last executing test programs: 9.020169073s ago: executing program 2 (id=273): r0 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2e0c0, 0x3c1, 0x2}, 0x18) r1 = open_tree(r0, &(0x7f0000000380)='\x00', 0x99900) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x85}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x2c}], 0x1}}], 0x1, 0x40000) 8.642400235s ago: executing program 2 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x58, r1, 0x1, 0x26000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @initial, {0xc, 0x4}}, 0x1, 0x1, 0x13, @val={0x10, 0x1, 0xc6}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x40000) (fail_nth: 10) 7.788249675s ago: executing program 2 (id=278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r2 = getpid() r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = syz_pidfd_open(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x8000, 0x1}}) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x80000, 0x0, 0x0, 0x0) 5.075777797s ago: executing program 3 (id=287): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1, 0x7, 0x2, {0x9, @pix={0x2, 0x0, 0x56544943, 0x9, 0x4aeb, 0x1000, 0x2, 0x3, 0x1, 0x4, 0x0, 0x6}}, 0x7}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) fchown(r2, 0xee01, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@any, 0x1}) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016000100000a000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd700000000000000000000000000000000000030000"], 0x34c}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 4.515948413s ago: executing program 3 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1f4, r2, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0xa0044d07, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="050200000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990002000000220000004a000e0080000000080211000001ffffffffffffb138179a5987000000000000000000015a9933f9b90064005b8c0301b82a01022d1a1000190900000000000000c90007001900000008000b00000004000008000c006400000008000d0000000000"], 0x84}}, 0x0) 3.900138826s ago: executing program 1 (id=290): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40), 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x4, 0x20}, 0xc) 3.800125809s ago: executing program 2 (id=291): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x51, 0x0, r4}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000100149da0900"/25], 0xc}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 3.579504024s ago: executing program 1 (id=292): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x4000, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.402944889s ago: executing program 3 (id=293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 3.144303698s ago: executing program 1 (id=295): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e22, 0xc, @private0, 0x366}], 0x3c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x300, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x0) 3.042478149s ago: executing program 3 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x10) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x29, 0x0, 0x40060900, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.001447528s ago: executing program 4 (id=297): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000180], 0x88, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000005927000000000000000000ffffffff8800000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000fcffffff000000000000000000"]}, 0xe0) 2.780297506s ago: executing program 4 (id=298): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) dup(0xffffffffffffffff) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) dup(0xffffffffffffffff) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xf8, 0x37, 0xfa, 0x8, 0x4e2, 0x1422, 0x5353, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x2, 0x84, 0x7c, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x92f0, 0x8, 0x7}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x10f1}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x8, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5286, 0x1c}}]}}]}}]}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000cb116c005000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.519254249s ago: executing program 3 (id=299): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="7b000000000000007b11bf000000000016000000000000009500740000000000786610677ec83551c303b26d536e8e80037ee399a6bf76e4c5ef6f691a809db42579802ad44414573d182339e3f9513208aceb4afff08f658c5cf920f05865018a44130c026ca1fc42fea3265650d1c0bbc847d6fd3b4983720cbb5d8cfb5df9dcbc5e461d62c880da90df5221af09939a5a18e72eae75187e329506f823a8dcbf6b8f"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_usb_control_io$hid(r0, 0x0, 0x0) brk(0x5fde6000) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000580)={0x7, 'gretap0\x00', {}, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10, 0x117, 0x2}}], 0x10, 0x840}}], 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000080600000800040000ff0000368d4ed05a1bd55ada00000000a5640e0161ecfac1ff1d4b7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r7, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000740)=""/74, 0x4a}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f00000009c0)=""/124, 0x7c}, {&(0x7f0000000c00)=""/122, 0x7a}], 0x6, &(0x7f0000000c80)=""/87, 0x57}, 0x8000}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)=""/124, 0x7c}, {&(0x7f0000000d80)=""/196, 0xc4}, {&(0x7f0000000e80)=""/253, 0xfd}, {&(0x7f0000000f80)=""/128, 0x80}, {&(0x7f0000001000)=""/226, 0xe2}], 0x5, &(0x7f0000001140)=""/160, 0xa0}, 0x2}, {{&(0x7f0000001200)=@ax25={{0x3, @netrom}, [@default, @default, @default, @rose, @netrom, @remote, @rose, @rose]}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001280)=""/246, 0xf6}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f00000023c0)=""/191, 0xbf}, 0x2a}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002500)=""/87, 0x57}, {0x0}, {&(0x7f0000002740)=""/252, 0xfc}, {&(0x7f0000002840)=""/217, 0xd9}, {&(0x7f0000002940)=""/15, 0xf}, {&(0x7f0000002980)=""/114, 0x72}], 0x6, &(0x7f0000002a40)=""/193, 0xc1}, 0x9}, {{&(0x7f0000002b40)=@nfc_llcp, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/227, 0xe3}], 0x2}, 0x5}, {{&(0x7f0000002d80)=@vsock, 0x80, &(0x7f0000003100)=[{&(0x7f0000002e00)=""/80, 0x50}, {&(0x7f0000002e80)=""/185, 0xb9}, {&(0x7f0000002f40)=""/250, 0xfa}, {&(0x7f0000003040)=""/184, 0xb8}], 0x4, &(0x7f0000003140)=""/221, 0xdd}, 0x4}, {{&(0x7f0000003240)=@nl=@proc, 0x80, &(0x7f00000035c0)=[{&(0x7f00000032c0)=""/34, 0x22}, {&(0x7f0000003300)=""/196, 0xc4}, {&(0x7f0000003400)=""/210, 0xd2}, {&(0x7f0000003500)=""/11, 0xb}, {&(0x7f0000003540)=""/128, 0x80}], 0x5, &(0x7f0000003600)=""/195, 0xc3}, 0x6}], 0x7, 0x1, &(0x7f0000003800)={0x0, 0x989680}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000900)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000000c0)=0x839352b8218490eb) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000003840)) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x14, &(0x7f0000000040)={0x20, 0x9, 0x4a, {0x4a, 0xf, "570ce5c3bd2f26441334c18f9fb263de1000712c60abadc1395482293339c5b352a41046f61641ea1a7e6f81437e00f64aab46a5686961d01a50c9bc957c897068757fa1046970a5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000140)=ANY=[@ANYBLOB="002219007ac7050000000000a35f00"/25], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xce, 0x1, {0x22, 0x243}}}}, &(0x7f00000005c0)={0x18, &(0x7f0000000380)={0x0, 0xb, 0xdd, "8feb8b55aac0d4f55be60388d41453a7d83e31d3d57f8d5d0feb78bc2988bcfaf4e48ba47d2f4a908361a5e5c47331a9cdedde53a25a310dd42875957d7c015a3ac33e193f069254daff812ea2c328a6cf265d3d78ad6556f2c4aa9cbb094b894187ebc815ea0f7d460875d367f99090e98c1067d7d18289501d83b4d66737469549ae03a687bf272733562d863240320d9edd39806094843f2ca8c27b59c67e7c16b38f2d0517c9343a13b4e7169f6229073003de56965b70a1138365604d4605c23a0d8be373d68fc76d91f30965c20257b279b329d04300e0e70000"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)=ANY=[@ANYBLOB="200147000000547e12623ae709f80039c618d0849a6e4e129e9bc3f9968779786eb75d0c4a8e39953d520400bee427a5c1f10303515ccd7a5fecfd2efc849d335b68957c6227605c4277623191"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x8}}) 2.328244227s ago: executing program 4 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) openat$dir(0xffffff9c, &(0x7f00000006c0)='./file0\x00', 0x204080, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x218240, 0x110) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1/file4/file7/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000180)={0x80}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x8000000, 0x65c, 0xcc, 0x0, 0x1ac, 0x0, 0x1ac, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x138, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) 2.209491218s ago: executing program 0 (id=302): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="8f", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x4, 0x20}, 0xc) 2.076569207s ago: executing program 1 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1f4, r2, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$9p(&(0x7f00000001c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0xa0044d07, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="050200000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0c00990002000000220000004a000e0080000000080211000001ffffffffffffb138179a5987000000000000000000015a9933f9b90064005b8c0301b82a01022d1a1000190900000000000000c90007001900000008000b00000004000008000c006400000008000d0000000000"], 0x84}}, 0x0) 1.979948359s ago: executing program 0 (id=304): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x20, 0x7, 0x9, 0x4, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@cipso={0x86, 0xf, 0x3, [{0x7, 0x5, "7ebc74"}, {0x5, 0x4, "5aaf"}]}, @timestamp_prespec={0x44, 0x1c, 0xf1, 0x3, 0x2, [{@loopback, 0xfffffa22}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xb, 0x2}, {0xfff3, 0x7}, {0x0, 0xd}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000001c0)=""/4096) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001200)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000001300)=0xe4) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000011c0)=@nullb, r1, &(0x7f0000001340)) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, &(0x7f0000001380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001600)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000001680)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) r4 = syz_mount_image$fuse(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x1, &(0x7f0000001740)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@max_read={'max_read', 0x3d, 0xc}}, {@max_read={'max_read', 0x3d, 0xfff}}, {@allow_other}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x38, 0x31, 0x38, 0x34, 0x5c, 0x66], 0x2d, [0x0, 0x30, 0x39, 0x39], 0x2d, [0x63, 0x35, 0x37, 0x8], 0x2d, [0x32, 0x66, 0x65, 0x37], 0x2d, [0x66, 0x19, 0x32, 0x65, 0x35, 0x34, 0x38, 0x63]}}}, {@obj_user={'obj_user', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, ']'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}, 0x1, 0x0, &(0x7f0000001900)="00ec9cdedfd56ddf19377d35eddf5e24c47a5fb00827f628dca5321f6038056cb76e1c2a2b73dc5731af070dee3bb246fa3eae81971ce7741f2708935c33ebcd17325bab5cf496b86039c3d4971773692d523946f1fe27802b26f870b10673ecedf456d35803f8b3ad8b8323b8723efe728304c6571134602d8363d254d14f5e13d06d8628b91a99dfc32bb2edaf3063e126889f3dca8422d7f88697edf45ea4a1f55132709b614ec96c7d41fafb") getdents(r4, &(0x7f00000019c0)=""/98, 0x62) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000001a40)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x5, "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", 0xee, 0x6, 0x81, 0x3, 0x2, 0x2}, r3}}, 0x128) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001b80)=[r4, 0xffffffffffffffff], 0x2) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000001bc0)) pivot_root(&(0x7f0000001c00)='./file0/file0\x00', &(0x7f0000001c40)='./file0\x00') (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001c80), r6) r7 = openat$drirender128(0xffffff9c, &(0x7f0000001cc0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001d00)={0x0, 0x0}) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001d40)={0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000001d80)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06464b8, &(0x7f0000001dc0)={0x0, 0x2, 0xffff1ec2, 0x0, 0x0, [r8, r9, 0x0, r10], [0xd7c, 0xab, 0x8000, 0x9], [0x1, 0x4, 0x3ff, 0x49], [0x6, 0x0, 0x4, 0x9]}) (async) r11 = syz_open_dev$evdev(&(0x7f0000001e40), 0x0, 0x44c00) ioctl$EVIOCGUNIQ(r11, 0x80404508, &(0x7f0000001e80)=""/57) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r12, 0x4018aee2, &(0x7f0000001f00)=@attr_pmu_init) openat$null(0xffffff9c, &(0x7f0000001f40), 0x20042, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000001f80)='./file0/file0\x00', &(0x7f0000001fc0), &(0x7f0000002000), 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)=@bridge_newvlan={0x58, 0x70, 0x1, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r0}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 1.810625337s ago: executing program 0 (id=305): r0 = socket$unix(0x1, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x10000a47) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfc, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xee, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0xda, 0x0, @opaque="18b346eb9ffc91a59857c7fb5a2cb2e8829761db1cf5557ad18413501c0f61a37380df29ca52943754f47095572ab8d5c6e22c875f37d14060dd4801d4a3a2f04488f0a585945a8142df9a6166ac65eb13bf72e8d89a35296bf93dca8c1593f80fd8ef42bebbdbad2e66abc1530ea5a75bd5d7a4ac62f1509e96671b3ec2c4732744265fda36686aab7de0541753e52752b340083d0e602fb05a8f0993588afe0255b2c68c0142a9d195df549be276001374a7cba185b3438ef282869589edbbbc027dba46b0d432494b8cd90aae78d028b5"}}}}}, 0x0) close_range(r2, r2, 0x0) socket$rds(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f00000032c0)={0x0, 0x0, 0x0}, 0x100) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) timer_create(0x5, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="ac2315000000000000dc0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, ')%\\x%}:', 0x3a, 'exfat\x00', 0x3a, './file0/file0'}, 0x3a) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f0000000400)="8fcdcdd632a1602bc4d20f7f26e820335f094d0eccff3f1656883ffe9c17df1918ad0d9cd756787544ed5887b082829a069a72cfd1e8e1938b3e9af9af869e3bf9b67844e1817e8fffe2bd3fb3c4d0bd21d4c9f9031527cce9b055cb7abc7daae92162037697b530f932fb0d3d77ac81daa77f3a06b4a343c4907e5c9cb559fb94bbb9ff23f314272a1068c637d55d42a5d4d87103c7f02e2b8ea6e3a68169dbb1d0decc61f055d53457bf7dd34bf9d6a909e32e7a5077681e28ab5f3140", 0xbe) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1.780738894s ago: executing program 2 (id=306): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 1.359463423s ago: executing program 4 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c000180080001408501"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) 1.217236474s ago: executing program 2 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000300000000f00000110001000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8aa3", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) syz_usb_ep_write(r3, 0x2, 0x16, &(0x7f0000000100)="c8180bb4ce8a68891e85cf11850d1cfb20528eb3811d") ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$dir(0xffffff9c, 0x0, 0x8080, 0x1c9) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 1.049532334s ago: executing program 4 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x10) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x29, 0x0, 0x40060900, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 900.23133ms ago: executing program 1 (id=310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x24}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 844.733314ms ago: executing program 1 (id=311): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x18, &(0x7f0000000380)={0x40, 0x11, 0xc, "4e63a18b1f3534387288f99d"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x34, r5, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 663.254837ms ago: executing program 4 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_ep_write(r2, 0xf, 0x2, &(0x7f0000000180)="1732") setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0xa002a008}) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0xf, 0x7fffffff, 0x9, 0x10}}]}, 0x40}}, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 486.960929ms ago: executing program 0 (id=313): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) timer_delete(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b3bfc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 418.855832ms ago: executing program 0 (id=314): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="8f", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x4, 0x20}, 0xc) 346.173258ms ago: executing program 0 (id=315): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) sendfile(r6, r7, 