last executing test programs: 9.005465993s ago: executing program 3 (id=2705): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0xfffffff8}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) bind(r3, &(0x7f00000000c0)=@hci={0x1f, 0x2, 0x4}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0x5cb, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc, 0x3, 0x0) sendmmsg$sock(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x14, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x14}}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x4}}, 0x10) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xff7ae0b95406984d}, 0x20004080) write$binfmt_misc(r6, &(0x7f0000000080), 0x2000011a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.630820074s ago: executing program 0 (id=2709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 8.437761743s ago: executing program 0 (id=2710): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000006c0)=ANY=[], 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 7.882617406s ago: executing program 3 (id=2711): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000080)=""/199) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x478) r3 = socket(0x10, 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x5, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0x2, r5}, 0x38) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) 6.577727765s ago: executing program 0 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x4e4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val={0x1, 0x4, [{0x79, 0x1}, {0x17, 0x1}, {0x2}, {0x4}]}, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x26, {0x6, 0xac, 0x26, "4535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d272c4f077e"}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x5c, 0x2a, [@challenge={0x10, 0x1, 0x2d}, @link_id={0x65, 0x12, {@random="bb18a42e1e4f", @broadcast, @broadcast}}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @val=0x1, @void, @void}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x40}}, @chsw_timing={0x68, 0x4, {0x9, 0x7fff}}, @mic={0x8c, 0x10, {0x455, "2eddf87594f4", @short="a0781e4eeb45b612"}}, @ibss={0x6, 0x2, 0x8}, @link_id={0x65, 0x12, {@random="deb80b12bbd0", @broadcast}}]}, @NL80211_ATTR_BEACON_HEAD={0x3f5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @random="56fa6adabffd", {0xc, 0xe}}, 0x80, @default, 0x90, @void, @val={0x1, 0x8, [{0x12}, {0x3}, {0x12, 0x1}, {0x5581f09284a9c330}, {0x16, 0x1}, {0x4, 0x1}, {0x36, 0x1}, {0x12, 0x1}]}, @void, @val={0x4, 0x6, {0x9, 0x6, 0x3, 0x7}}, @void, @void, @val={0x25, 0x3, {0x1, 0x78, 0x9}}, @void, @val={0x3c, 0x4, {0x1, 0x10, 0x7, 0x1}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x0, 0x0, {0x40, 0x81, 0x0, 0x3fc, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x7}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x3a, "7497500a90827031fe8ae835939996b5f28b738aea855cb85ebfb11e587d5037f4cebb6340627d9e27ea217cd4db82f64280302702a6ee65439c"}, {0xdd, 0x8a, "a8541e7322b9f9dbab943afe3c26cf605092cc88962d7b80d37412f1589314d0362eb3ee6d7513a64ad984523c685ac04991f34801b072d4fa236c327b2a6dcf3df238cc73942671e49537fb5f68db874122b24721eb57b7263568a655212977c9c6e08658caeb7041f23d0fc8414dd441c009ed0d1fa56cc5ef4d9191d4516b70b118628caf711695d6"}, {0xdd, 0x80, "987284550c912a0c3a7dcd5f32443c52329f42fef7834087172e681ed8c1e106490ce614df361ad825c73e372bed0bf6ffe32818c98b5f482248f01ea4b15cc7a5cc0502c4c69492e53c4f4695e94e0573f85fb2e54d88d0437e9ca5566468f16713db0e1db2f7a6770df99cc75fd5d86e5cb951b158f1f6fcb2bd6636d5b272"}, {0xdd, 0x1d, "698d3c9661c858154d911091f9a7008f5d81eaebc5b5b4d51024bca04e"}, {0xdd, 0xd0, "b11da195a32b36886eb1d1d62157c9b5b2b3d885591aa7b306d5fcdfa6f0272a1a01d6e2b1a5b25fbf5f97700c6ffabeac8f6d611640bbb90b63c1d30a71466d899938504fbb9365ddbc45714d5b0fc2838232af7b393a6a8aec293d0e4ac45ae5670742272e6c1943c6c5f2fe39e9440546bae63b44708c7bece338467ba114c0a6af9f23c4c67678a03875634ba63883e3b52d8031ef8646818a7d0ee57479a418179a27a4268313ec96a901b444b20e9dc4fe79c94562dd94a2e9ac12101235fdafd547417743fafe8507e9e6d8a4"}, {0xdd, 0x57, "ec292e8662179f2078a1f69797c829bffe9a93eb7a764d6a87cd63ed84108501d4e66b58db857e8f9b792e3a9a261273755e4fa03a32c9837b526d9f4ecde8127051076c99050cd9bcf79d2ba538a8f558b6801d4ea16c"}, {0xdd, 0x4f, "ccd6d07e3874f99bab805df4f95dd496dcd04b517918038f92c08f2e1d5519671e427d9b3c87a6c56261de3f620f81d9a81b585477ca3460ee0e358ef61fa5687b19024d1e347bd64ea051ae7bc124"}, {0xdd, 0xa5, "2a67b88ddcd193fc97c2e392385a70f26adba12d08690e350769b6af01b6b01fe7f88cd1c24c269eb57594131c515f51e42bbd7aa44999bbbb5977c3da4274389abf9fc8d039f796a49422d1f41b4b540e0ab83d36ec75aa961cbce08c50f5cdec83cfef1b11f16dbd8e05ab1777851eaf6054890821e2830a1f28a9312d9968f048d71a94b922bb9f716fcc950f718eed80739a44b9ddec4590963274e36548ae6b80e0b9"}]}}]]}, 0x4e4}}, 0x4000000) 6.220163518s ago: executing program 0 (id=2716): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000300)={0x40, 0xa, 0x8, "a207000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, 0x0, 0x0, 0x0}) 5.157003541s ago: executing program 3 (id=2717): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0417c508000000000109022400010000000009040209010300010009210500070122050009058103"], 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x10000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "51cfdeb7"}]}}, 0x0}, 0x0) 5.122772516s ago: executing program 4 (id=2718): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x82c40, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0xc0684608, &(0x7f0000000000)={0x780, 0x0, 0x300, 0x4b0, 0x0, 0x3, 0xf, 0x0, {0x0, 0x4}, {}, {0x8, 0x3}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x0, 0xeb, 0x0, 0x0, 0x200, 0x0, 0x4}) 4.98988469s ago: executing program 4 (id=2719): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000080)={0x20, 0xc, 0x4, "afa40edd"}, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)=',{)\x00') add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="2dc2efa50d9edb807433e0e6bf887c7aa8d2d40f37f6856b08f7c61994a6c5efe7d6d527a6992493e071a25de2da186e8941edd1c05c373eaf3c0a3b9ddb2cc40579cf679f424bacac5f6298a0b355897125e300c27ccab646fd20194c7fd434d87141bd2bf496418764dc30c920d7d9db33947ed59d1e311a80398de6ff02df65b273bcecbe9959e6e1c9725f09697857a0f7533fcde5356896f13dd175efb35a20e28ad2764729712cf88032c2ea84b37bc852482efc32a6a93d1c2567396655fa4e7e1976bac307b533b3f14b61bd88617aaf6eb458b862e85d9dff94a25f32f945e3a35303b047d43778ff5f045f0ce4", 0xf2, 0x0) 4.041790594s ago: executing program 2 (id=2724): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x21, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 3.821504338s ago: executing program 2 (id=2725): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 3.7590227s ago: executing program 0 (id=2727): socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000080)=""/199) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x478) r3 = socket(0x10, 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x5, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0x2, r5}, 0x38) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) 3.569807147s ago: executing program 1 (id=2728): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x2, 0x1, 0x100, 0x4, 0x9]}, &(0x7f0000000180)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f00000000c0)=0x78) getsockopt$EBT_SO_GET_INFO(r0, 0x1e01, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000080)=0x50) 2.93203825s ago: executing program 3 (id=2729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x200000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000140)=""/158) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 2.877559419s ago: executing program 4 (id=2730): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x68c9c3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) 2.190078475s ago: executing program 2 (id=2731): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 2.171663103s ago: executing program 4 (id=2732): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0x100000e00000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x29ece3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x11, 0xa, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x800}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x80080) ioctl$BLKSECDISCARD(r5, 0x127d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000354617db", @ANYRES16=r9, @ANYBLOB="01002abd7000fddbdf25060000001800018014000200766c616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0xe0}}, 0x0) 2.168314244s ago: executing program 1 (id=2733): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x9}}, 0x18) 1.895950971s ago: executing program 1 (id=2734): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) dup(r0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x2, @pix={0x1c, 0x28, 0x32314752, 0x50424752, 0x0, 0x80000, 0x2, 0x0, 0x1, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) 1.786033131s ago: executing program 2 (id=2735): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x9}}, 0x18) (fail_nth: 2) 1.410258609s ago: executing program 1 (id=2736): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') close_range(r5, 0xffffffffffffffff, 0x0) move_mount(r4, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(0x0, 0x2, 0x800) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) bind$can_raw(r4, &(0x7f0000000140), 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "063f36", 0x44, 0x2f, 0x0, @remote, @loopback={0x300000000000000}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x2, {0x2}}}}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0xa) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x534, 0x3c4, 0x534, 0x3c4, 0x0, 0x5ec, 0x5ec, 0x5ec, 0x5ec, 0x5ec, 0x6, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0xffffff00, 'dvmrp0\x00', 'hsr0\x00', {0xff}, {}, 0x1, 0x1, 0x10}, 0x0, 0x2a0, 0x2c4, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x24, [{0x8, 0x2, 0x93, 0x4}, {0x7, 0xbe, 0x1, 0x4}, {0xb, 0x7, 0x8, 0x8}, {0x6, 0xfc, 0x1, 0x5}, {0x3, 0x8f, 0x4, 0x1000}, {0x3, 0xa, 0x57, 0x7}, {0x5b, 0x0, 0x1, 0x9}, {0xf04, 0x10, 0x80, 0x5}, {0x7ff, 0x3, 0x5, 0x80}, {0x1, 0xff, 0x30, 0x8}, {0x3, 0x7f, 0xbf, 0x842}, {0x5, 0xac, 0x7, 0x2}, {0x7, 0x4, 0x4, 0x100}, {0x5, 0x7f, 0x2, 0x8}, {0x7, 0x44, 0x8, 0xffff8001}, {0x8, 0x9, 0x5, 0x5}, {0x7, 0x8, 0x9, 0x9}, {0xd5, 0x6, 0x7, 0x1}, {0x11, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x100}, {0x3, 0x5, 0x5, 0x3870}, {0x800, 0x2, 0x3, 0x3}, {0xd, 0x0, 0x97, 0xfffffff7}, {0x8, 0x4, 0xf6, 0x8}, {0x3, 0x1, 0x9, 0x1}, {0x1a, 0x7, 0x6, 0x1}, {0x1, 0x8, 0x0, 0x3a6}, {0x0, 0xf5, 0x1, 0x9}, {0xfff9, 0x4, 0x81, 0x1}, {0x1, 0x3, 0x1, 0x54f}, {0x43, 0x6, 0x36, 0x8}, {0x228, 0x8, 0x4, 0x9}, {0xc, 0x67, 0xd, 0x98}, {0x1, 0xff, 0x0, 0x81}, {0x8, 0x0, 0xfa, 0x800}, {0x6, 0x4, 0x2c, 0x40}, {0x6, 0x4, 0x7, 0x5}, {0xd2, 0xf, 0x4, 0x7}, {0x400, 0x7f, 0x2, 0xffffffff}, {0x4, 0x8, 0x1, 0x5409}, {0x9dcd, 0x0, 0x7, 0xa33}, {0xfff9, 0x1, 0x8, 0x1}, {0x3, 0x1, 0x3d, 0x7fff}, {0x3, 0x3, 0xfd, 0x3}, {0x4, 0x40, 0x9, 0xf2f}, {0x9, 0xb3, 0x0, 0xc}, {0xd, 0x61, 0x4, 0x9}, {0xd, 0x0, 0x4, 0x2}, {0x4d0, 0x0, 0x8, 0x8}, {0x26a, 0x3, 0xb, 0x3}, {0x6, 0x80, 0x6, 0x6}, {0x5, 0x7, 0xef, 0xfffffffe}, {0x0, 0x6, 0x5, 0x7fff}, {0x87b, 0x8, 0x7, 0x7ff}, {0x3, 0x1, 0x5, 0x8}, {0x222, 0x8, 0x4, 0x8}, {0xfff, 0x8, 0x2, 0x10}, {0x8, 0x9, 0x2, 0x5}, {0x3, 0x8, 0x1, 0x2}, {0xcb50, 0x2, 0x1, 0x5}, {0x0, 0x45, 0x2, 0x5}, {0x5, 0x5, 0xa, 0xa39}, {0x3, 0x8, 0x8, 0x7b}, {0x2, 0x82, 0x3, 0x1}], {0x5}}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @common=@ttl={{0x24}, {0x0, 0x7}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'syz_tun\x00', 'veth0_vlan\x00', {}, {0xff}, 0x16, 0x1, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x6, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x4, [0x2, 0x6, 0x1, 0x2, 0x6], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffe, 0x2, @multicast2, 0x4e24}}}, {{@ip={@remote, @multicast2, 0x0, 0xffffffff, 'vlan1\x00', 'gretap0\x00', {}, {}, 0xff, 0x1, 0x5}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x694) 1.345173663s ago: executing program 2 (id=2737): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0xfffffff8}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) bind(r3, &(0x7f00000000c0)=@hci={0x1f, 0x2, 0x4}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0x5cb, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc, 0x3, 0x0) sendmmsg$sock(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x14, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x14}}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x4}}, 0x10) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xff7ae0b95406984d}, 0x20004080) write$binfmt_misc(r6, &(0x7f0000000080), 0x2000011a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.223771175s ago: executing program 3 (id=2738): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd2b, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x844) syz_open_dev$video4linux(0x0, 0x1, 0x2080) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x2, 0x400000, 0x20000}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) inotify_init1(0x0) 1.017035309s ago: executing program 4 (id=2739): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x7381, &(0x7f0000000140)={0x0, 0xf999, 0x8, 0x1, 0x19d}) socket$netlink(0x10, 0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = eventfd2(0x1, 0x80000) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r2) accept4$vsock_stream(r1, 0x0, 0x0, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}}, 0xc010) 989.251085ms ago: executing program 0 (id=2740): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000080)={0x20, 0xc, 0x4, "afa40edd"}, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)=',{)\x00') add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="2dc2efa50d9edb807433e0e6bf887c7aa8d2d40f37f6856b08f7c61994a6c5efe7d6d527a6992493e071a25de2da186e8941edd1c05c373eaf3c0a3b9ddb2cc40579cf679f424bacac5f6298a0b355897125e300c27ccab646fd20194c7fd434d87141bd2bf496418764dc30c920d7d9db33947ed59d1e311a80398de6ff02df65b273bcecbe9959e6e1c9725f09697857a0f7533fcde5356896f13dd175efb35a20e28ad2764729712cf88032c2ea84b37bc852482efc32a6a93d1c2567396655fa4e7e1976bac307b533b3f14b61bd88617aaf6eb458b862e85d9dff94a25f32f945e3a35303b047d43778ff5f045f0ce4", 0xf2, 0x0) 416.029995ms ago: executing program 1 (id=2741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b02d25a80648c2594f90524fc60100c060003000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da", 0x1}], 0x1}, 0xc000) r4 = memfd_create(&(0x7f0000000000)='\x00', 0x1) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x3a, 0x0) (async, rerun: 64) sendfile(r3, r4, 0x0, 0x8000fb00) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000080)={0xe, 0x100, 0xfffffffd, 0x4080}) 415.109362ms ago: executing program 2 (id=2742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000006e02"]) (fail_nth: 6) 293.986877ms ago: executing program 1 (id=2743): openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1) stat(&(0x7f0000001040)='./file0\x00', 0x0) write$P9_RLINK(r0, 0x0, 0x0) 293.569363ms ago: executing program 3 (id=2744): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) dup3(r2, r1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 0s ago: executing program 4 (id=2745): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0x10}, 0x10) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0) r3 = syz_io_uring_setup(0x507d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r7, 0x29, 0xd0, &(0x7f0000000040), 0x4) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000180)={0xa, {0x8, 0x5, 0x4}}, 0xa) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r0, 0x9, 0xd4, &(0x7f0000000080)=""/212) kernel console output (not intermixed with test programs): netlink: zone id is out of range [ 667.995346][ T9] usb 5-1: USB disconnect, device number 49 [ 668.007750][T15273] netlink: zone id is out of range [ 668.012911][T15273] netlink: zone id is out of range [ 668.048837][T15273] netlink: zone id is out of range [ 668.054185][T15273] netlink: zone id is out of range [ 668.066676][T15273] netlink: zone id is out of range [ 668.073301][T15273] netlink: zone id is out of range [ 668.078850][T15273] netlink: zone id is out of range [ 668.084218][T15273] netlink: zone id is out of range [ 668.100424][T15279] syz_tun: entered allmulticast mode [ 668.300001][ T58] usb 2-1: USB disconnect, device number 44 [ 