)={0x8a800400, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x58) 2.586853428s ago: executing program 2 (id=2751): syz_usb_connect(0x0, 0x1a2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b6a57e4086005b0bc5e10102030109029001020000000009040000020e0100000a2401000000020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed230743f2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4bab8aac95498fb6033f760602c1a8b1eac2150072501000000000905000000000000000725010000000007250100000000090400000eb03748000a2401000000020102052405"], 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0200007d00000005df000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6576626f6825ffffff8102000000000000ff03ff9200000034007002007dfa673effeb09b5351f5bde05"], 0x21d) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000040)=0x5ba4, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000004c0)=""/42, &(0x7f0000000280)=0x2a) 2.452358763s ago: executing program 4 (id=2752): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2.261915816s ago: executing program 4 (id=2753): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x10000000, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) splice(r0, &(0x7f0000000040)=0x6, r2, &(0x7f00000001c0)=0x80000000, 0x3, 0xd) 2.198265826s ago: executing program 4 (id=2754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r5, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) open$dir(0x0, 0x490a80, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000040), 0x4) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstatat64(0xffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r6, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) lseek(r7, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 1.968358447s ago: executing program 0 (id=2755): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x9b, 0xde, 0x52, 0x10, 0x3923, 0x718a, 0xd8d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0x7b, 0x7, 0x2, 0x2d, 0x51, 0xd5, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x20, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x12, 0x3ff, 0x8, 0x9, 0x23}}]}}]}}]}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x68) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x40) 1.937384765s ago: executing program 3 (id=2756): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.47826247s ago: executing program 1 (id=2757): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000000000)={0xa, 0x500, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x20, 0x29, 0x32, {@dev, r1}}}], 0x20}, 0x0) 1.147445316s ago: executing program 1 (id=2758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x4, 0x0, 0x40, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x80, 0xce, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x38, 0x4a, 0x100, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x18, 0x0, r4, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x4000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r6, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000380)="d7330a59ca", 0x5}], 0x2) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r7, 0xc0045004, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) write$binfmt_script(r5, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) writev(r5, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0xfd88}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 1.001098052s ago: executing program 3 (id=2759): socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a0102000000000000000002000000090001"], 0x1e4}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x20400) pread64(r0, &(0x7f0000000400)=""/230, 0xe6, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000001900)=""/102390, 0x18ff6}], 0x1, 0x0, 0x7fe) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@RTM_NEWMDB={0x78, 0x54, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x1, {@in6_addr=@mcast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@ip4=@multicast1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4e840}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) dup(0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="004a000f401000001c00128009000100626f6e64000000000c00028008000a0000000000"], 0x3c}}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000180), 0x965, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f0000000880)={0x0, 0x10, {0x0, 0x0, 0x0, 0x0, 0x6}}) 755.38384ms ago: executing program 2 (id=2760): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050015050a"], 0x17) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x1, 0x3e, &(0x7f0000000080)=':\r', 0x2) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0xfffffffffffffe46, 0xffffffffffffffff, {0xfc}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xa, &(0x7f00000005c0)=@raw=[@map_idx_val={0x18, 0x7}, @printk], &(0x7f0000000640)='GPL\x00', 0x3, 0x1e, &(0x7f0000000680)=""/30, 0x28656d2ed8f805b9, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0xfffffff7, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000300)=[{0x1, 0x3, 0x10, 0x9}, {0x4, 0x4, 0x5, 0xb}, {0x3, 0x5, 0xb, 0x6}], 0x10, 0xffffffc0, @void, @value}, 0x90) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000180)) 705.055842ms ago: executing program 1 (id=2761): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x20, 0x29, 0x32, {@dev, r1}}}], 0x20}, 0x0) (fail_nth: 6) 242.00286ms ago: executing program 2 (id=2762): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x5434, 0x2) 112.123873ms ago: executing program 1 (id=2763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000140)="a6", 0x1}, {&(0x7f0000000100)="ad", 0x1}, {&(0x7f0000000200)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000002c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x2, 0x2f, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb858e5c1967e4fd}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x1000, &(0x7f0000001780)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xe, 0x6, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x5, &(0x7f0000002880)=[r6], &(0x7f00000028c0)=[{0x2, 0x1, 0xe, 0x6}, {0x5, 0x4, 0x9, 0x7}, {0x3, 0x5, 0xc, 0x9}, {0x3, 0x5, 0xf, 0x5}, {0x2, 0x3, 0xc, 0xb}], 0x10, 0x6a1, @void, @value}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000240)={0xb1, 0x1ff, 0x5, 0x8, 0x4, 0x1}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607050042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x5, 0x12, "24001100"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "7f36c525"}]}]}}, "52badd41"}}}}}, 0x0) 111.804719ms ago: executing program 2 (id=2764): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@remote, @multicast1, 0x1, "64f39e1107580bff192e2211b9f89b60e8592f6845de6ec17c2f3289ee4e64f0", 0x5, 0x80000001, 0x1, 0x6}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 82.11165ms ago: executing program 4 (id=2765): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x10000000, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) splice(r0, &(0x7f0000000040)=0x6, r2, &(0x7f00000001c0)=0x80000000, 0x3, 0xd) 0s ago: executing program 4 (id=2766): socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000099ba200d0521015906010203010902120001000000000904000000cfb9af00"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB='@h\b\x00 \x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "58f228235484b43d", "b853f28630bcd35d25ea16573676bd32", "7f65e8e7", "1852a7486b830f14"}, 0x28) ppoll(&(0x7f0000000140)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): t_syscall_32+0xb4/0x110 [ 537.531686][T13201] ? exc_page_fault+0x590/0x8c0 [ 537.536534][T13201] do_fast_syscall_32+0x34/0x80 [ 537.541376][T13201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.547693][T13201] RIP: 0023:0xf73bd579 [ 537.551751][T13201] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.571351][T13201] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 537.579758][T13201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 537.587721][T13201] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 537.595682][T13201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.603651][T13201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.611625][T13201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.619605][T13201] [ 537.647847][ T5279] usb 3-1: USB disconnect, device number 5 [ 537.763383][ T938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 537.935290][ T938] usb 1-1: config 0 has no interfaces? [ 537.940900][ T938] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.986682][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.007464][ T938] usb 1-1: config 0 descriptor?? [ 538.030480][ T25] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 538.037025][ T25] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 538.054840][ T25] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 538.303166][ T5303] usb 1-1: USB disconnect, device number 7 [ 538.343595][ T938] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 538.444656][T13178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.510746][T13178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.548393][ T938] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 538.600519][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 538.640905][ T938] usb 5-1: can't read configurations, error -61 [ 538.694761][ T5232] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 538.818890][ T25] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 538.828815][ T938] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 538.848530][ T25] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 538.865939][ T25] usb 2-1: USB disconnect, device number 21 [ 538.872411][ T25] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 538.954015][ T5303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 539.073842][ T938] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 539.090602][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 539.100373][ T938] usb 5-1: can't read configurations, error -61 [ 539.108013][ T5303] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 539.116386][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.133352][ T938] usb usb5-port1: attempt power cycle [ 539.143887][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.178087][ T5303] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 539.187481][ T5303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.197243][ T5303] usb 4-1: config 0 descriptor?? [ 539.417356][ T5303] usbhid 4-1:0.0: can't add hid device: -71 [ 539.432270][ T5303] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 539.461462][T13224] x_tables: duplicate underflow at hook 2 [ 539.479102][ T5303] usb 4-1: USB disconnect, device number 2 [ 539.493369][ T5279] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 539.503555][ T938] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 539.569362][ T938] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 539.605505][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 539.623582][ T938] usb 5-1: can't read configurations, error -61 [ 539.644109][T13229] FAULT_INJECTION: forcing a failure. [ 539.644109][T13229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.644953][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.673528][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.683756][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.696929][ T5279] usb 1-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 539.706061][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.721934][ T5279] usb 1-1: config 0 descriptor?? [ 539.723689][T13229] CPU: 0 UID: 0 PID: 13229 Comm: syz.2.2525 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 539.737280][T13229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 539.747326][T13229] Call Trace: [ 539.750597][T13229] [ 539.753521][T13229] dump_stack_lvl+0x241/0x360 [ 539.758200][T13229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.763401][T13229] ? __pfx__printk+0x10/0x10 [ 539.768000][T13229] ? __pfx_lock_release+0x10/0x10 [ 539.773024][T13229] should_fail_ex+0x3b0/0x4e0 [ 539.777700][T13229] _copy_from_iter+0x1ed/0x1d60 [ 539.782544][T13229] ? __virt_addr_valid+0x183/0x530 [ 539.787647][T13229] ? __pfx_lock_release+0x10/0x10 [ 539.792671][T13229] ? __alloc_skb+0x28f/0x440 [ 539.797258][T13229] ? __pfx__copy_from_iter+0x10/0x10 [ 539.802552][T13229] ? __virt_addr_valid+0x183/0x530 [ 539.807671][T13229] ? __virt_addr_valid+0x183/0x530 [ 539.812774][T13229] ? __virt_addr_valid+0x45f/0x530 [ 539.817882][T13229] ? __check_object_size+0x48e/0x900 [ 539.823168][T13229] pfkey_sendmsg+0x235/0x1050 [ 539.827838][T13229] ? __lock_acquire+0x1384/0x2050 [ 539.832881][T13229] ? __pfx___might_resched+0x10/0x10 [ 539.838181][T13229] ? mark_lock+0x9a/0x360 [ 539.842501][T13229] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 539.847608][T13229] ? aa_sk_perm+0x96d/0xab0 [ 539.852118][T13229] ? __pfx_aa_sk_perm+0x10/0x10 [ 539.856965][T13229] ? __might_fault+0xaa/0x120 [ 539.861636][T13229] ? __pfx_lock_release+0x10/0x10 [ 539.866708][T13229] ? aa_sock_msg_perm+0x91/0x160 [ 539.871645][T13229] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 539.876749][T13229] __sock_sendmsg+0x221/0x270 [ 539.881422][T13229] ____sys_sendmsg+0x52a/0x7e0 [ 539.886182][T13229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.891467][T13229] __sys_sendmsg+0x292/0x380 [ 539.896052][T13229] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.901165][T13229] ? __pfx_vfs_write+0x10/0x10 [ 539.905949][T13229] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 539.912533][T13229] ? lockdep_hardirqs_on+0x99/0x150 [ 539.917730][T13229] __do_fast_syscall_32+0xb4/0x110 [ 539.922831][T13229] ? exc_page_fault+0x590/0x8c0 [ 539.927678][T13229] do_fast_syscall_32+0x34/0x80 [ 539.932523][T13229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.938843][T13229] RIP: 0023:0xf7f97579 [ 539.942906][T13229] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 539.962507][T13229] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 539.970916][T13229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 539.978887][T13229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.986847][T13229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.994809][T13229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.002770][T13229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.010745][T13229] [ 540.013846][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.093352][ T938] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 540.126927][ T938] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 540.154463][ T938] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 540.162092][ T938] usb 5-1: can't read configurations, error -61 [ 540.203714][ T938] usb usb5-port1: unable to enumerate USB device [ 540.249229][T13235] FAULT_INJECTION: forcing a failure. [ 