0x0, 0x80009) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/138, 0x8a}], 0x1, 0x0, 0x2, 0x8) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e000100000000000000000002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004007}, 0x4c880) ioctl$sock_SIOCADDRT(r8, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @multicast1}, @nl=@unspec}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x13, [0x8000, 0xc95a, 0xf, 0x0, 0x80, 0x2, 0x4, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe669, 0x4, 0x7, 0x1, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x9, 0x6, 0xc57, 0x5, 0x3, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0xfffffff9, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x0, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x5, 0x5f31, 0xd, 0x4e0, 0x8, 0x4, 0xb, 0x4, 0x209, 0x9, 0x9, 0x6, 0x4a, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x3, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x8, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x7, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xe, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x26], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x2, 0xb, 0x0, 0x20000b9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xfc, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x10001, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc4, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x2, 0x229, 0x5, 0x5, 0x7, 0x30b1d694, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1a, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) recvfrom(r8, &(0x7f0000000880)=""/180, 0xb4, 0x0, &(0x7f0000000940)=@caif=@dbg={0x25, 0xfd, 0xff}, 0x80) ppoll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4004ae52, &(0x7f0000000100)=0xfffffffffffffff0) openat$vsock(0xffffff9c, &(0x7f0000000780), 0x2000, 0x0) r9 = epoll_create(0x3) unshare(0x4000400) pwritev2(r9, 0x0, 0x0, 0x204, 0xfffd, 0xaf1674f502f02f9e) r10 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r10, 0xc1205531, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200), &(0x7f0000000240)={'L+', 0xa6}, 0x16, 0x3) 0s ago: executing program 3 (id=316): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="3b0500000000000005020003c974327ba61000000000000000000000000000000001c20400000005c20400000009010400000000c204fffffffa0000"], 0x38) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_bridge\x00'}}, 0x1e) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc011, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000140012000a00cfbc6e30cea18934954c66c33c49"], 0x30}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000280)={0x0, 0x0, [0xa, 0xef4b, 0x3, 0x1c78, 0x9, 0x8001, 0x6, 0x7fff]}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = openat$vimc2(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f00000003c0)={0x7, 0x1, 0x7, {0x80000001, 0x4, 0x80000001, 0x8001}}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050027bd7000080000002e00000008000300", @ANYRES32=r12, @ANYBLOB="0400460005003400ef000000080051"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x488c0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010027bd70000000000003000000400001802c0004001400010002004e23ac14943500000000000000001400020002004e240000000000000000000000000d0001007564703a73797a3100000000"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 92.477894][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.488547][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.499634][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.511132][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.522856][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.534646][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.546825][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.558207][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.570270][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.605745][ T5856] veth0_macvtap: entered promiscuous mode [ 92.621238][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.631201][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.640518][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649881][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.681070][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.690096][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.703300][ T5856] veth1_macvtap: entered promiscuous mode [ 92.723493][ T2130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.732003][ T2130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.838160][ T5859] veth0_macvtap: entered promiscuous mode [ 92.858445][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.880889][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.899532][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.911294][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.921514][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.932281][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.947554][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.970140][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.003487][ T5859] veth1_macvtap: entered promiscuous mode [ 93.014898][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.031332][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.042324][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.058375][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.070278][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.086467][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.102810][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.121500][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.145946][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.229920][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.240611][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.251970][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261190][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.279368][ T5903] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.304280][ T2130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.307337][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.312334][ T2130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.323451][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.330911][ T5905] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 93.341272][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.358774][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.376107][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.388109][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.398490][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.412603][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.425835][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.505448][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.534266][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.555583][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.571258][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.581744][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.593636][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.603666][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.614781][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.631246][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.674970][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.685013][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.696988][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.706510][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.790895][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.930147][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.981667][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.994866][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 94.033886][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 94.049008][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 94.067486][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.076644][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.090886][ T5896] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 94.163903][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.177917][ T55] Bluetooth: hci0: command tx timeout [ 94.270264][ T55] Bluetooth: hci1: command tx timeout [ 94.305011][ T5919] xt_TCPMSS: Only works on TCP SYN packets [ 94.342513][ T55] Bluetooth: hci3: command tx timeout [ 94.350061][ T5852] Bluetooth: hci4: command tx timeout [ 94.354913][ T5844] Bluetooth: hci2: command tx timeout [ 94.364252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.372913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.381604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.390260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.400464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.410096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 94.420020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.428807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.437520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.446318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.538115][ T5896] usb 2-1: Product: syz [ 94.592067][ T5896] usb 2-1: Manufacturer: syz [ 94.602775][ T2134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.618466][ T5896] usb 2-1: SerialNumber: syz [ 94.628973][ T2134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.650870][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.670781][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.694749][ T5896] usb 2-1: config 0 descriptor?? [ 94.757708][ T5896] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 96.539640][ T5937] netlink: 4900 bytes leftover after parsing attributes in process `syz.0.10'. [ 96.588048][ T5937] netlink: 4900 bytes leftover after parsing attributes in process `syz.0.10'. [ 96.626985][ T5937] netlink: 484 bytes leftover after parsing attributes in process `syz.0.10'. [ 96.941721][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.056578][ T49] usb 2-1: USB disconnect, device number 2 [ 97.193858][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.245908][ T976] cfg80211: failed to load regulatory.db [ 97.298391][ T5943] tipc: Started in network mode [ 97.303381][ T5943] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 97.335153][ T5943] tipc: Enabled bearer , priority 10 [ 97.414046][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 97.495716][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.581793][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 97.600855][ T5838] usb 4-1: can't read configurations, error -61 [ 97.846699][ T5838] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.012749][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 98.022708][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 98.033656][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 98.047390][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.412538][ T976] tipc: Node number set to 4269801491 [ 98.444001][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 98.456332][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 98.561699][ T5838] usb 4-1: can't read configurations, error -61 [ 98.569130][ T5838] usb usb4-port1: attempt power cycle [ 98.593806][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.624292][ T5927] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 98.851758][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 98.870044][ T5897] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 98.883933][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.908236][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.948909][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.010084][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.029388][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.098041][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.100790][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 99.142862][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.143842][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.511132][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 99.539008][ T5838] usb 4-1: can't read configurations, error -71 [ 99.615985][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.646507][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.724788][ T5897] usb 2-1: usb_control_msg returned -32 [ 99.754311][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 100.078076][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.117450][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.244353][ T5897] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.316235][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.417137][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.453780][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 100.460420][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.465989][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 100.483816][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 100.503144][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.526543][ T5897] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 100.536859][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.546511][ T5897] usb 5-1: Product: syz [ 100.555563][ T5897] usb 5-1: Manufacturer: syz [ 100.564073][ T5897] usb 5-1: SerialNumber: syz [ 100.584531][ T5897] usb 5-1: config 0 descriptor?? [ 100.598074][ T5897] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 100.637498][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.665105][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 100.673091][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 100.684467][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 100.705008][ T5838] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 100.718716][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.727600][ T5838] usb 4-1: Product: syz [ 100.741054][ T5838] usb 4-1: Manufacturer: syz [ 100.746028][ T5838] usb 4-1: SerialNumber: syz [ 100.766148][ T5838] usb 4-1: config 0 descriptor?? [ 100.780358][ T5838] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 101.351420][ T5996] fuse: Invalid rootmode [ 101.376052][ T5897] usb 2-1: USB disconnect, device number 3 [ 101.541720][ T5893] usb 5-1: USB disconnect, device number 2 [ 101.620440][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 102.003982][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.181532][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 102.209537][ T5893] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 102.275934][ T5893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.302795][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.330217][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.348007][ T5893] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.373605][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.529904][ T6022] xt_TCPMSS: Only works on TCP SYN packets [ 102.598208][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.184440][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.271888][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.440192][ T5893] usb 1-1: usb_control_msg returned -32 [ 103.477434][ T5893] usbtmc 1-1:16.0: can't read capabilities [ 103.512100][ T49] usb 4-1: USB disconnect, device number 5 [ 103.734185][ T6025] xt_TCPMSS: Only works on TCP SYN packets [ 104.835660][ T6037] bridge0: port 3(geneve0) entered blocking state [ 104.848023][ T6037] bridge0: port 3(geneve0) entered disabled state [ 104.862909][ T6037] geneve0: entered allmulticast mode [ 104.877307][ T6037] geneve0: entered promiscuous mode [ 104.887236][ T6037] bridge0: port 3(geneve0) entered blocking state [ 104.894404][ T6037] bridge0: port 3(geneve0) entered forwarding state [ 105.014012][ T6038] geneve0: left allmulticast mode [ 105.019181][ T6038] geneve0: left promiscuous mode [ 105.025229][ T6038] bridge0: port 3(geneve0) entered disabled state [ 105.257395][ T6042] netlink: 80 bytes leftover after parsing attributes in process `syz.2.35'. [ 105.347961][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 106.086188][ T6052] xt_TCPMSS: Only works on TCP SYN packets [ 106.327397][ T5893] usb 1-1: USB disconnect, device number 2 [ 106.474561][ T49] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.674437][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 106.767795][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 106.778037][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 106.790645][ T49] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 106.801855][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.810057][ T49] usb 5-1: Product: syz [ 106.817441][ T49] usb 5-1: Manufacturer: syz [ 106.822205][ T49] usb 5-1: SerialNumber: syz [ 106.830789][ T49] usb 5-1: config 0 descriptor?? [ 106.840904][ T49] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 