last executing test programs: 9.256286283s ago: executing program 3 (id=3289): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000000400000000b2"], 0x5b0}, 0x20008001) 9.020366843s ago: executing program 3 (id=3293): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0x9, 0x8, 0x8000, 0x28001, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 7.968597172s ago: executing program 3 (id=3300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902240001000000000904"], 0x0) 7.685751076s ago: executing program 0 (id=3301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cd"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 7.383205899s ago: executing program 0 (id=3302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x8667f7fc7455970c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020e0ffff0708004a00003c0000000000069078ac141400ac14140089076fffffffff4404f103860600"/57, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fa6deb732da3223b"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(r3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.141477279s ago: executing program 4 (id=3305): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x47a}], 0x1}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 6.871881104s ago: executing program 2 (id=3307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 6.774021068s ago: executing program 1 (id=3308): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 6.140550604s ago: executing program 3 (id=3309): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x803, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 6.068759249s ago: executing program 4 (id=3310): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96d", 0xe}], 0x1}, 0x0) 5.921050042s ago: executing program 4 (id=3311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000340)="c4c179dc0bc4e19dd4fc2e0f01c866baf80cb80423ec85440f20c03506000000440f22c066bafc0cedf20f235066b823000f00d866b84e000f00d066ba2159ecc4e3c969a90d0000000066b8be000f00d0", 0x51}], 0x1, 0x9b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.568028603s ago: executing program 1 (id=3312): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af000000", 0x16) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) setfsgid(0xee00) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000012000/0x2000)=nil, &(0x7f0000760000/0x3000)=nil, &(0x7f00003b7000/0x3000)=nil, &(0x7f00003f2000/0x4000)=nil, &(0x7f0000660000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00002f7000/0x3000)=nil, &(0x7f00001b4000/0x3000)=nil, &(0x7f00003c3000/0x3000)=nil, &(0x7f0000263000/0x3000)=nil, &(0x7f0000177000/0x1000)=nil, &(0x7f0000000180)="f1efe7c55cc626330a98125f6e8e254e22c31a5a15d840b38c3dd50b635df0242e1a1d00e251ad7f23e3a4c74a659ddfc91a8eca4c09c57c6a38f6a62a37d4e92726915f2f3f444f", 0x48, r4}, 0x68) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000000)={{0x0, 0x3, 0x81, 0x1000001, 'syz0\x00', 0x5}, 0x3, 0x64, 0x8, 0x0, 0x2, 0x8, 'syz1\x00', &(0x7f0000000580)=['\xf8\xff\xff\xff\x88P\f<\xee\x9d\n\xf8\x87\xdev\xaf/\x03\xac\x11:s\xa2_\xc6a\x90\xe2\xef\xb61&\xf3\x05\x88p\xee\xa3\x8b\xca\x04\x88\xa9\xa5\x92t`K\x99\xde\x01\xbf!N\x88\xe9Vr\x01\xa8\xee\xa83\x06\x1d\xbd$\xc5|\xe4\x10\x00\x00\x00\x1bj\xd5ANh\x00\xca\xf6m\x14[\xbbW\t+\xef\xbf\xf1\xd9S\xa8!\x87\xadX\'\xc9:\v\xa3R\xa6\xc0w:\x92\xa9\xa1\xa1\xf5\xb1|\xc6\xbb\x98\x95\x96\xcaGmv\x00\xbe`w\x1a\x1d\xf3T\x10*\x90Y7\xb6k=\xde5\x86\xe1\x99><\xfb\xd1\x853Y\x1c\x8e\xac\xa0\xfcr\a!U\x88\x8c\x1b\xd4\x8a\xf1B\x1b\xd7Z8\xa8\x8b\x1et\xb9 \xc3|\xf6^\x9f\x94\xb1\xd9d\x11t\x89,\v\xfcq\xd2\x8d\xba\x17\x14\x89\xb3\xec\x98n_\xf2C\x9d\x99&\xafX', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00'], 0xe4}) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.383284387s ago: executing program 0 (id=3313): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x24, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.24471525s ago: executing program 0 (id=3314): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 5.072657737s ago: executing program 0 (id=3315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) shmctl$IPC_RMID(0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 5.058341334s ago: executing program 4 (id=3316): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d1, 0x800, 0x0, 0x1d}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x22001, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.744199633s ago: executing program 2 (id=3317): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3.911904352s ago: executing program 2 (id=3318): openat$iommufd(0xffffffffffffff9c, 0x0, 0x384, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000800)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000007c0)}) 3.867145394s ago: executing program 0 (id=3319): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 3.748593177s ago: executing program 3 (id=3320): socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x400003, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.604961996s ago: executing program 2 (id=3321): timer_getoverrun(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = gettid() r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e24, 0x3, 'nq\x00', 0x3d, 0x1, 0x70}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c840) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.614560194s ago: executing program 2 (id=3322): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e90904000001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="002e070500000005221a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.452744532s ago: executing program 1 (id=3323): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2.365223243s ago: executing program 1 (id=3324): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/154, 0x9a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) setrlimit(0x7, 0x0) io_destroy(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x450400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000957000/0x1000)=nil, 0x1000, 0x0, 0x8, 0x2000) 1.850883017s ago: executing program 3 (id=3325): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_setup(0x4a9, 0x0, &(0x7f0000000000), 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=@newqdisc={0x124, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xa, 0xffff}, {0x0, 0xffe0}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x39, 0x3, 0xfff7, 0x1, 0x1, 0x4, 0x5, 0x2}}, {0x8, 0x2, [0xfff9, 0x400]}}, {{0x1c, 0x1, {0x8, 0x7, 0x7, 0x5, 0x0, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x7fff, 0x0]}}, {{0x1c, 0x1, {0x5, 0xa, 0x1d, 0x8, 0x0, 0x0, 0x9, 0x9}}, {0x16, 0x2, [0x9, 0x0, 0x9, 0x2, 0x7ff, 0x5, 0xb12e, 0x100, 0x6b30]}}, {{0x1c, 0x1, {0xf, 0x1, 0xfc4, 0xe5b9, 0x0, 0xfff, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0x7, 0x0]}}, {{0x1c, 0x1, {0xfe, 0x3, 0xd1, 0x6, 0x0, 0x7, 0xa, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0xad5e, 0x0, 0x0, 0x4, 0x4, 0x8}}, {0x14, 0x2, [0xf, 0x7, 0x3, 0x3, 0xb128, 0x8000, 0x9, 0x1]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) keyctl$clear(0x7, r4) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00"/104], 0x610) r6 = socket(0x9, 0x800, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.744512102s ago: executing program 4 (id=3326): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd0", @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.15876362s ago: executing program 4 (id=3327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x404c080) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0), 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 504.648548ms ago: executing program 1 (id=3328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a310000000008000540"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2add", @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 132.594079ms ago: executing program 2 (id=3329): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x3, 0xf9d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=3330): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x1407, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40844) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) socket$netlink(0x10, 0x3, 0x12) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_ATTR(r6, &(0x7f0000005340)={0x78, 0x0, 0x0, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, 0x0, 0x0, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRESDEC=0x0], 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="0a010101000000000100000006000002ad"], 0x28) kernel console output (not intermixed with test programs): yzkaller0> [ 841.929954][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 841.955932][T16953] tipc: Disabling bearer [ 842.559399][T12507] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 842.599213][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 842.620992][T16975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2961'. [ 842.721043][T12507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 842.739958][T12507] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 842.761122][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 842.774069][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.900384][T12507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 842.952776][ T24] usb 4-1: config 0 descriptor?? [ 842.977084][T12507] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 843.037710][T12507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.049549][T12507] usb 3-1: Product: syz [ 843.053803][T12507] usb 3-1: Manufacturer: syz [ 843.079151][T12507] usb 3-1: SerialNumber: syz [ 843.087380][T12507] usb 3-1: config 0 descriptor?? [ 843.100050][T16972] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 