last executing test programs: 7.403463628s ago: executing program 3 (id=267): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002000)="f3", 0x1}], 0x1}, 0x8801) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="f697079a", 0x4}], 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = memfd_secret(0x0) fremovexattr(r5, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') r6 = openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e00000004fcff", 0x58}], 0x1) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1b637075"], 0x5) 7.271843527s ago: executing program 3 (id=269): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) ptrace(0x420e, r6) fcntl$lock(r4, 0x25, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000240)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) syz_genetlink_get_family_id$nl80211(0x0, r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 7.104869475s ago: executing program 3 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x40) 6.366368358s ago: executing program 3 (id=272): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) msgsnd(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="fa0a1b6d5486319fd53bf8d126f7be5b89818b8b1a32e7c693922ce0eb9c96036cd467fe8aec549df7f7b9f3e9dbef2c8f6add54f63be3ce7a080c1f6a40c606419fe5bfa21447c527f8b6267ca5eff4f2827ed67987ff21fb38fc26befd2404096610956c9c6b6c16213dd1f878d00e866e5f484d43553f7a199e3a14784384c106"], 0x3e, 0x800) 5.739468386s ago: executing program 0 (id=277): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000500)={0x120008a00, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x42080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a000100fcff1f4800"/28], 0x5}}, 0x0) write$dsp(r0, &(0x7f00000000c0)="b8", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) writev(r0, &(0x7f00000022c0)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) 5.526963063s ago: executing program 4 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff9eb9b0fdf93e94d4ffb702000008000000b7030000040000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x1000000000000}) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000880)=0x5) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000905810300020000020904010000020d00000904010102020d00000905822f88d65d0000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x5, 0x10, 0x14, 0x10, 0x2010, 0x10, 0x10, 0x400, 0x13, 0xe, 0x10, 0x14}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910f", 0x6) syz_usb_control_io(r1, &(0x7f0000000300)={0x18, &(0x7f0000000940)=ANY=[@ANYRES64=r0], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f00000009c0)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3}, @generic={0x21, 0x10, 0x3, "d59113b98ecd8a1696e925a773afcd975d0ce54598c731e5dfb43504d565"}, @generic={0x6, 0x10, 0xb, "b34bb1"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0x6, 0x8}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x64, 0xfc, "fb12a3cf", "17d0d5cc"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x3, 0x6, 0x6, 0x9, 0x7f, 0x2}}}, &(0x7f0000000240)={0x44, &(0x7f0000000380)={0x40, 0x17, 0x8c, "6fdde055cefc49d3d4408f8dc826a7c77d4bcc09abde64fb09a798feb11f234b2398bd468775463d8e9eaf5750da7d2e0fd76df233bc81a1ed8ef7346e13ed2ce0b7641232fe97616518830c51211c0bc505d8bd06db99b4a0d7f22963b88dfdb6212e1125cae8247183730e72470952f8c43138967a05759151bd65e2cf66ef213b43ac156063331b3d4764"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x200, 0x4}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x74}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "05ce"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xd0}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "0817"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x52}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x3}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f00000008c0)="2587784abad9b8df0287bba61f79cdb347aaf2108804662ea3c8d94e06b61bcbb35a994088edda521bed6cdc7f470d0b1234bb6ef0a7746c640cb3b07317a01efa20a64a802792193cf39feeb57094", 0x4f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040), 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 5.177260144s ago: executing program 0 (id=279): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, '@#'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x12}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x3, 0x10122, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x434, 0x2a8, 0x150, 0x150, 0x2a8, 0xf8010000, 0x36c, 0x238, 0x238, 0x36c, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x240, 0x2a8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x144}, {[], [], [], 0x0, [], 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x490) (fail_nth: 4) 3.775540733s ago: executing program 1 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @val, @val={0x3, 0x1, 0xab}, @void, @val={0x6, 0x2, 0x3f16}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}}, 0x0) 3.55521598s ago: executing program 1 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x7c0d, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x8000000000000b9, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x9828, 0x2000000, {0x77359400}, {0x4, 0x2, 0x1, 0x1, 0x3, 0x1, "001001ae"}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r6 = socket(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 3.459636165s ago: executing program 2 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000080c001980080002000f0400003c0002802c000180140003000000000000000000000000000000000014000400fc00000000000000000000000c00028005000100"], 0x5c}}, 0x0) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x5dc, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0xfb, 0x0, 0x3}, 0xc) 3.357067573s ago: executing program 0 (id=287): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, 0x0, 0x27db87872aeb677e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x10000, @loopback, 0x570}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)=""/132, 0x84}, {0x0}, {0x0}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000900)=""/211, 0xd3}, {0x0}], 0x7}, 0x1}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/9, 0x9}, 0x7f}], 0x2, 0x8000, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{0x0}], 0x1, 0x33, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x50) msgget(0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) shutdown(r0, 0x2) 3.233056419s ago: executing program 3 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x70, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8812}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 3.079210229s ago: executing program 2 (id=289): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000200)={{r1}, {@void, @actul_num={@void, 0xa40b00000000, 0x6b}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0xa}, @IPSET_ATTR_DATA={0xfffffffffffffdad, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x0, 0x7, 0xff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) syz_usb_connect(0x4, 0x6ed, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f00000006c0)={0x0, 0x0, 0xfd, &(0x7f00000005c0)=ANY=[]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x22020600) r4 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x335}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4}) io_uring_enter(r4, 0x1, 0xfffffffe, 0x1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$uhid(0xffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_INPUT2(r8, &(0x7f00000001c0)={0xc, {0x27, "102e3389b86a79712e3d93054ee782ac39d948931c09e9feb4c2fd6a6dfd32d237df198760771a"}}, 0x2d) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x26}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffc3a1cd08}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1afa}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1}, 0x2) 3.074534522s ago: executing program 0 (id=290): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80204) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000011400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000a0000"], 0x20}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 2.534751982s ago: executing program 1 (id=291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608", 0x4, 0xfffffffffffffffc) syz_pidfd_open(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000001c0)={0xc6, 0x2, 0x2, {0x1, @pix={0x5, 0x6, 0x42303159, 0x8, 0x9, 0x4, 0xb, 0x5, 0x0, 0x8, 0x2, 0x7}}, 0x1000000}) 2.530542251s ago: executing program 3 (id=292): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x2, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$fb0(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000300)={0x45d2, 0x8, &(0x7f00000001c0)=[0xa, 0x401, 0x3ff, 0x400, 0x2, 0xd, 0xfeff, 0x6], &(0x7f0000000200)=[0x4], &(0x7f0000000280)=[0x6, 0x1, 0xe3ac, 0x2, 0xff00, 0x6, 0x9], &(0x7f00000002c0)=[0x0, 0x0, 0x3, 0x1, 0x4, 0x42, 0x4, 0xff00]}) listen(r0, 0x1ff) connect$netlink(r3, &(0x7f0000001580), 0x5) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$link(0x8, r5, r5) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.451435716s ago: executing program 4 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x40) 2.411558806s ago: executing program 2 (id=294): syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 2.349189801s ago: executing program 4 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @val, @val={0x3, 0x1, 0xab}, @void, @val={0x6, 0x2, 0x3f16}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}}, 0x0) 2.043344429s ago: executing program 4 (id=296): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff9f, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10000000, 0x0, 0x6, 0x10, 0x9, 0x0, 0x80000001}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$dsp(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffca3, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRESOCT], 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) sendfile(r5, r5, 0x0, 0x24002de8) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 1.975472476s ago: executing program 0 (id=297): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff9f, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10000000, 0x0, 0x6, 0x10, 0x9, 0x0, 0x80000001}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$dsp(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffca3, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRESOCT], 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) sendfile(r5, r5, 0x0, 0x24002de8) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 1.700195814s ago: executing program 0 (id=298): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) msgsnd(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="fa0a1b6d5486319fd53bf8d126f7be5b89818b8b1a32e7c693922ce0eb9c96036cd467fe8aec549df7f7b9f3e9dbef2c8f6add54f63be3ce7a080c1f6a40c606419fe5bfa21447c527f8b6267ca5eff4f2827ed67987ff21fb38fc26befd2404096610956c9c6b6c16213dd1f878d00e866e5f484d43553f7a199e3a14784384c106"], 0x3e, 0x800) 1.484327865s ago: executing program 4 (id=299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006080)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xacff, 0xc7e, 0x3, 0x2, 0x8, 0x7, 0x921, 0xffff, 0x8001, 0x9, 0xc, 0x401, 0x2, 0xffff, 0x2e1, 0x8, 0x1, 0x8, 0x7, 0xffffffff, 0x6, 0x8, 0x80, 0x3, 0x4000000, 0x89d8, 0x7ff, 0x6, 0x928, 0x304, 0x1ff, 0x2, 0x2, 0x6, 0x1dca, 0x4e4, 0x5, 0x1000, 0x9, 0x41, 0x4, 0x8, 0x0, 0xc20, 0x8, 0x8001, 0xff, 0x7, 0x4a5, 0x1, 0xfffffe00, 0x1, 0x1, 0x9, 0x3, 0x1, 0x10000, 0x6, 0x4, 0x9, 0x5b9, 0x8, 0x8, 0x80000001, 0x7, 0xc, 0x3, 0x81, 0x2, 0x8, 0x5, 0x0, 0x8, 0xfffffffe, 0x1, 0xcfd, 0x3, 0xa, 0x400, 0x10001, 0x3ee, 0x1, 0x5, 0xfff, 0x7f, 0xfbd, 0x8, 0x926, 0x9, 0xfffffffb, 0x4f96, 0x2, 0x9, 0xfff, 0x3, 0x4, 0x1d, 0x3, 0x81, 0x3, 0x0, 0xfff, 0x2, 0x80, 0x6, 0x5, 0x4818, 0x1ff, 0xf, 0x104, 0x17, 0xfffffffc, 0xd77, 0x7, 0x77f0, 0x1, 0x6, 0x1000, 0x0, 0x23eb, 0x6, 0x9, 0x1, 0x6, 0x6, 0x2, 0x3e, 0x80, 0x7f, 0x1, 0x5, 0xfffeffff, 0xdf, 0x2, 0x4, 0x200, 0x800, 0x7, 0x8000, 0x26e713f7, 0x6, 0x5, 0xe2f, 0x1, 0x3, 0x2, 0x81, 0x81, 0x8000, 0x6, 0x8e, 0x6, 0x5a32, 0x9dd, 0x0, 0x8, 0x3, 0x7, 0x3ff, 0xa, 0x5932e353, 0x6, 0xc, 0x80, 0xae, 0x7, 0xd, 0x0, 0x4, 0x6, 0x7fff, 0x8b9, 0x9, 0x1e, 0x1, 0x0, 0xfffffffb, 0x4, 0x6, 0x6, 0x400, 0x3, 0xb7, 0x8, 0x59, 0x2, 0x1, 0x101, 0xfffff9e3, 0x1, 0x1, 0x0, 0x2, 0x9, 0xfffffff9, 0x6, 0x1, 0x4, 0x7, 0x100, 0x9, 0x9, 0x7, 0x1000, 0x7fff, 0x1, 0xd, 0xfffffff8, 0x4, 0x4, 0xe69, 0x2, 0x7, 0x706, 0x2, 0x7, 0x5, 0xd5, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0x0, 0x4, 0x9, 0x4, 0x2, 0x7, 0x18dd, 0x1000, 0xfffff85f, 0x1, 0x6, 0x3ff, 0x6, 0x8, 0xfffffff8, 0x80000000, 0x5, 0x6, 0x2999245c, 0xf, 0x1, 0x9, 0xfffff800, 0x6, 0x5, 0x8, 0x80000001, 0xfff, 0x5, 0x30b21270, 0x401, 0x1, 0x80, 0x1000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9c, 0x1, 0x8, 0x3e, 0x80000000, {0x3, 0x0, 0x169, 0xfff9, 0x4, 0x4}, {0xf8, 0x1, 0x7, 0x519, 0x16a9}, 0x6, 0x4, 0x3}}]}]}}]}, 0x478}}, 0x0) 1.047395308s ago: executing program 2 (id=300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, 