107.239086][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.415880][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 107.554591][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 107.582731][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 107.626964][ T5897] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 107.645430][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.653613][ T5897] usb 2-1: Product: syz [ 107.793536][ T5897] usb 2-1: Manufacturer: syz [ 107.902789][ T5897] usb 2-1: SerialNumber: syz [ 107.939343][ T5897] usb 2-1: config 0 descriptor?? [ 108.066532][ T5897] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 108.162268][ T6077] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 108.303792][ T6077] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 108.352970][ T6077] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 108.817357][ T6089] fuse: Bad value for 'fd' [ 109.565693][ T6096] fuse: Bad value for 'fd' [ 109.809028][ T49] usb 5-1: USB disconnect, device number 3 [ 110.569075][ T976] usb 2-1: USB disconnect, device number 4 [ 110.734305][ T49] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.908980][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 111.004594][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 111.036414][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 111.150201][ T49] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 111.161188][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.183492][ T49] usb 5-1: Product: syz [ 111.191324][ T49] usb 5-1: Manufacturer: syz [ 111.198265][ T49] usb 5-1: SerialNumber: syz [ 111.225688][ T49] usb 5-1: config 0 descriptor?? [ 111.245485][ T49] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 111.813850][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.822765][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.004099][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 112.023968][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 112.045117][ T5897] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.054510][ T5897] usb 3-1: config 0 has no interface number 0 [ 112.062343][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 112.072500][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 112.100226][ T5897] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.151619][ T5896] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 112.162803][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.182104][ T5897] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.200997][ T5896] usb 4-1: Product: syz [ 112.215672][ T5896] usb 4-1: Manufacturer: syz [ 112.258755][ T5896] usb 4-1: SerialNumber: syz [ 112.268906][ T5897] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.288864][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.315944][ T5896] usb 4-1: config 0 descriptor?? [ 112.321325][ T5897] usb 3-1: Product: syz [ 112.329464][ T5896] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 112.341989][ T5897] usb 3-1: Manufacturer: syz [ 112.364484][ T5897] usb 3-1: SerialNumber: syz [ 112.380730][ T5897] usb 3-1: config 0 descriptor?? [ 112.395630][ T6125] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 112.406638][ T6125] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 112.871621][ T6140] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 112.879190][ T6140] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 114.543241][ T6171] xt_TCPMSS: Only works on TCP SYN packets [ 114.839063][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.847120][ T6175] bridge0: port 3(bond1) entered blocking state [ 114.853511][ T6175] bridge0: port 3(bond1) entered disabled state [ 115.162219][ T6175] bond1: entered allmulticast mode [ 115.184500][ T6175] bond1: entered promiscuous mode [ 115.214430][ T976] usb 5-1: USB disconnect, device number 4 [ 115.225397][ T6175] bridge0: port 3(bond1) entered blocking state [ 115.232030][ T6175] bridge0: port 3(bond1) entered forwarding state [ 115.456085][ T36] bridge0: port 3(bond1) entered disabled state [ 115.591175][ T976] usb 4-1: USB disconnect, device number 6 [ 115.840486][ T6184] netlink: 'syz.3.58': attribute type 13 has an invalid length. [ 115.868449][ T5897] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.902076][ T5897] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 115.957018][ T5897] asix 3-1:0.251: probe with driver asix failed with error -5 [ 116.003040][ T5897] usb 3-1: USB disconnect, device number 2 [ 116.735932][ T5896] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.893976][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 116.915901][ T5896] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.934437][ T5896] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.966082][ T5896] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.989366][ T5896] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.999617][ T5896] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.015602][ T5896] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.025726][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.240118][ T6206] xt_TCPMSS: Only works on TCP SYN packets [ 117.308704][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.374420][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.582004][ T5896] usb 3-1: usb_control_msg returned -32 [ 117.601861][ T5896] usbtmc 3-1:16.0: can't read capabilities [ 117.985151][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.103999][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.647186][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.674093][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.823843][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 118.837749][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 118.854343][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 118.863779][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 118.884074][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 118.903946][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 118.914104][ T5899] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.927701][ T5896] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 118.937782][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.946269][ T5896] usb 5-1: Product: syz [ 118.950712][ T5896] usb 5-1: Manufacturer: syz [ 118.955499][ T5896] usb 5-1: SerialNumber: syz [ 118.961427][ T5897] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 118.971643][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.983413][ T5896] usb 5-1: config 0 descriptor?? [ 118.990137][ T5897] usb 4-1: Product: syz [ 118.994544][ T5897] usb 4-1: Manufacturer: syz [ 119.000353][ T5896] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 119.012918][ T5897] usb 4-1: SerialNumber: syz [ 119.027733][ T5897] usb 4-1: config 0 descriptor?? [ 119.038338][ T5897] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 119.064095][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.084252][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 119.092523][ T5899] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 119.101574][ T5899] usb 2-1: config 0 has no interface number 0 [ 119.108104][ T5899] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.118351][ T5899] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.130797][ T5899] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 119.140872][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.149574][ T5899] usb 2-1: Product: syz [ 119.154864][ T5899] usb 2-1: Manufacturer: syz [ 119.159556][ T5899] usb 2-1: SerialNumber: syz [ 119.167893][ T5899] usb 2-1: config 0 descriptor?? [ 119.174400][ T6220] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 119.182071][ T6220] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 119.213969][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 119.221435][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 119.230293][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.240722][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.251125][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.261666][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.275363][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.285460][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.669384][ T5897] usb 3-1: USB disconnect, device number 3 [ 119.695836][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.765457][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.868485][ T10] usb 1-1: usb_control_msg returned -32 [ 119.879827][ T10] usbtmc 1-1:16.0: can't read capabilities [ 120.296327][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.305211][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.325372][ T6236] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 120.332981][ T6236] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 121.601636][ T49] usb 5-1: USB disconnect, device number 5 [ 121.931953][ T49] usb 1-1: USB disconnect, device number 3 [ 122.586082][ T5899] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.624023][ T5899] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 122.641710][ T5899] asix 2-1:0.251: probe with driver asix failed with error -5 [ 122.680091][ T5899] usb 2-1: USB disconnect, device number 5 [ 122.792838][ T49] usb 4-1: USB disconnect, device number 7 [ 122.881784][ T6248] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.231656][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 123.259425][ T6261] netlink: 'syz.1.82': attribute type 13 has an invalid length. [ 123.289447][ T6263] netlink: 'syz.2.81': attribute type 3 has an invalid length. [ 123.566560][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.83'. [ 123.687865][ T6274] netlink: 'syz.1.85': attribute type 16 has an invalid length. [ 123.715630][ T6274] netlink: 'syz.1.85': attribute type 17 has an invalid length. [ 123.974398][ T49] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.137197][ T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.164440][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 124.178217][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 124.214445][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 124.240929][ T49] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 124.256025][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.268080][ T49] usb 3-1: Product: syz [ 124.273293][ T49] usb 3-1: Manufacturer: syz [ 124.283540][ T49] usb 3-1: SerialNumber: syz [ 124.298250][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 124.312015][ T49] usb 3-1: config 0 descriptor?? [ 124.320342][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 124.333637][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 124.346227][ T49] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 124.366566][ T976] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 124.382627][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.402388][ T976] usb 5-1: Product: syz [ 124.426904][ T976] usb 5-1: Manufacturer: syz [ 124.436764][ T976] usb 5-1: SerialNumber: syz [ 124.448099][ T976] usb 5-1: config 0 descriptor?? [ 124.474812][ T976] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 124.625607][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.784482][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.970854][ T5899] usb 2-1: device descriptor read/64, error -71 [ 124.983892][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 125.245647][ T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 125.254119][ T10] usb 4-1: config 0 has no interface number 0 [ 125.288677][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 125.529558][ T5899] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.594240][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 125.609633][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 125.622176][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.632567][ T10] usb 4-1: Product: syz [ 125.638291][ T10] usb 4-1: Manufacturer: syz [ 125.646681][ T10] usb 4-1: SerialNumber: syz [ 125.764515][ T10] usb 4-1: config 0 descriptor?? [ 125.782654][ T6284] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 125.790092][ T5899] usb 2-1: device descriptor read/64, error -71 [ 125.814034][ T6284] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 125.908317][ T5899] usb usb2-port1: attempt power cycle [ 126.293833][ T5899] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.409257][ T6307] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 126.430005][ T5899] usb 2-1: device descriptor read/8, error -71 [ 126.444725][ T6307] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 126.811313][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.866088][ T5899] usb 2-1: device descriptor read/8, error -71 [ 126.995592][ T5899] usb usb2-port1: unable to enumerate USB device [ 127.107845][ T5899] usb 5-1: USB disconnect, device number 6 [ 127.242849][ T976] usb 3-1: USB disconnect, device number 4 [ 127.248519][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 127.307557][ T6312] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 127.496079][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.94'. [ 127.509837][ T6315] netlink: 'syz.0.94': attribute type 3 has an invalid length. [ 127.559692][ T6311] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.569281][ T6311] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.578620][ T6311] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.588105][ T6311] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.605580][ T6311] vxlan0: entered promiscuous mode [ 128.641517][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 128.728573][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 128.748679][ T10] asix 4-1:0.251: probe with driver asix failed with error -5 [ 128.782405][ T10] usb 4-1: USB disconnect, device number 8 [ 129.191924][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.211185][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.283802][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.403792][ T5896] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.414102][ T976] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.443983][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 129.453331][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 129.483927][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 129.505757][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 129.514988][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.524548][ T10] usb 4-1: Product: syz [ 129.532795][ T10] usb 4-1: Manufacturer: syz [ 129.540636][ T10] usb 4-1: SerialNumber: syz [ 129.554773][ T10] usb 4-1: config 0 descriptor?? [ 129.573865][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 129.586304][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 129.597946][ T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 129.599579][ T976] usb 2-1: config 5 has an invalid interface number: 72 but max is 0 [ 129.623862][ T976] usb 2-1: config 5 has no interface number 0 [ 129.630368][ T976] usb 2-1: config 5 interface 72 has no altsetting 0 [ 129.642476][ T976] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 129.644266][ T5896] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 129.652069][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.679581][ T976] usb 2-1: Product: syz [ 129.689140][ T976] usb 2-1: Manufacturer: syz [ 129.720229][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.744208][ T976] usb 2-1: SerialNumber: syz [ 129.755498][ T6349] lo: entered allmulticast mode [ 129.760611][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.775789][ T6349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.793619][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.831606][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.924381][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.934217][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.981116][ T976] ftdi_sio 2-1:5.72: FTDI USB Serial Device converter detected [ 130.068987][ T976] usb 2-1: Detected FT4232H [ 130.100745][ T976] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 130.121166][ T976] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 130.154139][ T6356] FAULT_INJECTION: forcing a failure. [ 130.154139][ T6356] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.172103][ T6354] fuse: Unknown parameter 'group_i00000000000000000000' [ 130.190504][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.200904][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.214391][ T976] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.220535][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.0.109 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 130.220571][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.220590][ T6356] Call Trace: [ 130.220599][ T6356] [ 130.220608][ T6356] dump_stack_lvl+0x241/0x360 [ 130.220675][ T6356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.220707][ T6356] ? __pfx__printk+0x10/0x10 [ 130.220751][ T6356] should_fail_ex+0x424/0x570 [ 130.220790][ T6356] _copy_to_user+0x31/0xb0 [ 130.220822][ T6356] simple_read_from_buffer+0xc4/0x170 [ 130.220861][ T6356] proc_fail_nth_read+0x1ef/0x260 [ 130.220885][ T6356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.220910][ T6356] ? rw_verify_area+0x246/0x630 [ 130.220948][ T6356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.220972][ T6356] vfs_read+0x21f/0xb90 [ 130.221007][ T6356] ? __pfx___mutex_lock+0x10/0x10 [ 130.221033][ T6356] ? __pfx_vfs_read+0x10/0x10 [ 130.221066][ T6356] ? __fget_files+0x2a/0x420 [ 130.221089][ T6356] ? __fget_files+0x39d/0x420 [ 130.221109][ T6356] ? __fget_files+0x2a/0x420 [ 130.221147][ T6356] ksys_read+0x19d/0x2d0 [ 130.221180][ T6356] ? __pfx_ksys_read+0x10/0x10 [ 130.221212][ T6356] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 130.221235][ T6356] ? lockdep_hardirqs_on+0x9d/0x150 [ 130.221260][ T6356] __do_fast_syscall_32+0xb4/0x110 [ 130.221285][ T6356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.221307][ T6356] ? lockdep_hardirqs_on+0x9d/0x150 [ 130.221333][ T6356] do_fast_syscall_32+0x34/0x80 [ 130.221357][ T6356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.221382][ T6356] RIP: 0023:0xf710d539 [ 130.221407][ T6356] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 130.221424][ T6356] RSP: 002b:00000000f50fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 130.221453][ T6356] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50fd620 [ 130.221468][ T6356] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 130.221481][ T6356] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 130.221500][ T6356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.221513][ T6356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.221544][ T6356] [ 130.273753][ T5896] usb 5-1: usb_control_msg returned -32 [ 130.481215][ T976] usb 2-1: USB disconnect, device number 10 [ 130.522496][ T976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.546421][ T976] ftdi_sio 2-1:5.72: device disconnected [ 130.624268][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.638229][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.813663][ T5896] usbtmc 5-1:16.0: can't read capabilities [ 130.815789][ T976] usb 4-1: USB disconnect, device number 9 [ 130.971653][ T6364] loop2: detected capacity change from 0 to 7 [ 130.987132][ T6234] Dev loop2: unable to read RDB block 7 [ 130.996108][ T6234] loop2: unable to read partition table [ 131.015388][ T6234] loop2: partition table beyond EOD, truncated [ 131.028788][ T6364] Dev loop2: unable to read RDB block 7 [ 131.050241][ T6364] loop2: unable to read partition table [ 131.053476][ T6369] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.061920][ T6364] loop2: partition table beyond EOD, truncated [ 131.083520][ T6364] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.113968][ T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.265343][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 131.279535][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 131.304564][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 131.324295][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 131.340543][ T49] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 131.352492][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.368717][ T49] usb 2-1: Product: syz [ 131.373152][ T49] usb 2-1: Manufacturer: syz [ 131.382061][ T49] usb 2-1: SerialNumber: syz [ 131.395971][ T49] usb 2-1: config 0 descriptor?? [ 131.425477][ T49] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 131.526579][ T2153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.706902][ T2153] usb 3-1: Using ep0 maxpacket: 32 [ 131.726214][ T2153] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 131.729306][ T6385] FAULT_INJECTION: forcing a failure. [ 131.729306][ T6385] name failslab, interval 1, probability 0, space 0, times 1 [ 131.738516][ T2153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.748681][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.3.116 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 131.748727][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.748741][ T6385] Call Trace: [ 131.748750][ T6385] [ 131.748760][ T6385] dump_stack_lvl+0x241/0x360 [ 131.748803][ T6385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.748836][ T6385] ? __pfx__printk+0x10/0x10 [ 131.748873][ T6385] ? __pfx___might_resched+0x10/0x10 [ 131.748898][ T6385] should_fail_ex+0x424/0x570 [ 131.748938][ T6385] should_failslab+0xac/0x100 [ 131.748963][ T6385] __kmalloc_noprof+0xdf/0x4d0 [ 131.748986][ T6385] ? ieee80211_assign_beacon+0x13cf/0x1f60 [ 131.749023][ T6385] ieee80211_assign_beacon+0x13cf/0x1f60 [ 131.749057][ T6385] ? stack_depot_save_flags+0x43f/0x940 [ 131.749113][ T6385] ? ieee80211_start_ap+0x159f/0x2d50 [ 131.749141][ T6385] ieee80211_start_ap+0x1bb0/0x2d50 [ 131.749184][ T6385] ? __pfx_ieee80211_start_ap+0x10/0x10 [ 131.749203][ T6385] ? nl80211_calculate_ap_params+0xd3d/0x1160 [ 131.749242][ T6385] ? __pfx_nl80211_calculate_ap_params+0x10/0x10 [ 131.749276][ T6385] rdev_start_ap+0x10b/0x290 [ 131.749307][ T6385] nl80211_start_ap+0x1fc1/0x2690 [ 131.749355][ T6385] ? __pfx_nl80211_start_ap+0x10/0x10 [ 131.749396][ T6385] genl_rcv_msg+0xb38/0xf00 [ 131.749441][ T6385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.749472][ T6385] ? __dev_queue_xmit+0x1780/0x3f60 [ 131.749493][ T6385] ? kasan_save_track+0x3f/0x80 [ 131.749521][ T6385] ? __kasan_slab_alloc+0x66/0x80 [ 131.749557][ T6385] ? __do_fast_syscall_32+0xb4/0x110 [ 131.749602][ T6385] ? __lock_acquire+0xad5/0xd80 [ 131.749634][ T6385] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 131.749663][ T6385] ? __pfx_nl80211_start_ap+0x10/0x10 [ 131.749687][ T6385] ? __pfx_nl80211_post_doit+0x10/0x10 [ 131.749739][ T6385] netlink_rcv_skb+0x208/0x480 [ 131.749773][ T6385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.749809][ T6385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.749862][ T6385] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.749897][ T6385] genl_rcv+0x28/0x40 [ 131.749928][ T6385] netlink_unicast+0x7f8/0x9a0 [ 131.749962][ T6385] ? __pfx_netlink_unicast+0x10/0x10 [ 131.749989][ T6385] ? skb_put+0x114/0x1f0 [ 131.750026][ T6385] netlink_sendmsg+0x8c3/0xcd0 [ 131.750070][ T6385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.750103][ T6385] ? aa_sock_msg_perm+0x91/0x160 [ 131.750139][ T6385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.750164][ T6385] __sock_sendmsg+0x221/0x270 [ 131.750196][ T6385] ____sys_sendmsg+0x523/0x860 [ 131.750240][ T6385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.750294][ T6385] __sys_sendmsg+0x271/0x360 [ 131.750335][ T6385] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.750429][ T6385] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 131.750452][ T6385] ? lockdep_hardirqs_on+0x9d/0x150 [ 131.750477][ T6385] __do_fast_syscall_32+0xb4/0x110 [ 131.750500][ T6385] ? exc_page_fault+0x5f8/0x920 [ 131.750528][ T6385] do_fast_syscall_32+0x34/0x80 [ 131.750552][ T6385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.750579][ T6385] RIP: 0023:0xf70fd539 [ 131.750599][ T6385] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 131.750617][ T6385] RSP: 002b:00000000f50ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 131.750640][ T6385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 131.750655][ T6385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.750668][ T6385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.750681][ T6385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.750693][ T6385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.750734][ T6385] [ 132.310541][ T5896] usb 5-1: USB disconnect, device number 7 [ 132.539297][ T10] IPVS: starting estimator thread 0... [ 132.654668][ T6402] IPVS: using max 37 ests per chain, 88800 per kthread [ 132.836729][ T2153] usb 3-1: config 0 has no interface number 0 [ 132.848749][ T2153] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 132.862811][ T2153] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 132.876335][ T2153] usb 3-1: config 0 interface 8 has no altsetting 0 [ 132.886009][ T2153] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 132.895480][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.905162][ T2153] usb 3-1: Product: syz [ 132.909353][ T2153] usb 3-1: Manufacturer: syz [ 132.914816][ T2153] usb 3-1: SerialNumber: syz [ 132.922752][ T2153] usb 3-1: config 0 descriptor?? [ 132.963814][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.134905][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.155153][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 133.163035][ T10] usb 4-1: can't read configurations, error -71 [ 133.264068][ T6415] ucma_write: process 109 (syz.0.120) changed security contexts after opening file descriptor, this is not allowed. [ 133.692537][ T6418] ALSA: mixer_oss: invalid OSS volume '' [ 133.859115][ T2153] ath6kl: Failed to submit usb control message: -71 [ 133.914043][ T2153] ath6kl: unable to send the bmi data to the device: -71 [ 133.921154][ T2153] ath6kl: Unable to send get target info: -71 [ 133.990893][ T2153] ath6kl: Failed to init ath6kl core: -71 [ 134.018286][ T2153] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 134.082618][ T2153] usb 3-1: USB disconnect, device number 5 [ 134.248373][ T5897] usb 2-1: USB disconnect, device number 11 [ 134.283833][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.383422][ T30] audit: type=1326 audit(1745115227.675:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.430003][ T6436] FAULT_INJECTION: forcing a failure. [ 134.430003][ T6436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.451021][ T30] audit: type=1326 audit(1745115227.675:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.489793][ T5893] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 134.517837][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.3.128 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 134.517868][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.517881][ T6436] Call Trace: [ 134.517890][ T6436] [ 134.517898][ T6436] dump_stack_lvl+0x241/0x360 [ 134.517936][ T6436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.517965][ T6436] ? __pfx__printk+0x10/0x10 [ 134.518009][ T6436] should_fail_ex+0x424/0x570 [ 134.518046][ T6436] _copy_to_user+0x31/0xb0 [ 134.518074][ T6436] simple_read_from_buffer+0xc4/0x170 [ 134.518107][ T6436] proc_fail_nth_read+0x1ef/0x260 [ 134.518130][ T6436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.518152][ T6436] ? rw_verify_area+0x246/0x630 [ 134.518176][ T6436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.518198][ T6436] vfs_read+0x21f/0xb90 [ 134.518230][ T6436] ? __pfx___mutex_lock+0x10/0x10 [ 134.518251][ T6436] ? __pfx_vfs_read+0x10/0x10 [ 134.518288][ T6436] ? __fget_files+0x2a/0x420 [ 134.518310][ T6436] ? __fget_files+0x39d/0x420 [ 134.518326][ T6436] ? __fget_files+0x2a/0x420 [ 134.518354][ T6436] ksys_read+0x19d/0x2d0 [ 134.518385][ T6436] ? __pfx_ksys_read+0x10/0x10 [ 134.518415][ T6436] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 134.518436][ T6436] ? lockdep_hardirqs_on+0x9d/0x150 [ 134.518459][ T6436] __do_fast_syscall_32+0xb4/0x110 [ 134.518480][ T6436] ? exc_page_fault+0x5f8/0x920 [ 134.518505][ T6436] do_fast_syscall_32+0x34/0x80 [ 134.518526][ T6436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.518559][ T6436] RIP: 0023:0xf70fd539 [ 134.518576][ T6436] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 134.518593][ T6436] RSP: 002b:00000000f50ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 134.518614][ T6436] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ed620 [ 134.518628][ T6436] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 134.518640][ T6436] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 134.518651][ T6436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.518662][ T6436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.518692][ T6436] [ 134.550807][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.558315][ T30] audit: type=1326 audit(1745115227.705:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.569701][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.572467][ T30] audit: type=1326 audit(1745115227.705:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.588769][ T5893] usb 1-1: Product: syz [ 134.632878][ T30] audit: type=1326 audit(1745115227.705:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.637986][ T49] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.854834][ T30] audit: type=1326 audit(1745115227.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.880204][ T30] audit: type=1326 audit(1745115227.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 134.905575][ T5893] usb 1-1: Manufacturer: syz [ 134.910243][ T5893] usb 1-1: SerialNumber: syz [ 135.056785][ T6441] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.069032][ T10] IPVS: starting estimator thread 0... [ 135.084176][ T2153] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.146501][ T5893] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 135.157034][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 135.164299][ T6445] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.181383][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 135.205589][ T5893] usb 1-1: USB disconnect, device number 4 [ 135.211576][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 135.234994][ T49] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 135.243991][ T5897] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 135.274059][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.282119][ T49] usb 5-1: Product: syz [ 135.291079][ T49] usb 5-1: Manufacturer: syz [ 135.435218][ T2153] usb 2-1: Using ep0 maxpacket: 32 [ 135.460797][ T49] usb 5-1: SerialNumber: syz [ 135.469816][ T2153] usb 2-1: config 1 has an invalid interface number: 44 but max is 1 [ 135.479999][ T2153] usb 2-1: config 1 has an invalid interface number: 44 but max is 1 [ 135.496043][ T2153] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.496985][ T49] usb 5-1: config 0 descriptor?? [ 135.507508][ T2153] usb 2-1: config 1 has no interface number 0 [ 135.519517][ T2153] usb 2-1: config 1 interface 44 has no altsetting 0 [ 135.530843][ T2153] usb 2-1: config 1 interface 44 has no altsetting 1 [ 135.543215][ T2153] usb 2-1: New USB device found, idVendor=132b, idProduct=000b, bcdDevice= 0.01 [ 135.544666][ T49] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 135.580679][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.596742][ T5897] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 135.618232][ T2153] usb 2-1: Product: syz [ 135.626310][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.640171][ T2153] usb 2-1: Manufacturer: syz [ 135.683974][ T2153] usb 2-1: SerialNumber: syz [ 135.704817][ T5897] usb 4-1: config 0 descriptor?? [ 135.709994][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.824620][ T5897] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 135.908716][ T30] audit: type=1326 audit(1745115229.205:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 135.944575][ T30] audit: type=1326 audit(1745115229.205:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.009791][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 136.027763][ T5897] usb 4-1: Detected FT232A [ 136.080865][ T5897] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 136.081305][ T30] audit: type=1326 audit(1745115229.