last executing test programs: 7.158655438s ago: executing program 0 (id=171): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa22000000000086dd60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r1], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0xe8, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.4313133s ago: executing program 3 (id=173): pipe(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0x402) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000"], 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000000c0)) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200f11000000080d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.113002746s ago: executing program 4 (id=179): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123640, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x40400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0xfffffd3f) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00']) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000400)) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000480)=""/158, &(0x7f0000000100)=0x9e) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x7, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000600)={0x2020}, 0x2020) 4.936247587s ago: executing program 0 (id=181): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.351627103s ago: executing program 0 (id=184): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b09f9f5278ef231a907e", @ANYBLOB="5df6b5b9e8a83d3a84636bad6f7132db35b2e47f88449d9195bf97ba5c3558b034ad677f56b6d2faa941a83575b5b33c1f72574ba62c227feed963b92a80874ed807b307ed21a16b5cdd8364b1604c075c33bb9ef80c8399da1adbc22e3fbbe9cdf82224fe93d45779314bdca379177c3e1901e56ffd43", @ANYRES8=r0], 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000000)='./file0\x00', 0x9100, &(0x7f0000000040)={0x8, 0x4, 0x100000, {r1}}, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x58ca2280, 0x0) mlock(&(0x7f0000588000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x96, 0x5, 0xfb, 0x20, 0x8086, 0xb63, 0x8ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x40, 0x40, 0x4, "", [{{0x9, 0x4, 0x1e, 0x10, 0x1, 0x2d, 0xbe, 0x54, 0x7, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x25, 0x3}}]}}]}}]}}, 0x0) 3.443162317s ago: executing program 1 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x2, 0x9, 0x7}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x0, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x8000, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0xc, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x7fffffff, 0x0, 0xee3, 0x2007, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044094) 3.24689159s ago: executing program 1 (id=187): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_emit_ethernet(0x7a, &(0x7f0000008480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200010086dd6015fe0800442f00fc020000000000000000000000000000ff020000000000000000000000000001242088a80000000000000800000086dd88a888be080000001000a0000100000000000000080022eb0000000020000000020000000800655800000000"], 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x833a1000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2f) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000004a00030000000000000000000a"], 0xfdac}, 0x1, 0x0, 0x0, 0x80}, 0x24008880) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000003c0)={&(0x7f00000002c0)=""/230, 0xe6, 0x3, 0x7}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffc, 0x3, 0x6}], 0x1, 0xbff, 0x0, 0x0, 0x48, 0x40}) 3.209128307s ago: executing program 3 (id=188): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) close(r0) 2.991716533s ago: executing program 3 (id=189): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0xfffffff6, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2.961509991s ago: executing program 4 (id=190): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1, 0x3, 0x13, @empty, @empty, 0x8, 0x8, 0x3, 0x7}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@ifindex=r1, 0x36, 0x1, 0xc, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)='2', 0x1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x0, 0xd8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@tcx={@void, @value=r3, @void, @void, r2}}, 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0xfffffffd, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x21, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffe00, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.830880533s ago: executing program 3 (id=191): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401088805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e0300"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$kcm(0xa, 0x3, 0x87) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r2], 0xfdef) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0200000004"], 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRES16=0x0], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f00000000c0)={{@my=0x1, 0x2}, 0x4, 0x5, 0x6e64a9b, 0x7fffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x16) (async) read(r5, 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x19b15132}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x5) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x220000, 0x0) syz_open_dev$rtc(&(0x7f0000000240), 0x10000, 0x400) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010e4"], 0x20}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.829106248s ago: executing program 1 (id=192): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYBLOB="05", @ANYRES16=r0], 0x0) 2.552220027s ago: executing program 0 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000070000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000200000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028006000340000100000600014000170000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) 2.551498797s ago: executing program 0 (id=194): io_setup(0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e25, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.509845914s ago: executing program 0 (id=195): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1, 0x3, 0x13, @empty, @empty, 0x8, 0x8, 0x3, 0x7}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@ifindex=r1, 0x36, 0x1, 0xc, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)='2', 0x1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x0, 0xd8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={0xffffffffffffffff, r1, 0x25, 0x2, @val=@tcx={@void, @value=r3, @void, @void, r2}}, 0x1c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0xfffffffd, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x21, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffe00, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.376573339s ago: executing program 2 (id=196): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000004a00030000000000000000000a"], 0xfdac}, 0x1, 0x0, 0x0, 0x80}, 0x24008880) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffc, 0x3, 0x6}], 0x1, 0xbff, 0x0, 0x0, 0x48, 0x40}) 2.299887627s ago: executing program 2 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x2, 0x9, 0x7}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x0, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x8000, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0xc, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x7fffffff, 0x0, 0xee3, 0x2007, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044094) 2.16091451s ago: executing program 2 (id=198): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x96}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x4c, r7, 0x2, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_MAC={0xa, 0x6, @random="7559d70da116"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0x5c}}, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000400)={@empty, 0x35, r2}) 2.042163927s ago: executing program 2 (id=199): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffff", @ANYRES32, @ANYBLOB='\x000\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.909570988s ago: executing program 2 (id=200): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) close(r0) 1.761130873s ago: executing program 2 (id=201): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0x3951}, 0x1c) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x23, [@private=0xa010102]}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7f46005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d"}}, 0xfce) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0xc0000007}) close_range(r1, r1, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000100), 0x7, 0x8040) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0x8e040) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x9, 0x7, 0x10, 0x1f, 0x9, 0xff, 0x2, 0x70, 0xffffffffffffffff}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.700748737s ago: executing program 3 (id=202): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000480)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x1, 0x2, 0x5, 0x6}}], 0x30, 0x4855}, 0x24000052) (fail_nth: 39) 1.279466778s ago: executing program 3 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) syz_open_procfs$userns(0x0, &(0x7f0000000580)) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket(0x1a, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xd, 0xc}, {0x0, 0xfff1}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000020000100ffffffff001600000a10400420000006f3e9000014000200fc020000000000000000000000000001140001002001100000000200000000000000000055edaf5c1ff7896586e7915726b614c9999be22de8b9b86277bb76cf87ac9be2a7804529bbbab59b00a22c89bd8e11178c38fda12c27fa81d06df9481de6988b1c488f8a7749da625854eb16632b56f4e32ffd891469329ec13581e63bcb9af6bf7162d0c2fe65779725e4eebc5e1332a01c850a0d27096a9b3abf4e28ac3c00020000000000009d99"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x5c}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 1.148107085s ago: executing program 1 (id=204): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0, 0x600}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 961.957478ms ago: executing program 1 (id=205): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 908.588969ms ago: executing program 1 (id=206): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a0009", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 884.471676ms ago: executing program 4 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) write$tun(r0, &(0x7f0000000740)={@void, @void, @ipv6=@tcp={0x7, 0x6, 'H{^', 0x100, 0x6, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x3b, 0x8, 0x4, 0x4, 0x7, 0x10, 0x7fc0, [@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}]}, @routing={0x8, 0x6, 0x0, 0x1, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x35}, @private0]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6, 0x0, 0x7fff}, {"404bd0fa57bae84f650be00819e4669d5b45abf5ed232fb8f478ba35761a546b105b3f6f5a0dc347d773a2f861210c42a57ad4b0bc0f8375c5f54c112eb778c1f14b744924d5b6125139ca372b704f7d940865da4cd95a4b5ee98609bab1c6b0e45d544dc2491f47e13a528b"}}}}}, 