0x0, 0x27db87872aeb677e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x10000, @loopback, 0x570}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)=""/132, 0x84}, {0x0}, {0x0}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000900)=""/211, 0xd3}, {0x0}], 0x7}, 0x1}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/9, 0x9}, 0x7f}], 0x2, 0x8000, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{0x0}], 0x1, 0x33, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x50) msgget(0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) shutdown(r0, 0x2) 1.046521823s ago: executing program 4 (id=301): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8000, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) fsopen(&(0x7f0000000280)='gfs2\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r9) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r10, 0xc02c5638, &(0x7f0000000180)={0x1, 0x0, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 850.626648ms ago: executing program 2 (id=302): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x7000000) 611.512494ms ago: executing program 2 (id=303): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, 0x0, r1, &(0x7f0000000080)='./mnt\x00', 0x214) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x8}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="e0ff0400000000001800128008000800000000000000028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xc7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x280a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) 464.357666ms ago: executing program 1 (id=304): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) syz_pidfd_open(0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x10, 0x5, 0x0, 0x10001, 0x0}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) request_key(0x0, 0x0, &(0x7f0000000440)='**+\x00', 0xfffffffffffffffd) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2, 0x2}) (async) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x6ab5, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x91f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000240)={0x1, r3, 0x8, 0x8, 0x3, 0xfffffffb, 0x4d, 0x4, 0x100}) 219.513514ms ago: executing program 1 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 0s ago: executing program 1 (id=306): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) (fail_nth: 5) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@dellink={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x72a00}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0x8}}, 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 81.510871][ T5815] cgroup: Unknown subsys name 'net' [ 81.643624][ T5815] cgroup: Unknown subsys name 'cpuset' [ 81.653314][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.240860][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.384452][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.392557][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.400732][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.401369][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.409855][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.416683][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.422590][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.438420][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.439257][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.453150][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.454628][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.460758][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.475591][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.494795][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.507780][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.516353][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.523259][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.524314][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.540440][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.549975][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.557610][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.564839][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.574035][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.602953][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.612582][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.229365][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.363606][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.488360][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.565129][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.604209][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.655370][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.663194][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.670647][ T5845] bridge_slave_0: entered allmulticast mode [ 88.677913][ T5845] bridge_slave_0: entered promiscuous mode [ 88.746267][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.754185][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.761472][ T5845] bridge_slave_1: entered allmulticast mode [ 88.769309][ T5845] bridge_slave_1: entered promiscuous mode [ 88.801525][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.808669][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.816050][ T5843] bridge_slave_0: entered allmulticast mode [ 88.823288][ T5843] bridge_slave_0: entered promiscuous mode [ 88.831837][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.838994][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.846280][ T5843] bridge_slave_1: entered allmulticast mode [ 88.853603][ T5843] bridge_slave_1: entered promiscuous mode [ 88.951351][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.983406][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.008581][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.040760][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.052742][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.060056][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.067217][ T5841] bridge_slave_0: entered allmulticast mode [ 89.074497][ T5841] bridge_slave_0: entered promiscuous mode [ 89.123785][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.131212][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.138361][ T5844] bridge_slave_0: entered allmulticast mode [ 89.146552][ T5844] bridge_slave_0: entered promiscuous mode [ 89.156798][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.164222][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.171415][ T5844] bridge_slave_1: entered allmulticast mode [ 89.178716][ T5844] bridge_slave_1: entered promiscuous mode [ 89.212841][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.220149][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.227357][ T5841] bridge_slave_1: entered allmulticast mode [ 89.235252][ T5841] bridge_slave_1: entered promiscuous mode [ 89.254500][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.261879][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.269185][ T5840] bridge_slave_0: entered allmulticast mode [ 89.276755][ T5840] bridge_slave_0: entered promiscuous mode [ 89.316739][ T5843] team0: Port device team_slave_0 added [ 89.353192][ T5845] team0: Port device team_slave_0 added [ 89.359266][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.366964][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.374305][ T5840] bridge_slave_1: entered allmulticast mode [ 89.382282][ T5840] bridge_slave_1: entered promiscuous mode [ 89.392049][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.405158][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.415685][ T5843] team0: Port device team_slave_1 added [ 89.436803][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.447802][ T5845] team0: Port device team_slave_1 added [ 89.507013][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.536177][ T5832] Bluetooth: hci1: command tx timeout [ 89.572105][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.579082][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.606022][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.611073][ T5832] Bluetooth: hci3: command tx timeout [ 89.616688][ T5830] Bluetooth: hci2: command tx timeout [ 89.622550][ T5832] Bluetooth: hci0: command tx timeout [ 89.630609][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.639908][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.666062][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.689677][ T5832] Bluetooth: hci4: command tx timeout [ 89.697213][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.704258][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.730212][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.743002][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.750015][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.776052][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.790950][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.802994][ T5844] team0: Port device team_slave_0 added [ 89.817829][ T5844] team0: Port device team_slave_1 added [ 89.826968][ T5841] team0: Port device team_slave_0 added [ 89.841294][ T5841] team0: Port device team_slave_1 added [ 89.849282][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.946931][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.954548][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.980834][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.006890][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.013984][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.040776][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.054774][ T5840] team0: Port device team_slave_0 added [ 90.064512][ T5840] team0: Port device team_slave_1 added [ 90.084461][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.092113][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.118492][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.148839][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.156157][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.182709][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.225640][ T5843] hsr_slave_0: entered promiscuous mode [ 90.234520][ T5843] hsr_slave_1: entered promiscuous mode [ 90.246090][ T5845] hsr_slave_0: entered promiscuous mode [ 90.255457][ T5845] hsr_slave_1: entered promiscuous mode [ 90.261885][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.270163][ T5845] Cannot create hsr debugfs directory [ 90.295524][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.302594][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.329275][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.398353][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.405919][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.432180][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.528812][ T5841] hsr_slave_0: entered promiscuous mode [ 90.535705][ T5841] hsr_slave_1: entered promiscuous mode [ 90.542549][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.550218][ T5841] Cannot create hsr debugfs directory [ 90.568043][ T5844] hsr_slave_0: entered promiscuous mode [ 90.575731][ T5844] hsr_slave_1: entered promiscuous mode [ 90.582627][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.590560][ T5844] Cannot create hsr debugfs directory [ 90.676049][ T5840] hsr_slave_0: entered promiscuous mode [ 90.683092][ T5840] hsr_slave_1: entered promiscuous mode [ 90.689201][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.697643][ T5840] Cannot create hsr debugfs directory [ 91.182918][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.196853][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.232622][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.251568][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.303800][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.334031][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.363022][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.380805][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.442861][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.458429][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.482330][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.496184][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.595214][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.610782][ T5832] Bluetooth: hci1: command tx timeout [ 91.629137][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.639327][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.660232][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.689884][ T5832] Bluetooth: hci0: command tx timeout [ 91.689909][ T55] Bluetooth: hci3: command tx timeout [ 91.700844][ T5830] Bluetooth: hci2: command tx timeout [ 91.717788][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.726240][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.756603][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.763852][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.771748][ T5830] Bluetooth: hci4: command tx timeout [ 91.829333][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.836484][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.852662][ T24] cfg80211: failed to load regulatory.db [ 91.866840][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.880881][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.911094][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.935684][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.948458][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.033663][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.063764][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.070981][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.126819][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.133959][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.148728][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.214696][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.246515][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.288127][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.295283][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.321452][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.328592][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.346557][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.392802][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.406763][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.440035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.447277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.457711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.464968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.478394][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.550927][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.590823][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.597978][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.610862][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.646850][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.654023][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.703221][ T5843] veth0_vlan: entered promiscuous mode [ 92.726091][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.772971][ T5843] veth1_vlan: entered promiscuous mode [ 92.817981][ T5845] veth0_vlan: entered promiscuous mode [ 92.847656][ T5845] veth1_vlan: entered promiscuous mode [ 92.868362][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.918205][ T5843] veth0_macvtap: entered promiscuous mode [ 92.948762][ T5843] veth1_macvtap: entered promiscuous mode [ 92.992935][ T5845] veth0_macvtap: entered promiscuous mode [ 93.006727][ T5845] veth1_macvtap: entered promiscuous mode [ 93.022325][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.034890][ T5841] veth0_vlan: entered promiscuous mode [ 93.058516][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.076493][ T5841] veth1_vlan: entered promiscuous mode [ 93.088348][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.098206][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.109163][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.122089][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.148196][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.159026][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.171947][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.197107][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.206336][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.216457][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.225609][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.259097][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.268284][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.277148][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.286738][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.330332][ T5844] veth0_vlan: entered promiscuous mode [ 93.349993][ T5840] veth0_vlan: entered promiscuous mode [ 93.376055][ T5841] veth0_macvtap: entered promiscuous mode [ 93.386146][ T5844] veth1_vlan: entered promiscuous mode [ 93.410793][ T5840] veth1_vlan: entered promiscuous mode [ 93.427343][ T5841] veth1_macvtap: entered promiscuous mode [ 93.528241][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.543864][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.554015][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.564807][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.577082][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.589238][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.600296][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.612065][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.623459][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.634422][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.656122][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.668620][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.678867][ T5840] veth0_macvtap: entered promiscuous mode [ 93.696369][ T5830] Bluetooth: hci1: command tx timeout [ 93.704203][ T5844] veth0_macvtap: entered promiscuous mode [ 93.727369][ T5840] veth1_macvtap: entered promiscuous mode [ 93.736235][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.746092][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.756134][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.765073][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.774931][ T5830] Bluetooth: hci0: command tx timeout [ 93.780487][ T55] Bluetooth: hci2: command tx timeout [ 93.785570][ T5832] Bluetooth: hci3: command tx timeout [ 93.804914][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.818402][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.825167][ T5844] veth1_macvtap: entered promiscuous mode [ 93.850203][ T5832] Bluetooth: hci4: command tx timeout [ 93.880129][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.889208][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.891510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.900709][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.966158][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.993159][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.003260][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.014312][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.024601][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.035187][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.048605][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.086878][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.098173][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.104401][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.123262][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.133740][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.143654][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.155176][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.165119][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.176011][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.187211][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.203653][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.214727][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.224714][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.235386][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.245241][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.257130][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.268606][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.282530][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.295433][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.305897][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.316627][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.326792][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.339379][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.352947][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.363483][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.375049][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.400624][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.409366][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.420380][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.429119][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.452875][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.479935][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.498803][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.535253][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545053][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.556892][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.666254][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.762206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.905957][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.922474][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.955078][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.971588][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.058643][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.093983][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.257867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.293097][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.438139][ T5900] usb usb1: usbfs: process 5900 (syz.4.7) did not claim interface 0 before use [ 95.518280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.579660][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.775173][ T5832] Bluetooth: hci1: command tx timeout [ 95.860153][ T5832] Bluetooth: hci0: command tx timeout [ 95.861518][ T5830] Bluetooth: hci2: command tx timeout [ 95.865645][ T5832] Bluetooth: hci3: command tx timeout [ 95.951815][ T5832] Bluetooth: hci4: command tx timeout [ 96.298848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.329882][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.485383][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.657635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.707942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.744837][ T5884] usb 3-1: config 0 has no interfaces? [ 96.810258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.819932][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.920036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.928591][ T5884] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 96.979738][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 97.022327][ T975] usb 2-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd [ 97.050317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.059982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.069613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.080166][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.106221][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.129767][ T5884] usb 3-1: Product: syz [ 97.133987][ T5884] usb 3-1: Manufacturer: syz [ 97.151022][ T5884] usb 3-1: SerialNumber: syz [ 97.214529][ T975] usb 2-1: config 0 descriptor?? [ 97.249400][ T5884] usb 3-1: config 0 descriptor?? [ 97.670362][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10'. [ 98.338346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.656245][ T10] usb 3-1: USB disconnect, device number 2 [ 100.069804][ T5880] usb 2-1: USB disconnect, device number 2 [ 100.349666][ T5953] netlink: 'syz.2.14': attribute type 20 has an invalid length. [ 100.938467][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.060060][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 101.158227][ T5961] syz_tun: entered promiscuous mode [ 101.171861][ T5961] syz_tun: left promiscuous mode [ 101.274403][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 101.740041][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 101.761919][ T30] audit: type=1326 audit(1746541457.715:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 101.806462][ T30] audit: type=1326 audit(1746541457.715:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 101.831132][ T30] audit: type=1326 audit(1746541457.715:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 101.852670][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.868111][ T30] audit: type=1326 audit(1746541457.715:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 101.889763][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.939135][ T5978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16'. [ 101.972854][ T30] audit: type=1326 audit(1746541457.715:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 102.050680][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 102.071575][ T975] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 102.104051][ T5884] IPVS: starting estimator thread 0... [ 102.115197][ T30] audit: type=1326 audit(1746541457.715:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 102.162611][ T30] audit: type=1326 audit(1746541457.725:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 102.239723][ T5982] IPVS: using max 36 ests per chain, 86400 per kthread [ 102.357854][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 102.436647][ T30] audit: type=1326 audit(1746541457.