540.249229][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.263584][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.3.2527 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 540.274031][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.284099][T13235] Call Trace: [ 540.287392][T13235] [ 540.290342][T13235] dump_stack_lvl+0x241/0x360 [ 540.295048][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.300250][T13235] ? __pfx__printk+0x10/0x10 [ 540.304842][T13235] ? __pfx_lock_release+0x10/0x10 [ 540.309878][T13235] should_fail_ex+0x3b0/0x4e0 [ 540.314565][T13235] _copy_from_iter+0x1ed/0x1d60 [ 540.319416][T13235] ? __virt_addr_valid+0x183/0x530 [ 540.324520][T13235] ? __pfx_lock_release+0x10/0x10 [ 540.329546][T13235] ? __alloc_skb+0x28f/0x440 [ 540.334131][T13235] ? __pfx__copy_from_iter+0x10/0x10 [ 540.339411][T13235] ? __virt_addr_valid+0x183/0x530 [ 540.344512][T13235] ? __virt_addr_valid+0x183/0x530 [ 540.349625][T13235] ? __virt_addr_valid+0x45f/0x530 [ 540.354733][T13235] ? __check_object_size+0x48e/0x900 [ 540.360015][T13235] netlink_sendmsg+0x73d/0xcb0 [ 540.364786][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.370071][T13235] ? __pfx_lock_release+0x10/0x10 [ 540.375090][T13235] ? aa_sock_msg_perm+0x91/0x160 [ 540.380026][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.385308][T13235] __sock_sendmsg+0x221/0x270 [ 540.389983][T13235] ____sys_sendmsg+0x52a/0x7e0 [ 540.394747][T13235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.400038][T13235] __sys_sendmsg+0x292/0x380 [ 540.404625][T13235] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.409737][T13235] ? __pfx_vfs_write+0x10/0x10 [ 540.414522][T13235] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 540.421112][T13235] ? lockdep_hardirqs_on+0x99/0x150 [ 540.426314][T13235] __do_fast_syscall_32+0xb4/0x110 [ 540.431422][T13235] ? exc_page_fault+0x590/0x8c0 [ 540.436270][T13235] do_fast_syscall_32+0x34/0x80 [ 540.441117][T13235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.447438][T13235] RIP: 0023:0xf73ed579 [ 540.451496][T13235] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.471095][T13235] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 540.479522][T13235] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 540.487494][T13235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.495460][T13235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.503423][T13235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.511390][T13235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.519365][T13235] [ 540.522507][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.776555][T13245] tap0: tun_chr_ioctl cmd 1074025677 [ 540.782077][T13245] tap0: linktype set to 780 [ 540.847892][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 540.847908][ T29] audit: type=1326 audit(1727510832.299:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 540.876302][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.011011][T13253] fuse: Unknown parameter 'fæÍ!ø)Õ7çj' [ 541.019746][ T29] audit: type=1326 audit(1727510832.309:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13242 comm="syz.1.2531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 541.182864][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 541.216758][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 541.237379][T13250] binder: 13247:13250 ioctl c00c620f 20000340 returned -22 [ 541.246940][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 541.354129][ T25] usb 2-1: no configurations [ 541.359071][ T25] usb 2-1: can't read configurations, error -22 [ 541.377331][ T5279] usbhid 1-1:0.0: can't add hid device: -71 [ 541.385419][ T5279] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 541.396757][ T5279] usb 1-1: USB disconnect, device number 8 [ 541.503339][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 541.523447][ T938] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 541.577149][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 541.653847][ T25] usb 2-1: no configurations [ 541.658535][ T25] usb 2-1: can't read configurations, error -22 [ 541.673362][ T25] usb usb2-port1: attempt power cycle [ 541.675792][ T938] usb 3-1: config 0 has an invalid interface number: 82 but max is 3 [ 541.687636][ T938] usb 3-1: config 0 has an invalid interface number: 199 but max is 3 [ 541.705648][ T938] usb 3-1: config 0 has an invalid interface number: 183 but max is 3 [ 541.731371][ T938] usb 3-1: config 0 has an invalid interface number: 170 but max is 3 [ 541.743558][ T938] usb 3-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 541.752754][ T938] usb 3-1: config 0 has no interface number 0 [ 541.759604][ T938] usb 3-1: config 0 has no interface number 2 [ 541.772305][ T938] usb 3-1: config 0 has no interface number 3 [ 541.781674][ T938] usb 3-1: config 0 has no interface number 4 [ 541.789581][ T938] usb 3-1: config 0 interface 82 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 541.802586][ T938] usb 3-1: too many endpoints for config 0 interface 199 altsetting 119: 65, using maximum allowed: 30 [ 541.816269][ T938] usb 3-1: config 0 interface 199 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 541.831934][ T938] usb 3-1: config 0 interface 82 has no altsetting 0 [ 541.838907][ T938] usb 3-1: config 0 interface 199 has no altsetting 0 [ 541.847155][ T938] usb 3-1: config 0 interface 183 has no altsetting 0 [ 541.854593][ T938] usb 3-1: config 0 interface 1 has no altsetting 0 [ 541.861875][ T938] usb 3-1: config 0 interface 170 has no altsetting 0 [ 541.871514][ T938] usb 3-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=f3.9f [ 541.881217][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.889538][ T938] usb 3-1: Product: syz [ 541.894175][ T938] usb 3-1: Manufacturer: syz [ 541.913340][ T938] usb 3-1: SerialNumber: syz [ 541.920648][ T938] usb 3-1: config 0 descriptor?? [ 542.021942][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 542.047613][ T25] usb 2-1: no configurations [ 542.052250][ T25] usb 2-1: can't read configurations, error -22 [ 542.147164][T13255] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2535'. [ 542.213533][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 542.230029][ T938] usb 3-1: selecting invalid altsetting 0 [ 542.239585][ T938] usb 3-1: Could not set interface, error -22 [ 542.244815][ T25] usb 2-1: no configurations [ 542.250721][ T25] usb 2-1: can't read configurations, error -22 [ 542.262818][ T938] usb 3-1: USB disconnect, device number 6 [ 542.264390][ T25] usb usb2-port1: unable to enumerate USB device [ 542.711588][T13278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.732578][T13278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.763910][ T5303] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 542.833371][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 542.903728][ T5303] usb 5-1: device descriptor read/64, error -71 [ 542.984889][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.003475][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 543.022119][ T25] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 543.037818][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.052414][ T25] usb 4-1: config 0 descriptor?? [ 543.144665][ T5303] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 543.253401][ T5279] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 543.264081][ T25] Bluetooth: Can't get state to change to load ram patch err [ 543.272151][ T25] Bluetooth: Loading patch file failed [ 543.280902][ T25] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 543.290553][ T25] usb 4-1: USB disconnect, device number 3 [ 543.297303][ T5303] usb 5-1: device descriptor read/64, error -71 [ 543.423330][ T5279] usb 3-1: Using ep0 maxpacket: 32 [ 543.424024][ T5303] usb usb5-port1: attempt power cycle [ 543.435885][ T5279] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 543.448368][ T5279] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 543.458310][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 543.466636][ T5279] usb 3-1: Product: syz [ 543.471054][ T5279] usb 3-1: Manufacturer: syz [ 543.475736][ T5279] usb 3-1: SerialNumber: syz [ 543.487196][ T5279] usb 3-1: config 0 descriptor?? [ 543.493090][T13282] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 543.765796][ T5278] usb 3-1: USB disconnect, device number 7 [ 543.781965][ T5303] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 543.813993][ T5303] usb 5-1: device descriptor read/8, error -71 [ 543.959206][T13291] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 543.965972][T13291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 543.983446][T13291] vhci_hcd vhci_hcd.0: Device attached [ 543.996237][T13293] vhci_hcd: connection closed [ 544.002371][ T11] vhci_hcd: stop threads [ 544.012692][ T11] vhci_hcd: release socket [ 544.017323][ T11] vhci_hcd: disconnect device [ 544.062436][ T5303] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 544.084574][ T5303] usb 5-1: device descriptor read/8, error -71 [ 544.203904][ T5303] usb usb5-port1: unable to enumerate USB device [ 544.350577][T13298] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 544.551844][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2550'. [ 544.813187][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 545.115631][T13317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.135662][T13317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.381303][T13324] netlink: 'syz.4.2558': attribute type 4 has an invalid length. [ 545.432005][T13324] bond2: entered promiscuous mode [ 545.453461][T13324] bond2: entered allmulticast mode [ 545.459104][T13324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.467955][T13324] batman_adv: batadv42: Adding interface: bond2 [ 545.474769][T13324] batman_adv: batadv42: The MTU of interface bond2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.500684][T13324] batman_adv: batadv42: Interface activated: bond2 [ 545.853478][ T5282] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 545.865795][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 545.875591][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 545.914957][T13335] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 546.013674][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 546.020956][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.032412][ T5282] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 546.051846][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.066616][ T5282] usb 5-1: config 0 descriptor?? [ 546.082515][ T5282] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 546.128281][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 546.439228][T13352] random: crng reseeded on system resumption [ 547.193525][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 547.354575][ T5298] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 547.414494][ T5282] gspca_vc032x: reg_r err -110 [ 547.419579][ T5282] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 547.548920][ T5300] usb 5-1: USB disconnect, device number 28 [ 547.564140][ T5298] usb 2-1: config 0 has no interfaces? [ 547.574929][ T5298] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.594459][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 547.602778][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.616101][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.633715][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.638373][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.656819][ T8] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 547.683894][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.712271][ T5298] usb 2-1: config 0 descriptor?? [ 547.712275][ T8] usb 3-1: config 0 descriptor?? [ 547.916986][T13364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.933153][T13364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.996171][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 548.005759][ T938] usb 2-1: USB disconnect, device number 26 [ 548.023333][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 548.023935][ T5300] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 548.043733][ T8] usb 3-1: USB disconnect, device number 8 [ 548.235915][ T5300] usb 4-1: Using ep0 maxpacket: 16 [ 548.256069][ T5300] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 548.275492][ T5300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.285969][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.294903][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.302847][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.311318][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.321395][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 548.329083][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.353051][ T5300] usb 4-1: Product: syz [ 548.357443][ T5300] usb 4-1: Manufacturer: syz [ 548.362049][ T5300] usb 4-1: SerialNumber: syz [ 548.398373][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 548.409978][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 548.485935][T13388] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 548.568083][ T5300] r8152-cfgselector 4-1: Unknown version 0x0000 [ 548.578691][ T5300] r8152-cfgselector 4-1: config 0 descriptor?? [ 548.709784][T13387] chnl_net:caif_netlink_parms(): no params data found [ 548.773408][ T5279] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 548.953400][ T5279] usb 5-1: device descriptor read/64, error -71 [ 549.055653][T13409] FAULT_INJECTION: forcing a failure. [ 549.055653][T13409] name failslab, interval 1, probability 0, space 0, times 0 [ 549.070887][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz.1.2583 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 549.081340][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.091408][T13409] Call Trace: [ 549.094695][T13409] [ 549.097633][T13409] dump_stack_lvl+0x241/0x360 [ 549.102331][T13409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.107547][T13409] ? __pfx__printk+0x10/0x10 [ 549.112156][T13409] ? fs_reclaim_acquire+0x93/0x140 [ 549.117285][T13409] ? __pfx___might_resched+0x10/0x10 [ 549.122589][T13409] should_fail_ex+0x3b0/0x4e0 [ 549.127291][T13409] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 549.133032][T13409] should_failslab+0xac/0x100 [ 549.137726][T13409] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 549.143462][T13409] __kmalloc_noprof+0xd8/0x400 [ 549.148245][T13409] tomoyo_realpath_from_path+0xcf/0x5e0 [ 549.153824][T13409] tomoyo_path2_perm+0x393/0xbb0 [ 549.158776][T13409] ? mark_lock+0x9a/0x360 [ 549.163121][T13409] ? tomoyo_path2_perm+0x361/0xbb0 [ 549.168234][T13409] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 549.173726][T13409] ? current_check_refer_path+0x576/0xdd0 [ 549.179452][T13409] tomoyo_path_rename+0x16b/0x1e0 [ 