668.585725][T15255] syz_tun: left allmulticast mode [ 668.857550][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 669.027967][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 669.061815][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.090072][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.133210][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 669.172895][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.209396][ T9] usb 1-1: config 0 descriptor?? [ 669.231904][T15333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2444'. [ 669.357045][ T5890] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 669.537102][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 669.559826][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 669.581982][ T5890] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 669.606370][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.642763][ T58] usb 4-1: USB disconnect, device number 71 [ 669.644150][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 669.669079][ T5890] usb 3-1: Product: syz [ 669.672795][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 669.673267][ T5890] usb 3-1: Manufacturer: syz [ 669.723832][ T5890] usb 3-1: SerialNumber: syz [ 669.724430][ T9] usb 1-1: USB disconnect, device number 51 [ 669.768229][ T5890] usb 3-1: config 0 descriptor?? [ 669.783150][T15354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.796564][T15354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.050102][ T5890] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 670.073186][ T5917] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 670.089872][ T5890] usb 3-1: USB disconnect, device number 53 [ 670.097052][ T58] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 670.267847][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 670.275347][ T5917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 670.284596][ T5917] usb 5-1: config 0 has no interface number 0 [ 670.313790][ T5917] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 670.319568][ T58] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 670.333199][ T58] usb 4-1: config 0 has no interface number 0 [ 670.340033][ T58] usb 4-1: config 0 interface 116 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 670.346758][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.361310][ T5917] usb 5-1: Product: syz [ 670.365601][ T5917] usb 5-1: Manufacturer: syz [ 670.371169][ T5917] usb 5-1: SerialNumber: syz [ 670.378861][ T58] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=ee.e7 [ 670.391912][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.393190][ T5917] usb 5-1: config 0 descriptor?? [ 670.414362][ T58] usb 4-1: Product: syz [ 670.418042][ T5917] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 670.428828][ T5917] usb 5-1: selecting invalid altsetting 1 [ 670.435668][ T5917] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 670.450465][ T58] usb 4-1: Manufacturer: syz [ 670.451537][ T5917] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 670.455431][ T58] usb 4-1: SerialNumber: syz [ 670.467061][ T5917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 670.480298][ T5917] usb 5-1: media controller created [ 670.494073][ T58] usb 4-1: config 0 descriptor?? [ 670.501524][T15352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 670.507752][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.537136][ T919] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 670.619910][ T5917] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 670.632464][ T5917] zl10353_read_register: readreg error (reg=127, ret==-32) [ 670.655686][ T5917] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 670.690323][ T919] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 670.709350][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 670.719912][ T919] usb 1-1: can't read configurations, error -61 [ 670.728220][ T58] peak_usb 4-1:0.116 can0: unable to request usb[type=0 value=1] err=-71 [ 670.740140][ T58] peak_usb 4-1:0.116: unable to read PCAN-USB Pro firmware info (err -71) [ 670.808871][ T58] peak_usb 4-1:0.116: probe with driver peak_usb failed with error -71 [ 671.059644][ T5917] usb 5-1: USB disconnect, device number 50 [ 671.068892][ T58] usb 4-1: USB disconnect, device number 72 [ 671.107449][ T919] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 671.267760][ T919] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 671.292411][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.309016][ T919] usb 1-1: can't read configurations, error -61 [ 671.325863][ T919] usb usb1-port1: attempt power cycle [ 671.688439][ T919] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 671.728921][ T919] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 671.756059][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.766108][ T919] usb 1-1: can't read configurations, error -61 [ 671.970100][ T919] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 672.008465][ T919] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 672.057764][ T919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 672.152925][ T919] usb 1-1: can't read configurations, error -61 [ 672.526753][T15439] delete_channel: no stack [ 672.677183][ T919] usb usb1-port1: unable to enumerate USB device [ 673.178500][T15455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2458'. [ 674.147136][T11102] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 674.197107][ T5917] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 674.265780][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 674.467362][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 674.480314][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.491637][T11102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 674.503064][T11102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 674.515341][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.526243][ T5917] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 674.536413][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.545655][T11102] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 674.555772][T11102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.565177][T11102] usb 5-1: Product: syz [ 674.570598][T11102] usb 5-1: Manufacturer: syz [ 674.576461][T11102] usb 5-1: SerialNumber: syz [ 674.582339][ T5917] usb 3-1: config 0 descriptor?? [ 674.618683][T11102] usb 5-1: config 0 descriptor?? [ 675.069774][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 675.075819][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 675.101045][T11102] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 675.120818][ T5917] usb 3-1: USB disconnect, device number 54 [ 675.265335][T11102] usb 5-1: USB disconnect, device number 51 [ 675.761836][ T5152] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 675.762849][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 675.771988][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: kworker/u9:1 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 675.772014][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 675.772028][ T5152] Workqueue: hci1 hci_rx_work [ 675.772052][ T5152] Call Trace: [ 675.772060][ T5152] [ 675.772068][ T5152] dump_stack_lvl+0x241/0x360 [ 675.772099][ T5152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.772125][ T5152] ? __pfx__printk+0x10/0x10 [ 675.772149][ T5152] ? kernfs_path_from_node+0x2b/0x250 [ 675.772173][ T5152] ? kernfs_path_from_node+0x217/0x250 [ 675.772195][ T5152] sysfs_create_dir_ns+0x2fd/0x3f0 [ 675.772215][ T5152] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 675.772243][ T5152] kobject_add_internal+0x435/0x8d0 [ 675.772275][ T5152] kobject_add+0x15b/0x230 [ 675.772297][ T5152] ? do_raw_spin_unlock+0x13c/0x8b0 [ 675.772324][ T5152] ? device_add+0x3e7/0xbf0 [ 675.772345][ T5152] ? __pfx_kobject_add+0x10/0x10 [ 675.772367][ T5152] ? _raw_spin_unlock+0x28/0x50 [ 675.772389][ T5152] ? get_device_parent+0x165/0x410 [ 675.772414][ T5152] device_add+0x4e5/0xbf0 [ 675.772440][ T5152] hci_conn_add_sysfs+0xe8/0x200 [ 675.772468][ T5152] le_conn_complete_evt+0xc6e/0x12a0 [ 675.772502][ T5152] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 675.772521][ T5152] ? __mutex_unlock_slowpath+0x229/0x800 [ 675.772545][ T5152] ? __skb_clone+0x5c/0x6d0 [ 675.772567][ T5152] ? skb_pull_data+0x112/0x230 [ 675.772594][ T5152] hci_le_conn_complete_evt+0x18c/0x420 [ 675.772622][ T5152] hci_event_packet+0xa5c/0x1550 [ 675.772652][ T5152] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 675.772678][ T5152] ? __pfx_hci_event_packet+0x10/0x10 [ 675.772710][ T5152] ? kcov_remote_start+0x3c0/0x7d0 [ 675.772726][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 675.772750][ T5152] ? hci_send_to_monitor+0xdc/0x530 [ 675.772774][ T5152] hci_rx_work+0x3f3/0xdb0 [ 675.772868][ T5152] ? process_scheduled_works+0x9cb/0x18e0 [ 675.772897][ T5152] process_scheduled_works+0xac3/0x18e0 [ 675.772952][ T5152] ? __pfx_process_scheduled_works+0x10/0x10 [ 675.772984][ T5152] ? assign_work+0x367/0x3d0 [ 675.773010][ T5152] worker_thread+0x870/0xd50 [ 675.773047][ T5152] ? __kthread_parkme+0x1a8/0x200 [ 675.773072][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 675.773094][ T5152] kthread+0x7b7/0x940 [ 675.773119][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 675.773141][ T5152] ? __pfx_kthread+0x10/0x10 [ 675.773162][ T5152] ? __pfx_kthread+0x10/0x10 [ 675.773184][ T5152] ? __pfx_kthread+0x10/0x10 [ 675.773207][ T5152] ? __pfx_kthread+0x10/0x10 [ 675.773229][ T5152] ? _raw_spin_unlock_irq+0x23/0x50 [ 675.773246][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 675.773266][ T5152] ? __pfx_kthread+0x10/0x10 [ 675.773290][ T5152] ret_from_fork+0x4b/0x80 [ 675.773308][ T5152] ? __pfx_kthread+0x10/0x10 [ 675.773332][ T5152] ret_from_fork_asm+0x1a/0x30 [ 675.773364][ T5152] [ 675.773404][ T5152] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 676.080483][ T5152] Bluetooth: hci1: failed to register connection device [ 676.156761][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 676.207094][ T58] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 676.338076][ T58] usb 1-1: device descriptor read/64, error -71 [ 676.639206][ T58] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 676.877394][ T58] usb 1-1: device descriptor read/64, error -71 [ 676.997460][ T58] usb usb1-port1: attempt power cycle [ 677.077234][ T5890] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 677.191119][T15560] delete_channel: no stack [ 677.337299][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 677.365039][ T5890] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.377101][ T58] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 677.387462][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 677.394738][ T5890] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 677.397367][T11102] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 677.404484][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.422025][ T58] usb 1-1: device descriptor read/8, error -71 [ 677.439600][ T5890] usb 4-1: config 0 descriptor?? [ 677.502438][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 677.507041][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 677.512077][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 677.530733][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 677.543435][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.551932][ T9] usb 5-1: Product: syz [ 677.556113][ T9] usb 5-1: Manufacturer: syz [ 677.561240][ T9] usb 5-1: SerialNumber: syz [ 677.572299][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 677.578976][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 677.592233][T11102] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.602524][T11102] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 677.615806][T11102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 677.627459][T11102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 677.637614][T11102] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 677.653652][T11102] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 677.663974][T11102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 677.674209][T11102] usb 3-1: Product: syz [ 677.675330][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 677.679283][T11102] usb 3-1: Manufacturer: syz [ 677.685557][ T58] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 677.689716][T11102] usb 3-1: SerialNumber: syz [ 677.703812][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 677.715428][T11102] usb 3-1: config 0 descriptor?? [ 677.718584][ T5890] usb 4-1: USB disconnect, device number 73 [ 677.728431][ T58] usb 1-1: device descriptor read/8, error -71 [ 677.791033][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 677.798154][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 677.838897][ T58] usb usb1-port1: unable to enumerate USB device [ 677.939404][T11102] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 677.948593][T11102] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 677.964155][T11102] usb 3-1: USB disconnect, device number 55 [ 677.998771][ T5890] r8152-cfgselector 5-1: USB disconnect, device number 52 [ 678.517458][ T5890] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 678.689559][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 678.717082][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 678.762665][ T5890] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 678.777677][T11102] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 678.777677][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.777706][ T5890] usb 4-1: Product: syz [ 678.806727][ T5890] usb 4-1: Manufacturer: syz [ 678.812524][ T5890] usb 4-1: SerialNumber: syz [ 678.831869][ T5890] usb 4-1: config 0 descriptor?? [ 678.862700][T15673] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 678.940603][T11102] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 678.953644][T15673] bond1: entered promiscuous mode [ 678.959362][T11102] usb 3-1: config 0 has no interface number 0 [ 678.974782][T15673] bond1: entered allmulticast mode [ 678.980253][T11102] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 678.993771][T15673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.000899][T11102] usb 3-1: config 0 interface 11 has no altsetting 0 [ 679.011758][T11102] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 679.023309][T11102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.043804][T11102] usb 3-1: config 0 descriptor?? [ 679.056757][T15648] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 679.072675][ T58] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 679.072776][T11102] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 679.095472][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 679.112720][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 679.121104][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 679.129759][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 679.225495][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 679.242664][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 679.263317][ T58] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 679.315420][ T58] usb 2-1: config 0 has no interface number 0 [ 679.336789][ T58] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 679.371424][ T58] usb 2-1: config 0 interface 11 has no altsetting 0 [ 679.383283][ T58] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 679.411997][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.414225][T11102] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 679.435817][ T58] usb 2-1: config 0 descriptor?? [ 679.460929][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 679.469324][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 679.485934][T15666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 679.494299][T15673] bond1 (unregistering): Released all slaves [ 679.503689][ T58] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 679.510368][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 679.535577][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 679.551013][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 679.566219][T11102] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 679.578498][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 