0x128) 600.476957ms ago: executing program 4 (id=208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x2, 0x9, 0x7}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x0, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x8000, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0xc, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x7fffffff, 0x0, 0xee3, 0x2007, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044094) 457.505384ms ago: executing program 4 (id=209): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', r1, 0x4, 0x3, 0x96, 0x5, 0x20b7e16d6761ec4a, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8, 0x96c3, 0x1}}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0x90, 0x24, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xd}, {0xfff3, 0x5}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x6, 0x8, 0x82a}, 0x5, 0x1, 0x101, 0x0, 0x1, 0x14, 0x16, 0x18, 0x3, 0xbf7a, {0x6, 0xe1, 0x0, 0x9, 0xd5, 0x8}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe7}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r5 = dup3(r2, r2, 0x80000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7879, 0x2711}, &(0x7f0000000100)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) 0s ago: executing program 4 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0xfeff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x884) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. [ 72.837125][ T5612] cgroup: Unknown subsys name 'net' [ 72.930933][ T5612] cgroup: Unknown subsys name 'cpuset' [ 72.939213][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.277132][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.333699][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.344214][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.353119][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.362270][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.372026][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.416913][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.439663][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.448192][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.457960][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.466481][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.483401][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.493546][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.501245][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.511684][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.519809][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.521431][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.527972][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.543879][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.554904][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.564757][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.574220][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.584862][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.597197][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.613840][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.635558][ T4946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.192052][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.199557][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.206922][ T5631] bridge_slave_0: entered allmulticast mode [ 77.214602][ T5631] bridge_slave_0: entered promiscuous mode [ 77.252390][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.260472][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.268895][ T5631] bridge_slave_1: entered allmulticast mode [ 77.276645][ T5631] bridge_slave_1: entered promiscuous mode [ 77.443215][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.456427][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.572842][ T5631] team0: Port device team_slave_0 added [ 77.594828][ T5631] team0: Port device team_slave_1 added [ 77.718707][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.725965][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.733379][ T5643] bridge_slave_0: entered allmulticast mode [ 77.740439][ T5643] bridge_slave_0: entered promiscuous mode [ 77.754076][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.761137][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.787515][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.828691][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.835866][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.843478][ T5643] bridge_slave_1: entered allmulticast mode [ 77.850859][ T5643] bridge_slave_1: entered promiscuous mode [ 77.858433][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.865392][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.891309][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.951651][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.959143][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.966347][ T5640] bridge_slave_0: entered allmulticast mode [ 77.973560][ T5640] bridge_slave_0: entered promiscuous mode [ 77.992380][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.015597][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.023169][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.030635][ T5640] bridge_slave_1: entered allmulticast mode [ 78.037531][ T5640] bridge_slave_1: entered promiscuous mode [ 78.046838][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.119515][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.130132][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.140088][ T5644] bridge_slave_0: entered allmulticast mode [ 78.147265][ T5644] bridge_slave_0: entered promiscuous mode [ 78.188929][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.198649][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.206665][ T5645] bridge_slave_0: entered allmulticast mode [ 78.215251][ T5645] bridge_slave_0: entered promiscuous mode [ 78.225719][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.235408][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.244106][ T5644] bridge_slave_1: entered allmulticast mode [ 78.252862][ T5644] bridge_slave_1: entered promiscuous mode [ 78.262916][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.279747][ T5631] hsr_slave_0: entered promiscuous mode [ 78.286722][ T5631] hsr_slave_1: entered promiscuous mode [ 78.298861][ T5643] team0: Port device team_slave_0 added [ 78.306077][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.314107][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.322948][ T5645] bridge_slave_1: entered allmulticast mode [ 78.333799][ T5645] bridge_slave_1: entered promiscuous mode [ 78.353235][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.386888][ T5643] team0: Port device team_slave_1 added [ 78.408317][ T5633] Bluetooth: hci0: command tx timeout [ 78.427486][ T5640] team0: Port device team_slave_0 added [ 78.455967][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.477220][ T5640] team0: Port device team_slave_1 added [ 78.512491][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.523731][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.560611][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.567664][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.593822][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.606975][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.632581][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.639794][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.666311][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.666751][ T5633] Bluetooth: hci1: command tx timeout [ 78.677484][ T4946] Bluetooth: hci3: command tx timeout [ 78.687549][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.695667][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.721636][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.732994][ T5633] Bluetooth: hci4: command tx timeout [ 78.734287][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.739192][ T4946] Bluetooth: hci2: command tx timeout [ 78.745547][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.745572][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.795198][ T5644] team0: Port device team_slave_0 added [ 78.827132][ T5645] team0: Port device team_slave_0 added [ 78.834709][ T5644] team0: Port device team_slave_1 added [ 78.863471][ T5645] team0: Port device team_slave_1 added [ 78.917331][ T5640] hsr_slave_0: entered promiscuous mode [ 78.925726][ T5640] hsr_slave_1: entered promiscuous mode [ 78.932036][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 78.937832][ T5640] Cannot create hsr debugfs directory [ 78.988115][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.995104][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.023086][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.035737][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.042860][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.069387][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.091235][ T5643] hsr_slave_0: entered promiscuous mode [ 79.097498][ T5643] hsr_slave_1: entered promiscuous mode [ 79.103758][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 79.109722][ T5643] Cannot create hsr debugfs directory [ 79.133310][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.140388][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.166651][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.178527][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.186172][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.213501][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.401795][ T5644] hsr_slave_0: entered promiscuous mode [ 79.408374][ T5644] hsr_slave_1: entered promiscuous mode [ 79.414448][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 79.420216][ T5644] Cannot create hsr debugfs directory [ 79.462330][ T5645] hsr_slave_0: entered promiscuous mode [ 79.469848][ T5645] hsr_slave_1: entered promiscuous mode [ 79.476279][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 79.482634][ T5645] Cannot create hsr debugfs directory [ 79.688597][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.701265][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.709597][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.720564][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.754160][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.763656][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.791838][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.801586][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.913069][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.924178][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.936241][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.946269][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.956270][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.966985][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.983430][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.992570][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.071501][ T5643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.081800][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.102045][ T5643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.111420][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.120576][ T5643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.130399][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.149099][ T5643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.159612][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.261331][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.276273][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.290151][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.297814][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.307376][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.315655][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.324996][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.337260][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.348336][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.401389][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.433896][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.441545][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.472540][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.479674][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.498100][ T4946] Bluetooth: hci0: command tx timeout [ 80.518606][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.532670][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.543151][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.551562][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.562192][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.579149][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.588686][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.605170][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.614511][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.628862][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.668926][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.676047][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.712091][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.719204][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.728455][ T5633] Bluetooth: hci3: command tx timeout [ 80.734140][ T4946] Bluetooth: hci1: command tx timeout [ 80.746332][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.785474][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.809822][ T4946] Bluetooth: hci2: command tx timeout [ 80.809841][ T5633] Bluetooth: hci4: command tx timeout [ 80.824399][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.831563][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.870273][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.877375][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.930511][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.995995][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.014708][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.042313][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.049434][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.066260][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.076268][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.102821][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.109947][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.168928][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.203767][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.210914][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.235581][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.242770][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.265101][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.298871][ T5631] veth0_vlan: entered promiscuous mode [ 81.309916][ T5640] veth0_vlan: entered promiscuous mode [ 81.329912][ T5631] veth1_vlan: entered promiscuous mode [ 81.356051][ T5640] veth1_vlan: entered promiscuous mode [ 81.409388][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.460854][ T5643] veth0_vlan: entered promiscuous mode [ 81.472137][ T5631] veth0_macvtap: entered promiscuous mode [ 81.486149][ T5640] veth0_macvtap: entered promiscuous mode [ 81.497263][ T5631] veth1_macvtap: entered promiscuous mode [ 81.517052][ T5640] veth1_macvtap: entered promiscuous mode [ 81.531380][ T5643] veth1_vlan: entered promiscuous mode [ 81.555118][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.568487][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.598486][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.610010][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.625839][ T5645] veth0_vlan: entered promiscuous mode [ 81.649764][ T137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.661543][ T137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.673107][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.687640][ T137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.697729][ T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.711825][ T5645] veth1_vlan: entered promiscuous mode [ 81.743110][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.752213][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.767459][ T5643] veth0_macvtap: entered promiscuous mode [ 81.776497][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.805792][ T5643] veth1_macvtap: entered promiscuous mode [ 81.814289][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.850177][ T5644] veth0_vlan: entered promiscuous mode [ 81.890697][ T5644] veth1_vlan: entered promiscuous mode [ 81.906793][ T5645] veth0_macvtap: entered promiscuous mode [ 81.937379][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.954881][ T5645] veth1_macvtap: entered promiscuous mode [ 81.965741][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.975381][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.995527][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.032969][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.040946][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.053566][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.061246][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.070459][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.094666][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.128871][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.137395][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.151133][ T5644] veth0_macvtap: entered promiscuous mode [ 82.175124][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.175142][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.191891][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.207280][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.244062][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.257824][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.267799][ T5644] veth1_macvtap: entered promiscuous mode [ 82.277607][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.293257][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.326538][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.374996][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.402728][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.426585][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.498023][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.529847][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.553570][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.569875][ T4946] Bluetooth: hci0: command tx timeout [ 82.586315][ T5723] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.616880][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633116][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.667105][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.690726][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.712632][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.736091][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.808125][ T4946] Bluetooth: hci1: command tx timeout [ 82.808218][ T5633] Bluetooth: hci3: command tx timeout [ 82.884062][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.893359][ T5633] Bluetooth: hci4: command tx timeout [ 82.898104][ T4946] Bluetooth: hci2: command tx timeout [ 82.902005][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.059603][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.086987][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.213558][ T708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.241286][ T708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.281814][ T5735] binder: 5733:5735 unknown command 0 [ 83.329248][ T5735] binder: 5733:5735 ioctl c0306201 200000000080 returned -22 [ 83.467059][ T4946] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 83.582339][ T29] audit: type=1326 audit(1778729907.096:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.1" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241299ce59 code=0x0 [ 83.732173][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 83.785465][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 83.810991][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 83.854886][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 83.879633][ T5747] Zero length message leads to an empty skb [ 84.653283][ T4946] Bluetooth: hci0: command tx timeout [ 84.740182][ T5762] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.776856][ T5762] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.860446][ T5765] netlink: 'syz.0.15': attribute type 4 has an invalid length. [ 84.888070][ T4946] Bluetooth: hci1: command tx timeout [ 84.888400][ T5633] Bluetooth: hci3: command tx timeout [ 84.969119][ T5633] Bluetooth: hci4: command tx timeout [ 84.969557][ T4946] Bluetooth: hci2: command tx timeout [ 86.121716][ T5783] random: crng reseeded on system resumption [ 86.654726][ T46] cfg80211: failed to load regulatory.db [ 87.103551][ T5794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25'. [ 87.166410][ T5794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25'. [ 87.227752][ T5798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25'. [ 87.948189][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.107956][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 88.133416][ T46] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 88.166290][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.212246][ T46] usb 1-1: config 0 descriptor?? [ 88.273517][ T46] as10x_usb: device has been detected [ 88.299301][ T46] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 88.354160][ T46] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 88.524841][ T46] as10x_usb: error during firmware upload part1 [ 88.550860][ T46] Registered device nBox DVB-T Dongle [ 88.600262][ T46] usb 1-1: USB disconnect, device number 2 [ 88.756357][ T46] Unregistered device nBox DVB-T Dongle [ 88.768592][ T46] as10x_usb: device has been disconnected [ 90.137969][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.188168][ T2088] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.328776][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.347975][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.402026][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.413493][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.418881][ T2088] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 90.424995][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 90.444774][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.462611][ T2088] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 90.471228][ T5831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.503298][ T2088] usb 3-1: Product: syz [ 90.510182][ T46] usb 5-1: device descriptor read/64, error -71 [ 90.522635][ T2088] usb 3-1: SerialNumber: syz [ 90.545511][ T2088] usb 3-1: config 0 descriptor?? [ 90.571917][ T2088] hso 3-1:0.0: Not our interface [ 90.768468][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.918170][ T46] usb 5-1: device descriptor read/64, error -71 [ 90.949086][ T5850] futex_wake_op: syz.1.44 tries to shift op by 144; fix this program [ 91.038314][ T46] usb usb5-port1: attempt power cycle [ 91.308648][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 91.331202][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5 [ 91.389339][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.417982][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.430259][ T46] usb 5-1: device descriptor read/8, error -71 [ 91.450978][ T9] usb 4-1: USB disconnect, device number 2 [ 91.456886][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 91.629653][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.647933][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.660556][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.672116][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 91.681210][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.687976][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.697053][ T5852] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 91.719077][ T46] usb 5-1: device descriptor read/8, error -71 [ 91.840331][ T46] usb usb5-port1: unable to enumerate USB device [ 92.117974][ T5636] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.294036][ T5636] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.309424][ T5636] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.320672][ T5636] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.332263][ T5636] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 92.342682][ T5636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.357238][ T5855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.550305][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 92.610951][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 92.690366][ T10] usb 1-1: USB disconnect, device number 3 [ 92.696268][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 92.885037][ T5699] usb 3-1: USB disconnect, device number 2 [ 93.241035][ T5636] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 93.267094][ T5636] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 93.606941][ T9] usb 2-1: USB disconnect, device number 2 [ 93.607012][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 93.848184][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.010460][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.042161][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.067954][ T46] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.082454][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.102471][ T46] usb 4-1: SerialNumber: syz [ 94.352147][ T46] usb 4-1: 0:2 : does not exist [ 94.358762][ T46] usb 4-1: unit 5 not found! [ 94.516476][ T46] usb 4-1: USB disconnect, device number 3 [ 94.635953][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.718028][ T5636] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.869008][ T5636] usb 1-1: device descriptor read/64, error -71 [ 95.006382][ T5901] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 95.131409][ T5636] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.288989][ T5636] usb 1-1: device descriptor read/64, error -71 [ 95.362879][ T5913] syzkaller0: entered promiscuous mode [ 95.368834][ T5913] syzkaller0: entered allmulticast mode [ 95.412229][ T5636] usb usb1-port1: attempt power cycle [ 95.422286][ T5913] tipc: Started in network mode [ 95.427331][ T5913] tipc: Node identity 1626d648d19b, cluster identity 4711 [ 95.437383][ T5913] tipc: Enabled bearer , priority 0 [ 95.451489][ T5912] tipc: Resetting bearer [ 95.481700][ T5912] tipc: Disabling bearer [ 95.539040][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.706547][ T46] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.755060][ T46] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.768036][ T5636] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.780546][ T46] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.795898][ T5921] FAULT_INJECTION: forcing a failure. [ 95.795898][ T5921] name failslab, interval 1, probability 0, space 0, times 1 [ 95.809770][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 95.809904][ T5636] usb 1-1: device descriptor read/8, error -71 [ 95.825465][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.834098][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 95.834120][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.834137][ T5921] Call Trace: [ 95.834148][ T5921] [ 95.834155][ T5921] dump_stack_lvl+0xe8/0x150 [ 95.834185][ T5921] should_fail_ex+0x412/0x560 [ 95.834212][ T5921] should_failslab+0xa8/0x100 [ 95.834239][ T5921] __kmalloc_cache_noprof+0x88/0x660 [ 95.834261][ T5921] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 95.834303][ T5921] ? sctp_v6_cmp_addr+0x15/0xd0 [ 95.834325][ T5921] ? sctp_add_bind_addr+0x8c/0x370 [ 95.834354][ T5921] sctp_add_bind_addr+0x8c/0x370 [ 95.834382][ T5921] sctp_copy_local_addr_list+0x314/0x4f0 [ 95.834408][ T5921] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 95.834432][ T5921] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 95.834458][ T5921] ? sctp_v6_is_any+0x64/0x80 [ 95.834483][ T5921] ? sctp_copy_one_addr+0x93/0x360 [ 95.834509][ T5921] sctp_bind_addr_copy+0xb3/0x3c0 [ 95.834534][ T5921] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 95.834559][ T5921] sctp_connect_new_asoc+0x2ff/0x6b0 [ 95.834581][ T5921] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.834607][ T5921] ? __local_bh_enable_ip+0xd0/0x130 [ 95.834624][ T5921] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 95.834648][ T5921] ? security_sctp_bind_connect+0x7e/0x2c0 [ 95.834670][ T5921] sctp_sendmsg+0x1528/0x2c10 [ 95.834686][ T5921] ? is_bpf_text_address+0x26/0x2b0 [ 95.834719][ T5921] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.834741][ T5921] ? aa_sk_perm+0x6d5/0x900 [ 95.834769][ T5921] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.834793][ T5921] ? sock_rps_record_flow+0x19/0x350 [ 95.834814][ T5921] ? inet_sendmsg+0x2f4/0x370 [ 95.834835][ T5921] ____sys_sendmsg+0x80a/0x9f0 [ 95.834868][ T5921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.834910][ T5921] ? import_iovec+0x73/0xa0 [ 95.834937][ T5921] ___sys_sendmsg+0x2a5/0x360 [ 95.834958][ T5921] ? __lock_acquire+0x6b5/0x2cf0 [ 95.834982][ T5921] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.835042][ T5921] ? __fget_files+0x2a/0x420 [ 95.835060][ T5921] ? __fget_files+0x3a0/0x420 [ 95.835090][ T5921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 95.835115][ T5921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.835148][ T5921] ? __pfx_ksys_write+0x10/0x10 [ 95.835179][ T5921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.835197][ T5921] do_syscall_64+0x15f/0xf80 [ 95.835216][ T5921] ? trace_irq_disable+0x3b/0x140 [ 95.835237][ T5921] ? clear_bhb_loop+0x40/0x90 [ 95.835257][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.835270][ T5921] RIP: 0033:0x7f430479ce59 [ 95.835289][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.835300][ T5921] RSP: 002b:00007f4305742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.835316][ T5921] RAX: ffffffffffffffda RBX: 00007f4304a15fa0 RCX: 00007f430479ce59 [ 95.835327][ T5921] RDX: 000000000400c041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 95.835338][ T5921] RBP: 00007f4305742090 R08: 0000000000000000 R09: 0000000000000000 [ 95.835347][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.835356][ T5921] R13: 00007f4304a16038 R14: 00007f4304a15fa0 R15: 00007f4304b3fa48 [ 95.835382][ T5921] [ 96.191357][ T5909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.289964][ T5636] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.319193][ T5636] usb 1-1: device descriptor read/8, error -71 [ 96.359631][ T5924] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 96.442444][ T5636] usb usb1-port1: unable to enumerate USB device [ 96.635545][ T5932] team0: Device gtp0 is of different type [ 97.028336][ T46] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 97.036967][ T46] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 97.090839][ T46] usb 4-1: USB disconnect, device number 4 [ 97.096716][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 97.112725][ T2088] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.298018][ T2088] usb 5-1: Using ep0 maxpacket: 8 [ 97.307106][ T2088] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.324426][ T2088] usb 5-1: config 0 has no interface number 0 [ 97.337132][ T2088] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.361186][ T2088] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 97.405172][ T2088] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.427610][ T2088] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.464746][ T2088] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.492074][ T2088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.559266][ T2088] usb 5-1: config 0 descriptor?? [ 97.622537][ T2088] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 97.744189][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 97.818359][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.895395][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.173812][ T5956] FAULT_INJECTION: forcing a failure. [ 98.173812][ T5956] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.225049][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(full) [ 98.225073][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.225083][ T5956] Call Trace: [ 98.225091][ T5956] [ 98.225098][ T5956] dump_stack_lvl+0xe8/0x150 [ 98.225135][ T5956] should_fail_ex+0x412/0x560 [ 98.225162][ T5956] strncpy_from_user+0x36/0x2b0 [ 98.225186][ T5956] getname_long+0x88/0x130 [ 98.225208][ T5956] do_getname+0x181/0x250 [ 98.225229][ T5956] __se_sys_renameat+0x40/0x2c0 [ 98.225248][ T5956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.225268][ T5956] do_syscall_64+0x15f/0xf80 [ 98.225290][ T5956] ? trace_irq_disable+0x3b/0x140 [ 98.225313][ T5956] ? clear_bhb_loop+0x40/0x90 [ 98.225333][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.225349][ T5956] RIP: 0033:0x7f430479ce59 [ 98.225366][ T5956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.225379][ T5956] RSP: 002b:00007f4305742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 98.225397][ T5956] RAX: ffffffffffffffda RBX: 00007f4304a15fa0 RCX: 00007f430479ce59 [ 98.225408][ T5956] RDX: ffffffffffffffff RSI: 0000200000002040 RDI: ffffffffffffffff [ 98.225420][ T5956] RBP: 00007f4305742090 R08: 0000000000000000 R09: 0000000000000000 [ 98.225431][ T5956] R10: 0000200000003080 R11: 0000000000000246 R12: 0000000000000001 [ 98.225441][ T5956] R13: 00007f4304a16038 R14: 00007f4304a15fa0 R15: 00007f4304b3fa48 [ 98.225467][ T5956] [ 98.778252][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.975600][ T46] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.010656][ T46] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.073236][ T46] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.098169][ T2088] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.122000][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 99.174860][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.205659][ T5959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 99.298056][ T2088] usb 3-1: Using ep0 maxpacket: 8 [ 99.325311][ T2088] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 99.351738][ T2088] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 99.391612][ T2088] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.435779][ T2088] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 99.494845][ T2088] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 99.510897][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'. [ 99.552123][ T2088] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.597164][ T2088] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.642439][ T2088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.906389][ T5699] usb 5-1: USB disconnect, device number 6 [ 99.934448][ T5699] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 99.963168][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.006721][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.019221][ T5636] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.043771][ T46] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 100.075415][ T2088] usb 3-1: GET_CAPABILITIES returned 0 [ 100.088489][ T46] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9 [ 100.099786][ T2088] usbtmc 3-1:16.0: can't read capabilities [ 100.168679][ T2088] usb 2-1: USB disconnect, device number 3 [ 100.175153][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 100.201715][ T5636] usb 1-1: device descriptor read/64, error -71 [ 100.299418][ T5961] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 100.307951][ T5692] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.319116][ T46] usb 3-1: USB disconnect, device number 3 [ 100.464848][ T5692] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 100.474432][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.483808][ T5692] usb 4-1: Product: syz [ 100.488778][ T5692] usb 4-1: Manufacturer: syz [ 100.488924][ T5636] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.493588][ T5692] usb 4-1: SerialNumber: syz [ 100.608023][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.639275][ T5636] usb 1-1: device descriptor read/64, error -71 [ 100.738035][ T9] usb 5-1: device descriptor read/64, error -71 [ 100.749843][ T5636] usb usb1-port1: attempt power cycle [ 100.920272][ T5692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 100.946565][ T5692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 100.997943][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.099356][ T5636] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.138115][ T9] usb 5-1: device descriptor read/64, error -71 [ 101.146045][ T5636] usb 1-1: device descriptor read/8, error -71 [ 101.249609][ T29] audit: type=1326 audit(1778729924.776:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.265859][ T9] usb usb5-port1: attempt power cycle [ 101.308469][ T29] audit: type=1326 audit(1778729924.796:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.368857][ T29] audit: type=1326 audit(1778729924.796:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.427940][ T5636] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 101.430293][ T29] audit: type=1326 audit(1778729924.796:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.474693][ T5636] usb 1-1: device descriptor read/8, error -71 [ 101.494678][ T29] audit: type=1326 audit(1778729924.796:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.528792][ T29] audit: type=1326 audit(1778729924.796:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.565203][ T29] audit: type=1326 audit(1778729924.806:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.600087][ T29] audit: type=1326 audit(1778729924.806:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.617111][ T5636] usb usb1-port1: unable to enumerate USB device [ 101.641429][ T29] audit: type=1326 audit(1778729924.806:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.679603][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.715999][ T29] audit: type=1326 audit(1778729924.806:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.2.96" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66a79ce59 code=0x7ffc0000 [ 101.750781][ T9] usb 5-1: device descriptor read/8, error -71 [ 101.872190][ T5692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 101.899699][ T5692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 101.920694][ T5692] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.013512][ T5692] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 102.027973][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.032333][ T5692] usb 4-1: USB disconnect, device number 5 [ 102.079695][ T9] usb 5-1: device descriptor read/8, error -71 [ 102.208658][ T9] usb usb5-port1: unable to enumerate USB device [ 102.728104][ T5720] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.799467][ T5692] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.899285][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 102.907508][ T5720] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 102.935076][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.961166][ T5720] usb 4-1: config 0 descriptor?? [ 102.974494][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.991853][ T5720] gspca_main: sunplus-2.14.0 probing 041e:400b [ 103.004443][ T5692] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.032985][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.061080][ T5692] usb 2-1: config 0 descriptor?? [ 103.072352][ T5692] pwc: Askey VC010 type 2 USB webcam detected. [ 103.187794][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.207418][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.268451][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.355477][ T5692] pwc: recv_control_msg error -71 req 02 val 2b00 [ 103.376930][ T5692] pwc: recv_control_msg error -71 req 02 val 2700 [ 103.405608][ T5692] pwc: recv_control_msg error -71 req 02 val 2c00 [ 103.419734][ T9] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.440274][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.441887][ T5692] pwc: recv_control_msg error -71 req 04 val 1000 [ 103.459282][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.478988][ T5692] pwc: recv_control_msg error -71 req 04 val 1300 [ 103.496365][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.497955][ T5692] pwc: recv_control_msg error -71 req 04 val 1400 [ 103.551349][ T5692] pwc: recv_control_msg error -71 req 02 val 2000 [ 103.558497][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.584266][ T5692] pwc: recv_control_msg error -71 req 02 val 2100 [ 103.611390][ T5692] pwc: recv_control_msg error -71 req 04 val 1500 [ 103.616022][ T6009] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 103.626623][ T5692] pwc: recv_control_msg error -71 req 02 val 2500 [ 103.655473][ T5692] pwc: recv_control_msg error -71 req 02 val 2400 [ 103.683374][ T5692] pwc: recv_control_msg error -71 req 02 val 2600 [ 103.706124][ T5692] pwc: recv_control_msg error -71 req 02 val 2900 [ 103.716768][ T5692] pwc: recv_control_msg error -71 req 02 val 2800 [ 103.726557][ T5692] pwc: recv_control_msg error -71 req 04 val 1100 [ 103.736485][ T5692] pwc: recv_control_msg error -71 req 04 val 1200 [ 103.786653][ T5692] pwc: Registered as video103. [ 103.800575][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 103.852445][ T5692] usb 2-1: USB disconnect, device number 4 [ 104.030857][ T5999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.293243][ T5692] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.321929][ T5720] gspca_sunplus: reg_r err -71 [ 104.344310][ T5720] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 104.382608][ T5720] usb 4-1: USB disconnect, device number 6 [ 104.481399][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 104.485048][ T5692] usb 2-1: Using ep0 maxpacket: 8 [ 104.517643][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 104.522594][ T5692] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 104.581382][ T5692] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.616680][ T5692] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.639638][ T9] usb 1-1: USB disconnect, device number 12 [ 104.645783][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 104.665997][ T5692] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 104.711183][ T5692] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.772409][ T5692] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.813648][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.988299][ T5699] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.020315][ T6038] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 105.026975][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.060877][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 105.103620][ T5692] usb 2-1: usb_control_msg returned -32 [ 105.132620][ T5692] usbtmc 2-1:16.0: can't read capabilities [ 105.173957][ T5699] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.196030][ T5699] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.211316][ T5699] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.223911][ T5699] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 105.247920][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.264386][ T6036] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.298943][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 105.319783][ T2088] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.491141][ T2088] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 105.500423][ T2088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.516313][ T2088] usb 4-1: config 0 descriptor?? [ 105.746371][ T6038] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 105.752923][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.765122][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 