549.184475][T13409] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 549.190027][T13409] security_path_rename+0x266/0x4e0 [ 549.195226][T13409] do_renameat2+0x94a/0x13f0 [ 549.199839][T13409] ? __pfx_do_renameat2+0x10/0x10 [ 549.204875][T13409] ? __might_fault+0xc6/0x120 [ 549.209563][T13409] ? getname_flags+0x1e3/0x540 [ 549.214351][T13409] __ia32_sys_renameat2+0xce/0xe0 [ 549.219390][T13409] __do_fast_syscall_32+0xb4/0x110 [ 549.224511][T13409] ? exc_page_fault+0x590/0x8c0 [ 549.229370][T13409] do_fast_syscall_32+0x34/0x80 [ 549.234216][T13409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 549.240538][T13409] RIP: 0023:0xf73fd579 [ 549.244597][T13409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 549.264199][T13409] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 549.272620][T13409] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000480 [ 549.280592][T13409] RDX: 00000000ffffff9c RSI: 00000000200004c0 RDI: 0000000000000002 [ 549.288558][T13409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.296518][T13409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 549.304494][T13409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.312476][T13409] [ 549.318346][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.325686][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.332978][T13387] bridge_slave_0: entered allmulticast mode [ 549.342144][T13387] bridge_slave_0: entered promiscuous mode [ 549.348123][T13409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.413403][ T5279] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 549.424605][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.432152][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.440617][T13387] bridge_slave_1: entered allmulticast mode [ 549.450291][T13387] bridge_slave_1: entered promiscuous mode [ 549.498416][T13387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.528871][T13387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.555072][ T5279] usb 5-1: device descriptor read/64, error -71 [ 549.566709][ T5300] r8152-cfgselector 4-1: Unknown version 0x0000 [ 549.573396][ T5300] r8152-cfgselector 4-1: bad CDC descriptors [ 549.585711][T13411] input: syz1 as /devices/virtual/input/input74 [ 549.602529][ T5300] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 549.673494][ T5279] usb usb5-port1: attempt power cycle [ 549.728900][T13387] team0: Port device team_slave_0 added [ 549.737749][T13387] team0: Port device team_slave_1 added [ 549.767913][T13387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.786336][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.831489][T13387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.846617][T13387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.853991][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.880823][T13387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.899667][T13413] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20004 [ 549.932174][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 549.972254][T13387] hsr_slave_0: entered promiscuous mode [ 549.986818][T13387] hsr_slave_1: entered promiscuous mode [ 549.993292][T13387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.000922][T13387] Cannot create hsr debugfs directory [ 550.046464][ T5279] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 550.074399][ T5279] usb 5-1: device descriptor read/8, error -71 [ 550.153369][ T5300] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 550.217114][T13387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.292742][ T5300] usb 2-1: device descriptor read/64, error -71 [ 550.313799][ T5279] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 550.335172][ T5279] usb 5-1: device descriptor read/8, error -71 [ 550.365390][T13387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.404007][ T5232] Bluetooth: hci2: command tx timeout [ 550.451048][ T5279] usb usb5-port1: unable to enumerate USB device [ 550.475868][T13387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.534086][ T5300] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 550.567350][T13387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.593351][ T5279] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 550.663896][ T5300] usb 2-1: device descriptor read/64, error -71 [ 550.726044][T13387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.738513][T13387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.743358][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 550.753121][T13387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.760702][ T5279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 550.773696][ T5300] usb usb2-port1: attempt power cycle [ 550.781354][T13387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.789707][ T5279] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 550.798948][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 550.818697][ T5279] usb 4-1: Product: syz [ 550.822884][ T5279] usb 4-1: Manufacturer: syz [ 550.837712][ T5279] usb 4-1: SerialNumber: syz [ 550.849293][ T5279] usb 4-1: config 0 descriptor?? [ 550.867870][T13424] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 550.926780][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.947593][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.960862][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.968042][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.982928][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.990066][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.032485][T13387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.045244][T13387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.079657][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.116717][T13387] veth0_vlan: entered promiscuous mode [ 551.123768][ T5300] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 551.146433][ T5278] usb 4-1: USB disconnect, device number 5 [ 551.154853][ T5300] usb 2-1: device descriptor read/8, error -71 [ 551.174044][T13387] veth1_vlan: entered promiscuous mode [ 551.324706][T13387] veth0_macvtap: entered promiscuous mode [ 551.356220][T13387] veth1_macvtap: entered promiscuous mode [ 551.379063][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.400988][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.415644][T13437] binder: BINDER_SET_CONTEXT_MGR already set [ 551.423459][ T5300] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 551.427202][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.442642][T13437] binder: 13434:13437 ioctl 4018620d 200002c0 returned -16 [ 551.450136][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.450832][ T5300] usb 2-1: device descriptor read/8, error -71 [ 551.470899][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.481874][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.496913][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.508586][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.520517][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.531589][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.541904][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.552728][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.566343][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.585584][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.596506][ T5300] usb usb2-port1: unable to enumerate USB device [ 551.602981][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.615211][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.627423][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.637485][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.648155][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.658132][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.668877][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.678939][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.691600][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.701666][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.703487][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 551.712293][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.730054][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.741952][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.752067][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.769059][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.780623][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.796410][T13387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.805762][T13387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.814703][T13387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.823645][T13387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.897004][ T8] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 551.910198][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.936946][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.959795][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.968152][ T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 551.975230][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.008991][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.034673][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.037877][ T8] usb 5-1: config 0 descriptor?? [ 552.060985][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.176880][T13443] FAULT_INJECTION: forcing a failure. [ 552.176880][T13443] name failslab, interval 1, probability 0, space 0, times 0 [ 552.193421][T13443] CPU: 0 UID: 0 PID: 13443 Comm: syz.2.2595 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 552.203869][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 552.213939][T13443] Call Trace: [ 552.217224][T13443] [ 552.220160][T13443] dump_stack_lvl+0x241/0x360 [ 552.224861][T13443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.230083][T13443] ? __pfx__printk+0x10/0x10 [ 552.234703][T13443] ? ref_tracker_alloc+0x332/0x490 [ 552.239841][T13443] should_fail_ex+0x3b0/0x4e0 [ 552.244543][T13443] ? skb_clone+0x20c/0x390 [ 552.248981][T13443] should_failslab+0xac/0x100 [ 552.253671][T13443] ? skb_clone+0x20c/0x390 [ 552.258086][T13443] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 552.263458][T13443] skb_clone+0x20c/0x390 [ 552.267699][T13443] __netlink_deliver_tap+0x3cc/0x7c0 [ 552.272988][T13443] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.278183][T13443] netlink_deliver_tap+0x19d/0x1b0 [ 552.283297][T13443] netlink_unicast+0x7c4/0x990 [ 552.288092][T13443] ? __pfx_netlink_unicast+0x10/0x10 [ 552.293383][T13443] ? __virt_addr_valid+0x183/0x530 [ 552.298501][T13443] ? __check_object_size+0x48e/0x900 [ 552.303793][T13443] netlink_sendmsg+0x8e4/0xcb0 [ 552.308575][T13443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.313861][T13443] ? __pfx_lock_release+0x10/0x10 [ 552.318881][T13443] ? aa_sock_msg_perm+0x91/0x160 [ 552.323824][T13443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.329120][T13443] __sock_sendmsg+0x221/0x270 [ 552.333801][T13443] ____sys_sendmsg+0x52a/0x7e0 [ 552.338564][T13443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.343856][T13443] __sys_sendmsg+0x292/0x380 [ 552.348441][T13443] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.353553][T13443] ? __pfx_vfs_write+0x10/0x10 [ 552.358342][T13443] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 552.364925][T13443] ? lockdep_hardirqs_on+0x99/0x150 [ 552.370120][T13443] __do_fast_syscall_32+0xb4/0x110 [ 552.375221][T13443] ? exc_page_fault+0x590/0x8c0 [ 552.380076][T13443] do_fast_syscall_32+0x34/0x80 [ 552.384918][T13443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.391234][T13443] RIP: 0023:0xf7f97579 [ 552.395292][T13443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 552.414892][T13443] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 552.423304][T13443] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 552.431279][T13443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.439239][T13443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.447203][T13443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 552.455173][T13443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.463170][T13443] [ 552.468706][ T46] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 552.483645][ T5232] Bluetooth: hci2: command tx timeout [ 552.490521][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 552.576643][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 552.582700][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 552.623510][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 552.629532][ T8] usb 5-1: USB disconnect, device number 33 [ 552.662439][ T46] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 552.675122][ T46] usb 4-1: config 0 has no interface number 0 [ 552.682801][ T46] usb 4-1: config 0 interface 161 has no altsetting 0 [ 552.696980][ T46] usb 4-1: New USB device found, idVendor=13d3, idProduct=3336, bcdDevice= 5.f5 [ 552.713854][T13452] x_tables: duplicate underflow at hook 2 [ 552.733333][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.747958][ T46] usb 4-1: Product: syz [ 552.761144][ T46] usb 4-1: Manufacturer: syz [ 552.772995][ T46] usb 4-1: SerialNumber: syz [ 552.786141][ T46] usb 4-1: config 0 descriptor?? [ 552.892963][T13450] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2596'. [ 552.907237][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 553.010161][ T46] r8712u: register rtl8712_netdev_ops to netdev_ops [ 553.028347][ T46] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 553.047731][ T46] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 553.093397][ T46] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 553.101009][ T46] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 553.175652][ T46] usb 4-1: USB disconnect, device number 6 [ 554.018248][ T5282] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 554.236170][T13468] netlink: 'syz.1.2604': attribute type 21 has an invalid length. [ 554.253325][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 554.269027][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 554.289850][ T5282] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 554.310409][T13470] FAULT_INJECTION: forcing a failure. [ 554.310409][T13470] name failslab, interval 1, probability 0, space 0, times 0 [ 554.328658][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 554.356795][ T5282] usb 5-1: Product: syz [ 554.361095][T13468] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2604'. [ 554.373399][ T5282] usb 5-1: Manufacturer: syz [ 554.378019][ T5282] usb 5-1: SerialNumber: syz [ 554.382778][T13470] CPU: 1 UID: 0 PID: 13470 Comm: syz.3.2605 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 554.393209][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 554.403275][T13470] Call Trace: [ 554.406565][T13470] [ 554.409511][T13470] dump_stack_lvl+0x241/0x360 [ 554.414216][T13470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.419439][T13470] ? __pfx__printk+0x10/0x10 [ 554.424055][T13470] ? ref_tracker_alloc+0x332/0x490 [ 554.429193][T13470] should_fail_ex+0x3b0/0x4e0 [ 554.433894][T13470] ? skb_clone+0x20c/0x390 [ 554.438324][T13470] should_failslab+0xac/0x100 [ 554.443022][T13470] ? skb_clone+0x20c/0x390 [ 554.447456][T13470] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 554.452850][T13470] skb_clone+0x20c/0x390 [ 554.457112][T13470] __netlink_deliver_tap+0x3cc/0x7c0 [ 554.462426][T13470] ? netlink_deliver_tap+0x2e/0x1b0 [ 554.467643][T13470] netlink_deliver_tap+0x19d/0x1b0 [ 554.472778][T13470] netlink_unicast+0x7c4/0x990 [ 554.477573][T13470] ? __pfx_netlink_unicast+0x10/0x10 [ 554.482875][T13470] ? __virt_addr_valid+0x183/0x530 [ 554.488005][T13470] ? __check_object_size+0x48e/0x900 [ 554.493311][T13470] netlink_sendmsg+0x8e4/0xcb0 [ 554.498107][T13470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.503416][T13470] ? __pfx_lock_release+0x10/0x10 [ 554.508457][T13470] ? aa_sock_msg_perm+0x91/0x160 [ 554.513414][T13470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.518715][T13470] __sock_sendmsg+0x221/0x270 [ 554.523413][T13470] ____sys_sendmsg+0x52a/0x7e0 [ 554.528201][T13470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.533517][T13470] __sys_sendmsg+0x292/0x380 [ 554.538124][T13470] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.543262][T13470] ? __pfx_vfs_write+0x10/0x10 [ 554.548078][T13470] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 554.554702][T13470] ? lockdep_hardirqs_on+0x99/0x150 [ 554.559922][T13470] __do_fast_syscall_32+0xb4/0x110 [ 554.565047][T13470] ? exc_page_fault+0x590/0x8c0 [ 554.569920][T13470] do_fast_syscall_32+0x34/0x80 [ 554.574783][T13470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.581123][T13470] RIP: 0023:0xf73ed579 [ 554.585204][T13470] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 554.604822][T13470] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 554.613254][T13470] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 554.621241][T13470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.629228][T13470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.637212][T13470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 554.645196][T13470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.653200][T13470] [ 554.754512][ T5282] usb 5-1: config 0 descriptor?? [ 554.760826][T13464] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 554.773463][ T5232] Bluetooth: hci2: command tx timeout [ 554.983674][T13468] netlink: 'syz.1.2604': attribute type 5 has an invalid length. [ 554.998304][T13468] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2604'. [ 555.034726][ T5282] usb 5-1: USB disconnect, device number 34 [ 555.103409][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2605'. [ 555.373357][ T5278] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 555.472907][ T29] audit: type=1326 audit(1727510846.779:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.495893][ T29] audit: type=1326 audit(1727510846.789:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.518883][ T29] audit: type=1326 audit(1727510846.789:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.663343][ T29] audit: type=1326 audit(1727510846.789:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.696169][ T5278] usb 1-1: device descriptor read/64, error -71 [ 555.706268][ T29] audit: type=1326 audit(1727510846.799:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.756586][T13474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.773770][ T29] audit: type=1326 audit(1727510846.799:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.823349][ T29] audit: type=1326 audit(1727510846.799:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.869175][ T29] audit: type=1326 audit(1727510846.799:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.870008][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.923455][ T29] audit: type=1326 audit(1727510846.799:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 555.974854][ T5278] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 556.009050][ T29] audit: type=1326 audit(1727510846.809:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 556.064346][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 556.114665][ T5278] usb 1-1: device descriptor read/64, error -71 [ 556.233536][ T5278] usb usb1-port1: attempt power cycle [ 556.832700][ T5232] Bluetooth: hci2: command tx timeout [ 556.987895][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 557.083882][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'. [ 557.205517][T13506] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 557.359979][T13511] netlink: 'syz.0.2616': attribute type 21 has an invalid length. [ 557.422129][T13511] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2616'. [ 557.452572][T13511] netlink: 'syz.0.2616': attribute type 5 has an invalid length. [ 557.485269][T13511] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2616'. [ 557.746188][T13517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.848299][T13517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.443388][ T938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 558.594206][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 558.605329][ T938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 558.627309][ T938] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 558.643981][ T938] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 558.663069][ T938] usb 4-1: Product: syz [ 558.672634][ T938] usb 4-1: Manufacturer: syz [ 558.682775][ T938] usb 4-1: SerialNumber: syz [ 558.694911][ T938] usb 4-1: config 0 descriptor?? [ 558.700403][T13522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 558.805249][T13531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.824237][T13531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.945430][ T46] usb 4-1: USB disconnect, device number 7 [ 559.033756][ T938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 559.167552][T13535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.203494][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 559.215352][ T938] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 559.234165][ T938] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 559.256106][ T938] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 559.285237][ T938] usb 1-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 559.300080][T13535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.316951][ T938] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 559.332375][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.348585][ T938] usb 1-1: Product: syz [ 559.357374][ T938] usb 1-1: Manufacturer: syz [ 559.373066][ T938] usb 1-1: SerialNumber: syz [ 559.398535][ T938] hso 1-1:6.0: Can't find BULK OUT endpoint [ 559.594806][ T46] usb 1-1: USB disconnect, device number 12 [ 559.728103][T13539] syzkaller0: entered promiscuous mode [ 559.753318][T13539] syzkaller0: entered allmulticast mode [ 560.223395][ T5282] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 564.011009][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.018150][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.261476][ T5282] usb 4-1: device descriptor read/all, error -71 [ 564.464298][T13556] FAULT_INJECTION: forcing a failure. [ 564.464298][T13556] name failslab, interval 1, probability 0, space 0, times 0 [ 564.593660][T13556] CPU: 1 UID: 0 PID: 13556 Comm: syz.1.2631 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 564.604111][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.614173][T13556] Call Trace: [ 564.617454][T13556] [ 564.620387][T13556] dump_stack_lvl+0x241/0x360 [ 564.625086][T13556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.630644][T13556] ? __pfx__printk+0x10/0x10 [ 564.635250][T13556] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 564.641152][T13556] ? __pfx___might_resched+0x10/0x10 [ 564.646451][T13556] should_fail_ex+0x3b0/0x4e0 [ 564.651144][T13556] ? __d_alloc+0x31/0x700 [ 564.655489][T13556] should_failslab+0xac/0x100 [ 564.660180][T13556] ? __d_alloc+0x31/0x700 [ 564.664520][T13556] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 564.670341][T13556] __d_alloc+0x31/0x700 [ 564.674514][T13556] d_alloc_pseudo+0x1f/0xb0 [ 564.679027][T13556] alloc_file_pseudo+0x123/0x290 [ 564.683977][T13556] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 564.689448][T13556] ? alloc_fd+0x5a1/0x640 [ 564.693787][T13556] sock_alloc_file+0xb8/0x280 [ 564.698476][T13556] __sys_socket+0x1dd/0x3c0 [ 564.702988][T13556] ? __pfx___sys_socket+0x10/0x10 [ 564.708036][T13556] __ia32_sys_socket+0x7a/0x90 [ 564.712820][T13556] __do_fast_syscall_32+0xb4/0x110 [ 564.717937][T13556] ? exc_page_fault+0x590/0x8c0 [ 564.722798][T13556] do_fast_syscall_32+0x34/0x80 [ 564.727917][T13556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.734251][T13556] RIP: 0023:0xf73fd579 [ 564.738325][T13556] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 564.757936][T13556] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000167 [ 564.766365][T13556] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000000000001 [ 564.774353][T13556] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.782334][T13556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.790314][T13556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.798296][T13556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.806292][T13556] [ 565.041769][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 565.041788][ T29] audit: type=1326 audit(1727510856.489:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2634" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 565.090723][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.108505][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.117445][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.126480][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 565.134302][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 565.141700][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.058390][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 567.178631][T13568] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 567.197321][T13568] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 567.213889][ T5238] Bluetooth: hci5: command tx timeout [ 567.392099][ T5282] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 567.427539][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.558508][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.591229][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.617456][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.635668][ T5282] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 567.657872][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.706299][ T5282] usb 1-1: config 0 descriptor?? [ 567.731241][T13569] chnl_net:caif_netlink_parms(): no params data found [ 567.848291][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.987594][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.052538][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.060775][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.070059][T13569] bridge_slave_0: entered allmulticast mode [ 568.077429][T13569] bridge_slave_0: entered promiscuous mode [ 568.097348][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.113587][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.120999][T13569] bridge_slave_1: entered allmulticast mode [ 568.129011][T13569] bridge_slave_1: entered promiscuous mode [ 568.203886][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.228849][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.298575][ T5282] kye 0003:0458:501B.0063: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 568.312513][ T5282] kye 0003:0458:501B.0063: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.0-1/input0 [ 568.341677][T13569] team0: Port device team_slave_0 added [ 568.353485][ T5298] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 568.361280][ T5282] kye 0003:0458:501B.0063: tablet-enabling feature report not found [ 568.379906][ T5282] kye 0003:0458:501B.0063: tablet enabling failed [ 568.419198][T13569] team0: Port device team_slave_1 added [ 568.481803][ T52] bridge_slave_1: left allmulticast mode [ 568.494378][ T52] bridge_slave_1: left promiscuous mode [ 568.513787][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.525629][ T5298] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 568.544171][ T52] bridge_slave_0: left allmulticast mode [ 568.545870][ T5298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.549815][ T52] bridge_slave_0: left promiscuous mode [ 568.571054][ T5282] usb 1-1: USB disconnect, device number 13 [ 568.593213][ T5298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.599330][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.643556][ T5298] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 568.673120][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.692811][ T5298] usb 2-1: config 0 descriptor?? [ 568.908573][ T5298] usbhid 2-1:0.0: can't add hid device: -71 [ 568.915290][ T5298] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 568.930907][ T5298] usb 2-1: USB disconnect, device number 31 [ 569.103364][ T5282] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 569.285466][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 569.296997][ T5238] Bluetooth: hci5: command tx timeout [ 569.527391][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 569.553338][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 569.563018][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.591474][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 569.623614][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 569.653346][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 569.663025][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 569.724395][ T5282] usb 4-1: New USB device found, idVendor=1199, idProduct=6835, bcdDevice=95.23 [ 569.764339][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.788462][ T5282] usb 4-1: Product: syz [ 569.792660][ T5282] usb 4-1: Manufacturer: syz [ 569.823401][ T5282] usb 4-1: SerialNumber: syz [ 569.844619][ T5282] usb 4-1: config 0 descriptor?? [ 569.879866][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.892175][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.903511][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 569.916296][ T52] bond0 (unregistering): Released all slaves [ 569.941214][ T52] bond1 (unregistering): Released all slaves [ 569.993224][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.012497][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.073445][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 