679.591196][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 679.605113][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 679.925000][T15709] delete_channel: no stack [ 679.930081][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 679.940093][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 679.957204][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 679.979966][T11102] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 679.980339][ T58] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 680.002383][T11102] usb 3-1: USB disconnect, device number 56 [ 680.054918][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 680.091346][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 680.123903][T11102] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 680.134601][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 680.153231][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 680.165179][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 680.185353][T11102] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 680.212192][ T58] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 680.212940][T11102] keyspan 3-1:0.11: device disconnected [ 680.250701][ T58] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 680.339362][ T58] usb 2-1: USB disconnect, device number 45 [ 680.451594][T15795] qrtr: Invalid version 183 [ 680.462613][ T58] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 680.487596][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2493'. [ 680.557604][ T58] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 680.589082][ T58] keyspan 2-1:0.11: device disconnected [ 681.497033][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 681.676123][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.728368][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 681.750872][ T9] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 681.759267][ T9] usb 2-1: Manufacturer: syz [ 681.763898][ T9] usb 2-1: SerialNumber: syz [ 681.791979][ T9] usb 2-1: config 0 descriptor?? [ 681.831154][ T9] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 681.853264][ T9] usb 2-1: No valid video chain found. [ 681.899921][ T5890] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 681.919061][T15818] FAULT_INJECTION: forcing a failure. [ 681.919061][T15818] name failslab, interval 1, probability 0, space 0, times 0 [ 681.942515][ T5890] usb 4-1: USB disconnect, device number 74 [ 681.967322][T15818] CPU: 0 UID: 0 PID: 15818 Comm: syz.2.2495 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 681.967350][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 681.967361][T15818] Call Trace: [ 681.967369][T15818] [ 681.967377][T15818] dump_stack_lvl+0x241/0x360 [ 681.967409][T15818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.967433][T15818] ? __pfx__printk+0x10/0x10 [ 681.967461][T15818] ? __pfx___might_resched+0x10/0x10 [ 681.967487][T15818] should_fail_ex+0x424/0x570 [ 681.967510][T15818] should_failslab+0xac/0x100 [ 681.967534][T15818] kmem_cache_alloc_noprof+0x78/0x390 [ 681.967555][T15818] ? skb_clone+0x20c/0x390 [ 681.967578][T15818] skb_clone+0x20c/0x390 [ 681.967600][T15818] nfnetlink_rcv+0x52b/0x28f0 [ 681.967621][T15818] ? __dev_queue_xmit+0x2f9/0x3f60 [ 681.967645][T15818] ? __dev_queue_xmit+0x2f9/0x3f60 [ 681.967664][T15818] ? __dev_queue_xmit+0x2f9/0x3f60 [ 681.967683][T15818] ? __dev_queue_xmit+0x1780/0x3f60 [ 681.967699][T15818] ? kasan_save_track+0x3f/0x80 [ 681.967716][T15818] ? __kasan_slab_alloc+0x66/0x80 [ 681.967741][T15818] ? __do_fast_syscall_32+0xb4/0x110 [ 681.967766][T15818] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 681.967808][T15818] ? ref_tracker_free+0x63e/0x7e0 [ 681.967827][T15818] ? __asan_memcpy+0x40/0x70 [ 681.967843][T15818] ? __pfx_ref_tracker_free+0x10/0x10 [ 681.967860][T15818] ? __skb_clone+0x5c/0x6d0 [ 681.967894][T15818] ? skb_clone+0x240/0x390 [ 681.967923][T15818] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.967949][T15818] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.967975][T15818] netlink_unicast+0x7f8/0x9a0 [ 681.968005][T15818] ? __pfx_netlink_unicast+0x10/0x10 [ 681.968029][T15818] ? skb_put+0x114/0x1f0 [ 681.968049][T15818] netlink_sendmsg+0x8c3/0xcd0 [ 681.968092][T15818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.968119][T15818] ? __import_iovec+0x585/0x830 [ 681.968140][T15818] ? aa_sock_msg_perm+0x91/0x160 [ 681.968169][T15818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.968189][T15818] __sock_sendmsg+0x221/0x270 [ 681.968215][T15818] ____sys_sendmsg+0x523/0x860 [ 681.968243][T15818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.968279][T15818] __sys_sendmsg+0x271/0x360 [ 681.968304][T15818] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.968362][T15818] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 681.968380][T15818] ? lockdep_hardirqs_on+0x9d/0x150 [ 681.968402][T15818] __do_fast_syscall_32+0xb4/0x110 [ 681.968420][T15818] ? exc_page_fault+0x5f8/0x920 [ 681.968443][T15818] do_fast_syscall_32+0x34/0x80 [ 681.968464][T15818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.968484][T15818] RIP: 0023:0xf711d579 [ 681.968500][T15818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 681.968514][T15818] RSP: 002b:00000000f510d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 681.968533][T15818] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 681.968544][T15818] RDX: 0000000000000884 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.968555][T15818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.968565][T15818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 681.968575][T15818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.968601][T15818] [ 682.418316][T15808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.439812][T15808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.454619][ T919] usb 2-1: USB disconnect, device number 46 [ 682.637318][ T5890] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 682.797894][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 682.809036][ T5890] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 682.819437][ T5890] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 682.834200][ T5890] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 682.844023][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.860382][ T5890] usb 4-1: Product: syz [ 682.868718][ T5890] usb 4-1: Manufacturer: syz [ 682.876596][ T5890] usb 4-1: SerialNumber: syz [ 683.104040][ T5890] cytherm 4-1:5.0: Cypress thermometer device now attached [ 683.123678][ T5890] usb 4-1: USB disconnect, device number 75 [ 683.141946][ T5890] cytherm 4-1:5.0: Cypress thermometer now disconnected [ 683.647198][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 683.658357][T11102] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 683.806985][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 683.813828][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.826081][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.836529][ T5890] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 683.837187][T11102] usb 3-1: Using ep0 maxpacket: 16 [ 683.846937][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.857455][T11102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.861973][ T5890] usb 2-1: config 0 descriptor?? [ 683.879082][T11102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.890561][T11102] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 683.901491][T11102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.914414][T11102] usb 3-1: config 0 descriptor?? [ 683.967696][ T58] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 684.017002][ T919] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 684.120338][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 684.131975][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 684.147972][ T58] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 684.157516][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.165538][ T58] usb 1-1: Product: syz [ 684.169954][ T919] usb 4-1: Using ep0 maxpacket: 32 [ 684.175695][ T58] usb 1-1: Manufacturer: syz [ 684.180759][ T58] usb 1-1: SerialNumber: syz [ 684.186453][ T919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.196510][ T919] usb 4-1: config 0 has no interface number 0 [ 684.204304][ T58] usb 1-1: config 0 descriptor?? [ 684.216723][ T919] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 684.227533][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.235570][ T919] usb 4-1: Product: syz [ 684.240214][ T919] usb 4-1: Manufacturer: syz [ 684.244845][ T919] usb 4-1: SerialNumber: syz [ 684.253514][ T919] usb 4-1: config 0 descriptor?? [ 684.264301][ T919] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 684.273622][ T919] usb 4-1: selecting invalid altsetting 1 [ 684.279603][ T919] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 684.294374][ T919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 684.312309][ T5890] corsair 0003:1B1C:1B02.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 684.324762][ T919] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 684.336130][ T919] usb 4-1: media controller created [ 684.349097][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.360718][T11102] playstation 0003:054C:05C4.0019: item fetching failed at offset 2/5 [ 684.370665][T11102] playstation 0003:054C:05C4.0019: Parse failed [ 684.378319][T11102] playstation 0003:054C:05C4.0019: probe with driver playstation failed with error -22 [ 684.381151][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.397946][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.492659][ T5889] usb 3-1: USB disconnect, device number 57 [ 684.501236][ T5890] corsair 0003:1B1C:1B02.0018: Failed to get K90 initial state (error -71). [ 684.519905][ T58] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 684.550541][ T5890] usb 2-1: USB disconnect, device number 47 [ 684.562288][ T58] usb 1-1: USB disconnect, device number 60 [ 684.734088][ T919] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 685.155218][ T919] usb 4-1: USB disconnect, device number 76 [ 685.170028][ T5885] udevd[5885]: setting owner of /dev/bus/usb/004/076 to uid=0, gid=0 failed: No such file or directory [ 685.467741][T15921] delete_channel: no stack [ 685.636971][ T5890] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 685.902249][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.910349][ T5890] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 685.918952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.930655][ T5890] usb 1-1: config 0 has no interface number 0 [ 685.937842][ T5890] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 685.950926][ T5890] usb 1-1: config 0 interface 11 has no altsetting 0 [ 685.964312][ T5890] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 685.977222][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.999160][ T5890] usb 1-1: config 0 descriptor?? [ 686.007143][T15976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 686.083297][ T5890] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 686.104920][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 686.152832][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 686.227167][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 686.323460][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 686.352830][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 686.370505][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 686.408513][ T5890] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 686.426445][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 686.622971][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 686.669975][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 686.694207][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 686.729807][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 686.754728][ T5890] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 686.798846][ T5890] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 686.935532][ T5890] usb 1-1: USB disconnect, device number 61 [ 686.983103][ T5890] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 687.066391][T11102] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 687.078076][ T5890] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 687.133323][ T5890] keyspan 1-1:0.11: device disconnected [ 687.190213][T16023] usb usb8: usbfs: process 16023 (syz.2.2515) did not claim interface 0 before use [ 687.234697][T11102] usb 5-1: device descriptor read/64, error -71 [ 687.540735][T11102] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 687.630099][ T5917] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 687.738217][T11102] usb 5-1: device descriptor read/64, error -71 [ 687.887621][T11102] usb usb5-port1: attempt power cycle [ 687.937023][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 688.006953][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.054630][ T5917] usb 2-1: config 0 has no interfaces? [ 688.074959][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 688.118318][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.172030][ T5917] usb 2-1: config 0 descriptor?? [ 688.237044][ T5892] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 688.244699][T11102] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 688.286090][T11102] usb 5-1: device descriptor read/8, error -71 [ 688.439414][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 688.446667][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 688.459155][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 688.521440][ T5892] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 688.536959][T11102] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 688.551757][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.561388][T11102] usb 5-1: device descriptor read/8, error -71 [ 688.575428][ T5892] usb 1-1: Product: syz [ 688.589636][ T5892] usb 1-1: Manufacturer: syz [ 688.594296][ T5892] usb 1-1: SerialNumber: syz [ 688.622533][ T5892] usb 1-1: config 0 descriptor?? [ 688.639424][ T5892] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 688.649658][ T5892] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 688.677992][T11102] usb usb5-port1: unable to enumerate USB device [ 689.177650][ T919] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 689.267789][ T5892] em28xx 1-1:0.0: unknown em28xx chip ID (247) [ 689.346071][ T919] usb 4-1: Using ep0 maxpacket: 32 [ 689.353236][ T919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.364972][ T919] usb 4-1: config 0 has no interface number 0 [ 689.373829][ T919] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 689.386759][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.405235][ T919] usb 4-1: Product: syz [ 689.413802][ T919] usb 4-1: Manufacturer: syz [ 689.420373][ T919] usb 4-1: SerialNumber: syz [ 689.437395][ T919] usb 4-1: config 0 descriptor?? [ 689.451574][ T919] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 689.461636][ T919] usb 4-1: selecting invalid altsetting 1 [ 689.471785][ T919] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 689.484863][ T5892] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 689.485930][ T919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 689.507775][ T919] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 689.516330][ T919] usb 4-1: media controller created [ 689.548671][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.710580][T16039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.722718][T16039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.851885][ T919] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 689.948435][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'. [ 689.986711][ T919] usb 4-1: USB disconnect, device number 77 [ 690.427265][ T5917] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 690.537424][ T58] usb 2-1: USB disconnect, device number 48 [ 690.632907][T16068] delete_channel: no stack [ 690.653283][ T5892] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 690.660730][ T5892] em28xx 1-1:0.0: No AC97 audio processor [ 690.671017][ T5917] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 690.679375][ T5917] usb 5-1: config 0 has no interface number 0 [ 690.689369][ T5917] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 690.765831][ T5890] usb 1-1: USB