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 102.468619][ T975] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 102.659643][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.669641][ T30] audit: type=1326 audit(1746541457.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 102.682041][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 102.713442][ T975] usb 4-1: config 0 descriptor?? [ 102.766856][ T975] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 102.782488][ T30] audit: type=1326 audit(1746541457.785:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 102.972688][ T975] gp8psk: usb in 128 operation failed. [ 103.093483][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.101517][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.182330][ T975] gp8psk: usb in 146 operation failed. [ 103.188022][ T975] gp8psk: failed to get FW version [ 103.199165][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 103.250299][ T975] gp8psk: FPGA Version = 173 [ 103.569830][ T5976] Zero length message leads to an empty skb [ 103.617183][ T975] gp8psk: usb in 138 operation failed. [ 103.623334][ T975] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 103.676442][ T975] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 103.825943][ T975] usb 4-1: USB disconnect, device number 2 [ 104.073995][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 104.663337][ T6005] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 104.689613][ T975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.783560][ T6005] (unnamed net_device) (uninitialized): option mode: invalid value (119) [ 105.170157][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.196550][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 105.219711][ T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.250505][ T975] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.281909][ T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.330131][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 105.422077][ T6012] fuse: Unknown parameter 'grtÅ-@Z1Qoup_id' [ 105.449883][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.459831][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.630290][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.659359][ T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.681821][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.697828][ T975] usb 1-1: invalid MIDI out EP 0 [ 105.748925][ T10] usb 3-1: config 0 descriptor?? [ 105.793339][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.800302][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 106.357657][ T975] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 106.798938][ T6014] fuse: Unknown parameter 'group_i00000000000000000000' [ 107.079646][ T975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.234680][ T975] usb 2-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 107.245331][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 107.289981][ T975] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.350093][ T975] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.400287][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.565305][ T975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.594592][ T975] usb 2-1: invalid MIDI out EP 0 [ 107.603315][ T10] usb 1-1: USB disconnect, device number 2 [ 107.807733][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.826062][ T975] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 107.992727][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 108.309908][ T5884] usb 3-1: USB disconnect, device number 3 [ 108.479369][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 108.835515][ T5884] usb 2-1: USB disconnect, device number 3 [ 109.060017][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 109.789934][ T975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.079065][ T975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.131075][ T975] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.208734][ T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.298947][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.422473][ T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.482448][ T975] usb 4-1: invalid MIDI out EP 0 [ 110.771347][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 110.859827][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.153990][ T975] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 112.410030][ T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.884805][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 113.160670][ T975] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 113.175246][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.279240][ T975] usb 3-1: config 0 descriptor?? [ 113.368387][ T975] pcwd_usb: The device isn't a Human Interface Device [ 113.514995][ T975] usb 4-1: USB disconnect, device number 3 [ 113.549987][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.808120][ T47] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.876438][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.915132][ T47] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.932551][ T6097] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 113.937851][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.958809][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.024626][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.038043][ T47] usb 5-1: invalid MIDI out EP 0 [ 114.193532][ T47] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 114.247433][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.618651][ T975] usb 5-1: USB disconnect, device number 2 [ 114.626065][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.635965][ T6082] delete_channel: no stack [ 114.851840][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.861679][ T5883] usb 1-1: config 0 has no interfaces? [ 114.870593][ T5883] usb 1-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 114.886190][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.907438][ T5926] usb 3-1: USB disconnect, device number 4 [ 114.945904][ T5883] usb 1-1: Product: syz [ 114.963279][ T5883] usb 1-1: Manufacturer: syz [ 114.968032][ T5883] usb 1-1: SerialNumber: syz [ 114.997265][ T5883] usb 1-1: config 0 descriptor?? [ 115.345816][ T10] usb 1-1: USB disconnect, device number 3 [ 115.359936][ T975] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.493457][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 115.566582][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.594232][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.638817][ T975] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 115.655201][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.678585][ T975] usb 4-1: config 0 descriptor?? [ 115.999865][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.149957][ T5884] usb 5-1: device descriptor read/64, error -71 [ 116.227647][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'. [ 116.479725][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.551171][ T975] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 116.572777][ T975] hid-led 0003:27B8:01ED.0001: ThingM blink(1) v1 initialized [ 116.712734][ T5884] usb 5-1: device descriptor read/64, error -71 [ 116.756207][ T975] usb 4-1: USB disconnect, device number 4 [ 116.795728][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.69'. [ 116.820410][ T5884] usb usb5-port1: attempt power cycle [ 116.866289][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 117.015370][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'. [ 117.189785][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.199751][ T5884] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.280406][ T5884] usb 5-1: device descriptor read/8, error -71 [ 117.426631][ T5883] usb 3-1: config index 0 descriptor too short (expected 49795, got 77) [ 117.453431][ T5883] usb 3-1: config 152 has too many interfaces: 231, using maximum allowed: 32 [ 117.466363][ T5883] usb 3-1: config 152 has an invalid descriptor of length 112, skipping remainder of the config [ 117.477439][ T5883] usb 3-1: config 152 has 0 interfaces, different from the descriptor's value: 231 [ 117.497793][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.529714][ T5884] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.550415][ T5884] usb 5-1: device descriptor read/8, error -71 [ 117.869131][ T5884] usb usb5-port1: unable to enumerate USB device [ 117.902861][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.930335][ T5883] usb 3-1: Product: syz [ 117.934621][ T5883] usb 3-1: Manufacturer: syz [ 117.939284][ T5883] usb 3-1: SerialNumber: syz [ 118.039731][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.308867][ T5926] usb 4-1: device descriptor read/64, error -71 [ 118.606636][ T5926] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.689955][ T5884] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.759726][ T5926] usb 4-1: device descriptor read/64, error -71 [ 118.900053][ T5926] usb usb4-port1: attempt power cycle [ 119.085379][ T5884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.208270][ T5884] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.275783][ T5884] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.302399][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.319632][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.344133][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.356340][ T5926] usb 4-1: device descriptor read/8, error -71 [ 119.364941][ T5884] usb 2-1: invalid MIDI out EP 0 [ 119.600669][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.640082][ T5926] usb 4-1: device descriptor read/8, error -71 [ 119.662209][ T5884] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 119.766281][ T5926] usb usb4-port1: unable to enumerate USB device [ 120.149130][ T5883] usb 3-1: USB disconnect, device number 5 [ 121.749301][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.911930][ T5883] usb 2-1: USB disconnect, device number 4 [ 122.024940][ T10] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 122.036444][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.098177][ T10] usb 5-1: config 0 descriptor?? [ 122.146151][ T10] pcwd_usb: This driver only supports 1 device [ 122.629789][ T47] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.818541][ T47] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 122.860233][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.904683][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.937569][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 122.955735][ T47] usb 1-1: config 1 has no interface number 0 [ 122.999570][ T47] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 123.067165][ T47] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 123.409240][ T975] usb 5-1: USB disconnect, device number 7 [ 123.498136][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.551909][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.590138][ T47] usb 1-1: Product: syz [ 123.604619][ T47] usb 1-1: Manufacturer: syz [ 123.619491][ T47] usb 1-1: SerialNumber: syz [ 124.009943][ T47] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 124.055321][ T47] usb 1-1: USB disconnect, device number 4 [ 124.294909][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 124.702714][ T6233] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.069804][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 125.422257][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 125.468410][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.490469][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 125.501932][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 6400, setting to 64 [ 125.516127][ T10] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 125.525588][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.534316][ T10] usb 5-1: Product: syz [ 125.538720][ T10] usb 5-1: Manufacturer: syz [ 125.544278][ T10] usb 5-1: SerialNumber: syz [ 125.552897][ T10] usb 5-1: config 0 descriptor?? [ 125.559355][ T6233] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.569849][ T10] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 125.615551][ T10] cyphidcom ttyUSB0: required endpoint is missing [ 125.972524][ T975] usb 5-1: USB disconnect, device number 8 [ 125.978534][ T5832] Bluetooth: hci4: Malformed LE Event: 0x0d [ 125.993195][ T975] cypress_m8 5-1:0.0: device disconnected [ 127.150059][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.337379][ T5884] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 127.357479][ T5884] usb 5-1: config 0 has no interface number 0 [ 127.375770][ T5884] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 127.446367][ T5884] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 127.475941][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.518323][ T5884] usb 5-1: Product: syz [ 127.525854][ T5884] usb 5-1: Manufacturer: syz [ 127.668552][ T5884] usb 5-1: SerialNumber: syz [ 127.713691][ T5884] usb 5-1: config 0 descriptor?? [ 127.722383][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.739725][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.961307][ T5883] usb 2-1: config 0 has no interfaces? [ 128.017904][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 128.046819][ T6282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.92'. [ 128.076002][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.152438][ T5883] usb 2-1: Product: syz [ 128.188374][ T5883] usb 2-1: Manufacturer: syz [ 128.209152][ T5883] usb 2-1: SerialNumber: syz [ 128.300752][ T5883] usb 2-1: config 0 descriptor?? [ 129.908758][ T5884] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.929725][ T5884] usb 5-1: MIDIStreaming interface descriptor not found [ 130.185864][ T5884] usb 5-1: USB disconnect, device number 9 [ 130.543388][ T6314] AppArmor: change_hat: Invalid input '0x000000p000000000_changehat' [ 130.773573][ T5883] usb 2-1: USB disconnect, device number 5 [ 130.989663][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 131.024317][ T6330] process 'syz.0.108' launched './file1' with NULL argv: empty string added [ 131.161817][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.193102][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=c3.54 [ 131.209420][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.240011][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.245908][ T10] usb 4-1: Product: syz [ 131.257388][ T10] usb 4-1: Manufacturer: syz [ 131.268265][ T10] usb 4-1: SerialNumber: syz [ 131.310816][ T10] usb 4-1: config 0 descriptor?? [ 131.416168][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 131.443704][ T5884] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 131.463872][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.489579][ T5884] usb 2-1: Product: syz [ 131.498471][ T5884] usb 2-1: Manufacturer: syz [ 131.523024][ T5884] usb 2-1: SerialNumber: syz [ 131.567059][ T5884] usb 2-1: config 0 descriptor?? [ 131.623460][ T5884] gspca_main: sq905-2.14.0 probing 2770:9120 [ 132.109671][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.295006][ T5926] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.331998][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.372616][ T5926] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 132.410529][ T5926] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.440053][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.484327][ T5926] usb 1-1: Product: syz [ 132.498022][ T5926] usb 1-1: Manufacturer: syz [ 132.574217][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 132.710424][ T5884] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 132.754508][ T5884] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 132.762363][ T5926] usb 1-1: USB disconnect, device number 5 [ 132.814230][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821115][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.575304][ T5846] usb 4-1: USB disconnect, device number 9 [ 133.583417][ T5884] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 133.752640][ T5884] usb 5-1: device descriptor read/64, error -71 [ 134.020117][ T5884] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 134.192455][ T5884] usb 5-1: device descriptor read/64, error -71 [ 134.200145][ T5883] usb 2-1: USB disconnect, device number 6 [ 134.290335][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.323464][ T5884] usb usb5-port1: attempt power cycle [ 134.480908][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 134.492778][ T5926] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.543371][ T6435] capability: warning: `syz.0.125' uses deprecated v2 capabilities in a way that may be insecure [ 134.849743][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.879706][ T5926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.921178][ T5884] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 134.943694][ T5926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.094018][ T5884] usb 5-1: device descriptor read/8, error -71 [ 135.100826][ T5926] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.129028][ T5926] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.141614][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.145557][ T5883] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 135.187069][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.205559][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.218767][ T5883] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice=e6.00 [ 135.235605][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.247353][ T5883] usb 2-1: config 0 descriptor?? [ 135.359952][ T5884] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 135.399220][ T5880] usb 1-1: config 0 has no interfaces? [ 135.400327][ T5884] usb 5-1: device descriptor read/8, error -71 [ 135.414167][ T6414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.480628][ T5880] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.495859][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.507719][ T5926] usb 4-1: usb_control_msg returned -71 [ 135.511424][ T5880] usb 1-1: Product: syz [ 135.519598][ T5880] usb 1-1: Manufacturer: syz [ 135.527094][ T5926] usbtmc 4-1:16.0: can't read capabilities [ 135.532932][ T5880] usb 1-1: SerialNumber: syz [ 135.538754][ T5884] usb usb5-port1: unable to enumerate USB device [ 135.543077][ T5880] usb 1-1: config 0 descriptor?? [ 135.606118][ T5926] usb 4-1: USB disconnect, device number 10 [ 135.862096][ T6433] @: renamed from vlan0 (while UP) [ 136.198938][ T6462] fuse: Unknown parameter '}5à_ÒBYFæ˜4rÕÙ6žÇÝ6x ¤±r„Ù£Í?gúEÜɪ}0x_' [ 136.404095][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.572181][ T10] usb 4-1: config 139 has too many interfaces: 97, using maximum allowed: 32 [ 136.587537][ T10] usb 4-1: config 139 has an invalid descriptor of length 102, skipping remainder of the config [ 136.619271][ T10] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 97 [ 136.650727][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.660667][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.688295][ T10] usb 4-1: Product: syz [ 136.697319][ T10] usb 4-1: Manufacturer: syz [ 136.785819][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 136.785831][ T30] audit: type=1326 audit(1746541492.765:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.2.131" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x0 [ 136.894159][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 137.082254][ T10] usb 4-1: USB disconnect, device number 11 [ 137.276138][ T47] usb 2-1: USB disconnect, device number 7 [ 137.345824][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 137.464912][ T5926] usb 1-1: USB disconnect, device number 6 [ 137.585585][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'. [ 137.780186][ T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.940970][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 137.958107][ T47] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 137.969715][ T47] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.998988][ T47] usb 2-1: Product: syz [ 138.024596][ T47] usb 2-1: Manufacturer: syz [ 138.035164][ T47] usb 2-1: SerialNumber: syz [ 138.058894][ T47] usb 2-1: config 0 descriptor?? [ 138.636327][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 138.673430][ T47] usb 2-1: USB disconnect, device number 8 [ 138.740390][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.807191][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.143'. [ 139.025715][ T6525] netlink: 44 bytes leftover after parsing attributes in process `syz.4.145'. [ 139.249625][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.347393][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 139.387400][ T6536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.147'. [ 139.398559][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 139.432692][ T5883] usb 1-1: config 0 has no interfaces? [ 139.438364][ T5883] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 139.472314][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.487968][ T5883] usb 1-1: config 0 descriptor?? [ 140.269405][ T6549] capability: warning: `syz.3.148' uses 32-bit capabilities (legacy support in use) [ 140.831614][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.850409][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 141.032523][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 141.049042][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 141.064151][ T10] usb 3-1: config 0 has no interface number 0 [ 141.084541][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 141.108122][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 141.117717][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.128850][ T10] usb 3-1: Product: syz [ 141.139237][ T10] usb 3-1: Manufacturer: syz [ 141.159333][ T10] usb 3-1: SerialNumber: syz [ 141.185531][ T10] usb 3-1: config 0 descriptor?? [ 141.906094][ T6575] __nla_validate_parse: 2 callbacks suppressed [ 141.906114][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 142.075388][ T5880] usb 1-1: USB disconnect, device number 7 [ 142.211651][ T6583] bridge1: entered promiscuous mode [ 142.227461][ T6583] bridge1: entered allmulticast mode [ 142.290884][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 142.305560][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 142.318329][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 142.475378][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 142.525532][ T10] usb 3-1: USB disconnect, device number 6 [ 142.549659][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 142.574629][ T6589] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 142.603886][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.619685][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.814092][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 143.850949][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.865123][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.885151][ T5926] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 143.953890][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.983931][ T5926] usb 3-1: config 0 descriptor?? [ 144.198822][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 144.233086][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 144.413081][ T5926] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x2 [ 144.428477][ T5926] aquacomputer_d5next 0003:0C70:F0B6.0002: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 144.502281][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 145.138713][ T10] usb 3-1: USB disconnect, device number 7 [ 145.938290][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 146.170763][ T5880] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.373249][ T5880] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.554176][ T5880] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.565295][ T5880] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.593217][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.693622][ T5880] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.711906][ T5880] usb 5-1: invalid MIDI out EP 0 [ 147.403932][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.441877][ T5880] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 147.792929][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 147.955677][ T6664] bridge_slave_0: left allmulticast mode [ 147.971953][ T6664] bridge_slave_0: left promiscuous mode [ 148.068275][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.114331][ T6664] bridge_slave_1: left allmulticast mode [ 148.140699][ T6664] bridge_slave_1: left promiscuous mode [ 148.155525][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.325485][ T6664] bond0: (slave bond_slave_0): Releasing backup interface [ 148.373976][ T6664] bond0: (slave bond_slave_1): Releasing backup interface [ 148.424082][ T6664] team0: Port device team_slave_0 removed [ 148.591295][ T6664] team0: Port device team_slave_1 removed [ 148.615369][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 148.637614][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.676938][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.712903][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.755135][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.820206][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 149.176559][ T5880] usb 5-1: USB