570.089953][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.119281][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.133296][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.173383][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 570.184885][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.191853][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.227073][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.246935][ T8] hub 2-1:4.0: USB hub found [ 570.280939][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.477631][ T8] hub 2-1:4.0: 1 port detected [ 570.571288][T13569] hsr_slave_0: entered promiscuous mode [ 570.604660][T13569] hsr_slave_1: entered promiscuous mode [ 570.618224][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.636788][T13569] Cannot create hsr debugfs directory [ 570.696089][T13611] netlink: 'syz.1.2646': attribute type 2 has an invalid length. [ 570.708404][T13611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 570.754168][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2646'. [ 570.914208][ T5298] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 570.923331][ T52] hsr_slave_0: left promiscuous mode [ 570.941216][ T52] hsr_slave_1: left promiscuous mode [ 570.961577][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.978628][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.007526][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.033346][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.085812][ T5298] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 571.106033][ T52] veth1_macvtap: left promiscuous mode [ 571.110318][ T5298] usb 1-1: config 5 has no interface number 0 [ 571.120335][ T52] veth0_macvtap: left promiscuous mode [ 571.132961][ T5298] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 571.136619][ T52] veth1_vlan: left promiscuous mode [ 571.153087][ T8] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 571.161346][ T8] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 571.172305][ T52] veth0_vlan: left promiscuous mode [ 571.189153][ T5298] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 571.208477][ T8] usb 2-1: USB disconnect, device number 32 [ 571.213339][ T5298] usb 1-1: config 5 interface 123 has no altsetting 0 [ 571.363726][ T5238] Bluetooth: hci5: command tx timeout [ 571.368005][ T5298] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 571.378310][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.386449][ T5298] usb 1-1: Product: syz [ 571.391179][ T5298] usb 1-1: Manufacturer: syz [ 571.396031][ T5298] usb 1-1: SerialNumber: syz [ 571.405609][T13632] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 571.924317][ T5282] sierra 4-1:0.0: Sierra USB modem converter detected [ 571.977113][ T5282] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 572.039534][ T5282] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 572.066122][ T5282] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 572.114063][ T5282] usb 4-1: USB disconnect, device number 10 [ 572.479854][ T5282] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 572.491724][ T5282] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 572.522031][ T5282] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 572.546346][ T5282] sierra 4-1:0.0: device disconnected [ 572.587238][ T52] team0 (unregistering): Port device team_slave_1 removed [ 572.656028][ T52] team0 (unregistering): Port device team_slave_0 removed [ 573.219127][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'. [ 573.265988][T13651] netlink: 'syz.4.2652': attribute type 21 has an invalid length. [ 573.278574][T13651] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2652'. [ 573.289173][T13651] netlink: 'syz.4.2652': attribute type 5 has an invalid length. [ 573.297216][T13651] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2652'. [ 573.310178][T13655] netlink: 'syz.3.2653': attribute type 21 has an invalid length. [ 573.330049][T13655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2653'. [ 573.340270][T13655] netlink: 'syz.3.2653': attribute type 5 has an invalid length. [ 573.354276][ T5298] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 573.363777][T13655] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2653'. [ 573.379000][ T5298] usb 1-1: USB disconnect, device number 14 [ 573.454490][ T5238] Bluetooth: hci5: command tx timeout [ 574.102683][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 574.163524][T13679] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.171021][T13679] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.252135][T13569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.282547][T13569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.313855][T13569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 574.358006][T13569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.562190][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.611018][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.620135][ T5278] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 574.635031][ T8] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 574.679154][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.686331][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.721322][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.728558][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.814479][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 574.822368][ T5278] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 574.832619][ T8] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 574.844196][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.858654][ T8] usb 1-1: config 5 has no interface number 0 [ 574.869498][ T5278] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 574.885071][ T8] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 574.907094][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 574.924325][ T8] usb 1-1: config 5 interface 123 has no altsetting 0 [ 574.931687][ T5278] usb 5-1: Product: syz [ 574.936422][ T938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 574.950109][ T5278] usb 5-1: Manufacturer: syz [ 574.956538][ T5278] usb 5-1: SerialNumber: syz [ 574.957081][T13569] veth0_vlan: entered promiscuous mode [ 574.962371][ T8] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 574.985995][ T5278] usb 5-1: config 0 descriptor?? [ 574.991650][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.005724][ T8] usb 1-1: Product: syz [ 575.010298][T13689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 575.015867][T13569] veth1_vlan: entered promiscuous mode [ 575.018994][ T8] usb 1-1: Manufacturer: syz [ 575.028305][ T8] usb 1-1: SerialNumber: syz [ 575.076612][T13569] veth0_macvtap: entered promiscuous mode [ 575.085588][T13569] veth1_macvtap: entered promiscuous mode [ 575.100566][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.111293][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.121184][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.123480][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 575.131920][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.146871][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.157376][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.159001][ T938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 575.167211][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.167230][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.167260][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.167274][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.167289][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.167303][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.168503][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.251880][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.262407][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.272588][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.277307][ T8] comedi comedi0: Wrong number of endpoints [ 575.283605][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.300277][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.306493][ T938] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 575.310956][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.329969][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.330050][ T8] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 575.340663][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.353670][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.358938][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.374533][ T938] usb 4-1: Product: syz [ 575.378028][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.385388][ T8] usb 1-1: USB disconnect, device number 15 [ 575.392521][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.408920][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.409345][ T5278] usb 5-1: USB disconnect, device number 35 [ 575.418824][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.428396][ T938] usb 4-1: Manufacturer: syz [ 575.435217][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.435239][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.435256][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.436510][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.474568][ T938] usb 4-1: SerialNumber: syz [ 575.479975][T13569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.491002][T13569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.500202][T13569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.508960][T13569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.521937][ T938] usb 4-1: config 0 descriptor?? [ 575.577618][T13694] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 575.587448][ T938] hub 4-1:0.0: bad descriptor, ignoring hub [ 575.597023][ T938] hub 4-1:0.0: probe with driver hub failed with error -5 [ 575.617761][ T938] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 576.003651][ T29] audit: type=1326 audit(1727510867.379:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.029650][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 576.029655][ T5279] usb 4-1: USB disconnect, device number 11 [ 576.060308][ T29] audit: type=1326 audit(1727510867.379:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.115422][ T5238] Bluetooth: hci2: command tx timeout [ 576.124792][ T29] audit: type=1326 audit(1727510867.479:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.149296][ T29] audit: type=1326 audit(1727510867.479:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.173358][ T29] audit: type=1326 audit(1727510867.479:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.202612][T13553] udevd[13553]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 576.237056][ T29] audit: type=1326 audit(1727510867.689:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.286797][ T29] audit: type=1326 audit(1727510867.689:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.387012][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.397624][ T29] audit: type=1326 audit(1727510867.689:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.408366][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.448015][ T29] audit: type=1326 audit(1727510867.789:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.492602][ T29] audit: type=1326 audit(1727510867.789:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.1.2661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 576.525191][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.545188][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.555783][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.569372][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.759657][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 576.805958][ T5298] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 576.838315][T13728] tipc: Started in network mode [ 576.853517][T13728] tipc: Node identity ac1414aa, cluster identity 4711 [ 576.872036][T13728] tipc: Enabled bearer , priority 10 [ 576.964989][ T5298] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 576.983319][ T5298] usb 1-1: config 5 has no interface number 0 [ 576.993872][ T5298] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 577.027998][ T5298] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 577.068168][ T5298] usb 1-1: config 5 interface 123 has no altsetting 0 [ 577.114758][ T5298] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 577.133375][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.151837][ T5298] usb 1-1: Product: syz [ 577.163406][ T5298] usb 1-1: Manufacturer: syz [ 577.168038][ T5298] usb 1-1: SerialNumber: syz [ 577.201411][T13722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.493684][ T5298] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 577.541092][ T5298] usb 1-1: USB disconnect, device number 16 [ 577.985824][ T5298] tipc: Node number set to 2886997162 [ 578.003620][ T5279] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 578.100706][T13771] netlink: 'syz.4.2669': attribute type 21 has an invalid length. [ 578.114161][T13771] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2669'. [ 578.135492][T13771] netlink: 'syz.4.2669': attribute type 5 has an invalid length. [ 578.183481][T13771] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2669'. [ 578.284099][ T5278] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 578.306168][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 578.315466][ T5279] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 578.324495][ T5279] usb 4-1: config 5 has no interface number 0 [ 578.325742][T13787] netlink: 'syz.0.2671': attribute type 15 has an invalid length. [ 578.330678][ T5279] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 578.366304][ T5279] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 578.377624][ T5279] usb 4-1: config 5 interface 123 has no altsetting 0 [ 578.388093][ T5279] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 578.403641][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.417631][ T5279] usb 4-1: Product: syz [ 578.421820][ T5279] usb 4-1: Manufacturer: syz [ 578.426907][ T5279] usb 4-1: SerialNumber: syz [ 578.441481][T13767] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.456075][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.468123][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 578.487512][ T5278] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 578.501196][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.524613][ T5278] usb 2-1: config 0 descriptor?? [ 578.593469][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 578.654368][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'. [ 578.695327][T13767] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 578.707558][T13767] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 