105.785126][ T6038] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 105.792111][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.804828][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 105.813681][ T6038] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 105.820336][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.856516][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 105.862401][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.881584][ T6054] vhci_hcd: connection closed [ 105.881733][ T6052] vhci_hcd: connection closed [ 105.885614][ T6039] vhci_hcd: connection reset by peer [ 105.898234][ T2088] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 105.907988][ T137] vhci_hcd vhci_hcd.3: stop threads [ 105.913346][ T6056] vhci_hcd: connection closed [ 105.928341][ T137] vhci_hcd vhci_hcd.3: release socket [ 105.944327][ T2088] [drm:udl_init] *ERROR* Selecting channel failed [ 105.960537][ T137] vhci_hcd vhci_hcd.3: disconnect device [ 105.975024][ T137] vhci_hcd vhci_hcd.3: stop threads [ 105.984366][ T137] vhci_hcd vhci_hcd.3: release socket [ 105.995638][ T137] vhci_hcd vhci_hcd.3: disconnect device [ 106.014492][ T137] vhci_hcd vhci_hcd.3: stop threads [ 106.023276][ T2088] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 106.032124][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 106.040883][ T137] vhci_hcd vhci_hcd.3: release socket [ 106.046604][ T2088] [drm] Initialized udl on minor 2 [ 106.053525][ T137] vhci_hcd vhci_hcd.3: disconnect device [ 106.061397][ T46] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 106.074650][ T137] vhci_hcd vhci_hcd.3: stop threads [ 106.081241][ T2088] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.090134][ T46] usb 5-1: config 0 has no interface number 0 [ 106.097584][ T137] vhci_hcd vhci_hcd.3: release socket [ 106.103606][ T46] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.121330][ T137] vhci_hcd vhci_hcd.3: disconnect device [ 106.129982][ T2088] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 106.138389][ T46] usb 5-1: config 0 interface 85 has no altsetting 0 [ 106.152647][ T5658] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.166040][ T2088] usb 4-1: USB disconnect, device number 7 [ 106.178043][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 106.188674][ T5658] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 106.195809][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.222891][ T46] usb 5-1: Product: syz [ 106.232059][ T46] usb 5-1: Manufacturer: syz [ 106.253576][ T46] usb 5-1: SerialNumber: syz [ 106.317353][ T46] usb 5-1: config 0 descriptor?? [ 106.600028][ T5699] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 106.619393][ T6065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.632360][ T5699] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input12 [ 106.655494][ T5658] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 106.734735][ T5699] usb 3-1: USB disconnect, device number 4 [ 106.740763][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 106.803935][ T46] appletouch 5-1:0.85: Geyser mode initialized. [ 106.833591][ T46] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input13 [ 106.856004][ T5658] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 106.866940][ T5658] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 106.877760][ T5658] usb 1-1: Product: syz [ 106.896768][ T5658] usb 1-1: SerialNumber: syz [ 106.906882][ T5658] usb 1-1: config 0 descriptor?? [ 106.921683][ T5658] hso 1-1:0.0: Not our interface [ 107.009687][ T6073] syzkaller0: entered promiscuous mode [ 107.020907][ T6073] syzkaller0: entered allmulticast mode [ 107.033998][ T5699] usb 5-1: USB disconnect, device number 11 [ 107.034135][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 107.077612][ T5699] appletouch 5-1:0.85: input: appletouch disconnected [ 107.079874][ T6073] tipc: Started in network mode [ 107.091721][ T6073] tipc: Node identity da9092950df, cluster identity 4711 [ 107.099229][ T6073] tipc: Enabled bearer , priority 0 [ 107.120113][ T6072] tipc: Resetting bearer [ 107.142468][ T6072] tipc: Disabling bearer [ 107.617990][ T5699] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.789749][ T5699] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.816284][ T5699] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.849382][ T5699] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.869172][ T2088] usb 2-1: USB disconnect, device number 5 [ 107.898689][ T5699] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.931035][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.972624][ T6082] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.213416][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 108.800266][ T5699] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 108.835267][ T5699] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input14 [ 108.929113][ T5699] usb 4-1: USB disconnect, device number 8 [ 108.935046][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 108.957220][ T5720] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 109.142552][ T5720] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 109.163609][ T5720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 109.193879][ T5720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 109.218983][ T5720] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.234482][ T5720] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.244347][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.422754][ T808] usb 1-1: USB disconnect, device number 13 [ 109.481703][ T5720] usb 3-1: GET_CAPABILITIES returned 0 [ 109.502670][ T5720] usbtmc 3-1:16.0: can't read capabilities [ 109.564328][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 109.748813][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 109.830102][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 109.835249][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.850363][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 109.856777][ T6125] usbtmc 3-1:16.0: Unable to send data, error -71 [ 109.896543][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.943639][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 109.959762][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.981686][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.992222][ T808] usb 3-1: USB disconnect, device number 5 [ 110.238742][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 110.397980][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 110.409710][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.431981][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.457196][ T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.472076][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 110.475828][ T6145] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 110.482164][ T46] usb 5-1: SerialNumber: syz [ 110.664641][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 110.700014][ T6151] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 110.714870][ T6151] bond1 (unregistering): Released all slaves [ 110.724293][ T46] usb 5-1: 0:2 : does not exist [ 110.729455][ T2088] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.737059][ T46] usb 5-1: unit 5 not found! [ 110.797170][ T46] usb 5-1: USB disconnect, device number 12 [ 110.894651][ T2088] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 110.909770][ T5720] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.911547][ T2088] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 110.946074][ T2088] usb 2-1: Product: syz [ 110.958557][ T2088] usb 2-1: SerialNumber: syz [ 110.963055][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.996821][ T2088] usb 2-1: config 0 descriptor?? [ 111.008138][ T2088] hso 2-1:0.0: Not our interface [ 111.081285][ T5720] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.093353][ T5720] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.107047][ T5720] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.120306][ T5720] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 111.132386][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.147791][ T6153] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 111.188806][ T808] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.293282][ T6163] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 111.303605][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.153'. [ 111.315989][ T6163] bridge0: port 3(dummy0) entered blocking state [ 111.325659][ T6163] bridge0: port 3(dummy0) entered disabled state [ 111.335029][ T6163] dummy0: entered allmulticast mode [ 111.342652][ T6163] dummy0: entered promiscuous mode [ 111.350340][ T6163] bridge0: port 3(dummy0) entered blocking state [ 111.357763][ T6163] bridge0: port 3(dummy0) entered forwarding state [ 111.358030][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 111.374381][ T808] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 111.384040][ T808] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.395286][ T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.408209][ T808] usb 3-1: config 1 has no interface number 0 [ 111.433301][ T808] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.456491][ T808] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 111.470283][ T808] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.479727][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.525151][ T808] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 111.722767][ T808] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 111.978726][ T5720] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 112.005291][ T5720] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15 [ 112.192912][ T5720] usb 4-1: USB disconnect, device number 9 [ 112.192950][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 112.260742][ T5699] usb 3-1: USB disconnect, device number 6 [ 112.310556][ T5699] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 112.853757][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 112.853795][ T29] audit: type=1326 audit(1778729936.376:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 112.965784][ T29] audit: type=1326 audit(1778729936.376:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.035330][ T29] audit: type=1326 audit(1778729936.426:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.073380][ T6200] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 113.085263][ T6202] FAULT_INJECTION: forcing a failure. [ 113.085263][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.104792][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full) [ 113.104813][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.104822][ T6202] Call Trace: [ 113.104829][ T6202] [ 113.104836][ T6202] dump_stack_lvl+0xe8/0x150 [ 113.104865][ T6202] should_fail_ex+0x412/0x560 [ 113.104887][ T6202] _copy_from_iter+0x1d3/0x1670 [ 113.104909][ T6202] ? rcu_is_watching+0x15/0xb0 [ 113.104929][ T6202] ? __pfx__copy_from_iter+0x10/0x10 [ 