disconnect, device number 62 [ 690.772126][ T5917] usb 5-1: config 0 interface 11 has no altsetting 0 [ 690.775510][ T5890] em28xx 1-1:0.0: Disconnecting em28xx [ 690.834119][ T5917] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 690.860916][ T5890] em28xx 1-1:0.0: Freeing device [ 690.872135][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.894208][ T5917] usb 5-1: config 0 descriptor?? [ 690.939820][T16093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 691.101072][ T5917] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 691.159343][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 691.183831][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 691.209775][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 691.292934][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 691.339914][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 691.377079][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 691.412751][ T5917] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 691.565144][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 691.590687][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 691.605470][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 691.727006][ T5890] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 691.788355][T16150] FAULT_INJECTION: forcing a failure. [ 691.788355][T16150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.824078][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 691.842565][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 691.854810][T16150] CPU: 0 UID: 0 PID: 16150 Comm: syz.2.2532 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 691.854826][T16150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 691.854833][T16150] Call Trace: [ 691.854838][T16150] [ 691.854843][T16150] dump_stack_lvl+0x241/0x360 [ 691.854863][T16150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.854877][T16150] ? __pfx__printk+0x10/0x10 [ 691.854896][T16150] should_fail_ex+0x424/0x570 [ 691.854910][T16150] _copy_to_user+0x31/0xb0 [ 691.854926][T16150] simple_read_from_buffer+0xc4/0x170 [ 691.854943][T16150] proc_fail_nth_read+0x1ef/0x260 [ 691.854956][T16150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.854968][T16150] ? rw_verify_area+0x246/0x630 [ 691.854978][T16150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.854989][T16150] vfs_read+0x21f/0xb90 [ 691.855002][T16150] ? __pfx___mutex_lock+0x10/0x10 [ 691.855015][T16150] ? __pfx_vfs_read+0x10/0x10 [ 691.855027][T16150] ? __fget_files+0x2a/0x420 [ 691.855038][T16150] ? __fget_files+0x39d/0x420 [ 691.855046][T16150] ? __fget_files+0x2a/0x420 [ 691.855059][T16150] ksys_read+0x19d/0x2d0 [ 691.855071][T16150] ? __pfx_ksys_read+0x10/0x10 [ 691.855084][T16150] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 691.855096][T16150] ? lockdep_hardirqs_on+0x9d/0x150 [ 691.855109][T16150] __do_fast_syscall_32+0xb4/0x110 [ 691.855121][T16150] ? exc_page_fault+0x5f8/0x920 [ 691.855134][T16150] do_fast_syscall_32+0x34/0x80 [ 691.855146][T16150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.855159][T16150] RIP: 0023:0xf711d579 [ 691.855168][T16150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 691.855177][T16150] RSP: 002b:00000000f50ec590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 691.855188][T16150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ec620 [ 691.855195][T16150] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 691.855201][T16150] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 691.855206][T16150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 691.855212][T16150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.855226][T16150] [ 692.079495][ T5917] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 692.117341][ T5917] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 692.199447][ T5917] usb 5-1: USB disconnect, device number 57 [ 692.209616][ T5917] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 692.222328][ T5917] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 692.232449][ T5917] keyspan 5-1:0.11: device disconnected [ 692.269937][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 692.334437][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.384651][ T5890] usb 1-1: config 0 has no interfaces? [ 692.390813][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 692.404669][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.418397][ T5890] usb 1-1: config 0 descriptor?? [ 692.678799][ T5890] usb 1-1: USB disconnect, device number 63 [ 692.786660][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 692.949026][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 692.966572][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.988256][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.051688][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 693.063415][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.081705][ T9] usb 3-1: config 0 descriptor?? [ 693.107352][ T5917] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 693.260165][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 693.277446][ T5890] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 693.313001][ T5917] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 693.332872][ T5917] usb 5-1: config 1 has no interface number 1 [ 693.339577][ T5917] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 693.355822][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.365667][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.379852][ T5917] usb 5-1: Product: syz [ 693.384082][ T5917] usb 5-1: Manufacturer: syz [ 693.397034][ T5917] usb 5-1: SerialNumber: syz [ 693.437016][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 693.448935][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.479106][ T5890] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 693.501159][ T5890] usb 4-1: config 0 has no interface number 0 [ 693.507662][ T5890] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 693.520481][ T5890] usb 4-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 693.531471][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 693.532432][ T58] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 693.539678][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 693.546456][ T5890] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 693.572007][ T5890] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 693.577279][ T9] usb 3-1: USB disconnect, device number 58 [ 693.583035][ T5890] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 693.604488][ T5890] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 693.614664][ T5890] usb 4-1: config 0 interface 122 has no altsetting 0 [ 693.624159][ T5890] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 693.653836][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.662439][ T5890] usb 4-1: Product: syz [ 693.666702][ T5890] usb 4-1: Manufacturer: syz [ 693.671584][ T5890] usb 4-1: SerialNumber: syz [ 693.679197][ T5890] usb 4-1: config 0 descriptor?? [ 693.684967][T16192] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 693.697773][T16192] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 693.717782][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 693.724964][ T58] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.738928][ T58] usb 2-1: config 0 has no interface number 0 [ 693.754350][ T58] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 693.756144][T16156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2533'. [ 693.764825][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.781932][ T58] usb 2-1: Product: syz [ 693.786121][ T58] usb 2-1: Manufacturer: syz [ 693.786140][ T58] usb 2-1: SerialNumber: syz [ 693.801058][ T58] usb 2-1: config 0 descriptor?? [ 693.813880][ T58] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 693.823557][ T58] usb 2-1: selecting invalid altsetting 1 [ 693.834223][ T58] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 693.852124][ T58] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.868049][ T5917] usb 5-1: found format II with max.bitrate = 26774, frame size=8 [ 693.874192][ T58] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 693.884625][ T5917] usb 5-1: found format II with max.bitrate = 26774, frame size=8 [ 693.885053][ T58] usb 2-1: media controller created [ 693.901073][ T5917] usb 5-1: failed to enable PITCH for EP 0x82 [ 693.912877][T16192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.935567][ T5917] usb 5-1: USB disconnect, device number 58 [ 693.943512][T16192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.978313][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.999284][T16192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.052122][T16192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.124501][ T5890] pl2303 4-1:0.122: pl2303 converter detected [ 694.131858][ T5890] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 694.141596][ T5890] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 694.150956][ T5890] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 694.160853][ T5890] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 694.170712][ T5890] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 694.182036][ T5890] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 694.203939][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.220539][ T5890] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 694.247562][ T5890] pl2303 4-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 694.280887][ T5890] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 694.302688][ T58] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 694.317585][ T5890] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 694.336042][ T5890] pl2303 4-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 694.364248][ T5890] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 694.376304][ T58] usb 2-1: USB disconnect, device number 49 [ 694.409602][ T5890] usb 4-1: USB disconnect, device number 78 [ 694.446563][ T5890] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 694.473380][ T5890] pl2303 4-1:0.122: device disconnected [ 694.560139][ T5892] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 694.717028][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 694.741187][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.764066][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.795165][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.812325][ T5892] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 694.830810][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.844500][ T5892] usb 3-1: config 0 descriptor?? [ 694.915388][ T5917] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 695.179461][ T5917] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 695.224235][ T5917] usb 1-1: config 0 has no interface number 0 [ 695.241915][ T5917] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 695.284693][ T5917] usb 1-1: config 0 interface 11 has no altsetting 0 [ 695.314675][ T5917] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 695.359011][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.400738][ T5892] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 695.425938][ T5917] usb 1-1: config 0 descriptor?? [ 695.450851][T16289] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 695.464845][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input154 [ 695.477858][ T5917] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 695.499912][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 695.537854][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 695.557998][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 695.610878][T11102] IPVS: starting estimator thread 0... [ 695.653583][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 695.666548][ T5892] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 695.692708][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 695.704378][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 695.721940][T16316] IPVS: using max 33 ests per chain, 79200 per kthread [ 695.730706][ T5892] usb 3-1: USB disconnect, device number 59 [ 695.755457][ T5917] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 695.771696][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 695.779805][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 695.792834][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 695.802592][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 695.812744][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 695.821561][ T5917] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 695.890165][ T5917] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 695.929162][ T5917] usb 1-1: USB disconnect, device number 64 [ 695.978417][ T5917] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 696.000545][ T5917] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 696.014416][ T5917] keyspan 1-1:0.11: device disconnected [ 696.322383][T16366] fuse: blksize only supported for fuseblk [ 696.727089][ T5892] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 696.897441][ T5890] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 696.917009][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 696.928636][ T5892] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.959975][ T5892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 696.966979][ T58] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 697.014820][ T5892] usb 2-1: string descriptor 0 read error: -22 [ 697.040200][ T5892] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 697.084457][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.107306][ T5890] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 697.146021][ T5890] usb 3-1: config 0 has no interface number 0 [ 697.180218][ T5890] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 697.217409][ T5890] usb 3-1: config 0 interface 11 has no altsetting 0 [ 697.234520][ T5890] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 697.253292][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.269098][ T5890] usb 3-1: config 0 descriptor?? [ 697.287290][T16379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.297493][ T58] usb 4-1: device descriptor read/64, error -71 [ 697.311911][ T5890] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 697.354969][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 697.440535][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 697.461793][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 697.488855][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 697.512387][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 697.537883][ T58] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 697.554634][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 697.603826][ T5890] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 697.637958][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 697.697577][ T58] usb 4-1: device descriptor read/64, error -71 [ 697.738914][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 697.751192][T16413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 697.777416][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 697.785217][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 697.817397][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 697.827496][ T58] usb usb4-port1: attempt power cycle [ 697.839280][ T5890] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 697.852601][ T5890] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 697.886587][ T5890] usb 3-1: USB disconnect, device number 60 [ 697.920687][ T5890] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 697.952384][ T5890] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 697.980479][ T5890] keyspan 3-1:0.11: device disconnected [ 698.127673][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 698.177625][ T58] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 698.209639][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 698.227917][ T58] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 698.238173][ T58] usb 4-1: config 1 has no interface number 1 [ 698.251062][ T58] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 698.291766][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 698.300788][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.311713][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 