578.734671][ T5278] Bluetooth: Can't get state to change to load ram patch err [ 578.742878][ T5278] Bluetooth: Loading patch file failed [ 578.748543][ T5278] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 578.756411][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 578.764184][ T5278] usb 2-1: USB disconnect, device number 33 [ 578.784460][ T8] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 578.797006][ T8] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 578.819231][ T5279] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 578.835477][ T8] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 578.844906][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.852909][ T8] usb 1-1: Product: syz [ 578.857457][ T8] usb 1-1: Manufacturer: syz [ 578.862079][ T8] usb 1-1: SerialNumber: syz [ 578.881408][ T5279] usb 4-1: USB disconnect, device number 12 [ 579.037667][T13802] binder: 13801:13802 ioctl c0306201 200001c0 returned -14 [ 579.224913][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 579.591494][T13813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.708097][T13813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.743487][ T5279] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 579.753178][T13822] FAULT_INJECTION: forcing a failure. [ 579.753178][T13822] name failslab, interval 1, probability 0, space 0, times 0 [ 579.768601][ T5278] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 579.777187][T13822] CPU: 0 UID: 0 PID: 13822 Comm: syz.2.2680 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 579.787626][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 579.797695][T13822] Call Trace: [ 579.800987][T13822] [ 579.803933][T13822] dump_stack_lvl+0x241/0x360 [ 579.808636][T13822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.813881][T13822] ? __pfx__printk+0x10/0x10 [ 579.818513][T13822] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 579.824077][T13822] ? __pfx___might_resched+0x10/0x10 [ 579.829383][T13822] should_fail_ex+0x3b0/0x4e0 [ 579.834083][T13822] ? skb_clone+0x20c/0x390 [ 579.838517][T13822] should_failslab+0xac/0x100 [ 579.843208][T13822] ? skb_clone+0x20c/0x390 [ 579.847639][T13822] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 579.853028][T13822] ? __virt_addr_valid+0x183/0x530 [ 579.858155][T13822] skb_clone+0x20c/0x390 [ 579.862418][T13822] pfkey_sendmsg+0x43d/0x1050 [ 579.867108][T13822] ? __lock_acquire+0x1384/0x2050 [ 579.872161][T13822] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 579.877289][T13822] ? aa_sk_perm+0x96d/0xab0 [ 579.881795][T13822] ? __pfx_aa_sk_perm+0x10/0x10 [ 579.886642][T13822] ? __might_fault+0xaa/0x120 [ 579.891316][T13822] ? __pfx_lock_release+0x10/0x10 [ 579.896339][T13822] ? aa_sock_msg_perm+0x91/0x160 [ 579.901274][T13822] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 579.906374][T13822] __sock_sendmsg+0x221/0x270 [ 579.911064][T13822] ____sys_sendmsg+0x52a/0x7e0 [ 579.915835][T13822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.921131][T13822] __sys_sendmsg+0x292/0x380 [ 579.925721][T13822] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.930833][T13822] ? __pfx_vfs_write+0x10/0x10 [ 579.935618][T13822] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 579.942202][T13822] ? lockdep_hardirqs_on+0x99/0x150 [ 579.947401][T13822] __do_fast_syscall_32+0xb4/0x110 [ 579.952506][T13822] ? exc_page_fault+0x590/0x8c0 [ 579.957354][T13822] do_fast_syscall_32+0x34/0x80 [ 579.962193][T13822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 579.968512][T13822] RIP: 0023:0xf7ff3579 [ 579.972571][T13822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 579.992178][T13822] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 580.000593][T13822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 580.008559][T13822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.016522][T13822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.024482][T13822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.032446][T13822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.040419][T13822] [ 580.084044][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 580.092739][ T5279] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 580.113334][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.121348][ T5279] usb 2-1: Product: syz [ 580.133301][ T5279] usb 2-1: Manufacturer: syz [ 580.137982][ T5279] usb 2-1: SerialNumber: syz [ 580.155921][ T5279] usb 2-1: config 0 descriptor?? [ 580.165555][ T5279] gspca_main: sq905-2.14.0 probing 2770:9120 [ 580.213710][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 580.224926][ T5278] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 580.233648][ T5278] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 580.253126][ T5278] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 580.263145][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.273625][ T5278] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.286459][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.300948][ T5278] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 580.310533][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.324455][ T5278] usb 4-1: config 0 descriptor?? [ 580.503495][ T938] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 580.535990][ T5278] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 580.663379][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 580.694955][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.713802][ T938] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 580.730649][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.756577][ T938] usb 3-1: config 0 descriptor?? [ 580.762545][ T5282] usb 4-1: USB disconnect, device number 13 [ 580.783886][ T5282] usblp0: removed [ 580.830070][ T5279] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 580.839537][ T5279] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 580.848746][ T5279] usb 2-1: USB disconnect, device number 34 [ 580.963528][ T46] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 581.125146][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 581.132294][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.143583][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.154781][ T46] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 581.163991][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.177161][ T46] usb 5-1: config 0 descriptor?? [ 581.178414][ T938] wacom 0003:056A:032C.0064: item fetching failed at offset 1/2 [ 581.211507][ T938] wacom 0003:056A:032C.0064: parse failed [ 581.231365][ T938] wacom 0003:056A:032C.0064: probe with driver wacom failed with error -22 [ 581.269479][ T8] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 581.283429][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 581.329434][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.351064][ T8] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 581.398376][ T8] usb 1-1: media controller created [ 581.442381][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.473455][ T938] usb 3-1: USB disconnect, device number 9 [ 581.508036][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 581.522675][ T8] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 581.565677][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input76 [ 581.589190][ T46] betop 0003:11C2:2208.0065: unknown main item tag 0x0 [ 581.593627][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 581.613971][ T46] betop 0003:11C2:2208.0065: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.4-1/input0 [ 581.619295][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 581.633168][ T46] betop 0003:11C2:2208.0065: no inputs found [ 581.663948][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 581.679914][ T8] usb 1-1: USB disconnect, device number 17 [ 581.757917][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 581.788571][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.800921][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.826557][ T46] usb 5-1: USB disconnect, device number 36 [ 581.883497][ T5279] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 581.892873][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 581.892888][ T29] audit: type=1326 audit(1727510873.339:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 581.923072][ T29] audit: type=1326 audit(1727510873.339:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 581.946979][ T29] audit: type=1326 audit(1727510873.339:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 581.970379][ T29] audit: type=1326 audit(1727510873.339:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 581.993663][ T29] audit: type=1326 audit(1727510873.339:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 582.019187][ T29] audit: type=1326 audit(1727510873.339:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 582.043029][ T938] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 582.047947][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.052087][ T29] audit: type=1326 audit(1727510873.339:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 582.087374][ T29] audit: type=1326 audit(1727510873.339:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 582.109728][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 582.122670][ T29] audit: type=1326 audit(1727510873.339:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 582.150073][ T29] audit: type=1326 audit(1727510873.369:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 582.153489][ T5279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 582.174900][T13852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.213810][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 582.220643][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.230993][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.250253][ T938] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 582.261894][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.272776][ T938] usb 4-1: config 0 descriptor?? [ 582.278557][ T5279] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 582.279938][ T938] hub 4-1:0.0: bad descriptor, ignoring hub [ 582.296067][ T8] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 582.303421][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.316836][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.329493][ T5279] usb 2-1: config 0 descriptor?? [ 582.341774][ T938] hub 4-1:0.0: probe with driver hub failed with error -5 [ 582.356473][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.375741][ T938] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 582.384545][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.405680][ T8] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 582.424679][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.445559][ T8] usb 1-1: config 0 descriptor?? [ 582.541442][ T5279] Bluetooth: Can't get state to change to load ram patch err [ 582.549024][ T5279] Bluetooth: Loading patch file failed [ 582.559156][ T5279] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 582.571617][ T5279] usb 2-1: USB disconnect, device number 35 [ 582.688067][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 582.696158][ T938] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 582.705845][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 582.716898][ T8] usb 1-1: USB disconnect, device number 18 [ 582.873588][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 582.880455][ T938] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 582.890236][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.901669][ T938] usb 3-1: config 0 descriptor?? [ 582.909878][ T938] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 583.127060][T13858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.146223][T13858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.157445][T13862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.175675][ T938] gspca_nw80x: reg_w err -71 [ 583.185935][ T938] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 583.202333][ T938] usb 3-1: USB disconnect, device number 10 [ 583.274393][T13862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.413376][ T46] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 583.563745][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 583.573734][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 583.580302][ T46] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.588562][ T46] usb 2-1: config 0 has no interface number 0 [ 583.597359][ T46] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 583.607541][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.616980][ T46] usb 2-1: Product: syz [ 583.621158][ T46] usb 2-1: Manufacturer: syz [ 583.626107][ T46] usb 2-1: SerialNumber: syz [ 583.634752][ T46] usb 2-1: config 0 descriptor?? [ 583.655359][ T46] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 583.729271][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 583.753325][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.762060][ T8] usb 1-1: Product: syz [ 583.766484][ T8] usb 1-1: Manufacturer: syz [ 583.771092][ T8] usb 1-1: SerialNumber: syz [ 583.781549][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 583.867222][ T5302] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 584.455930][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2705'. [ 584.736151][ T938] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 584.874884][ T938] usb 5-1: device descriptor read/64, error -71 [ 584.886901][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 584.966773][ T5302] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 584.988059][ T5302] ath9k_htc: Failed to initialize the device [ 585.030548][ T5302] usb 1-1: ath9k_htc: USB layer deinitialized [ 585.140939][T13695] usb 4-1: USB disconnect, device number 14 [ 585.147203][ T938] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 585.313414][ T938] usb 5-1: device descriptor read/64, error -71 [ 585.433765][ T938] usb usb5-port1: attempt power cycle [ 585.483351][T13695] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 585.504701][ T46] gspca_spca1528: reg_r err -71 [ 585.511181][ T46] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 585.523011][ T46] usb 2-1: USB disconnect, device number 36 [ 585.563379][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 585.667455][T13695] usb 4-1: string descriptor 0 read error: -22 [ 585.674076][T13695] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 585.683125][T13695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.693457][T13695] usb 4-1: config 0 descriptor?? [ 585.700634][T13695] usbtest 4-1:0.0: FX2 device [ 585.705428][T13695] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 585.713402][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 