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 136.143263][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.170310][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.187941][ T5897] usb 4-1: USB disconnect, device number 12 [ 136.195252][ T2153] usb-storage 2-1:1.44: USB Mass Storage device detected [ 136.219516][ T5899] usb 1-1: Product: syz [ 136.315850][ T5899] usb 1-1: Manufacturer: syz [ 136.323295][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 136.336477][ T5899] usb 1-1: SerialNumber: syz [ 136.361641][ T2153] usb 2-1: USB disconnect, device number 12 [ 136.368841][ T5897] ftdi_sio 4-1:0.0: device disconnected [ 136.487029][ T5893] usb 5-1: USB disconnect, device number 8 [ 136.571701][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 136.595153][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 136.603143][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 136.610782][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 136.618329][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 136.638696][ T5899] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 136.703884][ T5899] usb 1-1: USB disconnect, device number 5 [ 136.725588][ T6454] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.735416][ T6454] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.744692][ T6454] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.753908][ T6454] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.809165][ T6454] vxlan0: entered promiscuous mode [ 136.853273][ T6455] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.948557][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 137.150967][ T6466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.167927][ T6466] FAULT_INJECTION: forcing a failure. [ 137.167927][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 137.181224][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.4.136 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 137.181254][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.181266][ T6466] Call Trace: [ 137.181274][ T6466] [ 137.181283][ T6466] dump_stack_lvl+0x241/0x360 [ 137.181323][ T6466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.181363][ T6466] ? __pfx__printk+0x10/0x10 [ 137.181398][ T6466] ? __pfx___might_resched+0x10/0x10 [ 137.181424][ T6466] should_fail_ex+0x424/0x570 [ 137.181461][ T6466] should_failslab+0xac/0x100 [ 137.181485][ T6466] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 137.181509][ T6466] ? __alloc_skb+0x1c2/0x480 [ 137.181543][ T6466] __alloc_skb+0x1c2/0x480 [ 137.181588][ T6466] ? __pfx___alloc_skb+0x10/0x10 [ 137.181617][ T6466] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.181648][ T6466] ? netlink_ack_tlv_len+0x6e/0x200 [ 137.181677][ T6466] netlink_ack+0x147/0xa70 [ 137.181700][ T6466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.181742][ T6466] ? ref_tracker_free+0x63e/0x7e0 [ 137.181771][ T6466] netlink_rcv_skb+0x296/0x480 [ 137.181798][ T6466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.181827][ T6466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.181871][ T6466] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.181900][ T6466] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.181928][ T6466] netlink_unicast+0x7f8/0x9a0 [ 137.181961][ T6466] ? __pfx_netlink_unicast+0x10/0x10 [ 137.181987][ T6466] ? skb_put+0x114/0x1f0 [ 137.182022][ T6466] netlink_sendmsg+0x8c3/0xcd0 [ 137.182061][ T6466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.182100][ T6466] ? aa_sock_msg_perm+0x91/0x160 [ 137.182133][ T6466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.182157][ T6466] __sock_sendmsg+0x221/0x270 [ 137.182186][ T6466] ____sys_sendmsg+0x523/0x860 [ 137.182228][ T6466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.182278][ T6466] __sys_sendmsg+0x271/0x360 [ 137.182316][ T6466] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.182409][ T6466] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 137.182433][ T6466] ? lockdep_hardirqs_on+0x9d/0x150 [ 137.182458][ T6466] __do_fast_syscall_32+0xb4/0x110 [ 137.182480][ T6466] ? exc_page_fault+0x5f8/0x920 [ 137.182506][ T6466] do_fast_syscall_32+0x34/0x80 [ 137.182530][ T6466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.182555][ T6466] RIP: 0023:0xf70ed539 [ 137.182573][ T6466] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.182590][ T6466] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 137.182612][ T6466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 137.182626][ T6466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.182637][ T6466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.182649][ T6466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.182660][ T6466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.182689][ T6466] [ 137.614218][ T5899] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.775678][ T5899] usb 4-1: config index 0 descriptor too short (expected 8228, got 36) [ 137.787699][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.799323][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.809775][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.835579][ T5899] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01 [ 137.871342][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.893822][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.907786][ T5899] usb 4-1: config 0 descriptor?? [ 138.043938][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 138.043980][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.052069][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 138.066931][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 138.085111][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 138.095143][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.103419][ T10] usb 5-1: Product: syz [ 138.126970][ T10] usb 5-1: Manufacturer: syz [ 138.168777][ T10] usb 5-1: SerialNumber: syz [ 138.181087][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.188010][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.205823][ T10] usb 5-1: config 0 descriptor?? [ 138.219634][ T10] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 138.263955][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 138.288085][ T5893] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 138.297633][ T5893] usb 1-1: config 0 has no interface number 0 [ 138.312381][ T5893] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 138.323480][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.338718][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.361160][ T5899] hid-rmi 0003:1532:011D.0001: item fetching failed at offset 0/4 [ 138.388630][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.415283][ T5899] hid-rmi 0003:1532:011D.0001: parse failed [ 138.430831][ T5899] hid-rmi 0003:1532:011D.0001: probe with driver hid-rmi failed with error -22 [ 138.513794][ T5893] usb 1-1: Product: syz [ 138.518026][ T5893] usb 1-1: Manufacturer: syz [ 138.522854][ T5893] usb 1-1: SerialNumber: syz [ 138.531289][ T5893] usb 1-1: config 0 descriptor?? [ 138.540478][ T5893] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 138.638451][ T5899] usb 4-1: USB disconnect, device number 13 [ 138.791761][ T5893] gspca_topro: reg_w err -71 [ 138.824463][ T5893] gspca_topro: Sensor soi763a [ 138.878704][ T5893] usb 1-1: USB disconnect, device number 6 [ 139.241513][ T6488] FAULT_INJECTION: forcing a failure. [ 139.241513][ T6488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.263856][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.2.143 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 139.263885][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.263897][ T6488] Call Trace: [ 139.263905][ T6488] [ 139.263913][ T6488] dump_stack_lvl+0x241/0x360 [ 139.263949][ T6488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.263978][ T6488] ? __pfx__printk+0x10/0x10 [ 139.264017][ T6488] should_fail_ex+0x424/0x570 [ 139.264054][ T6488] _copy_to_user+0x31/0xb0 [ 139.264084][ T6488] simple_read_from_buffer+0xc4/0x170 [ 139.264119][ T6488] proc_fail_nth_read+0x1ef/0x260 [ 139.264151][ T6488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.264174][ T6488] ? rw_verify_area+0x246/0x630 [ 139.264200][ T6488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.264222][ T6488] vfs_read+0x21f/0xb90 [ 139.264255][ T6488] ? __pfx___mutex_lock+0x10/0x10 [ 139.264279][ T6488] ? __pfx_vfs_read+0x10/0x10 [ 139.264310][ T6488] ? __fget_files+0x2a/0x420 [ 139.264331][ T6488] ? __fget_files+0x39d/0x420 [ 139.264349][ T6488] ? __fget_files+0x2a/0x420 [ 139.264379][ T6488] ksys_read+0x19d/0x2d0 [ 139.264410][ T6488] ? __pfx_ksys_read+0x10/0x10 [ 139.264441][ T6488] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 139.264462][ T6488] ? lockdep_hardirqs_on+0x9d/0x150 [ 139.264486][ T6488] __do_fast_syscall_32+0xb4/0x110 [ 139.264507][ T6488] ? exc_page_fault+0x5f8/0x920 [ 139.264533][ T6488] do_fast_syscall_32+0x34/0x80 [ 139.264556][ T6488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.264580][ T6488] RIP: 0023:0xf708d539 [ 139.264597][ T6488] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.264614][ T6488] RSP: 002b:00000000f507d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 139.264636][ T6488] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f507d620 [ 139.264650][ T6488] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 139.264662][ T6488] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 139.264672][ T6488] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.264684][ T6488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.264713][ T6488] [ 140.080584][ T6499] FAULT_INJECTION: forcing a failure. [ 140.080584][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.109606][ T6502] FAULT_INJECTION: forcing a failure. [ 140.109606][ T6502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.275499][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.3.148 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 140.275531][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.275543][ T6499] Call Trace: [ 140.275552][ T6499] [ 140.275561][ T6499] dump_stack_lvl+0x241/0x360 [ 140.275600][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.275631][ T6499] ? __pfx__printk+0x10/0x10 [ 140.275673][ T6499] should_fail_ex+0x424/0x570 [ 140.275711][ T6499] _copy_to_user+0x31/0xb0 [ 140.275743][ T6499] simple_read_from_buffer+0xc4/0x170 [ 140.275788][ T6499] proc_fail_nth_read+0x1ef/0x260 [ 140.275811][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.275834][ T6499] ? rw_verify_area+0x246/0x630 [ 140.275861][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.275884][ T6499] vfs_read+0x21f/0xb90 [ 140.275918][ T6499] ? __pfx___mutex_lock+0x10/0x10 [ 140.275942][ T6499] ? __pfx_vfs_read+0x10/0x10 [ 140.275973][ T6499] ? __fget_files+0x2a/0x420 [ 140.275996][ T6499] ? __fget_files+0x39d/0x420 [ 140.276014][ T6499] ? __fget_files+0x2a/0x420 [ 140.276043][ T6499] ksys_read+0x19d/0x2d0 [ 140.276074][ T6499] ? __pfx_ksys_read+0x10/0x10 [ 140.276106][ T6499] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 140.276128][ T6499] ? lockdep_hardirqs_on+0x9d/0x150 [ 140.276152][ T6499] __do_fast_syscall_32+0xb4/0x110 [ 140.276174][ T6499] ? exc_page_fault+0x5f8/0x920 [ 140.276200][ T6499] do_fast_syscall_32+0x34/0x80 [ 140.276223][ T6499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.276248][ T6499] RIP: 0023:0xf70fd539 [ 140.276266][ T6499] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.276282][ T6499] RSP: 002b:00000000f50ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 140.276305][ T6499] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ed620 [ 140.276319][ T6499] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 140.276331][ T6499] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 140.276343][ T6499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.276354][ T6499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.276385][ T6499] [ 140.511666][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.1.149 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 140.511696][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.511709][ T6502] Call Trace: [ 140.511717][ T6502] [ 140.511725][ T6502] dump_stack_lvl+0x241/0x360 [ 140.511777][ T6502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.511806][ T6502] ? __pfx__printk+0x10/0x10 [ 140.511844][ T6502] should_fail_ex+0x424/0x570 [ 140.511872][ T6502] _copy_to_user+0x31/0xb0 [ 140.511895][ T6502] simple_read_from_buffer+0xc4/0x170 [ 140.511921][ T6502] proc_fail_nth_read+0x1ef/0x260 [ 140.511938][ T6502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.511955][ T6502] ? rw_verify_area+0x246/0x630 [ 140.511974][ T6502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.511991][ T6502] vfs_read+0x21f/0xb90 [ 140.512016][ T6502] ? __pfx___mutex_lock+0x10/0x10 [ 140.512033][ T6502] ? __pfx_vfs_read+0x10/0x10 [ 140.512055][ T6502] ? __fget_files+0x2a/0x420 [ 140.512070][ T6502] ? __fget_files+0x39d/0x420 [ 140.512083][ T6502] ? __fget_files+0x2a/0x420 [ 140.512103][ T6502] ksys_read+0x19d/0x2d0 [ 140.512125][ T6502] ? __pfx_ksys_read+0x10/0x10 [ 140.512147][ T6502] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 140.512162][ T6502] ? lockdep_hardirqs_on+0x9d/0x150 [ 140.512179][ T6502] __do_fast_syscall_32+0xb4/0x110 [ 140.512194][ T6502] ? exc_page_fault+0x5f8/0x920 [ 140.512212][ T6502] do_fast_syscall_32+0x34/0x80 [ 140.512228][ T6502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.512246][ T6502] RIP: 0023:0xf70cd539 [ 140.512258][ T6502] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.512270][ T6502] RSP: 002b:00000000f50bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 140.512286][ T6502] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50bd620 [ 140.512297][ T6502] RDX: 000000000000000f RSI: 00000000f7432ff4 RDI: 0000000000000000 [ 140.512305][ T6502] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 140.512313][ T6502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.512322][ T6502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.512342][ T6502] [ 140.782136][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.934998][ T6503] xt_TCPMSS: Only works on TCP SYN packets [ 140.953852][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 140.961000][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 140.970848][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 140.987125][ T5899] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 140.997373][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.006905][ T5899] usb 3-1: Product: syz [ 141.011092][ T5899] usb 3-1: Manufacturer: syz [ 141.016321][ T5899] usb 3-1: SerialNumber: syz [ 141.030974][ T5899] usb 3-1: config 0 descriptor?? [ 141.044360][ T5899] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 141.055354][ T976] usb 5-1: USB disconnect, device number 9 [ 141.119212][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'. [ 141.439862][ T976] usb 3-1: USB disconnect, device number 6 [ 142.006910][ T6520] xt_TCPMSS: Only works on TCP SYN packets [ 142.214001][ T5899] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.320010][ T6530] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 142.384197][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 142.400546][ T5899] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 142.427235][ T5899] usb 1-1: config 0 has no interface number 0 [ 142.457108][ T5899] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.516048][ T5899] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.572635][ T5899] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 142.582881][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.597435][ T5899] usb 1-1: Product: syz [ 142.601684][ T5899] usb 1-1: Manufacturer: syz [ 142.678298][ T5899] usb 1-1: SerialNumber: syz [ 142.890162][ T5899] usb 1-1: config 0 descriptor?? [ 142.927373][ T6524] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.984853][ T6524] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.637840][ T6547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.688969][ T6547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.882666][ T6554] netlink: 68 bytes leftover after parsing attributes in process `syz.2.163'. [ 143.959632][ T6554] FAULT_INJECTION: forcing a failure. [ 143.959632][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 144.024439][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.2.163 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 144.024474][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.024487][ T6554] Call Trace: [ 144.024496][ T6554] [ 144.024504][ T6554] dump_stack_lvl+0x241/0x360 [ 144.024542][ T6554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.024572][ T6554] ? __pfx__printk+0x10/0x10 [ 144.024605][ T6554] ? __pfx___might_resched+0x10/0x10 [ 144.024637][ T6554] should_fail_ex+0x424/0x570 [ 144.024675][ T6554] should_failslab+0xac/0x100 [ 144.024699][ T6554] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 144.024722][ T6554] ? __alloc_skb+0x1c2/0x480 [ 144.024748][ T6554] ? __dev_queue_xmit+0x1780/0x3f60 [ 144.024774][ T6554] __alloc_skb+0x1c2/0x480 [ 144.024801][ T6554] ? __do_fast_syscall_32+0xb4/0x110 [ 144.024827][ T6554] ? __pfx___alloc_skb+0x10/0x10 [ 144.024861][ T6554] ? netlink_ack_tlv_len+0x6e/0x200 [ 144.024888][ T6554] netlink_ack+0x147/0xa70 [ 144.024912][ T6554] ? __pfx_nl80211_associate+0x10/0x10 [ 144.024956][ T6554] netlink_rcv_skb+0x296/0x480 [ 144.024982][ T6554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.025016][ T6554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.025062][ T6554] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.025095][ T6554] genl_rcv+0x28/0x40 [ 144.025121][ T6554] netlink_unicast+0x7f8/0x9a0 [ 144.025152][ T6554] ? __pfx_netlink_unicast+0x10/0x10 [ 144.025177][ T6554] ? skb_put+0x114/0x1f0 [ 144.025211][ T6554] netlink_sendmsg+0x8c3/0xcd0 [ 144.025252][ T6554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.025283][ T6554] ? aa_sock_msg_perm+0x91/0x160 [ 144.025316][ T6554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.025340][ T6554] __sock_sendmsg+0x221/0x270 [ 144.025378][ T6554] ____sys_sendmsg+0x523/0x860 [ 144.025420][ T6554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.025471][ T6554] __sys_sendmsg+0x271/0x360 [ 144.025509][ T6554] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.025597][ T6554] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 144.025618][ T6554] ? lockdep_hardirqs_on+0x9d/0x150 [ 144.025643][ T6554] __do_fast_syscall_32+0xb4/0x110 [ 144.025666][ T6554] ? exc_page_fault+0x5f8/0x920 [ 144.025692][ T6554] do_fast_syscall_32+0x34/0x80 [ 144.025714][ T6554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.025739][ T6554] RIP: 0023:0xf708d539 [ 144.025756][ T6554] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 144.025773][ T6554] RSP: 002b:00000000f507d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 144.025795][ T6554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 144.025809][ T6554] RDX: 0000000004008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.025821][ T6554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.025833][ T6554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.025844][ T6554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.025874][ T6554] [ 144.900127][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 145.008983][ T6557] bridge1: entered promiscuous mode [ 145.592252][ T6577] netem: incorrect ge model size [ 145.598635][ T6577] netem: change failed [ 146.091790][ T5899] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 146.151332][ T5899] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 146.201348][ T5899] asix 1-1:0.251: probe with driver asix failed with error -5 [ 146.269149][ T5899] usb 1-1: USB disconnect, device number 7 [ 146.536361][ T6584] FAULT_INJECTION: forcing a failure. [ 146.536361][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.560040][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.1.172 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 146.560071][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.560080][ T6584] Call Trace: [ 146.560086][ T6584] [ 146.560092][ T6584] dump_stack_lvl+0x241/0x360 [ 146.560121][ T6584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.560143][ T6584] ? __pfx__printk+0x10/0x10 [ 146.560171][ T6584] should_fail_ex+0x424/0x570 [ 146.560199][ T6584] _copy_to_user+0x31/0xb0 [ 146.560222][ T6584] simple_read_from_buffer+0xc4/0x170 [ 146.560248][ T6584] proc_fail_nth_read+0x1ef/0x260 [ 146.560265][ T6584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.560282][ T6584] ? rw_verify_area+0x246/0x630 [ 146.560301][ T6584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.560319][ T6584] vfs_read+0x21f/0xb90 [ 146.560343][ T6584] ? __pfx___mutex_lock+0x10/0x10 [ 146.560360][ T6584] ? __pfx_vfs_read+0x10/0x10 [ 146.560382][ T6584] ? __fget_files+0x2a/0x420 [ 146.560397][ T6584] ? __fget_files+0x39d/0x420 [ 146.560410][ T6584] ? __fget_files+0x2a/0x420 [ 146.560431][ T6584] ksys_read+0x19d/0x2d0 [ 146.560456][ T6584] ? __pfx_ksys_read+0x10/0x10 [ 146.560483][ T6584] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 146.560499][ T6584] ? lockdep_hardirqs_on+0x9d/0x150 [ 146.560516][ T6584] __do_fast_syscall_32+0xb4/0x110 [ 146.560531][ T6584] ? exc_page_fault+0x5f8/0x920 [ 146.560549][ T6584] do_fast_syscall_32+0x34/0x80 [ 146.560565][ T6584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.560584][ T6584] RIP: 0023:0xf70cd539 [ 146.560597][ T6584] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 146.560608][ T6584] RSP: 002b:00000000f50bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 146.560625][ T6584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50bd620 [ 146.560635][ T6584] RDX: 000000000000000f RSI: 00000000f7432ff4 RDI: 0000000000000000 [ 146.560643][ T6584] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 146.560651][ T6584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.560660][ T6584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.560680][ T6584] [ 147.426333][ T976] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.497420][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 147.633900][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 147.646392][ T976] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 147.685283][ T976] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.719065][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.732074][ T976] usb 4-1: SerialNumber: syz [ 147.817177][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.841598][ T976] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 147.986170][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.997658][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.060322][ T5899] usb 4-1: USB disconnect, device number 14 [ 148.070556][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 148.139263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.191121][ T9] usb 1-1: config 0 descriptor?? [ 148.650956][ T9] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0 [ 148.677238][ T9] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0 [ 148.735439][ T9] steelseries 0003:1038:12B6.0002: unknown main item tag 0x6 [ 148.776998][ T9] steelseries 0003:1038:12B6.0002: item fetching failed at offset 4/7 [ 148.809123][ T9] steelseries 0003:1038:12B6.0002: probe with driver steelseries failed with error -22 [ 149.449081][ T6609] FAULT_INJECTION: forcing a failure. [ 149.449081][ T6609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.554119][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.3.179 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 149.554152][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.554164][ T6609] Call Trace: [ 149.554172][ T6609] [ 149.554181][ T6609] dump_stack_lvl+0x241/0x360 [ 149.554219][ T6609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.554248][ T6609] ? __pfx__printk+0x10/0x10 [ 149.554289][ T6609] should_fail_ex+0x424/0x570 [ 149.554326][ T6609] _copy_to_user+0x31/0xb0 [ 149.554355][ T6609] simple_read_from_buffer+0xc4/0x170 [ 149.554390][ T6609] proc_fail_nth_read+0x1ef/0x260 [ 149.554414][ T6609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.554438][ T6609] ? rw_verify_area+0x246/0x630 [ 149.554464][ T6609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.554486][ T6609] vfs_read+0x21f/0xb90 [ 149.554519][ T6609] ? __pfx___mutex_lock+0x10/0x10 [ 149.554542][ T6609] ? __pfx_vfs_read+0x10/0x10 [ 149.554574][ T6609] ? __fget_files+0x2a/0x420 [ 149.554596][ T6609] ? __fget_files+0x39d/0x420 [ 149.554614][ T6609] ? __fget_files+0x2a/0x420 [ 149.554644][ T6609] ksys_read+0x19d/0x2d0 [ 149.554679][ T6609] ? __pfx_ksys_read+0x10/0x10 [ 149.554710][ T6609] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 149.554732][ T6609] ? lockdep_hardirqs_on+0x9d/0x150 [ 149.554756][ T6609] __do_fast_syscall_32+0xb4/0x110 [ 149.554778][ T6609] ? exc_page_fault+0x5f8/0x920 [ 149.554804][ T6609] do_fast_syscall_32+0x34/0x80 [ 149.554827][ T6609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.554851][ T6609] RIP: 0023:0xf70fd539 [ 149.554868][ T6609] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 149.554885][ T6609] RSP: 002b:00000000f50ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 149.554907][ T6609] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ed620 [ 149.554921][ T6609] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 149.554933][ T6609] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 149.554951][ T6609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 149.554963][ T6609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.554993][ T6609] [ 149.900352][ T6622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.183'. [ 150.339037][ T6633] FAULT_INJECTION: forcing a failure. [ 150.339037][ T6633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.362135][ T5899] usb 1-1: USB disconnect, device number 8 [ 150.381730][ T6633] CPU: 0 UID: 0 PID: 6633 Comm: syz.2.189 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 150.381761][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.381774][ T6633] Call Trace: [ 150.381781][ T6633] [ 150.381790][ T6633] dump_stack_lvl+0x241/0x360 [ 150.381830][ T6633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.381860][ T6633] ? __pfx__printk+0x10/0x10 [ 150.381901][ T6633] should_fail_ex+0x424/0x570 [ 150.381938][ T6633] _copy_to_user+0x31/0xb0 [ 150.381969][ T6633] simple_read_from_buffer+0xc4/0x170 [ 150.382004][ T6633] proc_fail_nth_read+0x1ef/0x260 [ 150.382028][ T6633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.382052][ T6633] ? rw_verify_area+0x246/0x630 [ 150.382079][ T6633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.382101][ T6633] vfs_read+0x21f/0xb90 [ 150.382135][ T6633] ? __pfx___mutex_lock+0x10/0x10 [ 150.382159][ T6633] ? __pfx_vfs_read+0x10/0x10 [ 150.382190][ T6633] ? __fget_files+0x2a/0x420 [ 150.382211][ T6633] ? __fget_files+0x39d/0x420 [ 150.382229][ T6633] ? __fget_files+0x2a/0x420 [ 150.382259][ T6633] ksys_read+0x19d/0x2d0 [ 150.382290][ T6633] ? __pfx_ksys_read+0x10/0x10 [ 150.382321][ T6633] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 150.382343][ T6633] ? lockdep_hardirqs_on+0x9d/0x150 [ 150.382367][ T6633] __do_fast_syscall_32+0xb4/0x110 [ 150.382389][ T6633] ? exc_page_fault+0x5f8/0x920 [ 150.382415][ T6633] do_fast_syscall_32+0x34/0x80 [ 150.382436][ T6633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.382460][ T6633] RIP: 0023:0xf708d539 [ 150.382475][ T6633] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.382491][ T6633] RSP: 002b:00000000f507d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 150.382513][ T6633] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f507d620 [ 150.382527][ T6633] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 150.382539][ T6633] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 150.382549][ T6633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.382561][ T6633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.382590][ T6633] [ 152.243858][ T5893] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 152.440611][ T5893] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 152.479205][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 152.526154][ T5893] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 152.541787][ T5893] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 152.550662][ T6664] vlan2: entered promiscuous mode [ 152.554739][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.199'. [ 152.583097][ T5893] usb 4-1: string descriptor 0 read error: -22 [ 152.597597][ T5893] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 152.616870][ T6664] veth1: entered promiscuous mode [ 152.623094][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.690860][ T5893] adutux 4-1:168.0: interrupt endpoints not found [ 152.817940][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 152.817960][ T30] audit: type=1326 audit(1745115246.115:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.201" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 152.953824][ T49] usb 4-1: USB disconnect, device number 15 [ 153.423875][ T49] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.633818][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 153.641317][ T49] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 153.675469][ T49] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 153.729324][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.747440][ T49] usb 1-1: Product: syz [ 153.763789][ T49] usb 1-1: Manufacturer: syz [ 153.782408][ T49] usb 1-1: SerialNumber: syz [ 153.811957][ T49] usb 1-1: config 0 descriptor?? [ 153.838737][ T6676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.853263][ T49] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.159276][ T5893] usb 1-1: USB disconnect, device number 9 [ 154.385072][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.208'. [ 154.467514][ T6694] FAULT_INJECTION: forcing a failure. [ 154.467514][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.483921][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.2.210 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 154.483950][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.483959][ T6694] Call Trace: [ 154.483965][ T6694] [ 154.483972][ T6694] dump_stack_lvl+0x241/0x360 [ 154.484001][ T6694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.484023][ T6694] ? __pfx__printk+0x10/0x10 [ 154.484057][ T6694] should_fail_ex+0x424/0x570 [ 154.484084][ T6694] _copy_to_user+0x31/0xb0 [ 154.484106][ T6694] simple_read_from_buffer+0xc4/0x170 [ 154.484132][ T6694] proc_fail_nth_read+0x1ef/0x260 [ 154.484149][ T6694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.484172][ T6694] ? rw_verify_area+0x246/0x630 [ 154.484192][ T6694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.484207][ T6694] vfs_read+0x21f/0xb90 [ 154.484231][ T6694] ? __pfx___mutex_lock+0x10/0x10 [ 154.484249][ T6694] ? __pfx_vfs_read+0x10/0x10 [ 154.484271][ T6694] ? __fget_files+0x2a/0x420 [ 154.484287][ T6694] ? __fget_files+0x39d/0x420 [ 154.484299][ T6694] ? __fget_files+0x2a/0x420 [ 154.484320][ T6694] ksys_read+0x19d/0x2d0 [ 154.484342][ T6694] ? __pfx_ksys_read+0x10/0x10 [ 154.484364][ T6694] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 154.484379][ T6694] ? lockdep_hardirqs_on+0x9d/0x150 [ 154.484396][ T6694] __do_fast_syscall_32+0xb4/0x110 [ 154.484412][ T6694] ? exc_page_fault+0x5f8/0x920 [ 154.484430][ T6694] do_fast_syscall_32+0x34/0x80 [ 154.484446][ T6694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.484464][ T6694] RIP: 0023:0xf708d539 [ 154.484477][ T6694] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 154.484489][ T6694] RSP: 002b:00000000f507d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 154.484505][ T6694] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f507d620 [ 154.484515][ T6694] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 154.484523][ T6694] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 154.484531][ T6694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.484540][ T6694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.484560][ T6694] [ 155.112307][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 155.121768][ T6702] bridge_slave_1: left allmulticast mode [ 155.127830][ T6702] bridge_slave_1: left promiscuous mode [ 155.136619][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.170953][ T6702] bridge_slave_0: left allmulticast mode [ 155.177059][ T6702] bridge_slave_0: left promiscuous mode [ 155.183081][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.273975][ T2153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.292638][ T6704] FAULT_INJECTION: forcing a failure. [ 155.292638][ T6704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.319175][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.0.214 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 155.319211][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.319223][ T6704] Call Trace: [ 155.319231][ T6704] [ 155.319239][ T6704] dump_stack_lvl+0x241/0x360 [ 155.319274][ T6704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.319304][ T6704] ? __pfx__printk+0x10/0x10 [ 155.319351][ T6704] should_fail_ex+0x424/0x570 [ 155.319388][ T6704] _copy_to_user+0x31/0xb0 [ 155.319418][ T6704] simple_read_from_buffer+0xc4/0x170 [ 155.319453][ T6704] proc_fail_nth_read+0x1ef/0x260 [ 155.319477][ T6704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.319500][ T6704] ? rw_verify_area+0x246/0x630 [ 155.319526][ T6704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.319547][ T6704] vfs_read+0x21f/0xb90 [ 155.319580][ T6704] ? __pfx___mutex_lock+0x10/0x10 [ 155.319603][ T6704] ? __pfx_vfs_read+0x10/0x10 [ 155.319635][ T6704] ? __fget_files+0x2a/0x420 [ 155.319676][ T6704] ? __fget_files+0x39d/0x420 [ 155.319694][ T6704] ? __fget_files+0x2a/0x420 [ 155.319722][ T6704] ksys_read+0x19d/0x2d0 [ 155.319751][ T6704] ? __pfx_ksys_read+0x10/0x10 [ 155.319779][ T6704] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 155.319801][ T6704] ? lockdep_hardirqs_on+0x9d/0x150 [ 155.319826][ T6704] __do_fast_syscall_32+0xb4/0x110 [ 155.319848][ T6704] ? exc_page_fault+0x5f8/0x920 [ 155.319874][ T6704] do_fast_syscall_32+0x34/0x80 [ 155.319897][ T6704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.319922][ T6704] RIP: 0023:0xf710d539 [ 155.319941][ T6704] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 155.319958][ T6704] RSP: 002b:00000000f50fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 155.319980][ T6704] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50fd620 [ 155.319994][ T6704] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 155.320006][ T6704] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 155.320017][ T6704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.320029][ T6704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.320059][ T6704] [ 155.549739][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.579208][ T6708] pim6reg1: entered promiscuous mode [ 155.584739][ T6708] pim6reg1: entered allmulticast mode [ 155.948509][ T2153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.965808][ T2153] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.041510][ T2153] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.061031][ T2153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.076147][ T2153] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 156.122258][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.227661][ T2153] usb 3-1: config 0 descriptor?? [ 156.661522][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.679345][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.723555][ T2153] usbhid 3-1:0.0: can't add hid device: -32 [ 156.729774][ T2153] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 158.159546][ T9] usb 3-1: USB disconnect, device number 7 [ 158.336483][ T30] audit: type=1326 audit(1745115251.635:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.368497][ T6734] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.474207][ T30] audit: type=1326 audit(1745115251.635:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.505584][ T6736] sg_write: data in/out 6291420/14 bytes for SCSI command 0x0-- guessing data in; [ 158.505584][ T6736] program syz.4.224 not setting count and/or reply_len properly [ 158.522650][ T5893] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 158.548199][ T30] audit: type=1326 audit(1745115251.655:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.619972][ T30] audit: type=1326 audit(1745115251.655:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.657814][ T5893] usb 4-1: device descriptor read/64, error -71 [ 158.672875][ T30] audit: type=1326 audit(1745115251.655:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.823914][ T30] audit: type=1326 audit(1745115251.655:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.861950][ T30] audit: type=1326 audit(1745115251.655:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.887215][ T6746] xt_TCPMSS: Only works on TCP SYN packets [ 158.903906][ T30] audit: type=1326 audit(1745115251.655:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 158.933896][ T5893] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 158.941769][ T976] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.103842][ T5893] usb 4-1: device descriptor read/64, error -71 [ 159.121965][ T30] audit: type=1326 audit(1745115251.655:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 159.151911][ T30] audit: type=1326 audit(1745115251.655:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 159.214223][ T5893] usb usb4-port1: attempt power cycle [ 159.573832][ T5893] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 159.594717][ T5893] usb 4-1: device descriptor read/8, error -71 [ 159.923789][ T5893] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 159.965572][ T5893] usb 4-1: device descriptor read/8, error -71 [ 160.074307][ T5893] usb usb4-port1: unable to enumerate USB device [ 160.169339][ T2134] bond0: (slave bond_slave_0): interface is now down [ 160.193940][ T2134] bond0: (slave bond_slave_1): interface is now down [ 160.194662][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 160.224779][ T2134] bond0: now running without any active interface! [ 160.249211][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 160.306480][ T6757] netlink: 'syz.2.229': attribute type 7 has an invalid length. [ 160.342290][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.352671][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.486590][ T6764] process 'syz.2.233' launched '/dev/fd/7' with NULL argv: empty string added [ 160.570336][ T6768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.234'. [ 160.802808][ T6779] FAULT_INJECTION: forcing a failure. [ 160.802808][ T6779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.844780][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.1.236 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 160.844807][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.844817][ T6779] Call Trace: [ 160.844824][ T6779] [ 160.844831][ T6779] dump_stack_lvl+0x241/0x360 [ 160.844864][ T6779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.844888][ T6779] ? __pfx__printk+0x10/0x10 [ 160.844921][ T6779] should_fail_ex+0x424/0x570 [ 160.844951][ T6779] _copy_from_user+0x2d/0xb0 [ 160.844974][ T6779] get_compat_msghdr+0xb3/0x730 [ 160.845004][ T6779] ? __pfx_get_compat_msghdr+0x10/0x10 [ 160.845032][ T6779] ? do_recvmmsg+0x566/0xab0 [ 160.845052][ T6779] do_recvmmsg+0x4d5/0xab0 [ 160.845077][ T6779] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.845113][ T6779] ? rcu_read_lock_any_held+0xbb/0x160 [ 160.845148][ T6779] ? ksys_write+0x24e/0x2d0 [ 160.845196][ T6779] __sys_recvmmsg+0x1aa/0x280 [ 160.845213][ T6779] ? fput+0x9b/0xd0 [ 160.845231][ T6779] ? __pfx___sys_recvmmsg+0x10/0x10 [ 160.845246][ T6779] ? ksys_write+0x275/0x2d0 [ 160.845280][ T6779] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 160.845308][ T6779] __do_fast_syscall_32+0xb4/0x110 [ 160.845327][ T6779] ? exc_page_fault+0x5f8/0x920 [ 160.845347][ T6779] do_fast_syscall_32+0x34/0x80 [ 160.845366][ T6779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.845386][ T6779] RIP: 0023:0xf70cd539 [ 160.845402][ T6779] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.845416][ T6779] RSP: 002b:00000000f509c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 160.845436][ T6779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 160.845450][ T6779] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.845462][ T6779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.845483][ T6779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.845495][ T6779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.845523][ T6779] [ 161.073993][ T6770] Zero length message leads to an empty skb [ 161.837661][ T6789] FAULT_INJECTION: forcing a failure. [ 161.837661][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 161.897247][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.4.240 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 161.897271][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.897280][ T6789] Call Trace: [ 161.897287][ T6789] [ 161.897293][ T6789] dump_stack_lvl+0x241/0x360 [ 161.897323][ T6789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.897347][ T6789] ? __pfx__printk+0x10/0x10 [ 161.897368][ T6789] ? __lock_acquire+0xad5/0xd80 [ 161.897403][ T6789] should_fail_ex+0x424/0x570 [ 161.897439][ T6789] should_failslab+0xac/0x100 [ 161.897460][ T6789] kmem_cache_alloc_noprof+0x78/0x390 [ 161.897476][ T6789] ? skb_clone+0x20c/0x390 [ 161.897495][ T6789] skb_clone+0x20c/0x390 [ 161.897512][ T6789] __netlink_deliver_tap+0x3c4/0x7f0 [ 161.897548][ T6789] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.897565][ T6789] netlink_deliver_tap+0x19d/0x1b0 [ 161.897585][ T6789] netlink_unicast+0x7c6/0x9a0 [ 161.897608][ T6789] ? __pfx_netlink_unicast+0x10/0x10 [ 161.897636][ T6789] ? skb_put+0x114/0x1f0 [ 161.897661][ T6789] netlink_sendmsg+0x8c3/0xcd0 [ 161.897690][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.897712][ T6789] ? aa_sock_msg_perm+0x91/0x160 [ 161.897737][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.897755][ T6789] __sock_sendmsg+0x221/0x270 [ 161.897776][ T6789] ____sys_sendmsg+0x523/0x860 [ 161.897808][ T6789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.897844][ T6789] __sys_sendmsg+0x271/0x360 [ 161.897872][ T6789] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.897952][ T6789] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 161.897977][ T6789] ? lockdep_hardirqs_on+0x9d/0x150 [ 161.897996][ T6789] __do_fast_syscall_32+0xb4/0x110 [ 161.898012][ T6789] ? exc_page_fault+0x5f8/0x920 [ 161.898030][ T6789] do_fast_syscall_32+0x34/0x80 [ 161.898047][ T6789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.898065][ T6789] RIP: 0023:0xf70ed539 [ 161.898078][ T6789] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.898091][ T6789] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 161.898108][ T6789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 161.898118][ T6789] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.898127][ T6789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.898135][ T6789] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.898144][ T6789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.898165][ T6789] [ 162.323758][ T49] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.420977][ T6800] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 162.431040][ T6800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.438651][ T6800] IPv6: NLM_F_CREATE should be set when creating new route [ 162.477061][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 162.486095][ T6785] sctp: [Deprecated]: syz.0.238 (pid 6785) Use of int in max_burst socket option. [ 162.486095][ T6785] Use struct sctp_assoc_value instead [ 162.533330][ T49] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.547898][ T49] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 162.567728][ T49] usb 1-1: can't read configurations, error -71 [ 162.730611][ T6808] netlink: 44 bytes leftover after parsing attributes in process `syz.1.246'. [ 163.006784][ T6815] xt_TCPMSS: Only works on TCP SYN packets [ 164.062258][ T6827] tipc: Failed to clone mcast rcv buffer [ 164.624132][ T5899] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.849703][ T6848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.257'. [ 164.876822][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.902558][ T5899] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 164.928150][ T5899] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.938275][ T5899] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.952052][ T5899] usb 3-1: config 1 interface 1 has no altsetting 0 [ 164.979769][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.989251][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.022071][ T5899] usb 3-1: Product: syz [ 165.026639][ T5899] usb 3-1: Manufacturer: syz [ 165.031537][ T5899] usb 3-1: SerialNumber: syz [ 165.248160][ T6833] CIFS: VFS: Malformed UNC in devname [ 165.369171][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.404402][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.530910][ T5899] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 165.554454][ T5899] usb 3-1: MIDIStreaming interface descriptor not found [ 165.587424][ T49] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.670881][ T5899] usb 3-1: USB disconnect, device number 8 [ 165.786465][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 165.820881][ T49] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 165.850158][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.859562][ T49] usb 1-1: Product: syz [ 165.865420][ T49] usb 1-1: Manufacturer: syz [ 165.871475][ T49] usb 1-1: SerialNumber: syz [ 165.887528][ T49] usb 1-1: config 0 descriptor?? [ 165.906047][ T49] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 165.924494][ T976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.083973][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 166.095823][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.128371][ T49] gspca_ov534_9: reg_w failed -71 [ 166.142476][ T976] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 166.160550][ T976] usb 5-1: config 0 has no interface number 0 [ 166.168407][ T976] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 166.179492][ T976] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.202997][ T976] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 166.216199][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.225472][ T976] usb 5-1: Product: syz [ 166.229700][ T976] usb 5-1: Manufacturer: syz [ 166.237081][ T976] usb 5-1: SerialNumber: syz [ 166.252561][ T976] usb 5-1: config 0 descriptor?? [ 166.269049][ T6861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.283953][ T6861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.603122][ T49] gspca_ov534_9: Unknown sensor 0000 [ 166.603256][ T49] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 166.705740][ T49] usb 1-1: USB disconnect, device number 12 [ 166.728486][ T6885] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.736221][ T6885] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.132007][ T6898] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 167.212096][ T6898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.995306][ T6912] FAULT_INJECTION: forcing a failure. [ 167.995306][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 168.008266][ T6912] CPU: 1 UID: 0 PID: 6912 Comm: syz.2.276 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 168.008297][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.008310][ T6912] Call Trace: [ 168.008318][ T6912] [ 168.008327][ T6912] dump_stack_lvl+0x241/0x360 [ 168.008366][ T6912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.008397][ T6912] ? __pfx__printk+0x10/0x10 [ 168.008427][ T6912] ? stack_depot_save_flags+0x43f/0x940 [ 168.008471][ T6912] should_fail_ex+0x424/0x570 [ 168.008510][ T6912] should_failslab+0xac/0x100 [ 168.008535][ T6912] kmem_cache_alloc_noprof+0x78/0x390 [ 168.008557][ T6912] ? skb_clone+0x20c/0x390 [ 168.008583][ T6912] skb_clone+0x20c/0x390 [ 168.008603][ T6912] ? ieee80211_store_ack_skb+0x5a/0x1a0 [ 168.008628][ T6912] ieee80211_store_ack_skb+0x67/0x1a0 [ 168.008647][ T6912] ? ieee80211_build_hdr+0x22e3/0x2c90 [ 168.008680][ T6912] ieee80211_build_hdr+0x190e/0x2c90 [ 168.008730][ T6912] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 168.008762][ T6912] ? sta_info_get_bss+0x50/0x320 [ 168.008797][ T6912] ? ieee80211_tx_skb_fixup+0x328/0x500 [ 168.008833][ T6912] __ieee80211_subif_start_xmit+0xdb3/0x1650 [ 168.008877][ T6912] ? __ieee80211_subif_start_xmit+0x2f5/0x1650 [ 168.008909][ T6912] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 168.008947][ T6912] ? ieee80211_tx_control_port+0x885/0xed0 [ 168.008992][ T6912] ? ieee80211_tx_control_port+0xc46/0xed0 [ 168.009024][ T6912] ieee80211_tx_control_port+0xc89/0xed0 [ 168.009071][ T6912] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 168.009110][ T6912] ? __rtnl_unlock+0xcc/0xf0 [ 168.009147][ T6912] nl80211_tx_control_port+0x677/0xa10 [ 168.009175][ T6912] ? __pfx_netdev_run_todo+0x10/0x10 [ 168.009208][ T6912] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 168.009248][ T6912] genl_rcv_msg+0xb38/0xf00 [ 168.009293][ T6912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.009323][ T6912] ? __dev_queue_xmit+0x1780/0x3f60 [ 168.009343][ T6912] ? kasan_save_track+0x3f/0x80 [ 168.009370][ T6912] ? __kasan_slab_alloc+0x66/0x80 [ 168.009407][ T6912] ? __do_fast_syscall_32+0xb4/0x110 [ 168.009450][ T6912] ? lockdep_hardirqs_on+0x9d/0x150 [ 168.009473][ T6912] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.009500][ T6912] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 168.009521][ T6912] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.009567][ T6912] netlink_rcv_skb+0x208/0x480 [ 168.009595][ T6912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.009629][ T6912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.009680][ T6912] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.009714][ T6912] genl_rcv+0x28/0x40 [ 168.009744][ T6912] netlink_unicast+0x7f8/0x9a0 [ 168.009777][ T6912] ? __pfx_netlink_unicast+0x10/0x10 [ 168.009804][ T6912] ? skb_put+0x114/0x1f0 [ 168.009839][ T6912] netlink_sendmsg+0x8c3/0xcd0 [ 168.009880][ T6912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.009913][ T6912] ? aa_sock_msg_perm+0x91/0x160 [ 168.009948][ T6912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.009981][ T6912] __sock_sendmsg+0x221/0x270 [ 168.010010][ T6912] ____sys_sendmsg+0x523/0x860 [ 168.010053][ T6912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.010104][ T6912] __sys_sendmsg+0x271/0x360 [ 168.010143][ T6912] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.010232][ T6912] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 168.010254][ T6912] ? lockdep_hardirqs_on+0x9d/0x150 [ 168.010278][ T6912] __do_fast_syscall_32+0xb4/0x110 [ 168.010301][ T6912] ? exc_page_fault+0x5f8/0x920 [ 168.010327][ T6912] do_fast_syscall_32+0x34/0x80 [ 168.010350][ T6912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.010375][ T6912] RIP: 0023:0xf708d539 [ 168.010394][ T6912] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 168.010410][ T6912] RSP: 002b:00000000f507d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 168.010432][ T6912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003700 [ 168.010446][ T6912] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.010459][ T6912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.010471][ T6912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 168.010482][ T6912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.010513][ T6912] [ 169.007634][ T5925] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.205959][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 169.245951][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.257867][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 169.270236][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.303866][ T5899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.305544][ T5925] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 169.425533][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.476139][ T5925] usb 1-1: config 0 descriptor?? [ 169.509371][ T6916] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.519882][ T5925] kobil_sct 1-1:0.0: required endpoints missing [ 169.622066][ T5899] usb 3-1: config 0 has no interfaces? [ 169.648261][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 169.688399][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.735963][ T5925] usb 1-1: USB disconnect, device number 13 [ 169.763175][ T5899] usb 3-1: Product: syz [ 169.783929][ T5899] usb 3-1: Manufacturer: syz [ 169.796215][ T5899] usb 3-1: SerialNumber: syz [ 169.816957][ T5899] usb 3-1: config 0 descriptor?? [ 169.966804][ T976] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 169.997718][ T976] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 170.041886][ T976] asix 5-1:0.251: probe with driver asix failed with error -5 [ 170.082081][ T976] usb 5-1: USB disconnect, device number 11 [ 170.229345][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 170.229366][ T30] audit: type=1326 audit(1745115263.525:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.244399][ T6927] capability: warning: `syz.4.280' uses 32-bit capabilities (legacy support in use) [ 170.374337][ T30] audit: type=1326 audit(1745115263.525:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.471592][ T30] audit: type=1326 audit(1745115263.525:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.532747][ T30] audit: type=1326 audit(1745115263.525:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.583640][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 170.611924][ T30] audit: type=1326 audit(1745115263.525:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.697316][ T30] audit: type=1326 audit(1745115263.545:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.760546][ T30] audit: type=1326 audit(1745115263.625:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.805789][ T30] audit: type=1326 audit(1745115263.625:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.829381][ T30] audit: type=1326 audit(1745115263.645:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.853286][ T30] audit: type=1326 audit(1745115263.645:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 170.973763][ T976] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.126999][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 171.150645][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 171.177792][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 171.210904][ T976] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice= 6.c9 [ 171.223895][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.244141][ T976] usb 1-1: Product: syz [ 171.261926][ T976] usb 1-1: Manufacturer: syz [ 171.280662][ T976] usb 1-1: SerialNumber: syz [ 171.330123][ T976] usb 1-1: config 0 descriptor?? [ 171.402202][ T976] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 171.533886][ T6947] netlink: 'syz.3.287': attribute type 29 has an invalid length. [ 171.561990][ T6947] netlink: 'syz.3.287': attribute type 29 has an invalid length. [ 172.557750][ T5899] usb 3-1: USB disconnect, device number 9 [ 173.116992][ T5899] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.255438][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'. [ 173.293923][ T5899] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 173.310110][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.341539][ T5899] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.398502][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.439103][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.504109][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.531069][ T5899] usb 3-1: invalid MIDI out EP 0 [ 173.718814][ T5899] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 173.849022][ T5899] usb 3-1: USB disconnect, device number 10 [ 173.871045][ T6962] delete_channel: no stack [ 173.923358][ T2153] usb 1-1: USB disconnect, device number 14 [ 174.045738][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.441706][ T6996] fuse: Bad value for 'fd' [ 174.463798][ T2153] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 174.615780][ T2153] usb 4-1: Using ep0 maxpacket: 32 [ 174.641263][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.775595][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.903306][ T2153] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.970496][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.127845][ T2153] usb 4-1: config 0 descriptor?? [ 175.171318][ T2153] hub 4-1:0.0: USB hub found [ 175.202702][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 175.378072][ T2153] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 175.405872][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 175.590225][ T6990] trusted_key: syz.3.299 sent an empty control message without MSG_MORE. [ 175.808689][ T2153] usbhid 4-1:0.0: can't add hid device: -71 [ 175.816551][ T2153] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.870656][ T2153] usb 4-1: USB disconnect, device number 20 [ 176.058927][ T7030] kAFS: unable to lookup cell '' [ 176.103891][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.283899][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 176.291759][ T5925] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 176.300986][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.311093][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.321159][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.332311][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.345612][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.354948][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.483977][ T7035] ------------[ cut here ]------------ [ 176.489536][ T7035] WARNING: CPU: 0 PID: 7035 at net/mac80211/driver-ops.c:473 drv_link_info_changed+0x153/0x8b0 [ 176.500194][ T7035] Modules linked in: [ 176.504229][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.3.316 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 176.516453][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.526769][ T7035] RIP: 0010:drv_link_info_changed+0x153/0x8b0 [ 176.533620][ T7035] Code: 83 fd 01 75 1f e8 9d b0 2e f6 eb 32 e8 96 b0 2e f6 eb 2b 83 fd 03 74 21 83 fd 05 75 07 e8 85 b0 2e f6 eb 1a e8 7e b0 2e f6 90 <0f> 0b 90 e9 c3 01 00 00 e8 70 b0 2e f6 eb 05 e8 69 b0 2e f6 4d 8d [ 176.554106][ T7035] RSP: 0018:ffffc90003c8ec08 EFLAGS: 00010283 [ 176.560237][ T7035] RAX: ffffffff8b940b82 RBX: 0000000000000001 RCX: 0000000000080000 [ 176.568739][ T7035] RDX: ffffc9000e363000 RSI: 00000000000005ca RDI: 00000000000005cb [ 176.577231][ T7035] RBP: 0000000080000000 R08: 0000000000000005 R09: ffffffff8b940b50 [ 176.585449][ T7035] R10: 0000000000000004 R11: ffff88801e72bc00 R12: 0000000000000000 [ 176.593466][ T7035] R13: 0000000000000200 R14: ffff88803328cd80 R15: ffff888029408e40 [ 176.601827][ T7035] FS: 0000000000000000(0000) GS:ffff888124f9a000(0063) knlGS:00000000f50ccb40 [ 176.610887][ T7035] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 176.618124][ T7035] CR2: 00000000f50cb528 CR3: 0000000033404000 CR4: 00000000003526f0 [ 176.626222][ T7035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.632509][ T5925] usb 5-1: usb_control_msg returned -32 [ 176.634311][ T7035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.634334][ T7035] Call Trace: [ 176.634344][ T7035] [ 176.634354][ T7035] ? ieee80211_link_info_change_notify+0x1a5/0x330 [ 176.634400][ T7035] ieee80211_offchannel_stop_vifs+0x25c/0x590 [ 176.634433][ T7035] __ieee80211_start_scan+0x1b2c/0x1ee0 [ 176.634457][ T7035] ? genl_rcv_msg+0xb38/0xf00 [ 176.634490][ T7035] ? netlink_rcv_skb+0x208/0x480 [ 176.634516][ T7035] ? genl_rcv+0x28/0x40 [ 176.634601][ T7035] ? __pfx___ieee80211_start_scan+0x10/0x10 [ 176.650391][ T7036] tipc: Started in network mode [ 176.652859][ T7035] rdev_scan+0x155/0x300 [ 176.661739][ T7036] tipc: Node identity ac149435, cluster identity 4711 [ 176.662722][ T7035] cfg80211_conn_scan+0xa5b/0xdc0 [ 176.669713][ T5925] usbtmc 5-1:16.0: can't read capabilities [ 176.675213][ T7035] cfg80211_connect+0x1790/0x20e0 [ 176.675255][ T7035] ? __lock_acquire+0xad5/0xd80 [ 176.675299][ T7035] ? reacquire_held_locks+0x12a/0x1e0 [ 176.675332][ T7035] ? __pfx_cfg80211_connect+0x10/0x10 [ 176.675359][ T7035] ? __asan_memset+0x23/0x50 [ 176.675390][ T7035] ? nl80211_crypto_settings+0xb6d/0xf10 [ 176.675423][ T7035] nl80211_connect+0x1d57/0x24b0 [ 176.675470][ T7035] ? __pfx_nl80211_connect+0x10/0x10 [ 176.675499][ T7035] ? trace_contention_end+0x3c/0x120 [ 176.675577][ T7035] genl_rcv_msg+0xb38/0xf00 [ 176.701653][ T7036] tipc: Enabling of bearer rejected, failed to enable media [ 176.705850][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.705895][ T7035] ? __dev_queue_xmit+0x1780/0x3f60 [ 176.705918][ T7035] ? kasan_save_track+0x3f/0x80 [ 176.705949][ T7035] ? __kasan_slab_alloc+0x66/0x80 [ 176.705997][ T7035] ? __do_fast_syscall_32+0xb4/0x110 [ 176.813015][ T7035] ? __lock_acquire+0xad5/0xd80 [ 176.818002][ T7035] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 176.823423][ T7035] ? __pfx_nl80211_connect+0x10/0x10 [ 176.829141][ T7035] ? __pfx_nl80211_post_doit+0x10/0x10 [ 176.834883][ T7035] netlink_rcv_skb+0x208/0x480 [ 176.840506][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.845946][ T7035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.851490][ T7035] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.856894][ T7035] genl_rcv+0x28/0x40 [ 176.861094][ T7035] netlink_unicast+0x7f8/0x9a0 [ 176.866041][ T7035] ? __pfx_netlink_unicast+0x10/0x10 [ 176.871380][ T7035] ? skb_put+0x114/0x1f0 [ 176.875999][ T7035] netlink_sendmsg+0x8c3/0xcd0 [ 176.881197][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.886665][ T7035] ? aa_sock_msg_perm+0x91/0x160 [ 176.891710][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.897169][ T7035] __sock_sendmsg+0x221/0x270 [ 176.901946][ T7035] ____sys_sendmsg+0x523/0x860 [ 176.906965][ T7035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.912342][ T7035] __sys_sendmsg+0x271/0x360 [ 176.917141][ T7035] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.922483][ T7035] ? __fget_files+0x2a/0x420 [ 176.927405][ T7035] ? __se_sys_futex_time32+0x406/0x490 [ 176.932953][ T7035] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 176.939694][ T7035] ? lockdep_hardirqs_on+0x9d/0x150 [ 176.945539][ T7035] __do_fast_syscall_32+0xb4/0x110 [ 176.950806][ T7035] ? exc_page_fault+0x5f8/0x920 [ 176.956077][ T7035] do_fast_syscall_32+0x34/0x80 [ 176.960987][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.967484][ T7035] RIP: 0023:0xf70fd539 [ 176.971594][ T7035] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 176.992164][ T7035] RSP: 002b:00000000f50cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 177.001100][ T7035] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800001c0 [ 177.009340][ T7035] RDX: 00000000000488c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.017590][ T7035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.025852][ T7035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.034488][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.042761][ T7035] [ 177.046547][ T7035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.053886][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.3.316 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 177.065832][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.076019][ T7035] Call Trace: [ 177.079333][ T7035] [ 177.082301][ T7035] dump_stack_lvl+0x241/0x360 [ 177.087223][ T7035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.092577][ T7035] ? __pfx__printk+0x10/0x10 [ 177.097411][ T7035] ? vscnprintf+0x5d/0x90 [ 177.101814][ T7035] panic+0x349/0x880 [ 177.105987][ T7035] ? __warn+0x174/0x4d0 [ 177.110222][ T7035] ? __pfx_panic+0x10/0x10 [ 177.114930][ T7035] __warn+0x344/0x4d0 [ 177.118983][ T7035] ? drv_link_info_changed+0x153/0x8b0 [ 177.124504][ T7035] report_bug+0x2b3/0x500 [ 177.129153][ T7035] ? drv_link_info_changed+0x153/0x8b0 [ 177.134677][ T7035] ? drv_link_info_changed+0x153/0x8b0 [ 177.140578][ T7035] ? drv_link_info_changed+0x155/0x8b0 [ 177.146288][ T7035] handle_bug+0x89/0x170 [ 177.150595][ T7035] exc_invalid_op+0x1a/0x50 [ 177.155169][ T7035] asm_exc_invalid_op+0x1a/0x20 [ 177.160153][ T7035] RIP: 0010:drv_link_info_changed+0x153/0x8b0 [ 177.166247][ T7035] Code: 83 fd 01 75 1f e8 9d b0 2e f6 eb 32 e8 96 b0 2e f6 eb 2b 83 fd 03 74 21 83 fd 05 75 07 e8 85 b0 2e f6 eb 1a e8 7e b0 2e f6 90 <0f> 0b 90 e9 c3 01 00 00 e8 70 b0 2e f6 eb 05 e8 69 b0 2e f6 4d 8d [ 177.186226][ T7035] RSP: 0018:ffffc90003c8ec08 EFLAGS: 00010283 [ 177.192404][ T7035] RAX: ffffffff8b940b82 RBX: 0000000000000001 RCX: 0000000000080000 [ 177.200661][ T7035] RDX: ffffc9000e363000 RSI: 00000000000005ca RDI: 00000000000005cb [ 177.208653][ T7035] RBP: 0000000080000000 R08: 0000000000000005 R09: ffffffff8b940b50 [ 177.216827][ T7035] R10: 0000000000000004 R11: ffff88801e72bc00 R12: 0000000000000000 [ 177.224916][ T7035] R13: 0000000000000200 R14: ffff88803328cd80 R15: ffff888029408e40 [ 177.232923][ T7035] ? drv_link_info_changed+0x120/0x8b0 [ 177.238410][ T7035] ? drv_link_info_changed+0x152/0x8b0 [ 177.243909][ T7035] ? drv_link_info_changed+0x152/0x8b0 [ 177.249473][ T7035] ? ieee80211_link_info_change_notify+0x1a5/0x330 [ 177.256197][ T7035] ieee80211_offchannel_stop_vifs+0x25c/0x590 [ 177.262294][ T7035] __ieee80211_start_scan+0x1b2c/0x1ee0 [ 177.268027][ T7035] ? genl_rcv_msg+0xb38/0xf00 [ 177.272755][ T7035] ? netlink_rcv_skb+0x208/0x480 [ 177.277714][ T7035] ? genl_rcv+0x28/0x40 [ 177.281931][ T7035] ? __pfx___ieee80211_start_scan+0x10/0x10 [ 177.287937][ T7035] rdev_scan+0x155/0x300 [ 177.292292][ T7035] cfg80211_conn_scan+0xa5b/0xdc0 [ 177.297559][ T7035] cfg80211_connect+0x1790/0x20e0 [ 177.302881][ T7035] ? __lock_acquire+0xad5/0xd80 [ 177.307883][ T7035] ? reacquire_held_locks+0x12a/0x1e0 [ 177.313389][ T7035] ? __pfx_cfg80211_connect+0x10/0x10 [ 177.318815][ T7035] ? __asan_memset+0x23/0x50 [ 177.323438][ T7035] ? nl80211_crypto_settings+0xb6d/0xf10 [ 177.329099][ T7035] nl80211_connect+0x1d57/0x24b0 [ 177.334080][ T7035] ? __pfx_nl80211_connect+0x10/0x10 [ 177.339412][ T7035] ? trace_contention_end+0x3c/0x120 [ 177.344787][ T7035] genl_rcv_msg+0xb38/0xf00 [ 177.349353][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.354607][ T7035] ? __dev_queue_xmit+0x1780/0x3f60 [ 177.360093][ T7035] ? kasan_save_track+0x3f/0x80 [ 177.364969][ T7035] ? __kasan_slab_alloc+0x66/0x80 [ 177.370024][ T7035] ? __do_fast_syscall_32+0xb4/0x110 [ 177.375560][ T7035] ? __lock_acquire+0xad5/0xd80 [ 177.380439][ T7035] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.385846][ T7035] ? __pfx_nl80211_connect+0x10/0x10 [ 177.391154][ T7035] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.396732][ T7035] netlink_rcv_skb+0x208/0x480 [ 177.401787][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.406868][ T7035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.412397][ T7035] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.417871][ T7035] genl_rcv+0x28/0x40 [ 177.421881][ T7035] netlink_unicast+0x7f8/0x9a0 [ 177.426754][ T7035] ? __pfx_netlink_unicast+0x10/0x10 [ 177.432315][ T7035] ? skb_put+0x114/0x1f0 [ 177.436590][ T7035] netlink_sendmsg+0x8c3/0xcd0 [ 177.441401][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.446801][ T7035] ? aa_sock_msg_perm+0x91/0x160 [ 177.452026][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.457538][ T7035] __sock_sendmsg+0x221/0x270 [ 177.462331][ T7035] ____sys_sendmsg+0x523/0x860 [ 177.467333][ T7035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.472668][ T7035] __sys_sendmsg+0x271/0x360 [ 177.477461][ T7035] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.482601][ T7035] ? __fget_files+0x2a/0x420 [ 177.487230][ T7035] ? __se_sys_futex_time32+0x406/0x490 [ 177.492719][ T7035] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 177.499759][ T7035] ? lockdep_hardirqs_on+0x9d/0x150 [ 177.504987][ T7035] __do_fast_syscall_32+0xb4/0x110 [ 177.510138][ T7035] ? exc_page_fault+0x5f8/0x920 [ 177.515371][ T7035] do_fast_syscall_32+0x34/0x80 [ 177.520327][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.526939][ T7035] RIP: 0023:0xf70fd539 [ 177.531024][ T7035] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 177.550818][ T7035] RSP: 002b:00000000f50cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 177.559263][ T7035] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800001c0 [ 177.567429][ T7035] RDX: 00000000000488c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.575414][ T7035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.583392][ T7035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.591368][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.599371][ T7035] [ 177.602762][ T7035] Kernel Offset: disabled [ 177.607116][ T7035] Rebooting in 86400 seconds..