698.315497][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.331256][ T9] usb 1-1: config 1 has no interface number 1 [ 698.348685][ T58] usb 4-1: Product: syz [ 698.349653][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 698.352962][ T58] usb 4-1: Manufacturer: syz [ 698.388130][ T58] usb 4-1: SerialNumber: syz [ 698.400336][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.411080][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.424322][ T9] usb 1-1: Product: syz [ 698.430933][ T9] usb 1-1: Manufacturer: syz [ 698.439099][ T9] usb 1-1: SerialNumber: syz [ 698.626439][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2549'. [ 698.876471][T16372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2551'. [ 698.953754][ T58] usb 4-1: found format II with max.bitrate = 26774, frame size=8 [ 698.970665][ T58] usb 4-1: found format II with max.bitrate = 26774, frame size=8 [ 698.986084][ T58] usb 4-1: failed to enable PITCH for EP 0x82 [ 699.054078][ T9] usb 1-1: found format II with max.bitrate = 26774, frame size=8 [ 699.070690][ T9] usb 1-1: found format II with max.bitrate = 26774, frame size=8 [ 699.080329][ T58] usb 4-1: USB disconnect, device number 81 [ 699.289411][ T9] usb 1-1: failed to enable PITCH for EP 0x82 [ 699.404997][ T5892] usbhid 2-1:1.0: can't add hid device: -71 [ 699.535987][ T5892] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 699.558677][ T9] usb 1-1: USB disconnect, device number 65 [ 699.604670][ T5892] usb 2-1: USB disconnect, device number 50 [ 699.951435][T16460] delete_channel: no stack [ 700.032487][ T9304] udevd[9304]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.093912][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 700.210459][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2561'. [ 700.687205][ T919] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 700.793722][T16544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.801803][T16544] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 700.859866][ T919] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 700.868630][ T919] usb 3-1: config 0 has no interface number 0 [ 700.882312][T16544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 700.888383][T16544] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 700.912613][ T919] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 700.928090][T16544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.934153][T16544] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 700.976098][ T919] usb 3-1: config 0 interface 11 has no altsetting 0 [ 701.006235][T16544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 701.012517][T16544] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 701.020667][ T919] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 701.032633][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.043266][ T919] usb 3-1: config 0 descriptor?? [ 701.051205][T16530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.062594][ T919] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 701.074981][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 701.085093][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 701.094103][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 701.110545][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 701.125922][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 701.348247][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 701.374399][ T919] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 701.385412][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 701.393959][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 701.402445][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 701.450847][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 701.458734][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 701.468924][ T919] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 701.480891][ T919] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 701.506835][ T919] usb 3-1: USB disconnect, device number 61 [ 701.524832][ T919] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 701.586558][ T919] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 701.624761][ T919] keyspan 3-1:0.11: device disconnected [ 702.579273][T16616] misc userio: The device must be registered before sending interrupts [ 702.797110][ T58] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 703.324107][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 703.654957][T16630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2576'. [ 703.916181][ T58] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 703.925341][ T58] usb 5-1: config 1 has no interface number 1 [ 703.932058][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 703.963183][ T58] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.982886][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.991286][ T58] usb 5-1: Product: syz [ 703.997103][ T58] usb 5-1: Manufacturer: syz [ 704.001724][ T58] usb 5-1: SerialNumber: syz [ 704.284058][T16592] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2569'. [ 704.395233][ T58] usb 5-1: found format II with max.bitrate = 26774, frame size=8 [ 704.396017][T16645] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.416307][ T58] usb 5-1: found format II with max.bitrate = 26774, frame size=8 [ 704.438311][T16647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2578'. [ 704.483230][ T58] usb 5-1: failed to enable PITCH for EP 0x82 [ 704.597230][ T58] usb 5-1: USB disconnect, device number 59 [ 704.741839][ T5892] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 704.757288][T16681] FAULT_INJECTION: forcing a failure. [ 704.757288][T16681] name failslab, interval 1, probability 0, space 0, times 0 [ 704.777442][T16681] CPU: 1 UID: 0 PID: 16681 Comm: syz.2.2583 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 704.777468][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 704.777479][T16681] Call Trace: [ 704.777487][T16681] [ 704.777495][T16681] dump_stack_lvl+0x241/0x360 [ 704.777527][T16681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.777551][T16681] ? __pfx__printk+0x10/0x10 [ 704.777580][T16681] ? __pfx___might_resched+0x10/0x10 [ 704.777607][T16681] should_fail_ex+0x424/0x570 [ 704.777632][T16681] should_failslab+0xac/0x100 [ 704.777657][T16681] __kmalloc_cache_noprof+0x73/0x370 [ 704.777680][T16681] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 704.777709][T16681] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 704.777742][T16681] sctp_association_new+0x15ad/0x2540 [ 704.777776][T16681] sctp_connect_new_asoc+0x31c/0x700 [ 704.777798][T16681] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 704.777814][T16681] ? sctp_sendmsg+0xf30/0x3620 [ 704.777836][T16681] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 704.777852][T16681] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 704.777875][T16681] sctp_sendmsg+0x2009/0x3620 [ 704.777914][T16681] ? __pfx_sctp_sendmsg+0x10/0x10 [ 704.777935][T16681] ? aa_sk_perm+0x96f/0xac0 [ 704.777975][T16681] ? inet_sendmsg+0x330/0x390 [ 704.777998][T16681] __sock_sendmsg+0x1a6/0x270 [ 704.778024][T16681] __sys_sendto+0x365/0x4c0 [ 704.778046][T16681] ? __pfx___sys_sendto+0x10/0x10 [ 704.778074][T16681] ? __fget_files+0x2a/0x420 [ 704.778098][T16681] ? ksys_write+0x275/0x2d0 [ 704.778120][T16681] ? __secure_computing+0xef/0x2f0 [ 704.778140][T16681] __ia32_sys_sendto+0xdd/0x100 [ 704.778156][T16681] __do_fast_syscall_32+0xb4/0x110 [ 704.778172][T16681] ? exc_page_fault+0x5f8/0x920 [ 704.778191][T16681] do_fast_syscall_32+0x34/0x80 [ 704.778208][T16681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.778224][T16681] RIP: 0023:0xf711d579 [ 704.778236][T16681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 704.778247][T16681] RSP: 002b:00000000f510d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 704.778262][T16681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 704.778272][T16681] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000100 [ 704.778280][T16681] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 704.778288][T16681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 704.778296][T16681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.778322][T16681] [ 705.138038][ T5892] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 705.163409][ T5892] usb 2-1: config 0 has no interface number 0 [ 705.181059][ T5892] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 705.342611][ T5892] usb 2-1: config 0 interface 11 has no altsetting 0 [ 705.377029][ T5892] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 705.431292][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.464790][ T5892] usb 2-1: config 0 descriptor?? [ 705.532053][T16649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 705.551151][ T5892] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 705.588253][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 705.664259][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 705.672836][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 705.685464][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 705.693710][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 705.877233][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 705.921381][ T5892] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 705.933774][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 705.962700][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 705.992912][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 706.016772][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 706.055497][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 706.063828][ T5892] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 706.090320][ T5892] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 706.156038][ T5892] usb 2-1: USB disconnect, device number 51 [ 706.194521][ T5892] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 706.246400][ T5892] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 706.264846][ T5892] keyspan 2-1:0.11: device disconnected [ 706.469993][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2588'. [ 706.908969][ T58] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 707.347032][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 707.541562][ T5889] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 707.664882][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 707.676711][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.692868][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.733228][ T58] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 707.747530][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.757089][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 707.764064][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.468789][ T5889] usb 1-1: config 0 has no interfaces? [ 708.474837][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 708.485387][ T58] usb 2-1: config 0 descriptor?? [ 708.491034][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.629460][ T5889] usb 1-1: config 0 descriptor?? [ 709.022967][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 709.029015][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 709.169401][ T58] usb 2-1: USB disconnect, device number 52 [ 709.187167][ T5892] usb 1-1: USB disconnect, device number 66 [ 709.977171][ T5892] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 710.166285][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 710.186755][T16819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 710.207081][ T5892] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 710.216093][ T5892] usb 3-1: config 1 has no interface number 1 [ 710.227735][T16821] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 710.252753][T16821] netlink: 'syz.0.2605': attribute type 2 has an invalid length. [ 710.261006][ T5892] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 710.310171][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.326983][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.350403][ T5892] usb 3-1: Product: syz [ 710.354619][ T5892] usb 3-1: Manufacturer: syz [ 710.376978][ T5892] usb 3-1: SerialNumber: syz [ 710.535141][T16833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2607'. [ 710.632245][T16789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2600'. [ 710.672943][ T5892] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 710.687722][ T5892] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 710.700970][ T5892] usb 3-1: failed to enable PITCH for EP 0x82 [ 710.806081][ T5892] usb 3-1: USB disconnect, device number 62 [ 711.016113][T16874] FAULT_INJECTION: forcing a failure. [ 711.016113][T16874] name failslab, interval 1, probability 0, space 0, times 0 [ 711.064458][T16874] CPU: 0 UID: 0 PID: 16874 Comm: syz.3.2611 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 711.064500][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 711.064513][T16874] Call Trace: [ 711.064521][T16874] [ 711.064530][T16874] dump_stack_lvl+0x241/0x360 [ 711.064565][T16874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.064589][T16874] ? __pfx__printk+0x10/0x10 [ 711.064617][T16874] ? __pfx___might_resched+0x10/0x10 [ 711.064643][T16874] should_fail_ex+0x424/0x570 [ 711.064668][T16874] should_failslab+0xac/0x100 [ 711.064694][T16874] __kmalloc_noprof+0xdf/0x4d0 [ 711.064717][T16874] ? sock_kmalloc+0xd7/0x160 [ 711.064736][T16874] ? do_raw_spin_unlock+0x13c/0x8b0 [ 711.064765][T16874] sock_kmalloc+0xd7/0x160 [ 711.064788][T16874] hash_recvmsg+0x1bd/0x7f0 [ 711.064815][T16874] ? __pfx_hash_recvmsg+0x10/0x10 [ 711.064845][T16874] sock_recvmsg_nosec+0x18e/0x1d0 [ 711.064873][T16874] ____sys_recvmsg+0x3d4/0x480 [ 711.064902][T16874] ? __pfx_____sys_recvmsg+0x10/0x10 [ 711.064920][T16874] ? get_compat_msghdr+0x45e/0x730 [ 711.064960][T16874] ? do_recvmmsg+0x566/0xab0 [ 711.064983][T16874] do_recvmmsg+0x53e/0xab0 [ 711.065014][T16874] ? __pfx_do_recvmmsg+0x10/0x10 [ 711.065054][T16874] ? rcu_read_lock_any_held+0xbb/0x160 [ 711.065096][T16874] ? ksys_write+0x24e/0x2d0 [ 711.065145][T16874] __sys_recvmmsg+0x1aa/0x280 [ 711.065165][T16874] ? fput+0x9b/0xd0 [ 711.065180][T16874] ? __pfx___sys_recvmmsg+0x10/0x10 [ 711.065196][T16874] ? ksys_write+0x275/0x2d0 [ 711.065224][T16874] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 711.065246][T16874] __do_fast_syscall_32+0xb4/0x110 [ 711.065265][T16874] ? exc_page_fault+0x5f8/0x920 [ 711.065288][T16874] do_fast_syscall_32+0x34/0x80 [ 711.065308][T16874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 711.065329][T16874] RIP: 0023:0xf706d579 [ 711.065344][T16874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 711.065358][T16874] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 711.065375][T16874] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 711.065387][T16874] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.065397][T16874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.065407][T16874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 711.065417][T16874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.065443][T16874] [ 711.316300][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.622913][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.201765][T16884] FAULT_INJECTION: forcing a failure. [ 712.201765][T16884] name failslab, interval 1, probability 0, space 0, times 0 [ 712.304538][T16884] CPU: 1 UID: 0 PID: 16884 Comm: syz.3.2613 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 712.304556][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 712.304563][T16884] Call Trace: [ 712.304568][T16884] [ 712.304573][T16884] dump_stack_lvl+0x241/0x360 [ 712.304593][T16884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.304607][T16884] ? __pfx__printk+0x10/0x10 [ 712.304623][T16884] ? __pfx___might_resched+0x10/0x10 [ 712.304638][T16884] should_fail_ex+0x424/0x570 [ 712.304652][T16884] should_failslab+0xac/0x100 [ 712.304669][T16884] kmem_cache_alloc_noprof+0x78/0x390 [ 712.304684][T16884] ? key_alloc+0x341/0xff0 [ 712.304703][T16884] ? key_user_lookup+0x1b2/0x450 [ 712.304728][T16884] key_alloc+0x341/0xff0 [ 712.304762][T16884] keyring_alloc+0x44/0xb0 [ 712.304781][T16884] join_session_keyring+0x152/0x470 [ 712.304798][T16884] lookup_user_key+0x591/0x15b0 [ 712.304812][T16884] ? lockdep_hardirqs_on+0x9d/0x150 [ 712.304826][T16884] ? __pfx_lookup_user_key+0x10/0x10 [ 712.304840][T16884] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 712.304861][T16884] ? rep_movs_alternative+0x4a/0x90 [ 712.304873][T16884] __se_sys_add_key+0x300/0x4b0 [ 712.304884][T16884] ? __pfx___se_sys_add_key+0x10/0x10 [ 712.304898][T16884] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 712.304910][T16884] ? lockdep_hardirqs_on+0x9d/0x150 [ 712.304920][T16884] ? __ia32_sys_add_key+0x20/0xc0 [ 712.304932][T16884] __do_fast_syscall_32+0xb4/0x110 [ 712.304943][T16884] ? exc_page_fault+0x5f8/0x920 [ 712.304957][T16884] do_fast_syscall_32+0x34/0x80 [ 712.304969][T16884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.304981][T16884] RIP: 0023:0xf706d579 [ 712.304990][T16884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 712.304999][T16884] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 712.305010][T16884] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 712.305017][T16884] RDX: 0000000080000080 RSI: 00000000000fffff RDI: 00000000fffffffd [ 712.305024][T16884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.305029][T16884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 712.305035][T16884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.305049][T16884] [ 712.978081][T16889] qrtr: Invalid version 183 [ 712.994826][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2616'. [ 713.004544][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 713.207827][ T58] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 713.213002][T16907] FAULT_INJECTION: forcing a failure. [ 713.213002][T16907] name failslab, interval 1, probability 0, space 0, times 0 [ 713.257020][T16907] CPU: 1 UID: 0 PID: 16907 Comm: syz.4.2621 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 713.257045][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 713.257054][T16907] Call Trace: [ 713.257061][T16907] [ 713.257068][T16907] dump_stack_lvl+0x241/0x360 [ 713.257097][T16907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.257119][T16907] ? __pfx__printk+0x10/0x10 [ 713.257145][T16907] ? __pfx___might_resched+0x10/0x10 [ 713.257172][T16907] should_fail_ex+0x424/0x570 [ 713.257196][T16907] should_failslab+0xac/0x100 [ 713.257222][T16907] __kmalloc_noprof+0xdf/0x4d0 [ 713.257245][T16907] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 713.257264][T16907] ? apparmor_capable+0x13b/0x1b0 [ 713.257285][T16907] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 713.257312][T16907] genl_rcv_msg+0x819/0xf00 [ 713.257339][T16907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.257355][T16907] ? __dev_queue_xmit+0x1780/0x3f60 [ 713.257372][T16907] ? kasan_save_track+0x3f/0x80 [ 713.257389][T16907] ? __kasan_slab_alloc+0x66/0x80 [ 713.257423][T16907] ? __do_fast_syscall_32+0xb4/0x110 [ 713.257462][T16907] ? __lock_acquire+0xad5/0xd80 [ 713.257482][T16907] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 713.257498][T16907] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 713.257515][T16907] ? __pfx_nl80211_post_doit+0x10/0x10 [ 713.257546][T16907] netlink_rcv_skb+0x208/0x480 [ 713.257572][T16907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.257592][T16907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.257637][T16907] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.257667][T16907] genl_rcv+0x28/0x40 [ 713.257684][T16907] netlink_unicast+0x7f8/0x9a0 [ 713.257714][T16907] ? __pfx_netlink_unicast+0x10/0x10 [ 713.257738][T16907] ? skb_put+0x114/0x1f0 [ 713.257760][T16907] netlink_sendmsg+0x8c3/0xcd0 [ 713.257797][T16907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.257825][T16907] ? __import_iovec+0x585/0x830 [ 713.257847][T16907] ? aa_sock_msg_perm+0x91/0x160 [ 713.257876][T16907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.257899][T16907] __sock_sendmsg+0x221/0x270 [ 713.257925][T16907] ____sys_sendmsg+0x523/0x860 [ 713.257953][T16907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.257988][T16907] __sys_sendmsg+0x271/0x360 [ 713.258013][T16907] ? __pfx___sys_sendmsg+0x10/0x10 [ 713.258082][T16907] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 713.258103][T16907] ? lockdep_hardirqs_on+0x9d/0x150 [ 713.258126][T16907] __do_fast_syscall_32+0xb4/0x110 [ 713.258147][T16907] ? exc_page_fault+0x5f8/0x920 [ 713.258172][T16907] do_fast_syscall_32+0x34/0x80 [ 713.258194][T16907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 713.258215][T16907] RIP: 0023:0xf707d579 [ 713.258231][T16907] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 713.258244][T16907] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 713.258264][T16907] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 713.258277][T16907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.258287][T16907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 713.258297][T16907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 713.258307][T16907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 713.258334][T16907] [ 713.620927][ T5889] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 713.698231][T16920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2622'. [ 713.718733][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 713.729100][ T58] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 713.740848][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 713.754777][ T58] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 713.764384][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.772753][ T58] usb 1-1: Product: syz [ 713.777032][ T58] usb 1-1: Manufacturer: syz [ 713.781661][ T58] usb 1-1: SerialNumber: syz [ 713.791851][ T58] usb 1-1: config 0 descriptor?? [ 713.843961][ T58] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 713.855262][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 713.867192][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 713.882165][ T5889] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 713.894666][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.904631][ T5889] usb 3-1: Product: syz [ 713.910716][ T5889] usb 3-1: Manufacturer: syz [ 713.915297][ T5889] usb 3-1: SerialNumber: syz [ 713.922262][ T919] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 713.930776][ T5889] usb 3-1: config 0 descriptor?? [ 714.097500][ T919] usb 4-1: Using ep0 maxpacket: 16 [ 714.104626][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 714.114336][ T919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.124732][ T919] usb 4-1: config 0 has no interfaces? [ 714.130487][ T919] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 714.139857][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.152304][ T919] usb 4-1: config 0 descriptor?? [ 714.298705][ T5889] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 714.386112][ T5889] usb 3-1: USB disconnect, device number 63 [ 714.458171][ T5892] usb 4-1: USB disconnect, device number 82 [ 714.829172][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 715.002642][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 715.019755][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 715.036591][ T9] usb 5-1: config 1 has no interface number 1 [ 715.043586][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 715.063101][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.073098][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.103744][ T9] usb 5-1: Product: syz [ 715.120614][ T9] usb 5-1: Manufacturer: syz [ 715.146990][ T9] usb 5-1: SerialNumber: syz [ 715.153516][ T919] usb 1-1: USB disconnect, device number 67 [ 715.237745][T16971] qrtr: Invalid version 183 [ 715.244913][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 715.253991][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 715.593270][T16919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2623'. [ 715.814461][ T9] usb 5-1: found format II with max.bitrate = 26774, frame size=8 [ 715.846073][ T9] usb 5-1: found format II with max.bitrate = 26774, frame size=8 [ 715.864070][ T9] usb 5-1: failed to enable PITCH for EP 0x82 [ 715.921625][ T9] usb 5-1: USB disconnect, device number 60 [ 716.294655][T16979] delete_channel: no stack [ 716.669951][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.722914][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2635'. [ 717.847609][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 717.861811][T17039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.876335][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 717.886599][T17039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'. [ 717.908815][T17039] gtp1: entered promiscuous mode [ 717.913945][T17039] gtp1: entered allmulticast mode [ 717.919552][ T919] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 718.007247][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 718.008904][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.008933][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.008969][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 718.008999][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.011911][ T9] usb 4-1: config 0 descriptor?? [ 718.090067][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 718.092164][ T919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.092194][ T919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.092228][ T919] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 718.092256][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.094643][ T919] usb 3-1: config 0 descriptor?? [ 718.176282][T17054] qrtr: Invalid version 183 [ 718.183857][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 718.183907][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 718.297834][ T5889] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 718.433520][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 718.433628][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 718.436396][ T9] usb 4-1: USB disconnect, device number 83 [ 718.447914][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 718.486241][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.486261][ T5889] usb 2-1: config 0 has no interfaces? [ 718.486311][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 718.486331][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.491381][ T5889] usb 2-1: config 0 descriptor?? [ 718.585851][ T919] usbhid 3-1:0.0: can't add hid device: -71 [ 718.620569][ T919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 718.646084][ T919] usb 3-1: USB disconnect, device number 64 [ 718.835276][ T5889] usb 2-1: USB disconnect, device number 53 [ 719.385764][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2648'. [ 719.407189][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 719.569138][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 719.576583][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.588470][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.614553][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 719.667984][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.754316][ T9] usb 4-1: config 0 descriptor?? [ 719.857013][T11102] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 720.019838][T11102] usb 3-1: unable to get BOS descriptor or descriptor too short [ 720.030023][T11102] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 720.082088][T11102] usb 3-1: config 1 has no interface number 1 [ 720.119508][T11102] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 720.175285][ T9] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 720.190155][T11102] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.222366][T11102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.236789][T11102] usb 3-1: Product: syz [ 720.241359][T11102] usb 3-1: Manufacturer: syz [ 720.246025][T11102] usb 3-1: SerialNumber: syz [ 720.524643][T17100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2649'. [ 720.551494][T11102] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 720.559716][T11102] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 720.569820][T11102] usb 3-1: failed to enable PITCH for EP 0x82 [ 720.597211][T11102] usb 3-1: USB disconnect, device number 65 [ 720.628401][ T5890] usb 4-1: USB disconnect, device number 84 [ 720.893401][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.687035][ T5889] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 721.867364][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 721.897071][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.913888][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.935644][ T5889] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 721.959285][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.998721][ T5889] usb 4-1: config 0 descriptor?? [ 722.460835][ T5889] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 722.493205][T17211] FAULT_INJECTION: forcing a failure. [ 722.493205][T17211] name failslab, interval 1, probability 0, space 0, times 0 [ 722.506310][T17211] CPU: 0 UID: 0 PID: 17211 Comm: syz.4.2664 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 722.506327][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 722.506333][T17211] Call Trace: [ 722.506339][T17211] [ 722.506343][T17211] dump_stack_lvl+0x241/0x360 [ 722.506364][T17211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.506385][T17211] ? __pfx__printk+0x10/0x10 [ 722.506408][T17211] ? __lock_acquire+0xad5/0xd80 [ 722.506437][T17211] should_fail_ex+0x424/0x570 [ 722.506461][T17211] should_failslab+0xac/0x100 [ 722.506477][T17211] __kmalloc_cache_noprof+0x73/0x370 [ 722.506491][T17211] ? nsim_fib_event_nb+0x17c/0x10b0 [ 722.506507][T17211] nsim_fib_event_nb+0x17c/0x10b0 [ 722.506541][T17211] notifier_call_chain+0x1a5/0x3f0 [ 722.506569][T17211] ? atomic_notifier_call_chain+0x26/0x180 [ 722.506590][T17211] atomic_notifier_call_chain+0xdb/0x180 [ 722.506612][T17211] call_fib_notifiers+0x31/0x60 [ 722.506628][T17211] fib6_del+0x1066/0x1600 [ 722.506644][T17211] ? fib6_del+0x1151/0x1600 [ 722.506665][T17211] ? __pfx_fib6_del+0x10/0x10 [ 722.506681][T17211] ? do_raw_spin_lock+0x151/0x370 [ 722.506718][T17211] ? __ip6_del_rt+0x8c/0x180 [ 722.506746][T17211] __ip6_del_rt+0x97/0x180 [ 722.506765][T17211] ip6_del_rt+0xe3/0x140 [ 722.506780][T17211] ? __pfx_ip6_del_rt+0x10/0x10 [ 722.506793][T17211] ? nlmsg_notify+0xfb/0x1c0 [ 722.506805][T17211] ? nlmsg_notify+0x15a/0x1c0 [ 722.506821][T17211] __ipv6_ifa_notify+0x8e5/0x1020 [ 722.506846][T17211] ? __timer_delete+0x5e/0x390 [ 722.506874][T17211] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 722.506894][T17211] ? work_grab_pending+0x4d6/0xb00 [ 722.506913][T17211] ? preempt_schedule+0xe4/0xf0 [ 722.506935][T17211] ? preempt_schedule+0xe4/0xf0 [ 722.506953][T17211] ? __pfx_preempt_schedule+0x10/0x10 [ 722.506972][T17211] ? __pfx_work_grab_pending+0x10/0x10 [ 722.507000][T17211] ? __cancel_work+0x24c/0x390 [ 722.507017][T17211] ? lockdep_hardirqs_on+0x9d/0x150 [ 722.507038][T17211] ? __cancel_work+0x2f0/0x390 [ 722.507063][T17211] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 722.507080][T17211] ? ipv6_del_addr+0x6c2/0x9c0 [ 722.507104][T17211] ipv6_del_addr+0x769/0x9c0 [ 722.507128][T17211] ? __pfx_ipv6_del_addr+0x10/0x10 [ 722.507155][T17211] inet6_addr_del+0x47e/0x610 [ 722.507183][T17211] addrconf_del_ifaddr+0x148/0x1d0 [ 722.507202][T17211] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 722.507233][T17211] inet6_ioctl+0x10f/0x280 [ 722.507252][T17211] ? __pfx_inet6_ioctl+0x10/0x10 [ 722.507267][T17211] ? lockdep_hardirqs_on+0x9d/0x150 [ 722.507293][T17211] ? tomoyo_path_number_perm+0x215/0x790 [ 722.507322][T17211] sock_do_ioctl+0x15a/0x490 [ 722.507350][T17211] ? __pfx_sock_do_ioctl+0x10/0x10 [ 722.507391][T17211] compat_sock_ioctl+0xc7c/0xf50 [ 722.507417][T17211] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 722.507442][T17211] ? __fget_files+0x2a/0x420 [ 722.507456][T17211] ? __fget_files+0x2a/0x420 [ 722.507472][T17211] ? __fget_files+0x2a/0x420 [ 722.507493][T17211] __se_compat_sys_ioctl+0x50e/0xc30 [ 722.507518][T17211] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 722.507546][T17211] ? __fget_files+0x2a/0x420 [ 722.507565][T17211] ? fput+0x9b/0xd0 [ 722.507580][T17211] ? ksys_write+0x275/0x2d0 [ 722.507606][T17211] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 722.507625][T17211] ? lockdep_hardirqs_on+0x9d/0x150 [ 722.507646][T17211] __do_fast_syscall_32+0xb4/0x110 [ 722.507666][T17211] ? exc_page_fault+0x5f8/0x920 [ 722.507691][T17211] do_fast_syscall_32+0x34/0x80 [ 722.507711][T17211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 722.507730][T17211] RIP: 0023:0xf707d579 [ 722.507745][T17211] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 722.507759][T17211] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 722.507776][T17211] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008936 [ 722.507788][T17211] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.507799][T17211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 722.507809][T17211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 722.507819][T17211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.507847][T17211] [ 723.029092][ T5889] usb 4-1: USB disconnect, device number 85 [ 723.201621][T17225] qrtr: Invalid version 183 [ 723.210488][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 723.852408][T17249] FAULT_INJECTION: forcing a failure. [ 723.852408][T17249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.865779][ T5889] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 723.874180][T17249] CPU: 1 UID: 0 PID: 17249 Comm: syz.0.2673 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 723.874206][T17249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 723.874216][T17249] Call Trace: [ 723.874224][T17249] [ 723.874232][T17249] dump_stack_lvl+0x241/0x360 [ 723.874263][T17249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.874288][T17249] ? __pfx__printk+0x10/0x10 [ 723.874324][T17249] should_fail_ex+0x424/0x570 [ 723.874349][T17249] fpu__restore_sig+0xb90/0x11d0 [ 723.874372][T17249] ? __lock_acquire+0xad5/0xd80 [ 723.874392][T17249] ? __pfx_fpu__restore_sig+0x10/0x10 [ 723.874434][T17249] ia32_restore_sigcontext+0x633/0x9d0 [ 723.874459][T17249] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 723.874485][T17249] ? lockdep_hardirqs_on+0x9d/0x150 [ 723.874507][T17249] ? _raw_spin_unlock_irq+0x2e/0x50 [ 723.874525][T17249] ? __set_current_blocked+0x312/0x380 [ 723.874563][T17249] __do_compat_sys_sigreturn+0x1f7/0x2b0 [ 723.874587][T17249] ? __pfx___do_compat_sys_sigreturn+0x10/0x10 [ 723.874614][T17249] ? do_int80_emulation+0xe8/0x200 [ 723.874638][T17249] do_int80_emulation+0x11f/0x200 [ 723.874659][T17249] ? clear_bhb_loop+0x45/0xa0 [ 723.874677][T17249] ? clear_bhb_loop+0x45/0xa0 [ 723.874696][T17249] asm_int80_emulation+0x1a/0x20 [ 723.874713][T17249] RIP: 0023:0xf7fe2579 [ 723.874727][T17249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 723.874742][T17249] RSP: 002b:00000000f510655c EFLAGS: 00000206 [ 723.874759][T17249] RAX: 000000000000061c RBX: 0000000000000000 RCX: 0000000000000000 [ 723.874770][T17249] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.874781][T17249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 723.874792][T17249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 723.874802][T17249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.874830][T17249] [ 724.187279][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 724.199808][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 724.211423][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 724.283800][ T5889] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 724.295177][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.333228][ T5889] usb 2-1: Product: syz [ 724.337769][ T5889] usb 2-1: Manufacturer: syz [ 724.342470][ T5889] usb 2-1: SerialNumber: syz [ 724.430359][ T5889] usb 2-1: config 0 descriptor?? [ 724.453043][ T5889] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 724.547814][T11102] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 724.594070][T17270] qrtr: Invalid version 183 [ 724.605636][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 724.708968][T11102] usb 1-1: Using ep0 maxpacket: 16 [ 724.722451][T11102] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.739632][T11102] usb 1-1: config 0 has no interfaces? [ 724.839439][T11102] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 724.993902][T11102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.060372][T11102] usb 1-1: config 0 descriptor?? [ 725.342903][ T5889] usb 1-1: USB disconnect, device number 68 [ 725.867291][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 726.017259][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 726.030041][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.055080][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.065140][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 726.074261][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.090261][ T9] usb 3-1: config 0 descriptor?? [ 726.162723][ T5889] usb 2-1: USB disconnect, device number 54 [ 726.516140][ T9] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 726.533890][T11102] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 726.707283][T11102] usb 5-1: Using ep0 maxpacket: 16 [ 726.731745][T11102] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 726.742267][T11102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.750728][T11102] usb 5-1: Product: syz [ 726.755000][T11102] usb 5-1: Manufacturer: syz [ 726.761074][T11102] usb 5-1: SerialNumber: syz [ 726.785512][T11102] r8152-cfgselector 5-1: Unknown version 0x0000 [ 726.808576][T11102] r8152-cfgselector 5-1: config 0 descriptor?? [ 726.928831][ T5892] usb 3-1: USB disconnect, device number 66 [ 727.102582][T17355] team_slave_0: entered promiscuous mode [ 727.108650][T17355] team_slave_1: entered promiscuous mode [ 727.114372][T17355] vxlan0: entered promiscuous mode [ 727.126743][T17355] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 727.135460][T17355] team0: Device macvtap1 is already an upper device of the team interface [ 727.146502][T17355] team_slave_0: left promiscuous mode [ 727.152001][T17355] team_slave_1: left promiscuous mode [ 727.157616][T17355] vxlan0: left promiscuous mode [ 727.267136][ T5889] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 727.293738][ T5890] r8152-cfgselector 5-1: USB disconnect, device number 61 [ 727.487294][ T5889] usb 1-1: device descriptor read/64, error -71 [ 727.727144][ T5889] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 727.857156][ T5889] usb 1-1: device descriptor read/64, error -71 [ 727.968368][ T5889] usb usb1-port1: attempt power cycle [ 727.994275][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 727.997081][T11102] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 728.157106][T11102] usb 2-1: Using ep0 maxpacket: 8 [ 728.170955][T11102] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 728.180977][T11102] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.247240][T11102] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 728.274023][T11102] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 728.293260][T11102] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.327091][ T5889] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 728.505456][ T5889] usb 1-1: device descriptor read/8, error -71 [ 728.506580][T11102] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 728.555458][T11102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.757122][ T5889] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 728.787696][ T5889] usb 1-1: device descriptor read/8, error -71 [ 728.795001][T11102] usb 2-1: GET_CAPABILITIES returned 0 [ 728.803214][T11102] usbtmc 2-1:16.0: can't read capabilities [ 728.897656][ T5889] usb usb1-port1: unable to enumerate USB device [ 729.117248][T11102] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 729.267420][T11102] usb 3-1: Using ep0 maxpacket: 8 [ 729.275763][T11102] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 729.298708][T11102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 729.322566][T11102] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 729.342694][T11102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.357527][T11102] usb 3-1: Product: syz [ 729.367819][T11102] usb 3-1: Manufacturer: syz [ 729.375420][T11102] usb 3-1: SerialNumber: syz [ 729.383524][T11102] usb 3-1: config 0 descriptor?? [ 729.393054][T11102] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 729.646014][T17418] : entered promiscuous mode [ 730.737236][ T5889] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 730.904962][ T5890] usb 3-1: USB disconnect, device number 67 [ 730.919816][ T5889] usb 1-1: config 0 has no interfaces? [ 730.940271][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 730.962013][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.971406][ T5889] usb 1-1: Product: syz [ 730.975656][ T5889] usb 1-1: Manufacturer: syz [ 730.982914][ T5889] usb 1-1: SerialNumber: syz [ 731.013895][ T5889] usb 1-1: config 0 descriptor?? [ 731.296155][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.342809][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.455061][T17443] batadv0: entered promiscuous mode [ 731.463329][T17443] vlan2: entered promiscuous mode [ 731.517465][ T5890] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 731.525341][ T5889] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 731.655281][T11102] usb 1-1: USB disconnect, device number 73 [ 731.707470][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 731.728726][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 731.751855][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.780974][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.799222][ T5890] usb 5-1: config 0 has no interfaces? [ 731.807166][ T5889] usb 4-1: config 0 has no interfaces? [ 731.814696][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 731.830418][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 731.846282][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.866184][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.933918][ T5890] usb 5-1: config 0 descriptor?? [ 731.940522][ T5889] usb 4-1: config 0 descriptor?? [ 732.177974][T11102] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 732.237952][ T5892] usb 4-1: USB disconnect, device number 86 [ 732.346477][ T9] usb 5-1: USB disconnect, device number 62 [ 732.491255][T11102] usb 3-1: unable to get BOS descriptor or descriptor too short [ 732.563023][T11102] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 732.603298][T11102] usb 3-1: config 1 has no interface number 1 [ 732.636770][T11102] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 732.699889][T11102] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.723556][T11102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.795100][T11102] usb 3-1: Product: syz [ 732.805198][T11102] usb 3-1: Manufacturer: syz [ 732.823433][T11102] usb 3-1: SerialNumber: syz [ 733.057666][ T919] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 733.155335][T17476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2713'. [ 733.178607][T11102] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 733.210422][T11102] usb 3-1: found format II with max.bitrate = 26774, frame size=8 [ 733.221972][T11102] usb 3-1: failed to enable PITCH for EP 0x82 [ 733.230641][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 733.243943][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.262719][ T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.266223][T11102] usb 3-1: USB disconnect, device number 68 [ 733.516309][T17506] delete_channel: no stack [ 733.551303][ T919] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 733.593280][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.657029][ T919] usb 1-1: config 0 descriptor?? [ 733.814170][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.040436][T17377] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 734.067888][ T5890] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 734.083479][ T9] usb 2-1: USB disconnect, device number 55 [ 734.111471][ T919] corsair 0003:1B1C:1B02.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 734.147578][T11102] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 734.225106][T17573] FAULT_INJECTION: forcing a failure. [ 734.225106][T17573] name failslab, interval 1, probability 0, space 0, times 0 [ 734.241082][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 734.242583][T17573] CPU: 0 UID: 0 PID: 17573 Comm: syz.1.2721 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 734.242608][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 734.242620][T17573] Call Trace: [ 734.242627][T17573] [ 734.242634][T17573] dump_stack_lvl+0x241/0x360 [ 734.242666][T17573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.242689][T17573] ? __pfx__printk+0x10/0x10 [ 734.242716][T17573] ? __pfx___might_resched+0x10/0x10 [ 734.242742][T17573] should_fail_ex+0x424/0x570 [ 734.242777][T17573] should_failslab+0xac/0x100 [ 734.242802][T17573] kmem_cache_alloc_noprof+0x78/0x390 [ 734.242824][T17573] ? skb_clone+0x20c/0x390 [ 734.242848][T17573] skb_clone+0x20c/0x390 [ 734.242870][T17573] nfnetlink_rcv+0x52b/0x28f0 [ 734.242892][T17573] ? __dev_queue_xmit+0x2f9/0x3f60 [ 734.242917][T17573] ? __dev_queue_xmit+0x2f9/0x3f60 [ 734.242936][T17573] ? __dev_queue_xmit+0x2f9/0x3f60 [ 734.242957][T17573] ? __dev_queue_xmit+0x1780/0x3f60 [ 734.242973][T17573] ? kasan_save_track+0x3f/0x80 [ 734.242991][T17573] ? __kasan_slab_alloc+0x66/0x80 [ 734.243015][T17573] ? __do_fast_syscall_32+0xb4/0x110 [ 734.243040][T17573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 734.243082][T17573] ? ref_tracker_free+0x63e/0x7e0 [ 734.243102][T17573] ? __asan_memcpy+0x40/0x70 [ 734.243118][T17573] ? __pfx_ref_tracker_free+0x10/0x10 [ 734.243135][T17573] ? __skb_clone+0x5c/0x6d0 [ 734.243167][T17573] ? skb_clone+0x240/0x390 [ 734.243196][T17573] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.243222][T17573] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.243247][T17573] netlink_unicast+0x7f8/0x9a0 [ 734.243276][T17573] ? __pfx_netlink_unicast+0x10/0x10 [ 734.243299][T17573] ? skb_put+0x114/0x1f0 [ 734.243320][T17573] netlink_sendmsg+0x8c3/0xcd0 [ 734.243355][T17573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.243381][T17573] ? __import_iovec+0x585/0x830 [ 734.243402][T17573] ? aa_sock_msg_perm+0x91/0x160 [ 734.243431][T17573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.243452][T17573] __sock_sendmsg+0x221/0x270 [ 734.243477][T17573] ____sys_sendmsg+0x523/0x860 [ 734.243503][T17573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.243536][T17573] __sys_sendmsg+0x271/0x360 [ 734.243559][T17573] ? __pfx___sys_sendmsg+0x10/0x10 [ 734.243624][T17573] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 734.243643][T17573] ? lockdep_hardirqs_on+0x9d/0x150 [ 734.243666][T17573] __do_fast_syscall_32+0xb4/0x110 [ 734.243685][T17573] ? exc_page_fault+0x5f8/0x920 [ 734.243709][T17573] do_fast_syscall_32+0x34/0x80 [ 734.243730][T17573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.243750][T17573] RIP: 0023:0xf7fc6579 [ 734.243771][T17573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 734.243784][T17573] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 734.243803][T17573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 734.243814][T17573] RDX: 0000000010000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.243825][T17573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.243834][T17573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 734.243844][T17573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.243869][T17573] [ 734.349794][T11102] usb 5-1: Using ep0 maxpacket: 16 [ 734.485750][ T5890] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 734.549643][T11102] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 734.565655][ T919] usb 1-1: USB disconnect, device number 74 [ 734.608384][ T5890] usb 4-1: config 0 has no interface number 0 [ 734.616532][ T5890] usb 4-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.630845][ T5890] usb 4-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.646758][ T5890] usb 4-1: config 0 interface 2 has no altsetting 0 [ 734.663251][T11102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.675423][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 734.687987][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.708096][ T5890] usb 4-1: config 0 descriptor?? [ 734.708381][T11102] usb 5-1: Product: syz [ 734.731924][T11102] usb 5-1: Manufacturer: syz [ 734.736636][T11102] usb 5-1: SerialNumber: syz [ 734.736661][T17595] FAULT_INJECTION: forcing a failure. [ 