585.733982][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.753433][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.763211][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.782922][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.793355][ T938] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 585.805161][ T25] usb 3-1: config 0 descriptor?? [ 585.814084][ T938] usb 5-1: device descriptor read/8, error -71 [ 585.824608][ T25] hub 3-1:0.0: USB hub found [ 586.017850][ T25] hub 3-1:0.0: 1 port detected [ 586.053446][ T938] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 586.103715][ T938] usb 5-1: device descriptor read/8, error -71 [ 586.216065][ T938] usb usb5-port1: unable to enumerate USB device [ 586.333671][T13911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.348127][ T5282] usb 1-1: USB disconnect, device number 19 [ 586.471142][T13911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.642947][ T25] hub 3-1:0.0: activate --> -90 [ 586.885028][ T938] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 587.046348][ T5282] usb 3-1: USB disconnect, device number 11 [ 587.304835][ T938] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 587.313043][ T938] usb 1-1: config 5 has no interface number 0 [ 587.319409][ T938] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 587.331319][ T938] usb 1-1: config 5 interface 123 has no altsetting 0 [ 587.344601][ T938] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 587.353842][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.361841][ T938] usb 1-1: Product: syz [ 587.367259][ T938] usb 1-1: Manufacturer: syz [ 587.371882][ T938] usb 1-1: SerialNumber: syz [ 587.385489][T13918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 587.463439][ T25] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 587.626725][ T25] usb 2-1: config 0 has no interfaces? [ 587.632290][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 587.645500][ T938] comedi comedi0: Wrong number of endpoints [ 587.651767][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.665090][ T938] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 587.675568][ T25] usb 2-1: config 0 descriptor?? [ 587.697928][ T938] usb 1-1: USB disconnect, device number 20 [ 587.909722][ T25] usb 4-1: USB disconnect, device number 15 [ 587.937265][ T5282] usb 2-1: USB disconnect, device number 37 [ 587.984824][T13933] FAULT_INJECTION: forcing a failure. [ 587.984824][T13933] name failslab, interval 1, probability 0, space 0, times 0 [ 587.993371][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 587.997864][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.3.2719 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 588.015469][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.025540][T13933] Call Trace: [ 588.028835][T13933] [ 588.031802][T13933] dump_stack_lvl+0x241/0x360 [ 588.036502][T13933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.041721][T13933] ? __pfx__printk+0x10/0x10 [ 588.046329][T13933] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 588.051894][T13933] ? __pfx___might_resched+0x10/0x10 [ 588.057199][T13933] should_fail_ex+0x3b0/0x4e0 [ 588.061882][T13933] ? skb_clone+0x20c/0x390 [ 588.066292][T13933] should_failslab+0xac/0x100 [ 588.070966][T13933] ? skb_clone+0x20c/0x390 [ 588.075371][T13933] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 588.080738][T13933] ? __virt_addr_valid+0x183/0x530 [ 588.085849][T13933] skb_clone+0x20c/0x390 [ 588.090088][T13933] pfkey_sendmsg+0x43d/0x1050 [ 588.094775][T13933] ? __lock_acquire+0x1384/0x2050 [ 588.099822][T13933] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 588.104949][T13933] ? aa_sk_perm+0x96d/0xab0 [ 588.109464][T13933] ? __pfx_aa_sk_perm+0x10/0x10 [ 588.114340][T13933] ? __might_fault+0xaa/0x120 [ 588.119014][T13933] ? __pfx_lock_release+0x10/0x10 [ 588.124036][T13933] ? aa_sock_msg_perm+0x91/0x160 [ 588.128969][T13933] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 588.134070][T13933] __sock_sendmsg+0x221/0x270 [ 588.138746][T13933] ____sys_sendmsg+0x52a/0x7e0 [ 588.143509][T13933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.148798][T13933] __sys_sendmsg+0x292/0x380 [ 588.153388][T13933] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.158502][T13933] ? __pfx_vfs_write+0x10/0x10 [ 588.163288][T13933] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 588.169883][T13933] ? lockdep_hardirqs_on+0x99/0x150 [ 588.175084][T13933] __do_fast_syscall_32+0xb4/0x110 [ 588.180191][T13933] ? exc_page_fault+0x590/0x8c0 [ 588.185046][T13933] do_fast_syscall_32+0x34/0x80 [ 588.189894][T13933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.196215][T13933] RIP: 0023:0xf73ed579 [ 588.200278][T13933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 588.219887][T13933] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 588.228301][T13933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 588.236267][T13933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.244230][T13933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.252192][T13933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 588.260154][T13933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.268129][T13933] [ 588.443806][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 588.450768][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 588.464583][T13937] netlink: 'syz.0.2721': attribute type 4 has an invalid length. [ 588.475306][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 588.498261][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.536271][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.569703][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.593323][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.816640][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 588.816657][ T29] audit: type=1326 audit(1727510880.269:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 588.849876][ T8] usb 5-1: usb_control_msg returned -32 [ 588.856102][ T8] usbtmc 5-1:16.0: can't read capabilities [ 588.866163][ T29] audit: type=1326 audit(1727510880.309:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 588.888983][ T29] audit: type=1326 audit(1727510880.319:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 588.918881][ T29] audit: type=1326 audit(1727510880.319:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 588.946808][ T29] audit: type=1326 audit(1727510880.319:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 588.971590][ T29] audit: type=1326 audit(1727510880.319:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 588.996931][T13951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.999264][ T29] audit: type=1326 audit(1727510880.319:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 589.029748][ T29] audit: type=1326 audit(1727510880.319:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 589.052399][ T29] audit: type=1326 audit(1727510880.319:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 589.053438][ T5282] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 589.155148][T13951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.166389][ T29] audit: type=1326 audit(1727510880.619:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 589.233909][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 589.243452][ T5282] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 589.252976][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.261676][ T5282] usb 2-1: Product: syz [ 589.266299][ T5282] usb 2-1: Manufacturer: syz [ 589.270979][ T5282] usb 2-1: SerialNumber: syz [ 589.279212][ T5282] usb 2-1: config 0 descriptor?? [ 589.494897][ T5282] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.563540][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 590.733808][ T25] usb 5-1: USB disconnect, device number 41 [ 591.072058][ T5282] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 591.095709][ T5282] usb 2-1: USB disconnect, device number 38 [ 594.352217][T13960] x_tables: duplicate underflow at hook 1 [ 594.623720][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 594.815723][ T25] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 594.843308][ T25] usb 3-1: config 0 has no interface number 0 [ 594.857249][ T25] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 594.872501][T13964] netlink: 'syz.1.2728': attribute type 21 has an invalid length. [ 594.893644][ T25] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.918664][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 594.929751][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.938855][T13964] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2728'. [ 594.950049][T13964] netlink: 'syz.1.2728': attribute type 5 has an invalid length. [ 594.959426][ T25] usb 3-1: config 0 descriptor?? [ 594.965994][T13964] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2728'. [ 595.004258][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 595.156252][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.167636][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.178307][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 595.192824][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.214619][ T46] usb 4-1: config 0 descriptor?? [ 595.398490][ T25] uclogic 0003:256C:006D.0066: interface is invalid, ignoring [ 595.645928][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 595.645946][ T29] audit: type=1326 audit(1727510887.089:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 595.664785][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 595.674332][ T29] audit: type=1326 audit(1727510887.099:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 595.711054][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 595.727820][ T46] usb 4-1: USB disconnect, device number 16 [ 595.754787][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 595.833386][ T29] audit: type=1326 audit(1727510887.219:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 595.855642][ T29] audit: type=1326 audit(1727510887.219:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 595.878067][ T29] audit: type=1326 audit(1727510887.219:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 595.900477][ T29] audit: type=1326 audit(1727510887.269:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 595.937398][T13992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.076745][T14003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.088179][ T29] audit: type=1326 audit(1727510887.539:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 596.111410][ T29] audit: type=1326 audit(1727510887.539:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.4.2739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 596.213624][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 596.338984][T14007] fuse: Bad value for 'rootmode' [ 596.344255][ T25] usb 2-1: device descriptor read/64, error -71 [ 596.352517][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2743'. [ 596.583381][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 596.724067][ T25] usb 2-1: device descriptor read/64, error -71 [ 596.845088][ T25] usb usb2-port1: attempt power cycle [ 597.313359][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 597.345914][ T25] usb 2-1: device descriptor read/8, error -71 [ 597.375314][ T46] usb 3-1: USB disconnect, device number 12 [ 597.386428][T14019] FAULT_INJECTION: forcing a failure. [ 597.386428][T14019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.403988][T14019] CPU: 1 UID: 0 PID: 14019 Comm: syz.4.2746 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 597.414427][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 597.424499][T14019] Call Trace: [ 597.427789][T14019] [ 597.430735][T14019] dump_stack_lvl+0x241/0x360 [ 597.435444][T14019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.440663][T14019] ? __pfx__printk+0x10/0x10 [ 597.445279][T14019] ? __pfx_lock_release+0x10/0x10 [ 597.450330][T14019] should_fail_ex+0x3b0/0x4e0 [ 597.455025][T14019] _copy_from_iter+0x1ed/0x1d60 [ 597.459871][T14019] ? __virt_addr_valid+0x183/0x530 [ 597.464976][T14019] ? __pfx_lock_release+0x10/0x10 [ 597.470001][T14019] ? __alloc_skb+0x28f/0x440 [ 597.474589][T14019] ? __pfx__copy_from_iter+0x10/0x10 [ 597.479867][T14019] ? __virt_addr_valid+0x183/0x530 [ 597.484969][T14019] ? __virt_addr_valid+0x183/0x530 [ 597.490070][T14019] ? __virt_addr_valid+0x45f/0x530 [ 597.495172][T14019] ? __check_object_size+0x48e/0x900 [ 597.500453][T14019] netlink_sendmsg+0x73d/0xcb0 [ 597.505224][T14019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.510531][T14019] ? __pfx_lock_release+0x10/0x10 [ 597.515550][T14019] ? aa_sock_msg_perm+0x91/0x160 [ 597.520481][T14019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.525759][T14019] __sock_sendmsg+0x221/0x270 [ 597.530434][T14019] ____sys_sendmsg+0x52a/0x7e0 [ 597.535193][T14019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.540476][T14019] __sys_sendmsg+0x292/0x380 [ 597.545058][T14019] ? __pfx___sys_sendmsg+0x10/0x10 [ 597.550166][T14019] ? __pfx_vfs_write+0x10/0x10 [ 597.554949][T14019] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 597.561530][T14019] ? lockdep_hardirqs_on+0x99/0x150 [ 597.566722][T14019] __do_fast_syscall_32+0xb4/0x110 [ 597.571821][T14019] ? exc_page_fault+0x590/0x8c0 [ 597.576670][T14019] do_fast_syscall_32+0x34/0x80 [ 597.581508][T14019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 597.587825][T14019] RIP: 0023:0xf73bd579 [ 597.591883][T14019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 597.611485][T14019] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 597.619894][T14019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 597.627864][T14019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 597.635826][T14019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.643786][T14019] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.651747][T14019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 597.659718][T14019] [ 598.054505][T14037] netlink: 'syz.4.2752': attribute type 4 has an invalid length. [ 598.083960][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 598.090929][T14037] bond3: entered promiscuous mode [ 598.097493][T14037] bond3: entered allmulticast mode [ 598.104285][ T25] usb 2-1: device descriptor read/8, error -71 [ 598.125631][T14037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.134821][T14037] batman_adv: batadv42: Adding interface: bond3 [ 598.141301][T14037] batman_adv: batadv42: The MTU of interface bond3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.167548][T14037] batman_adv: batadv42: Interface activated: bond3 [ 598.213675][ T25] usb usb2-port1: unable to enumerate USB device [ 598.334033][ T46] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 598.496563][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.528598][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 