disconnect, device number 14 [ 149.323800][ T5884] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.363141][ T6687] input: syz0 as /devices/virtual/input/input5 [ 149.458014][ T6691] Cannot find set identified by id 0 to match [ 149.493212][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.511469][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.522532][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.560756][ T5884] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.588404][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.617686][ T5884] usb 2-1: SerialNumber: syz [ 149.689751][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 149.704369][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.713935][ T10] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.734855][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 149.754695][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 149.770103][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.786142][ T10] usb 1-1: Product: syz [ 149.795659][ T10] usb 1-1: Manufacturer: syz [ 149.832853][ T10] usb 1-1: SerialNumber: syz [ 149.887406][ T5884] usb 2-1: 0:2 : does not exist [ 149.953886][ T5884] usb 2-1: USB disconnect, device number 9 [ 150.055536][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.150303][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.633352][ T6690] syz.4.192 (6690): drop_caches: 2 [ 150.738090][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 150.838340][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 150.863403][ T6701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.884214][ T6701] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 150.963326][ T6701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.018444][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 151.036696][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 151.617161][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 152.338138][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 152.344509][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 152.380014][ T10] usb 1-1: USB disconnect, device number 8 [ 153.296160][ T6743] FAULT_INJECTION: forcing a failure. [ 153.296160][ T6743] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.310889][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.0.206 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 153.310915][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 153.310931][ T6743] Call Trace: [ 153.310943][ T6743] [ 153.310951][ T6743] dump_stack_lvl+0x189/0x250 [ 153.310994][ T6743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.311022][ T6743] ? __pfx__printk+0x10/0x10 [ 153.311054][ T6743] should_fail_ex+0x414/0x560 [ 153.311091][ T6743] _copy_to_user+0x31/0xb0 [ 153.311119][ T6743] simple_read_from_buffer+0xe1/0x170 [ 153.311146][ T6743] proc_fail_nth_read+0x1df/0x250 [ 153.311176][ T6743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.311206][ T6743] ? rw_verify_area+0x258/0x650 [ 153.311225][ T6743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.311253][ T6743] vfs_read+0x1fd/0x980 [ 153.311279][ T6743] ? __pfx___mutex_lock+0x10/0x10 [ 153.311303][ T6743] ? __pfx_vfs_read+0x10/0x10 [ 153.311325][ T6743] ? __fget_files+0x2a/0x420 [ 153.311354][ T6743] ? __fget_files+0x3a0/0x420 [ 153.311376][ T6743] ? __fget_files+0x2a/0x420 [ 153.311409][ T6743] ksys_read+0x145/0x250 [ 153.311429][ T6743] ? rcu_is_watching+0x15/0xb0 [ 153.311458][ T6743] ? __pfx_ksys_read+0x10/0x10 [ 153.311480][ T6743] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 153.311505][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.311529][ T6743] __do_fast_syscall_32+0xb4/0x110 [ 153.311553][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.311584][ T6743] do_fast_syscall_32+0x34/0x80 [ 153.311608][ T6743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.311630][ T6743] RIP: 0023:0xf711e539 [ 153.311651][ T6743] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.311667][ T6743] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 153.311693][ T6743] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f510e620 [ 153.311706][ T6743] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 153.311718][ T6743] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 153.311728][ T6743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.311739][ T6743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.311767][ T6743] [ 153.773778][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 154.473293][ T6765] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 155.120022][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 155.322218][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.337423][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.382042][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.399581][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.415052][ T10] usb 2-1: config 0 descriptor?? [ 155.660196][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 155.669718][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.682951][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 155.706463][ T10] usb 2-1: USB disconnect, device number 10 [ 155.832195][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 155.851333][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 155.859346][ T5880] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 155.867882][ T5880] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 155.877041][ T5880] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 155.890925][ T5880] usb 1-1: config 0 has no interface number 0 [ 155.897117][ T5880] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 155.908893][ T5880] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 155.932830][ T5880] usb 1-1: config 0 interface 255 has no altsetting 0 [ 155.954512][ T5880] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 155.979679][ T5880] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 155.995265][ T5880] usb 1-1: Product: syz [ 156.021456][ T5880] usb 1-1: Manufacturer: syz [ 156.062741][ T5880] usb 1-1: config 0 descriptor?? [ 156.287014][ T5832] Bluetooth: Frame is too long (len 16, expected len 4) [ 156.327440][ T5880] usb 1-1: USB disconnect, device number 9 [ 156.629820][ T975] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.869575][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 156.936811][ T975] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 156.962392][ T975] usb 5-1: config 0 has no interface number 0 [ 156.991227][ T975] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 157.000356][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.015500][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.080624][ T975] usb 5-1: Product: syz [ 157.084960][ T975] usb 5-1: Manufacturer: syz [ 157.095098][ T975] usb 5-1: SerialNumber: syz [ 157.150491][ T975] usb 5-1: config 0 descriptor?? [ 157.155613][ T6813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 157.169879][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 157.197416][ T5880] usb 4-1: config 2 has an invalid interface number: 106 but max is 0 [ 157.215934][ T5880] usb 4-1: config 2 has no interface number 0 [ 157.273145][ T5880] usb 4-1: config 2 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.304571][ T5880] usb 4-1: New USB device found, idVendor=04a5, idProduct=3008, bcdDevice=82.5a [ 157.349999][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.399647][ T975] peak_usb 5-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 157.407567][ T6820] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 157.440295][ T5880] gspca_main: sunplus-2.14.0 probing 04a5:3008 [ 157.609164][ T975] peak_usb 5-1:0.56 can0: sending command failure: -22 [ 157.616295][ T975] peak_usb 5-1:0.56 can0: sending command failure: -22 [ 157.629107][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.638802][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.647335][ T6826] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 157.665605][ T975] peak_usb 5-1:0.56 can0: sending command failure: -22 [ 157.675428][ T5880] gspca_sunplus: reg_r err -71 [ 157.707418][ T5880] sunplus 4-1:2.106: probe with driver sunplus failed with error -71 [ 157.742061][ T5880] usb 4-1: USB disconnect, device number 12 [ 157.781039][ T975] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -22 [ 157.889095][ T6829] erspan0: entered promiscuous mode [ 157.907634][ T6829] erspan0: left promiscuous mode [ 158.008422][ T6834] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 158.419856][ T47] usb 5-1: USB disconnect, device number 15 [ 158.442229][ T6843] batman_adv: batadv0: Adding interface: dummy0 [ 158.448633][ T6843] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.481594][ T6843] batman_adv: batadv0: Interface activated: dummy0 [ 158.491994][ T6843] openvswitch: netlink: Multiple metadata blocks provided [ 158.863534][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 158.917385][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.243'. [ 159.116063][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 159.135401][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 159.528870][ T6874] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 159.553843][ T6874] bond0: (slave wlan1): Opening slave failed [ 160.632882][ T6888] FAULT_INJECTION: forcing a failure. [ 160.632882][ T6888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.689375][ T6888] CPU: 0 UID: 0 PID: 6888 Comm: syz.0.252 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 160.689402][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 160.689413][ T6888] Call Trace: [ 160.689420][ T6888] [ 160.689428][ T6888] dump_stack_lvl+0x189/0x250 [ 160.689449][ T6888] ? __lock_acquire+0xaac/0xd20 [ 160.689470][ T6888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.689488][ T6888] ? __pfx__printk+0x10/0x10 [ 160.689509][ T6888] ? __might_fault+0xb0/0x130 [ 160.689543][ T6888] should_fail_ex+0x414/0x560 [ 160.689575][ T6888] _copy_from_user+0x2d/0xb0 [ 160.689605][ T6888] kstrtouint_from_user+0xc4/0x170 [ 160.689620][ T6888] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 160.689661][ T6888] proc_fail_nth_write+0x88/0x240 [ 160.689680][ T6888] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.689701][ T6888] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.689720][ T6888] vfs_write+0x27b/0xa90 [ 160.689764][ T6888] ? __pfx_vfs_write+0x10/0x10 [ 160.689777][ T6888] ? count_memcg_event_mm+0x92/0x3b0 [ 160.689791][ T6888] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 160.689808][ T6888] ? fdget+0x149/0x1e0 [ 160.689827][ T6888] ? __sys_recvmsg+0x18d/0x220 [ 160.689852][ T6888] ksys_write+0x145/0x250 [ 160.689869][ T6888] ? __pfx_ksys_write+0x10/0x10 [ 160.689886][ T6888] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 160.689903][ T6888] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.689920][ T6888] __do_fast_syscall_32+0xb4/0x110 [ 160.689937][ T6888] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.689955][ T6888] do_fast_syscall_32+0x34/0x80 [ 160.689971][ T6888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.689988][ T6888] RIP: 0023:0xf711e539 [ 160.690000][ T6888] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.690012][ T6888] RSP: 002b:00000000f50ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 160.690026][ T6888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50ed620 [ 160.690035][ T6888] RDX: 0000000000000001 RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 160.690043][ T6888] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 160.690050][ T6888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.690058][ T6888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.690077][ T6888] [ 161.183492][ T6893] netlink: 'syz.3.254': attribute type 5 has an invalid length. [ 161.246156][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 161.377506][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.256'. [ 161.535277][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 161.550197][ T6904] FAULT_INJECTION: forcing a failure. [ 161.550197][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 161.567376][ T975] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.575378][ T6904] CPU: 0 UID: 0 PID: 6904 Comm: syz.0.258 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 161.575407][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 161.575419][ T6904] Call Trace: [ 161.575426][ T6904] [ 161.575434][ T6904] dump_stack_lvl+0x189/0x250 [ 161.575467][ T6904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.575495][ T6904] ? __pfx__printk+0x10/0x10 [ 161.575511][ T6904] ? __lock_acquire+0xaac/0xd20 [ 161.575552][ T6904] should_fail_ex+0x414/0x560 [ 161.575587][ T6904] should_failslab+0xa8/0x100 [ 161.575613][ T6904] kmem_cache_alloc_noprof+0x73/0x3c0 [ 161.575635][ T6904] ? skb_clone+0x212/0x3a0 [ 161.575666][ T6904] skb_clone+0x212/0x3a0 [ 161.575703][ T6904] __netlink_deliver_tap+0x404/0x850 [ 161.575737][ T6904] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.575759][ T6904] netlink_deliver_tap+0x19c/0x1b0 [ 161.575781][ T6904] netlink_sendskb+0x68/0x140 [ 161.575813][ T6904] netlink_rcv_skb+0x2a0/0x490 [ 161.575834][ T6904] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 161.575856][ T6904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.575901][ T6904] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.575920][ T6904] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.575943][ T6904] xfrm_netlink_rcv+0x79/0x90 [ 161.575962][ T6904] netlink_unicast+0x758/0x8d0 [ 161.576004][ T6904] netlink_sendmsg+0x805/0xb30 [ 161.576035][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.576059][ T6904] ? __import_iovec+0x5d4/0x7f0 [ 161.576081][ T6904] ? aa_sock_msg_perm+0x94/0x160 [ 161.576103][ T6904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.576124][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.576146][ T6904] __sock_sendmsg+0x219/0x270 [ 161.576178][ T6904] ____sys_sendmsg+0x505/0x830 [ 161.576207][ T6904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.576247][ T6904] ___sys_sendmsg+0x21f/0x2a0 [ 161.576274][ T6904] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.576337][ T6904] ? __fget_files+0x2a/0x420 [ 161.576362][ T6904] ? __fget_files+0x3a0/0x420 [ 161.576397][ T6904] __sys_sendmsg+0x164/0x220 [ 161.576424][ T6904] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.576462][ T6904] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 161.576486][ T6904] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.576508][ T6904] __do_fast_syscall_32+0xb4/0x110 [ 161.576532][ T6904] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.576557][ T6904] do_fast_syscall_32+0x34/0x80 [ 161.576580][ T6904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.576602][ T6904] RIP: 0023:0xf711e539 [ 161.576618][ T6904] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.576633][ T6904] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 161.576653][ T6904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800035c0 [ 161.576665][ T6904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.576674][ T6904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.576710][ T6904] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.576720][ T6904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.576749][ T6904] [ 161.979572][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 161.989461][ T975] usb 4-1: descriptor type invalid, skip [ 161.995210][ T975] usb 4-1: descriptor type invalid, skip [ 162.016823][ T975] usb 4-1: config 0 has no interfaces? [ 162.029590][ T5956] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.052573][ T975] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=6c.b8 [ 162.061799][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.069942][ T975] usb 4-1: Product: syz [ 162.074120][ T975] usb 4-1: Manufacturer: syz [ 162.078704][ T975] usb 4-1: SerialNumber: syz [ 162.085476][ T975] usb 4-1: config 0 descriptor?? [ 162.189572][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 162.235245][ T5956] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 162.243413][ T5956] usb 3-1: config 0 has no interface number 0 [ 162.273442][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.290432][ T5956] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 162.327404][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.339603][ T5956] usb 3-1: Product: syz [ 162.343833][ T5956] usb 3-1: Manufacturer: syz [ 162.348530][ T5956] usb 3-1: SerialNumber: syz [ 162.361431][ T5884] usb 4-1: USB disconnect, device number 13 [ 162.375205][ T5956] usb 3-1: config 0 descriptor?? [ 162.480237][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 162.627839][ T5956] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 162.641471][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'. [ 162.824955][ T5956] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 162.831966][ T5956] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 162.846808][ T5956] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 162.911225][ T5956] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22 [ 162.989784][ T5884] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 163.162776][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 163.171042][ T5884] usb 1-1: can't read configurations, error -61 [ 163.309663][ T5884] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 163.398005][ T5956] usb 3-1: USB disconnect, device number 8 [ 163.472123][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 163.479963][ T5884] usb 1-1: can't read configurations, error -61 [ 163.487054][ T5884] usb usb1-port1: attempt power cycle [ 163.839614][ T5884] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 163.863253][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 163.870993][ T5884] usb 1-1: can't read configurations, error -61 [ 164.020711][ T5884] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 164.063493][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 164.071775][ T5884] usb 1-1: can't read configurations, error -61 [ 164.078726][ T5884] usb usb1-port1: unable to enumerate USB device [ 164.303919][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.268'. [ 164.332987][ T6931] bridge_slave_0: default FDB implementation only supports local addresses [ 164.364092][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.269'. [ 165.089670][ T5846] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.138649][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.166950][ T47] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 165.186799][ T47] usb 2-1: can't read configurations, error -71 [ 165.343399][ T5846] usb 3-1: config 0 has no interfaces? [ 165.366919][ T5846] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.388023][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.418114][ T5846] usb 3-1: Product: syz [ 165.429605][ T5846] usb 3-1: Manufacturer: syz [ 165.440244][ T5846] usb 3-1: SerialNumber: syz [ 165.462505][ T5846] usb 3-1: config 0 descriptor?? [ 165.747756][ T6938] @: renamed from vlan0 (while UP) [ 166.369609][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.546733][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.560964][ T6967] netlink: 'syz.1.280': attribute type 10 has an invalid length. [ 166.573592][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 93, changing to 10 [ 166.580337][ T6967] bond0: (slave wlan1): Opening slave failed [ 166.643338][ T6969] FAULT_INJECTION: forcing a failure. [ 166.643338][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.658176][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.0.279 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 166.658201][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 166.658213][ T6969] Call Trace: [ 166.658221][ T6969] [ 166.658229][ T6969] dump_stack_lvl+0x189/0x250 [ 166.658264][ T6969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.658292][ T6969] ? __pfx__printk+0x10/0x10 [ 166.658325][ T6969] should_fail_ex+0x414/0x560 [ 166.658367][ T6969] _copy_from_user+0x2d/0xb0 [ 166.658396][ T6969] copy_from_sockptr_offset+0x66/0xa0 [ 166.658422][ T6969] do_ip6t_set_ctl+0x91a/0xce0 [ 166.658454][ T6969] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 166.658482][ T6969] ? nf_setsockopt+0x221/0x290 [ 166.658509][ T6969] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 166.658547][ T6969] ? rcu_read_lock_any_held+0xb3/0x120 [ 166.658577][ T6969] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 166.658602][ T6969] nf_setsockopt+0x26c/0x290 [ 166.658629][ T6969] rawv6_setsockopt+0x23b/0x5b0 [ 166.658675][ T6969] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 166.658700][ T6969] ? aa_sock_opt_perm+0x74/0x110 [ 166.658720][ T6969] ? sock_common_setsockopt+0x36/0xc0 [ 166.658741][ T6969] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 166.658763][ T6969] do_sock_setsockopt+0x257/0x3e0 [ 166.658790][ T6969] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.658811][ T6969] ? __fget_files+0x2a/0x420 [ 166.658851][ T6969] ? __fget_files+0x3a0/0x420 [ 166.658873][ T6969] ? __fget_files+0x2a/0x420 [ 166.658920][ T6969] __ia32_sys_setsockopt+0x18b/0x220 [ 166.658951][ T6969] __do_fast_syscall_32+0xb4/0x110 [ 166.658989][ T6969] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.659013][ T6969] do_fast_syscall_32+0x34/0x80 [ 166.659053][ T6969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.659077][ T6969] RIP: 0023:0xf711e539 [ 166.659093][ T6969] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 166.659108][ T6969] RSP: 002b:00000000f50cc55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 166.659128][ T6969] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000029 [ 166.659141][ T6969] RDX: 0000000000000040 RSI: 0000000080000b80 RDI: 0000000000000490 [ 166.659153][ T6969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.659164][ T6969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.659174][ T6969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.659201][ T6969] [ 166.905543][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.994146][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 50824, setting to 1024 [ 167.005415][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 167.023704][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.032898][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.043220][ T47] usb 5-1: Product: syz [ 167.048261][ T47] usb 5-1: Manufacturer: syz [ 167.055479][ T47] usb 5-1: SerialNumber: syz [ 167.276952][ T6963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.505503][ T5846] usb 3-1: USB disconnect, device number 9 [ 167.680684][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 167.971219][ T6980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.191273][ T47] cdc_ncm 5-1:1.0: bind() failure [ 168.213475][ T47] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 168.223973][ T6986] geneve2: entered promiscuous mode [ 168.229559][ T47] cdc_ncm 5-1:1.1: bind() failure [ 168.236074][ T6986] geneve2: entered allmulticast mode [ 168.433995][ T6999] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 168.464169][ T6999] bond0: (slave wlan1): Opening slave failed [ 168.535190][ T47] usb 5-1: USB disconnect, device number 16 [ 168.583074][ T7005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.289'. [ 169.475311][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 169.694841][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.715546][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.727687][ T47] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 169.749158][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.818328][ T47] usb 4-1: config 0 descriptor?? [ 171.127579][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 171.737124][ T7066] FAULT_INJECTION: forcing a failure. [ 171.737124][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 171.819929][ T7066] CPU: 1 UID: 0 PID: 7066 Comm: syz.1.306 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 171.819958][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 171.819975][ T7066] Call Trace: [ 171.819982][ T7066] [ 171.819991][ T7066] dump_stack_lvl+0x189/0x250 [ 171.820028][ T7066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.820056][ T7066] ? __pfx__printk+0x10/0x10 [ 171.820082][ T7066] ? __pfx___might_resched+0x10/0x10 [ 171.820100][ T7066] ? fs_reclaim_acquire+0x7d/0x100 [ 171.820134][ T7066] should_fail_ex+0x414/0x560 [ 171.820171][ T7066] should_failslab+0xa8/0x100 [ 171.820198][ T7066] kmem_cache_alloc_noprof+0x73/0x3c0 [ 171.820234][ T7066] ? skb_clone+0x212/0x3a0 [ 171.820264][ T7066] skb_clone+0x212/0x3a0 [ 171.820294][ T7066] pfkey_sendmsg+0x44b/0x1090 [ 171.820328][ T7066] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 171.820380][ T7066] ? __asan_memset+0x22/0x50 [ 171.820398][ T7066] ? __import_iovec+0x5d4/0x7f0 [ 171.820420][ T7066] ? aa_sock_msg_perm+0x94/0x160 [ 171.820442][ T7066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.820463][ T7066] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 171.820512][ T7066] __sock_sendmsg+0x219/0x270 [ 171.820546][ T7066] ____sys_sendmsg+0x505/0x830 [ 171.820578][ T7066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.820621][ T7066] ___sys_sendmsg+0x21f/0x2a0 [ 171.820649][ T7066] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.820714][ T7066] ? __fget_files+0x2a/0x420 [ 171.820737][ T7066] ? __fget_files+0x3a0/0x420 [ 171.820773][ T7066] __sys_sendmsg+0x164/0x220 [ 171.820800][ T7066] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.820848][ T7066] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 171.820873][ T7066] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.820899][ T7066] __do_fast_syscall_32+0xb4/0x110 [ 171.820924][ T7066] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.820950][ T7066] do_fast_syscall_32+0x34/0x80 [ 171.820974][ T7066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.820998][ T7066] RIP: 0023:0xf7f21539 [ 171.821014][ T7066] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.821030][ T7066] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 171.821050][ T7066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000805f5000 [ 171.821064][ T7066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.821074][ T7066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.821085][ T7066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.821096][ T7066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.821125][ T7066] [ 171.865920][ T7040] ------------[ cut here ]------------ [ 171.866005][ T7040] WARNING: CPU: 0 PID: 7040 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 171.866050][ T7040] Modules linked in: [ 171.866100][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.301 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 171.866129][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 171.866144][ T7040] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 171.866174][ T7040] Code: 42 80 3c 28 00 74 08 48 89 df e8 74 40 3d fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 da 4a db fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 171.866194][ T7040] RSP: 0018:ffffc900034569a8 EFLAGS: 00010283 [ 171.866218][ T7040] RAX: ffffffff85e48576 RBX: ffffc90003456b20 RCX: 0000000000080000 [ 171.866235][ T7040] RDX: ffffc9000cb4b000 RSI: 0000000000001618 RDI: 0000000000001619 [ 171.866252][ T7040] RBP: 1ffff9200068ad64 R08: ffffffff8f7ed977 R09: 1ffffffff1efdb2e [ 171.866269][ T7040] R10: dffffc0000000000 R11: ffffffff85e48440 R12: 00000028016b7529 [ 171.866287][ T7040] R13: dffffc0000000000 R14: ffff8881423f4028 R15: 00000028016b7529 [ 171.866305][ T7040] FS: 0000000000000000(0000) GS:ffff8881260cb000(0063) knlGS:00000000f50a6b40 [ 171.866326][ T7040] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 171.866342][ T7040] CR2: 00007f7688d79018 CR3: 00000000282d4000 CR4: 00000000003526f0 [ 171.866362][ T7040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.866378][ T7040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.866393][ T7040] Call Trace: [ 171.866402][ T7040] [ 171.866413][ T7040] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 171.866447][ T7040] drm_crtc_next_vblank_start+0x223/0x470 [ 171.866473][ T7040] ? ktime_get+0x3e/0x1f0 [ 171.866502][ T7040] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 171.866529][ T7040] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 171.866564][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.866597][ T7040] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 171.866634][ T7040] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 171.866662][ T7040] ? do_raw_spin_unlock+0x122/0x240 [ 171.866691][ T7040] ? read_tsc+0x9/0x20 [ 171.866711][ T7040] ? ktime_get+0x1cb/0x1f0 [ 171.866737][ T7040] commit_tail+0x79/0x3a0 [ 171.866773][ T7040] drm_atomic_helper_commit+0xa6b/0xb10 [ 171.866807][ T7040] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 171.866833][ T7040] drm_atomic_commit+0x25f/0x2c0 [ 171.866862][ T7040] ? __pfx_drm_atomic_commit+0x10/0x10 [ 171.866886][ T7040] ? __pfx___drm_printfn_info+0x10/0x10 [ 171.866938][ T7040] drm_client_modeset_commit_atomic+0x620/0x760 [ 171.866989][ T7040] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 171.867064][ T7040] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 171.867105][ T7040] drm_client_modeset_commit+0x4a/0x70 [ 171.867137][ T7040] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 171.867169][ T7040] drm_fb_helper_set_par+0xaf/0x100 [ 171.867198][ T7040] fb_set_var+0x818/0xf60 [ 171.867239][ T7040] ? __pfx_fb_set_var+0x10/0x10 [ 171.867277][ T7040] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 171.867309][ T7040] ? soft_cursor+0xb1b/0xd80 [ 171.867368][ T7040] ? fbcon_switch+0x6bf/0x1fc0 [ 171.867399][ T7040] fbcon_switch+0x759/0x1fc0 [ 171.867438][ T7040] ? __pfx_fbcon_switch+0x10/0x10 [ 171.867482][ T7040] ? __pfx_hide_cursor+0x10/0x10 [ 171.867514][ T7040] ? __free_frozen_pages+0x7fe/0xcd0 [ 171.867555][ T7040] ? is_console_locked+0x9/0x20 [ 171.867579][ T7040] ? set_origin+0x346/0x480 [ 171.867613][ T7040] redraw_screen+0x56a/0xe90 [ 171.867657][ T7040] ? __pfx_redraw_screen+0x10/0x10 [ 171.867688][ T7040] ? free_large_kmalloc+0xeb/0x200 [ 171.867719][ T7040] ? vc_do_resize+0x104c/0x1770 [ 171.867759][ T7040] vc_do_resize+0x122d/0x1770 [ 171.867826][ T7040] ? __pfx_vc_do_resize+0x10/0x10 [ 171.867861][ T7040] ? do_fb_ioctl+0x598/0x750 [ 171.867891][ T7040] ? fb_match_mode+0x5f9/0x730 [ 171.867928][ T7040] fbcon_modechanged+0x70e/0x11b0 [ 171.867979][ T7040] do_fb_ioctl+0x6fd/0x750 [ 171.868013][ T7040] ? __pfx_do_fb_ioctl+0x10/0x10 [ 171.868091][ T7040] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.868134][ T7040] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 171.868169][ T7040] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.868207][ T7040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.868248][ T7040] fb_compat_ioctl+0x2f4/0x780 [ 171.868289][ T7040] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 171.868346][ T7040] ? __fget_files+0x2a/0x420 [ 171.868382][ T7040] ? __fget_files+0x3a0/0x420 [ 171.868410][ T7040] ? __fget_files+0x2a/0x420 [ 171.868444][ T7040] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 171.868480][ T7040] __ia32_compat_sys_ioctl+0x551/0x840 [ 171.868509][ T7040] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 171.868560][ T7040] ? rcu_is_watching+0x15/0xb0 [ 171.868604][ T7040] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 171.868634][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.868669][ T7040] __do_fast_syscall_32+0xb4/0x110 [ 171.868699][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.868731][ T7040] do_fast_syscall_32+0x34/0x80 [ 171.868760][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.868787][ T7040] RIP: 0023:0xf7f86539 [ 171.868808][ T7040] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.868828][ T7040] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 171.868854][ T7040] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000004601 [ 171.868870][ T7040] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.868884][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.868899][ T7040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.868913][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.868949][ T7040] [ 171.868969][ T7040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.868987][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.301 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 171.869012][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 171.869026][ T7040] Call Trace: [ 171.869035][ T7040] [ 171.869045][ T7040] dump_stack_lvl+0x99/0x250 [ 171.869078][ T7040] ? __asan_memcpy+0x40/0x70 [ 171.869100][ T7040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.869132][ T7040] ? __pfx__printk+0x10/0x10 [ 171.869172][ T7040] panic+0x2db/0x790 [ 171.869209][ T7040] ? __pfx_panic+0x10/0x10 [ 171.869236][ T7040] ? show_trace_log_lvl+0x4fb/0x550 [ 171.869290][ T7040] __warn+0x31b/0x4b0 [ 171.869318][ T7040] ? vkms_get_vblank_timestamp+0x137/0x160 [ 171.869347][ T7040] ? vkms_get_vblank_timestamp+0x137/0x160 [ 171.869373][ T7040] report_bug+0x2be/0x4f0 [ 171.869396][ T7040] ? vkms_get_vblank_timestamp+0x137/0x160 [ 171.869423][ T7040] ? vkms_get_vblank_timestamp+0x137/0x160 [ 171.869448][ T7040] ? vkms_get_vblank_timestamp+0x139/0x160 [ 171.869474][ T7040] handle_bug+0x84/0x160 [ 171.869507][ T7040] exc_invalid_op+0x1a/0x50 [ 171.869535][ T7040] asm_exc_invalid_op+0x1a/0x20 [ 171.869562][ T7040] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 171.869587][ T7040] Code: 42 80 3c 28 00 74 08 48 89 df e8 74 40 3d fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 da 4a db fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 171.869604][ T7040] RSP: 0018:ffffc900034569a8 EFLAGS: 00010283 [ 171.869623][ T7040] RAX: ffffffff85e48576 RBX: ffffc90003456b20 RCX: 0000000000080000 [ 171.869639][ T7040] RDX: ffffc9000cb4b000 RSI: 0000000000001618 RDI: 0000000000001619 [ 171.869654][ T7040] RBP: 1ffff9200068ad64 R08: ffffffff8f7ed977 R09: 1ffffffff1efdb2e [ 171.869669][ T7040] R10: dffffc0000000000 R11: ffffffff85e48440 R12: 00000028016b7529 [ 171.869685][ T7040] R13: dffffc0000000000 R14: ffff8881423f4028 R15: 00000028016b7529 [ 171.869708][ T7040] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 171.869737][ T7040] ? vkms_get_vblank_timestamp+0x136/0x160 [ 171.869771][ T7040] ? vkms_get_vblank_timestamp+0x136/0x160 [ 171.869795][ T7040] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 171.869824][ T7040] drm_crtc_next_vblank_start+0x223/0x470 [ 171.869849][ T7040] ? ktime_get+0x3e/0x1f0 [ 171.869876][ T7040] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 171.869901][ T7040] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 171.869924][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.869953][ T7040] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 171.869987][ T7040] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 171.870013][ T7040] ? do_raw_spin_unlock+0x122/0x240 [ 171.870039][ T7040] ? read_tsc+0x9/0x20 [ 171.870057][ T7040] ? ktime_get+0x1cb/0x1f0 [ 171.870082][ T7040] commit_tail+0x79/0x3a0 [ 171.870116][ T7040] drm_atomic_helper_commit+0xa6b/0xb10 [ 171.870149][ T7040] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 171.870174][ T7040] drm_atomic_commit+0x25f/0x2c0 [ 171.870202][ T7040] ? __pfx_drm_atomic_commit+0x10/0x10 [ 171.870224][ T7040] ? __pfx___drm_printfn_info+0x10/0x10 [ 171.870275][ T7040] drm_client_modeset_commit_atomic+0x620/0x760 [ 171.870324][ T7040] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 171.870397][ T7040] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 171.870436][ T7040] drm_client_modeset_commit+0x4a/0x70 [ 171.870467][ T7040] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 171.870497][ T7040] drm_fb_helper_set_par+0xaf/0x100 [ 171.870524][ T7040] fb_set_var+0x818/0xf60 [ 171.870572][ T7040] ? __pfx_fb_set_var+0x10/0x10 [ 171.870611][ T7040] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 171.870641][ T7040] ? soft_cursor+0xb1b/0xd80 [ 171.870695][ T7040] ? fbcon_switch+0x6bf/0x1fc0 [ 171.870724][ T7040] fbcon_switch+0x759/0x1fc0 [ 171.870761][ T7040] ? __pfx_fbcon_switch+0x10/0x10 [ 171.870802][ T7040] ? __pfx_hide_cursor+0x10/0x10 [ 171.870832][ T7040] ? __free_frozen_pages+0x7fe/0xcd0 [ 171.870865][ T7040] ? is_console_locked+0x9/0x20 [ 171.870891][ T7040] ? set_origin+0x346/0x480 [ 171.870923][ T7040] redraw_screen+0x56a/0xe90 [ 171.870965][ T7040] ? __pfx_redraw_screen+0x10/0x10 [ 171.870993][ T7040] ? free_large_kmalloc+0xeb/0x200 [ 171.871021][ T7040] ? vc_do_resize+0x104c/0x1770 [ 171.871056][ T7040] vc_do_resize+0x122d/0x1770 [ 171.871122][ T7040] ? __pfx_vc_do_resize+0x10/0x10 [ 171.871153][ T7040] ? do_fb_ioctl+0x598/0x750 [ 171.871182][ T7040] ? fb_match_mode+0x5f9/0x730 [ 171.871216][ T7040] fbcon_modechanged+0x70e/0x11b0 [ 171.871264][ T7040] do_fb_ioctl+0x6fd/0x750 [ 171.871295][ T7040] ? __pfx_do_fb_ioctl+0x10/0x10 [ 171.871367][ T7040] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.871405][ T7040] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 171.871436][ T7040] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.871469][ T7040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.871507][ T7040] fb_compat_ioctl+0x2f4/0x780 [ 171.871547][ T7040] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 171.871615][ T7040] ? __fget_files+0x2a/0x420 [ 171.871650][ T7040] ? __fget_files+0x3a0/0x420 [ 171.871678][ T7040] ? __fget_files+0x2a/0x420 [ 171.871710][ T7040] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 171.871744][ T7040] __ia32_compat_sys_ioctl+0x551/0x840 [ 171.871772][ T7040] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 171.871813][ T7040] ? rcu_is_watching+0x15/0xb0 [ 171.871855][ T7040] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 171.871881][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.871907][ T7040] __do_fast_syscall_32+0xb4/0x110 [ 171.871934][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.871964][ T7040] do_fast_syscall_32+0x34/0x80 [ 171.871991][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.872016][ T7040] RIP: 0023:0xf7f86539 [ 171.872035][ T7040] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.872053][ T7040] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 171.872076][ T7040] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000004601 [ 171.872092][ T7040] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.872106][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.872119][ T7040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.872133][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.872167][ T7040] [ 171.872482][ T7040] Kernel Offset: disabled