734.736661][T17595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.754852][T11102] r8152-cfgselector 5-1: Unknown version 0x0000 [ 734.758290][T17595] CPU: 1 UID: 0 PID: 17595 Comm: syz.2.2723 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 734.758320][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 734.758331][T17595] Call Trace: [ 734.758338][T17595] [ 734.758346][T17595] dump_stack_lvl+0x241/0x360 [ 734.758378][T17595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.758402][T17595] ? __pfx__printk+0x10/0x10 [ 734.758435][T17595] should_fail_ex+0x424/0x570 [ 734.758459][T17595] _copy_to_user+0x31/0xb0 [ 734.758486][T17595] simple_read_from_buffer+0xc4/0x170 [ 734.758513][T17595] proc_fail_nth_read+0x1ef/0x260 [ 734.758534][T17595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.758555][T17595] ? rw_verify_area+0x246/0x630 [ 734.758572][T17595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.758591][T17595] vfs_read+0x21f/0xb90 [ 734.758614][T17595] ? __pfx___mutex_lock+0x10/0x10 [ 734.758637][T17595] ? __pfx_vfs_read+0x10/0x10 [ 734.758658][T17595] ? __fget_files+0x2a/0x420 [ 734.758676][T17595] ? __fget_files+0x39d/0x420 [ 734.758689][T17595] ? __fget_files+0x2a/0x420 [ 734.758712][T17595] ksys_read+0x19d/0x2d0 [ 734.758733][T17595] ? __pfx_ksys_read+0x10/0x10 [ 734.758760][T17595] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 734.758780][T17595] ? lockdep_hardirqs_on+0x9d/0x150 [ 734.758802][T17595] __do_fast_syscall_32+0xb4/0x110 [ 734.758821][T17595] ? exc_page_fault+0x5f8/0x920 [ 734.758845][T17595] do_fast_syscall_32+0x34/0x80 [ 734.758866][T17595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.758887][T17595] RIP: 0023:0xf711d579 [ 734.758902][T17595] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 734.758915][T17595] RSP: 002b:00000000f510d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 734.758933][T17595] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510d620 [ 734.758945][T17595] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 734.758956][T17595] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 734.758966][T17595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 734.758975][T17595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.759001][T17595] [ 734.976393][T17598] syz_tun: entered allmulticast mode [ 734.983210][T11102] r8152-cfgselector 5-1: config 0 descriptor?? [ 735.022001][T17597] syz_tun: left allmulticast mode [ 735.146549][ T5890] logitech-djreceiver 0003:046D:C517.001F: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input2 [ 735.371310][ T919] usb 4-1: USB disconnect, device number 87 [ 735.417720][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 735.470944][T11102] r8152-cfgselector 5-1: USB disconnect, device number 63 [ 735.587384][ T5890] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 735.598935][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.657071][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.679522][ T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 735.695501][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.723092][ T9] usb 3-1: config 0 descriptor?? [ 735.767385][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 735.808972][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.836633][ T5890] usb 1-1: config 0 has no interfaces? [ 735.857843][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 735.877429][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.898127][ T5890] usb 1-1: config 0 descriptor?? [ 736.081578][T17671] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 736.323258][ T5890] usb 1-1: USB disconnect, device number 75 [ 736.547081][ T9] hid-led 0003:1D34:000A.0020: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 736.579992][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.589045][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.631131][ T9] hid-led 0003:1D34:000A.0020: Dream Cheeky Webmail Notifier initialized [ 736.732701][ T9] usb 3-1: USB disconnect, device number 69 [ 736.863624][T17667] delete_channel: no stack [ 736.906356][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 737.178183][T17718] FAULT_INJECTION: forcing a failure. [ 737.178183][T17718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.196270][T17718] CPU: 0 UID: 0 PID: 17718 Comm: syz.2.2735 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 737.196300][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 737.196311][T17718] Call Trace: [ 737.196319][T17718] [ 737.196328][T17718] dump_stack_lvl+0x241/0x360 [ 737.196362][T17718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.196387][T17718] ? __pfx__printk+0x10/0x10 [ 737.196423][T17718] should_fail_ex+0x424/0x570 [ 737.196449][T17718] _copy_to_user+0x31/0xb0 [ 737.196476][T17718] simple_read_from_buffer+0xc4/0x170 [ 737.196506][T17718] proc_fail_nth_read+0x1ef/0x260 [ 737.196529][T17718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 737.196551][T17718] ? rw_verify_area+0x246/0x630 [ 737.196571][T17718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 737.196598][T17718] vfs_read+0x21f/0xb90 [ 737.196623][T17718] ? __pfx___mutex_lock+0x10/0x10 [ 737.196647][T17718] ? __pfx_vfs_read+0x10/0x10 [ 737.196671][T17718] ? __fget_files+0x2a/0x420 [ 737.196690][T17718] ? __fget_files+0x39d/0x420 [ 737.196705][T17718] ? __fget_files+0x2a/0x420 [ 737.196729][T17718] ksys_read+0x19d/0x2d0 [ 737.196750][T17718] ? __pfx_ksys_read+0x10/0x10 [ 737.196774][T17718] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 737.196795][T17718] ? lockdep_hardirqs_on+0x9d/0x150 [ 737.196820][T17718] __do_fast_syscall_32+0xb4/0x110 [ 737.196844][T17718] ? exc_page_fault+0x5f8/0x920 [ 737.196868][T17718] do_fast_syscall_32+0x34/0x80 [ 737.196888][T17718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 737.196908][T17718] RIP: 0023:0xf711d579 [ 737.196924][T17718] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 737.196939][T17718] RSP: 002b:00000000f510d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 737.196959][T17718] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f510d620 [ 737.196971][T17718] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 737.196982][T17718] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 737.196993][T17718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 737.197003][T17718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 737.197031][T17718] [ 737.611172][T17700] macvlan0 (unregistering): left promiscuous mode [ 737.985288][T17755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2739'. [ 738.187010][T11102] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 738.336981][T11102] usb 1-1: Using ep0 maxpacket: 16 [ 738.351386][T11102] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 738.361780][T11102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.370471][T11102] usb 1-1: Product: syz [ 738.374803][T11102] usb 1-1: Manufacturer: syz [ 738.380777][T11102] usb 1-1: SerialNumber: syz [ 738.409764][T11102] r8152-cfgselector 1-1: Unknown version 0x0000 [ 738.416039][T11102] r8152-cfgselector 1-1: config 0 descriptor?? [ 738.501264][T17761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2741'. [ 738.568248][T17763] FAULT_INJECTION: forcing a failure. [ 738.568248][T17763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.607377][T17763] CPU: 1 UID: 0 PID: 17763 Comm: syz.2.2742 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 738.607406][T17763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 738.607416][T17763] Call Trace: [ 738.607424][T17763] [ 738.607432][T17763] dump_stack_lvl+0x241/0x360 [ 738.607463][T17763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.607488][T17763] ? __pfx__printk+0x10/0x10 [ 738.607522][T17763] should_fail_ex+0x424/0x570 [ 738.607546][T17763] _copy_to_user+0x31/0xb0 [ 738.607573][T17763] simple_read_from_buffer+0xc4/0x170 [ 738.607602][T17763] proc_fail_nth_read+0x1ef/0x260 [ 738.607624][T17763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 738.607646][T17763] ? rw_verify_area+0x246/0x630 [ 738.607664][T17763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 738.607685][T17763] vfs_read+0x21f/0xb90 [ 738.607710][T17763] ? __pfx___mutex_lock+0x10/0x10 [ 738.607733][T17763] ? __pfx_vfs_read+0x10/0x10 [ 738.607756][T17763] ? __fget_files+0x2a/0x420 [ 738.607773][T17763] ? __fget_files+0x39d/0x420 [ 738.607787][T17763] ? __fget_files+0x2a/0x420 [ 738.607812][T17763] ksys_read+0x19d/0x2d0 [ 738.607833][T17763] ? __pfx_ksys_read+0x10/0x10 [ 738.607855][T17763] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 738.607876][T17763] ? lockdep_hardirqs_on+0x9d/0x150 [ 738.607899][T17763] __do_fast_syscall_32+0xb4/0x110 [ 738.607920][T17763] ? exc_page_fault+0x5f8/0x920 [ 738.607945][T17763] do_fast_syscall_32+0x34/0x80 [ 738.607967][T17763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 738.607988][T17763] RIP: 0023:0xf711d579 [ 738.608003][T17763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 738.608018][T17763] RSP: 002b:00000000f510d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 738.608038][T17763] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f510d620 [ 738.608050][T17763] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 738.608062][T17763] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 738.608072][T17763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 738.608082][T17763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 738.608110][T17763] [ 738.914776][T17768] qrtr: Invalid version 183 [ 738.930655][T17768] netlink: 'syz.3.2744': attribute type 16 has an invalid length. [ 738.940429][T17768] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 738.952347][T17768] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 738.960750][T17768] CPU: 0 UID: 0 PID: 17768 Comm: syz.3.2744 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 738.972804][T17768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 738.982849][T17768] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 738.988484][T17768] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea 06 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 06 3b f8 45 31 e4 48 83 7d 00 [ 739.008088][T17768] RSP: 0018:ffffc9000cbb6e50 EFLAGS: 00010206 [ 739.014163][T17768] RAX: 0000000000000055 RBX: ffff88804ad90008 RCX: 0000000000080000 [ 739.022122][T17768] RDX: ffffc9000bee9000 RSI: 0000000000003ade RDI: 0000000000003adf [ 739.030087][T17768] RBP: 00000000000002a8 R08: ffffffff89f28719 R09: 1ffff92001976df6 [ 739.038048][T17768] R10: dffffc0000000000 R11: fffff52001976df7 R12: ffff888034566080 [ 739.046006][T17768] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804ad90000 [ 739.053965][T17768] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f505db40 [ 739.062885][T17768] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 739.069458][T17768] CR2: 000000000c2559aa CR3: 0000000027528000 CR4: 00000000003526f0 [ 739.077420][T17768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 739.085383][T17768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 739.093346][T17768] Call Trace: [ 739.096616][T17768] [ 739.099540][T17768] rtnl_newlink_create+0x2f2/0xcb0 [ 739.104645][T17768] ? __mutex_lock+0x380/0x10c0 [ 739.109405][T17768] ? __pfx_aa_get_newest_label+0x10/0x10 [ 739.115031][T17768] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 739.120654][T17768] ? __pfx___mutex_lock+0x10/0x10 [ 739.125670][T17768] ? ns_capable+0x8a/0xf0 [ 739.129986][T17768] rtnl_newlink+0x18b0/0x1fe0 [ 739.134658][T17768] ? stack_depot_save_flags+0x44/0x940 [ 739.140108][T17768] ? __pfx_rtnl_newlink+0x10/0x10 [ 739.145138][T17768] ? __netlink_deliver_tap+0x561/0x7f0 [ 739.150591][T17768] ? netlink_deliver_tap+0x19d/0x1b0 [ 739.155870][T17768] ? netlink_unicast+0x7c6/0x9a0 [ 739.160794][T17768] ? netlink_sendmsg+0x8c3/0xcd0 [ 739.165723][T17768] ? __sock_sendmsg+0x221/0x270 [ 739.170566][T17768] ? ____sys_sendmsg+0x523/0x860 [ 739.175488][T17768] ? __sys_sendmsg+0x271/0x360 [ 739.180239][T17768] ? __do_fast_syscall_32+0xb4/0x110 [ 739.185517][T17768] ? do_fast_syscall_32+0x34/0x80 [ 739.190532][T17768] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.197043][T17768] ? kasan_quarantine_put+0xdc/0x230 [ 739.202325][T17768] ? lockdep_hardirqs_on+0x9d/0x150 [ 739.207517][T17768] ? nlmon_xmit+0xaf/0x100 [ 739.211929][T17768] ? __local_bh_enable_ip+0x168/0x200 [ 739.217286][T17768] ? lockdep_hardirqs_on+0x9d/0x150 [ 739.222475][T17768] ? aa_get_newest_label+0x101/0x6f0 [ 739.227755][T17768] ? __lock_acquire+0xad5/0xd80 [ 739.232603][T17768] ? __pfx_rtnl_newlink+0x10/0x10 [ 739.237621][T17768] rtnetlink_rcv_msg+0x80f/0xd70 [ 739.242553][T17768] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 739.247658][T17768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 739.253113][T17768] ? ref_tracker_free+0x63e/0x7e0 [ 739.258142][T17768] netlink_rcv_skb+0x208/0x480 [ 739.262917][T17768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 739.268369][T17768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.273647][T17768] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.278835][T17768] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.284025][T17768] netlink_unicast+0x7f8/0x9a0 [ 739.288781][T17768] ? __pfx_netlink_unicast+0x10/0x10 [ 739.294054][T17768] ? skb_put+0x114/0x1f0 [ 739.298284][T17768] netlink_sendmsg+0x8c3/0xcd0 [ 739.303045][T17768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.308323][T17768] ? __import_iovec+0x585/0x830 [ 739.313169][T17768] ? aa_sock_msg_perm+0x91/0x160 [ 739.318104][T17768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.323389][T17768] __sock_sendmsg+0x221/0x270 [ 739.328064][T17768] ____sys_sendmsg+0x523/0x860 [ 739.332817][T17768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.338093][T17768] __sys_sendmsg+0x271/0x360 [ 739.342673][T17768] ? __pfx_futex_wake+0x10/0x10 [ 739.347511][T17768] ? __pfx___sys_sendmsg+0x10/0x10 [ 739.352622][T17768] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 739.359200][T17768] ? lockdep_hardirqs_on+0x9d/0x150 [ 739.364386][T17768] __do_fast_syscall_32+0xb4/0x110 [ 739.369487][T17768] ? ret_from_fork_asm+0x1a/0x30 [ 739.374411][T17768] ? lockdep_hardirqs_on+0x9d/0x150 [ 739.379597][T17768] do_fast_syscall_32+0x34/0x80 [ 739.384441][T17768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.390759][T17768] RIP: 0023:0xf706d579 [ 739.394818][T17768] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 739.414420][T17768] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 739.422826][T17768] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 739.430787][T17768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.438743][T17768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.446700][T17768] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 739.454656][T17768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.462621][T17768] [ 739.465637][T17768] Modules linked in: [ 739.470354][T17768] ---[ end trace 0000000000000000 ]--- [ 739.474636][ T919] r8152-cfgselector 1-1: USB disconnect, device number 76 [ 739.499687][T17768] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 739.505445][T17768] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea 06 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 06 3b f8 45 31 e4 48 83 7d 00 [ 739.526124][T17768] RSP: 0018:ffffc9000cbb6e50 EFLAGS: 00010206 [ 739.532528][T17768] RAX: 0000000000000055 RBX: ffff88804ad90008 RCX: 0000000000080000 [ 739.541413][T17768] RDX: ffffc9000bee9000 RSI: 0000000000003ade RDI: 0000000000003adf [ 739.549435][T17768] RBP: 00000000000002a8 R08: ffffffff89f28719 R09: 1ffff92001976df6 [ 739.560069][T17768] R10: dffffc0000000000 R11: fffff52001976df7 R12: ffff888034566080 [ 739.568117][T17768] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804ad90000 [ 739.576143][T17768] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f505db40 [ 739.585968][T17768] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 739.593628][T17768] CR2: 00000000f7485994 CR3: 0000000027528000 CR4: 00000000003526f0 [ 739.602965][T17768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 739.610987][T17768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 739.619411][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 739.626970][T17768] Kernel panic - not syncing: Fatal exception [ 739.633332][T17768] Kernel Offset: disabled [ 739.637638][T17768] Rebooting in 86400 seconds..