598.550240][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.586044][ T46] usb 3-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 598.598571][T14048] netlink: 'syz.3.2756': attribute type 4 has an invalid length. [ 598.603880][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.629888][ T46] usb 3-1: Product: syz [ 598.640827][ T46] usb 3-1: Manufacturer: syz [ 598.657995][ T46] usb 3-1: SerialNumber: syz [ 598.670410][ T46] usb 3-1: config 0 descriptor?? [ 598.700111][T14048] bond2: entered promiscuous mode [ 598.711515][T14048] bond2: entered allmulticast mode [ 598.725037][T14048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.789845][ T5302] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 598.894529][T13695] usb 3-1: USB disconnect, device number 13 [ 598.946099][ T5302] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 599.013697][ T5302] usb 1-1: config 5 has no interface number 0 [ 599.019877][ T5302] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 599.031644][ T5302] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 599.042880][ T5302] usb 1-1: config 5 interface 123 has no altsetting 0 [ 599.075519][ T5302] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 599.084827][ T5302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.092826][ T5302] usb 1-1: Product: syz [ 599.097478][ T5302] usb 1-1: Manufacturer: syz [ 599.102061][ T5302] usb 1-1: SerialNumber: syz [ 599.112155][T14046] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 599.252778][T14048] bond2 (unregistering): Released all slaves [ 599.332285][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 599.754399][ T5302] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 599.877246][ T5302] usb 1-1: USB disconnect, device number 21 [ 599.969988][T14066] FAULT_INJECTION: forcing a failure. [ 599.969988][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.012794][T14066] CPU: 1 UID: 0 PID: 14066 Comm: syz.1.2761 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 600.023238][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.033300][T14066] Call Trace: [ 600.036573][T14066] [ 600.039496][T14066] dump_stack_lvl+0x241/0x360 [ 600.044181][T14066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.049376][T14066] ? __pfx__printk+0x10/0x10 [ 600.053967][T14066] ? snprintf+0xda/0x120 [ 600.058205][T14066] should_fail_ex+0x3b0/0x4e0 [ 600.062887][T14066] _copy_to_user+0x2f/0xb0 [ 600.067305][T14066] simple_read_from_buffer+0xca/0x150 [ 600.072682][T14066] proc_fail_nth_read+0x1e9/0x250 [ 600.077708][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.083258][T14066] ? rw_verify_area+0x55e/0x6f0 [ 600.088115][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.093661][T14066] vfs_read+0x201/0xbc0 [ 600.097813][T14066] ? __pfx_lock_release+0x10/0x10 [ 600.102837][T14066] ? __pfx_vfs_read+0x10/0x10 [ 600.107515][T14066] ? __fget_files+0x3f3/0x470 [ 600.112192][T14066] ? fdget_pos+0x24e/0x320 [ 600.116603][T14066] ksys_read+0x183/0x2b0 [ 600.120842][T14066] ? __pfx_ksys_read+0x10/0x10 [ 600.125606][T14066] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 600.132190][T14066] ? lockdep_hardirqs_on+0x99/0x150 [ 600.137402][T14066] __do_fast_syscall_32+0xb4/0x110 [ 600.142512][T14066] ? exc_page_fault+0x590/0x8c0 [ 600.147360][T14066] do_fast_syscall_32+0x34/0x80 [ 600.152204][T14066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.158524][T14066] RIP: 0023:0xf73fd579 [ 600.162593][T14066] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 600.182211][T14066] RSP: 002b:00000000f56e65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 600.190627][T14066] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56e6620 [ 600.198594][T14066] RDX: 000000000000000f RSI: 00000000f73ebff4 RDI: 0000000000000000 [ 600.206560][T14066] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 600.214525][T14066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 600.222493][T14066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.230468][T14066] [ 600.239021][T13695] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 600.391136][T14070] netlink: 'syz.2.2764': attribute type 4 has an invalid length. [ 600.467022][T13695] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 600.477215][T13695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.498525][T13695] usb 4-1: config 0 descriptor?? [ 600.506084][T14075] bond1: entered promiscuous mode [ 600.506687][T13695] cp210x 4-1:0.0: cp210x converter detected [ 600.521920][T14075] bond1: entered allmulticast mode [ 600.552196][T14075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.658790][T14072] [ 600.661150][T14072] ====================================================== [ 600.668171][T14072] WARNING: possible circular locking dependency detected [ 600.675192][T14072] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted [ 600.681948][T14072] ------------------------------------------------------ [ 600.688962][T14072] syz.1.2763/14072 is trying to acquire lock: [ 600.695026][T14072] ffff88807a6d9e18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 600.704705][T14072] [ 600.704705][T14072] but task is already holding lock: [ 600.712067][T14072] ffff88807bbbb708 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 600.722793][T14072] [ 600.722793][T14072] which lock already depends on the new lock. [ 600.722793][T14072] [ 600.733185][T14072] [ 600.733185][T14072] the existing dependency chain (in reverse order) is: [ 600.742180][T14072] [ 600.742180][T14072] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 600.750870][T14072] lock_acquire+0x1ed/0x550 [ 600.755890][T14072] down_write+0x99/0x220 [ 600.760641][T14072] process_measurement+0x439/0x1fb0 [ 600.766352][T14072] ima_file_mmap+0x13d/0x2b0 [ 600.771458][T14072] security_mmap_file+0x7e7/0xa40 [ 600.776995][T14072] __se_sys_remap_file_pages+0x6e6/0xa50 [ 600.783139][T14072] __do_fast_syscall_32+0xb4/0x110 [ 600.788759][T14072] do_fast_syscall_32+0x34/0x80 [ 600.794117][T14072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.800952][T14072] [ 600.800952][T14072] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 600.808501][T14072] validate_chain+0x18ef/0x5920 [ 600.813861][T14072] __lock_acquire+0x1384/0x2050 [ 600.819221][T14072] lock_acquire+0x1ed/0x550 [ 600.824238][T14072] down_read_killable+0xca/0xd30 [ 600.829687][T14072] mmap_read_lock_killable+0x1d/0x70 [ 600.835478][T14072] lock_mm_and_find_vma+0x29c/0x2f0 [ 600.841196][T14072] exc_page_fault+0x1bf/0x8c0 [ 600.846394][T14072] asm_exc_page_fault+0x26/0x30 [ 600.851769][T14072] fault_in_readable+0x165/0x2b0 [ 600.857228][T14072] fault_in_iov_iter_readable+0x229/0x280 [ 600.863460][T14072] generic_perform_write+0x259/0x6d0 [ 600.869254][T14072] shmem_file_write_iter+0xf9/0x120 [ 600.874965][T14072] vfs_write+0xa6d/0xc90 [ 600.879722][T14072] ksys_write+0x183/0x2b0 [ 600.884578][T14072] __do_fast_syscall_32+0xb4/0x110 [ 600.890203][T14072] do_fast_syscall_32+0x34/0x80 [ 600.895561][T14072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.902399][T14072] [ 600.902399][T14072] other info that might help us debug this: [ 600.902399][T14072] [ 600.912621][T14072] Possible unsafe locking scenario: [ 600.912621][T14072] [ 600.920060][T14072] CPU0 CPU1 [ 600.925410][T14072] ---- ---- [ 600.930764][T14072] lock(&sb->s_type->i_mutex_key#12); [ 600.936225][T14072] lock(&mm->mmap_lock); [ 600.943071][T14072] lock(&sb->s_type->i_mutex_key#12); [ 600.951050][T14072] rlock(&mm->mmap_lock); [ 600.955454][T14072] [ 600.955454][T14072] *** DEADLOCK *** [ 600.955454][T14072] [ 600.963590][T14072] 3 locks held by syz.1.2763/14072: [ 600.968777][T14072] #0: ffff88805fefa638 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 600.977826][T14072] #1: ffff88807b6c8420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 600.986712][T14072] #2: ffff88807bbbb708 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 600.997855][T14072] [ 600.997855][T14072] stack backtrace: [ 601.003841][T14072] CPU: 1 UID: 0 PID: 14072 Comm: syz.1.2763 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 601.014248][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 601.024299][T14072] Call Trace: [ 601.027570][T14072] [ 601.030498][T14072] dump_stack_lvl+0x241/0x360 [ 601.035176][T14072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.040379][T14072] ? __pfx__printk+0x10/0x10 [ 601.044979][T14072] print_circular_bug+0x13a/0x1b0 [ 601.050019][T14072] check_noncircular+0x36a/0x4a0 [ 601.054945][T14072] ? __pfx_validate_chain+0x10/0x10 [ 601.060133][T14072] ? __pfx_check_noncircular+0x10/0x10 [ 601.065584][T14072] ? lockdep_lock+0x123/0x2b0 [ 601.070255][T14072] ? __pfx_validate_chain+0x10/0x10 [ 601.075441][T14072] ? __pfx_validate_chain+0x10/0x10 [ 601.080627][T14072] validate_chain+0x18ef/0x5920 [ 601.085467][T14072] ? mark_lock+0x9a/0x360 [ 601.089791][T14072] ? __pfx_validate_chain+0x10/0x10 [ 601.094982][T14072] ? mark_lock+0x9a/0x360 [ 601.099301][T14072] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 601.105277][T14072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 601.111600][T14072] ? do_raw_spin_unlock+0x13c/0x8b0 [ 601.116790][T14072] ? mark_lock+0x9a/0x360 [ 601.121118][T14072] __lock_acquire+0x1384/0x2050 [ 601.125971][T14072] lock_acquire+0x1ed/0x550 [ 601.130471][T14072] ? mmap_read_lock_killable+0x1d/0x70 [ 601.135921][T14072] ? __pfx_lock_acquire+0x10/0x10 [ 601.140942][T14072] ? __pfx___might_resched+0x10/0x10 [ 601.146223][T14072] ? lockdep_hardirqs_on+0x99/0x150 [ 601.151417][T14072] down_read_killable+0xca/0xd30 [ 601.156346][T14072] ? mmap_read_lock_killable+0x1d/0x70 [ 601.161797][T14072] ? preempt_schedule+0xe1/0xf0 [ 601.166643][T14072] ? __pfx_preempt_schedule+0x10/0x10 [ 601.172006][T14072] ? wake_up_q+0xdc/0x120 [ 601.176325][T14072] ? cmp_ex_search+0x74/0xa0 [ 601.180906][T14072] ? mmap_read_lock_killable+0x1d/0x70 [ 601.186352][T14072] ? bsearch+0x98/0xc0 [ 601.190410][T14072] ? __pfx_down_read_killable+0x10/0x10 [ 601.195945][T14072] ? search_extable+0xb3/0x100 [ 601.200699][T14072] ? __pfx_search_extable+0x10/0x10 [ 601.205892][T14072] ? fault_in_readable+0x165/0x2b0 [ 601.211002][T14072] ? __pfx_down_read_trylock+0x10/0x10 [ 601.216451][T14072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 601.222771][T14072] mmap_read_lock_killable+0x1d/0x70 [ 601.228041][T14072] lock_mm_and_find_vma+0x29c/0x2f0 [ 601.233229][T14072] exc_page_fault+0x1bf/0x8c0 [ 601.237907][T14072] asm_exc_page_fault+0x26/0x30 [ 601.242755][T14072] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 601.248467][T14072] Code: b3 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 b5 c8 b3 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 601.268066][T14072] RSP: 0018:ffffc9000c47fa20 EFLAGS: 00050246 [ 601.274121][T14072] RAX: ffffffff81e0ead7 RBX: 0000000020270000 RCX: 0000000000040000 [ 601.282076][T14072] RDX: ffffc90004791000 RSI: 000000000003ffff RDI: 0000000000040000 [ 601.290036][T14072] RBP: ffffc9000c47fad8 R08: ffffffff81e0ea48 R09: ffffffff84b90e19 [ 601.297997][T14072] R10: 0000000000000002 R11: ffff888029ad3c00 R12: 0000000000200000 [ 601.305957][T14072] R13: dffffc0000000000 R14: 0000000020401000 R15: 1ffff9200188ff4c [ 601.313926][T14072] ? fault_in_iov_iter_readable+0x49/0x280 [ 601.319726][T14072] ? fault_in_readable+0xf8/0x2b0 [ 601.324740][T14072] ? fault_in_readable+0x187/0x2b0 [ 601.329845][T14072] ? __pfx_fault_in_readable+0x10/0x10 [ 601.335297][T14072] ? folio_unlock+0x126/0x2f0 [ 601.339966][T14072] ? inode_to_bdi+0x69/0xf0 [ 601.344465][T14072] fault_in_iov_iter_readable+0x229/0x280 [ 601.350174][T14072] generic_perform_write+0x259/0x6d0 [ 601.355458][T14072] ? __pfx_generic_perform_write+0x10/0x10 [ 601.361257][T14072] ? __pfx_generic_write_checks+0x10/0x10 [ 601.366963][T14072] ? rcu_read_lock_any_held+0xb7/0x160 [ 601.372410][T14072] ? file_update_time+0x2a0/0x430 [ 601.377431][T14072] shmem_file_write_iter+0xf9/0x120 [ 601.382618][T14072] vfs_write+0xa6d/0xc90 [ 601.386856][T14072] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 601.392654][T14072] ? __pfx_vfs_write+0x10/0x10 [ 601.397416][T14072] ? fdget_pos+0x24e/0x320 [ 601.401824][T14072] ksys_write+0x183/0x2b0 [ 601.406144][T14072] ? __pfx_ksys_write+0x10/0x10 [ 601.410990][T14072] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 601.417572][T14072] ? lockdep_hardirqs_on+0x99/0x150 [ 601.422762][T14072] __do_fast_syscall_32+0xb4/0x110 [ 601.427864][T14072] ? exc_page_fault+0x590/0x8c0 [ 601.432704][T14072] do_fast_syscall_32+0x34/0x80 [ 601.437540][T14072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.443856][T14072] RIP: 0023:0xf73fd579 [ 601.447908][T14072] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 601.467504][T14072] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 601.475909][T14072] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200002c0 [ 601.483869][T14072] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 601.491824][T14072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 601.499780][T14072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 601.507739][T14072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 601.515708][T14072] [ 601.694704][T14075] bond1 (unregistering): Released all slaves [ 601.745483][T14082] ptrace attach of "./syz-executor exec"[12800] was attempted by "./syz-executor exec"[14082] [ 601.904029][ T5302] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 601.913124][T13695] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 601.923952][T13695] cp210x 4-1:0.0: querying part number failed [ 601.934766][T13695] usb 4-1: cp210x converter now attached to ttyUSB0 [ 601.943784][T13695] usb 4-1: USB disconnect, device number 17 [ 601.954112][T13695] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 601.963004][T13695] cp210x 4-1:0.0: device disconnected [ 602.093574][ T5302] usb 5-1: Using ep0 maxpacket: 32 [ 602.099809][ T5302] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 602.123440][ T5302] usb 5-1: config 0 has no interface number 0 [ 602.131622][ T5302] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 602.153366][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.161359][ T5302] usb 5-1: Product: syz [ 602.174013][ T5302] usb 5-1: Manufacturer: syz [ 602.178619][ T5302] usb 5-1: SerialNumber: syz [ 602.187614][ T5302] usb 5-1: config 0 descriptor?? [ 602.194319][ T5302] smsc95xx v2.0.0 [ 602.602491][T14080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.611832][T14080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.633607][ T5302] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 602.653378][ T5302] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 602.864918][ T5302] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 602.875933][ T5302] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 604.634744][ T46] usb 5-1: USB disconnect, device number 42