113.104953][ T6202] ? netlink_sendmsg+0x650/0xb40 [ 113.104970][ T6202] ? skb_put+0x11b/0x210 [ 113.104991][ T6202] netlink_sendmsg+0x6c0/0xb40 [ 113.105018][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.105039][ T6202] ? aa_sock_msg_perm+0xf1/0x1b0 [ 113.105060][ T6202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.105082][ T6202] ____sys_sendmsg+0x972/0x9f0 [ 113.105104][ T6202] ? __might_fault+0xaf/0x130 [ 113.105128][ T6202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.105158][ T6202] ? import_iovec+0x73/0xa0 [ 113.105184][ T6202] ___sys_sendmsg+0x2a5/0x360 [ 113.105204][ T6202] ? __lock_acquire+0x6b5/0x2cf0 [ 113.105224][ T6202] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.105277][ T6202] ? __fget_files+0x2a/0x420 [ 113.105295][ T6202] ? __fget_files+0x3a0/0x420 [ 113.105319][ T6202] __x64_sys_sendmsg+0x1bd/0x2a0 [ 113.105344][ T6202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.105374][ T6202] ? __pfx_ksys_write+0x10/0x10 [ 113.105404][ T6202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.105421][ T6202] do_syscall_64+0x15f/0xf80 [ 113.105441][ T6202] ? trace_irq_disable+0x3b/0x140 [ 113.105465][ T6202] ? clear_bhb_loop+0x40/0x90 [ 113.105485][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.105502][ T6202] RIP: 0033:0x7fb66a79ce59 [ 113.105524][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.105541][ T6202] RSP: 002b:00007fb66b709028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.105562][ T6202] RAX: ffffffffffffffda RBX: 00007fb66aa15fa0 RCX: 00007fb66a79ce59 [ 113.105573][ T6202] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000003 [ 113.105583][ T6202] RBP: 00007fb66b709090 R08: 0000000000000000 R09: 0000000000000000 [ 113.105593][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.105602][ T6202] R13: 00007fb66aa16038 R14: 00007fb66aa15fa0 R15: 00007fb66ab3fa48 [ 113.105628][ T6202] [ 113.347783][ T29] audit: type=1326 audit(1778729936.426:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.378338][ T29] audit: type=1326 audit(1778729936.426:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.407783][ T29] audit: type=1326 audit(1778729936.426:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.435501][ T29] audit: type=1326 audit(1778729936.426:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.462316][ T29] audit: type=1326 audit(1778729936.426:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.489850][ T29] audit: type=1326 audit(1778729936.426:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.519611][ T29] audit: type=1326 audit(1778729936.436:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.3.158" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46319ce59 code=0x7ffc0000 [ 113.538269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 113.588226][ T5636] usb 2-1: USB disconnect, device number 6 [ 113.763564][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.826497][ T6209] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 113.847298][ T6209] bond1 (unregistering): Released all slaves [ 113.976404][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 115.317966][ T5636] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.428635][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.487991][ T5636] usb 2-1: Using ep0 maxpacket: 16 [ 115.509607][ T5636] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.545611][ T5636] usb 2-1: config 114 has an invalid interface number: 120 but max is 0 [ 115.576636][ T5636] usb 2-1: config 114 has no interface number 0 [ 115.594758][ T5636] usb 2-1: config 114 interface 120 altsetting 232 bulk endpoint 0x4 has invalid maxpacket 1023 [ 115.622875][ T5636] usb 2-1: config 114 interface 120 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 115.622900][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.655379][ T5636] usb 2-1: config 114 interface 120 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 115.707992][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.713925][ T5636] usb 2-1: config 114 interface 120 has no altsetting 0 [ 115.758878][ T5636] usb 2-1: New USB device found, idVendor=045e, idProduct=04e4, bcdDevice= 5.f0 [ 115.769546][ T46] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 115.798806][ T5636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.825799][ T5636] usb 2-1: Product: syz [ 115.832335][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.838481][ T5636] usb 2-1: Manufacturer: syz [ 115.865280][ T5636] usb 2-1: SerialNumber: syz [ 115.879115][ T46] usb 1-1: config 0 descriptor?? [ 115.908969][ T6226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.936848][ T6226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.098282][ T5699] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.199009][ T5636] ipaq 2-1:114.120: PocketPC PDA converter detected [ 116.210323][ T5636] usb 2-1: active config #114 != 1 ?? [ 116.232034][ T5636] usb 2-1: USB disconnect, device number 7 [ 116.292723][ T5699] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 116.305882][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 116.319549][ T5699] usb 4-1: Product: syz [ 116.324041][ T5699] usb 4-1: SerialNumber: syz [ 116.332389][ T5699] usb 4-1: config 0 descriptor?? [ 116.347259][ T5699] hso 4-1:0.0: Not our interface [ 116.378253][ T5658] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.389655][ T6247] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 116.435367][ T6247] bond1: entered promiscuous mode [ 116.441055][ T6247] bond1: entered allmulticast mode [ 116.446641][ T6247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.516475][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 116.530552][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.538719][ T5658] usb 3-1: Using ep0 maxpacket: 32 [ 116.554012][ T5658] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 116.564027][ T46] usb 1-1: USB disconnect, device number 14 [ 116.578219][ T5658] usb 3-1: config 0 has no interface number 0 [ 116.597642][ T5658] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.622295][ T5658] usb 3-1: config 0 interface 85 has no altsetting 0 [ 116.632264][ T5658] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 116.644436][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.653719][ T5658] usb 3-1: Product: syz [ 116.659113][ T5658] usb 3-1: Manufacturer: syz [ 116.665419][ T5658] usb 3-1: SerialNumber: syz [ 116.675433][ T5658] usb 3-1: config 0 descriptor?? [ 117.096993][ T5658] appletouch 3-1:0.85: Geyser mode initialized. [ 117.123942][ T5658] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 117.199442][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 117.316887][ T46] usb 3-1: USB disconnect, device number 7 [ 117.413822][ T46] appletouch 3-1:0.85: input: appletouch disconnected [ 117.889505][ T6328] fuse: Bad value for 'group_id' [ 117.906273][ T6328] fuse: Bad value for 'group_id' [ 118.172226][ T5636] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 118.241517][ T5658] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.422425][ T5658] usb 3-1: Using ep0 maxpacket: 8 [ 118.456303][ T5658] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 118.472216][ T5658] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 118.498700][ T5658] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.518739][ T5658] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 118.540292][ T5658] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 118.560635][ T5658] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.587371][ T5658] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.607285][ T5658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.617956][ T5636] usb 1-1: Using ep0 maxpacket: 32 [ 118.624753][ T5636] usb 1-1: config 252 has an invalid interface number: 30 but max is 0 [ 118.634641][ T5636] usb 1-1: config 252 has no interface number 0 [ 118.674346][ T5636] usb 1-1: config 252 interface 30 altsetting 16 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 118.718138][ T5636] usb 1-1: config 252 interface 30 has no altsetting 0 [ 118.735269][ T5636] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 8.ba [ 118.749462][ T5636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.762840][ T5636] usb 1-1: Product: syz [ 118.767031][ T5636] usb 1-1: Manufacturer: syz [ 118.772366][ T5636] usb 1-1: SerialNumber: syz [ 118.826207][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.852551][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.881649][ T808] usb 4-1: USB disconnect, device number 10 [ 118.900668][ T5658] usb 3-1: GET_CAPABILITIES returned 0 [ 118.915280][ T5658] usbtmc 3-1:16.0: can't read capabilities [ 118.987577][ T5636] ljca 1-1:252.30: bulk endpoints not found [ 119.013632][ T6346] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 119.034020][ T5636] usb 1-1: USB disconnect, device number 15 [ 119.107977][ T6331] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 119.151045][ T5658] usb 3-1: USB disconnect, device number 8 [ 119.457948][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 119.531918][ T5636] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 119.557982][ T808] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 119.608590][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 119.619727][ T46] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 119.637515][ T46] usb 5-1: config 0 has no interface number 0 [ 119.644359][ T46] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.656647][ T46] usb 5-1: config 0 interface 85 has no altsetting 0 [ 119.665928][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 119.675923][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.684024][ T46] usb 5-1: Product: syz [ 119.688502][ T46] usb 5-1: Manufacturer: syz [ 119.694350][ T46] usb 5-1: SerialNumber: syz [ 119.702103][ T46] usb 5-1: config 0 descriptor?? [ 119.711480][ T5636] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.724750][ T5636] usb 4-1: not running at top speed; connect to a high speed hub [ 119.736100][ T5636] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 119.760115][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.769544][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 119.781609][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.791980][ T5636] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 119.801921][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.810266][ T5636] usb 4-1: Product: syz [ 119.816747][ T808] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.829452][ T5636] usb 4-1: Manufacturer: syz [ 119.835660][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 119.847544][ T5636] usb 4-1: SerialNumber: syz [ 119.852574][ T808] usb 2-1: SerialNumber: syz [ 119.878081][ T5658] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 120.038432][ T5658] usb 1-1: Using ep0 maxpacket: 32 [ 120.056376][ T5658] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 120.063962][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 120.068633][ T5658] usb 1-1: config 0 has no interface number 0 [ 120.085412][ T5636] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 120.098539][ T6377] syz.3.191 uses obsolete (PF_INET,SOCK_PACKET) [ 120.102628][ T5658] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.109368][ T5636] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 120.118083][ T5658] usb 1-1: config 0 interface 85 has no altsetting 0 [ 120.130107][ T5636] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 120.142728][ T5658] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 120.152067][ T5636] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 120.161151][ T46] appletouch 5-1:0.85: Geyser mode initialized. [ 120.164270][ T5636] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 120.175575][ T46] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input17 [ 120.189034][ T5658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.203873][ T5658] usb 1-1: Product: syz [ 120.219773][ T5658] usb 1-1: Manufacturer: syz [ 120.225224][ T5658] usb 1-1: SerialNumber: syz [ 120.267114][ T5658] usb 1-1: config 0 descriptor?? [ 120.356845][ T5720] usb 5-1: USB disconnect, device number 13 [ 120.417667][ T6385] FAULT_INJECTION: forcing a failure. [ 120.417667][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 120.449380][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT(full) [ 120.449405][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.449415][ T6385] Call Trace: [ 120.449422][ T6385] [ 120.449429][ T6385] dump_stack_lvl+0xe8/0x150 [ 120.449453][ T6385] should_fail_ex+0x412/0x560 [ 120.449490][ T6385] should_failslab+0xa8/0x100 [ 120.449514][ T6385] __kmalloc_cache_noprof+0x88/0x660 [ 120.449536][ T6385] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 120.449559][ T6385] ? sctp_add_bind_addr+0x8c/0x370 [ 120.449586][ T6385] sctp_add_bind_addr+0x8c/0x370 [ 120.449612][ T6385] sctp_copy_local_addr_list+0x314/0x4f0 [ 120.449638][ T6385] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 120.449660][ T6385] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 120.449685][ T6385] ? sctp_v6_is_any+0x64/0x80 [ 120.449709][ T6385] ? sctp_copy_one_addr+0x93/0x360 [ 120.449733][ T6385] sctp_bind_addr_copy+0xb3/0x3c0 [ 120.449756][ T6385] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 120.449779][ T6385] sctp_connect_new_asoc+0x2ff/0x6b0 [ 120.449801][ T6385] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 120.449825][ T6385] ? __local_bh_enable_ip+0xd0/0x130 [ 120.449842][ T6385] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 120.449865][ T6385] ? security_sctp_bind_connect+0x7e/0x2c0 [ 120.449885][ T6385] sctp_sendmsg+0x1528/0x2c10 [ 120.449915][ T6385] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.449935][ T6385] ? aa_sk_perm+0x6d5/0x900 [ 120.449955][ T6385] ? __might_fault+0xaf/0x130 [ 120.449981][ T6385] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.450003][ T6385] ? sock_rps_record_flow+0x19/0x350 [ 120.450022][ T6385] ? inet_sendmsg+0x2f4/0x370 [ 120.450042][ T6385] ____sys_sendmsg+0x80a/0x9f0 [ 120.450074][ T6385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.450106][ T6385] ? import_iovec+0x73/0xa0 [ 120.450133][ T6385] ___sys_sendmsg+0x2a5/0x360 [ 120.450154][ T6385] ? __lock_acquire+0x6b5/0x2cf0 [ 120.450177][ T6385] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.450233][ T6385] ? __fget_files+0x2a/0x420 [ 120.450252][ T6385] ? __fget_files+0x3a0/0x420 [ 120.450280][ T6385] __x64_sys_sendmsg+0x1bd/0x2a0 [ 120.450306][ T6385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.450337][ T6385] ? __pfx_ksys_write+0x10/0x10 [ 120.450368][ T6385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.450387][ T6385] do_syscall_64+0x15f/0xf80 [ 120.450408][ T6385] ? trace_irq_disable+0x3b/0x140 [ 120.450432][ T6385] ? clear_bhb_loop+0x40/0x90 [ 120.450453][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.450470][ T6385] RIP: 0033:0x7fd46319ce59 [ 120.450495][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.450508][ T6385] RSP: 002b:00007fd4640ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.450524][ T6385] RAX: ffffffffffffffda RBX: 00007fd463415fa0 RCX: 00007fd46319ce59 [ 120.450535][ T6385] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 120.450546][ T6385] RBP: 00007fd4640ea090 R08: 0000000000000000 R09: 0000000000000000 [ 120.450554][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.450564][ T6385] R13: 00007fd463416038 R14: 00007fd463415fa0 R15: 00007fd46353fa48 [ 120.450592][ T6385] [ 120.792181][ T808] usb 2-1: 0:2 : does not exist [ 120.797233][ T808] usb 2-1: unit 5 not found! [ 120.839585][ T5636] usb 4-1: USB disconnect, device number 11 [ 120.880599][ T808] usb 2-1: USB disconnect, device number 8 [ 120.901779][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.939590][ T5720] appletouch 5-1:0.85: input: appletouch disconnected [ 121.019689][ T5658] appletouch 1-1:0.85: Geyser mode initialized. [ 121.021421][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.031488][ T5658] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input18 [ 121.078162][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 121.135230][ T46] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 121.158612][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.234459][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 121.274215][ T5658] usb 1-1: USB disconnect, device number 16 [ 121.274238][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 121.306383][ T46] usb 3-1: config 0 descriptor?? [ 121.327452][ T46] gspca_main: sq930x-2.14.0 probing 041e:403c [ 121.439913][ T5658] appletouch 1-1:0.85: input: appletouch disconnected [ 121.557948][ T5720] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.071002][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 227.107868][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 227.114872][ C1] rcu: 0-...!: (1 GPs behind) idle=dd1c/0/0x1 softirq=20494/20494 fqs=1 [ 227.124044][ C1] rcu: (detected by 1, t=10502 jiffies, g=20453, q=393 ncpus=2) [ 227.131774][ C1] Sending NMI from CPU 1 to CPUs 0: [ 227.131807][ C0] NMI backtrace for cpu 0 [ 227.131822][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 227.131838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.131847][ C0] RIP: 0010:do_raw_spin_unlock+0x9/0x210 [ 227.131876][ C0] Code: 0f 8c 65 ff ff ff e8 16 a9 8e 00 e9 5b ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 <41> 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 4c 8d 77 04 [ 227.131887][ C0] RSP: 0018:ffffc90000007ce0 EFLAGS: 00000082 [ 227.131901][ C0] RAX: 42ba142ded918b00 RBX: ffff8880348552a8 RCX: 0000000000010002 [ 227.131912][ C0] RDX: 0000000000000000 RSI: ffffffff8e219beb RDI: ffff8880348552a8 [ 227.131922][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 227.131931][ C0] R10: dffffc0000000000 R11: fffff52000000f90 R12: ffff888055e6ac00 [ 227.131942][ C0] R13: ffff888034855000 R14: ffff888055e6a800 R15: 18af5178db021e45 [ 227.131953][ C0] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 227.131964][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.131974][ C0] CR2: 00007fe40afd4ff8 CR3: 000000005aea8000 CR4: 00000000003526f0 [ 227.131988][ C0] Call Trace: [ 227.131995][ C0] [ 227.132003][ C0] _raw_spin_unlock+0x1e/0x50 [ 227.132022][ C0] advance_sched+0x94f/0xc20 [ 227.132057][ C0] ? __pfx_advance_sched+0x10/0x10 [ 227.132076][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 227.132102][ C0] hrtimer_interrupt+0x44b/0x950 [ 227.132132][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 227.132152][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 227.132171][ C0] [ 227.132175][ C0] [ 227.132181][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.132197][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 227.132216][ C0] Code: 9b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 a1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 227.132227][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 227.132238][ C0] RAX: 00000000000f934f RBX: ffffffff819a93ba RCX: 0000000080000001 [ 227.132248][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa68ee RDI: ffffffff8c28af60 [ 227.132258][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 227.132268][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 227.132278][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 227.132290][ C0] ? do_idle+0x36a/0x5f0 [ 227.132311][ C0] default_idle+0x9/0x20 [ 227.132323][ C0] default_idle_call+0x72/0xb0 [ 227.132337][ C0] do_idle+0x36a/0x5f0 [ 227.132352][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 227.132370][ C0] ? __pfx_do_idle+0x10/0x10 [ 227.132390][ C0] cpu_startup_entry+0x43/0x60 [ 227.132406][ C0] rest_init+0x2de/0x300 [ 227.132421][ C0] start_kernel+0x38a/0x3e0 [ 227.132439][ C0] x86_64_start_reservations+0x24/0x30 [ 227.132459][ C0] x86_64_start_kernel+0x143/0x1c0 [ 227.132477][ C0] common_startup_64+0x13e/0x147 [ 227.132503][ C0] [ 227.132800][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g20453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 227.452760][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=5274 [ 227.460555][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g20453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 227.471914][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 227.481874][ C1] rcu: RCU grace-period kthread stack dump: [ 227.487751][ C1] task:rcu_preempt state:I stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 227.499668][ C1] Call Trace: [ 227.502944][ C1] [ 227.505878][ C1] __schedule+0x1821/0x5740 [ 227.510386][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 227.515347][ C1] ? __pfx___schedule+0x10/0x10 [ 227.520205][ C1] ? schedule+0x90/0x360 [ 227.524452][ C1] schedule+0x164/0x360 [ 227.528610][ C1] schedule_timeout+0x158/0x2c0 [ 227.533466][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 227.538841][ C1] ? __pfx_process_timeout+0x10/0x10 [ 227.544131][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 227.549938][ C1] ? prepare_to_swait_event+0x340/0x370 [ 227.555491][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 227.560355][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 227.566244][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 227.571527][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.576729][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.582537][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 227.587130][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.592324][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.598133][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 227.603073][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 227.608103][ C1] kthread+0x388/0x470 [ 227.612172][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.617365][ C1] ? __pfx_kthread+0x10/0x10 [ 227.621961][ C1] ret_from_fork+0x514/0xb70 [ 227.626553][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 227.631668][ C1] ? __switch_to+0xc79/0x1410 [ 227.636351][ C1] ? __pfx_kthread+0x10/0x10 [ 227.640940][ C1] ret_from_fork_asm+0x1a/0x30 [ 227.645719][ C1]