843.109996][T12507] usb 3-1: ucan: probing device on interface #0 [ 843.116522][T12507] usb 3-1: ucan: invalid in_ep MaxPacketSize [ 843.139181][T12507] usb 3-1: ucan: probe failed; try to update the device firmware [ 843.331099][ T5876] usb 3-1: USB disconnect, device number 100 [ 843.439212][ T5890] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 843.589182][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 843.594221][ T24] ath6kl: mismatched byte count 0 vs. expected 12 [ 843.602042][ T24] ath6kl: Failed to init ath6kl core: -22 [ 843.620841][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 843.756222][ T5890] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 843.779804][ T5890] usb 2-1: config 0 has no interface number 0 [ 843.852978][ T5890] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 843.864364][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.873412][T16344] usb 4-1: USB disconnect, device number 123 [ 843.885149][ T5890] usb 2-1: Product: syz [ 843.889929][ T5890] usb 2-1: Manufacturer: syz [ 843.898699][ T5890] usb 2-1: SerialNumber: syz [ 843.934448][ T5890] usb 2-1: config 0 descriptor?? [ 843.951789][ T5890] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 843.962046][ T5890] pctv452e: pctv452e_power_ctrl: 1 [ 843.962046][ T5890] [ 843.970059][ T5890] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 843.970059][ T5890] [ 843.981288][ T5890] dvb-usb: bulk message failed: -22 (5/0) [ 844.000771][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 844.013017][ T5890] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 844.026436][ T5890] usb 2-1: media controller created [ 844.035764][ T5890] dvb-usb: bulk message failed: -22 (8/0) [ 844.046122][ T5890] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 844.059881][ T5890] dvb-usb: MAC address reading failed. [ 844.108701][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 844.120858][T16990] macvlan2: entered allmulticast mode [ 844.121254][T16990] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 844.130032][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 844.136258][T16991] binder: 16985:16991 ioctl c0306201 0 returned -14 [ 844.186070][T16980] dvb-usb: bulk message failed: -22 (7/0) [ 844.186100][T16980] pctv452e: I2C error -22; AA 02 04 00 02 -> aa 02 31 03 04 00 02 [ 844.363639][ T5890] DVB: Unable to find symbol stb0899_attach() [ 844.378912][ T5890] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 844.529254][ T5890] rc_core: IR keymap rc-tt-1500 not found [ 844.535021][ T5890] Registered IR keymap rc-empty [ 844.607891][T16997] FAULT_INJECTION: forcing a failure. [ 844.607891][T16997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.633254][ T5890] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 844.649424][T16997] CPU: 1 UID: 0 PID: 16997 Comm: syz.3.2968 Not tainted syzkaller #0 PREEMPT(full) [ 844.649450][T16997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 844.649460][T16997] Call Trace: [ 844.649467][T16997] [ 844.649476][T16997] dump_stack_lvl+0x189/0x250 [ 844.649501][T16997] ? __pfx____ratelimit+0x10/0x10 [ 844.649528][T16997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.649547][T16997] ? __pfx__printk+0x10/0x10 [ 844.649564][T16997] ? __might_fault+0xb0/0x130 [ 844.649591][T16997] should_fail_ex+0x414/0x560 [ 844.649619][T16997] _copy_from_user+0x2d/0xb0 [ 844.649642][T16997] ___sys_sendmsg+0x158/0x2a0 [ 844.649660][T16997] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.649709][T16997] ? __fget_files+0x2a/0x420 [ 844.649728][T16997] ? __fget_files+0x3a0/0x420 [ 844.649756][T16997] __x64_sys_sendmsg+0x19b/0x260 [ 844.649776][T16997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.649801][T16997] ? __pfx_ksys_write+0x10/0x10 [ 844.649822][T16997] ? do_syscall_64+0xbe/0xfa0 [ 844.649844][T16997] do_syscall_64+0xfa/0xfa0 [ 844.649872][T16997] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.649890][T16997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.649908][T16997] ? clear_bhb_loop+0x60/0xb0 [ 844.649929][T16997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.649947][T16997] RIP: 0033:0x7f3fa258efc9 [ 844.649965][T16997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.649981][T16997] RSP: 002b:00007f3fa33e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.650001][T16997] RAX: ffffffffffffffda RBX: 00007f3fa27e5fa0 RCX: 00007f3fa258efc9 [ 844.650016][T16997] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 844.650028][T16997] RBP: 00007f3fa33e6090 R08: 0000000000000000 R09: 0000000000000000 [ 844.650040][T16997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.650051][T16997] R13: 00007f3fa27e6038 R14: 00007f3fa27e5fa0 R15: 00007f3fa290fa28 [ 844.650079][T16997] [ 844.659904][T16999] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2969'. [ 844.889501][ T5890] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input92 [ 844.953789][ T5890] dvb-usb: schedule remote query interval to 100 msecs. [ 844.999118][ T5890] pctv452e: pctv452e_power_ctrl: 0 [ 844.999118][ T5890] [ 845.050277][ T5890] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 845.117847][T16344] dvb-usb: bulk message failed: -22 (4/0) [ 845.123847][T16344] dvb-usb: error -22 while querying for an remote control event. [ 845.190253][ T5890] usb 2-1: USB disconnect, device number 103 [ 845.364883][T13773] net_ratelimit: 28 callbacks suppressed [ 845.365365][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 845.471981][ T5890] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 845.563028][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 845.669363][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 845.804624][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 845.939295][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 846.069165][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 846.221762][T17010] tipc: Enabling of bearer rejected, failed to enable media [ 846.359195][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 846.469210][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 846.579175][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 846.690728][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 846.980038][T16344] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 847.142144][T16344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 847.184447][T16344] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 847.203573][T16344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 847.209222][ T5906] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 847.227584][T16344] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 847.239147][T16344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.248341][T16344] usb 4-1: Product: syz [ 847.253481][T16344] usb 4-1: Manufacturer: syz [ 847.258310][T16344] usb 4-1: SerialNumber: syz [ 847.274111][T16344] usb 4-1: config 0 descriptor?? [ 847.290098][T17030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 847.298357][T16344] usb 4-1: ucan: probing device on interface #0 [ 847.305061][T16344] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 847.311259][T16344] usb 4-1: ucan: probe failed; try to update the device firmware [ 847.369192][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 847.381829][ T5906] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 847.394818][ T5906] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 847.408328][ T5906] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.421033][ T5906] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 847.438601][ T5906] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 847.509244][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.549889][ T5906] usb 3-1: Product: syz [ 847.572730][ T5906] usb 3-1: Manufacturer: syz [ 847.574794][T16344] usb 4-1: USB disconnect, device number 124 [ 847.577459][ T5906] usb 3-1: SerialNumber: syz [ 847.600654][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 847.622501][ T5906] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input93 [ 847.819243][ T5906] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 847.827537][ T5906] (id 0x00) [ 847.899209][ T5906] rc_core: IR keymap rc-imon-pad not found [ 847.906805][ T5906] Registered IR keymap rc-empty [ 847.920395][ T5906] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 847.930880][ T5906] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 848.242655][ T5906] imon:send_packet: packet tx failed (-71) [ 848.249217][T16344] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 848.269224][ T5906] imon 3-1:155.0: remote input dev register failed [ 848.285431][T17053] FAULT_INJECTION: forcing a failure. [ 848.285431][T17053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.286153][ T5906] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 848.298986][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.3.2983 Not tainted syzkaller #0 PREEMPT(full) [ 848.299013][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 848.299029][T17053] Call Trace: [ 848.299036][T17053] [ 848.299045][T17053] dump_stack_lvl+0x189/0x250 [ 848.299070][T17053] ? __pfx____ratelimit+0x10/0x10 [ 848.299096][T17053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.299114][T17053] ? __pfx__printk+0x10/0x10 [ 848.299138][T17053] ? __might_fault+0xb0/0x130 [ 848.299167][T17053] should_fail_ex+0x414/0x560 [ 848.299198][T17053] _copy_from_user+0x2d/0xb0 [ 848.299222][T17053] do_ipv6_setsockopt+0x23e/0x2eb0 [ 848.299248][T17053] ? get_pid_task+0x20/0x1f0 [ 848.299267][T17053] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 848.299291][T17053] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 848.299321][T17053] ? vfs_write+0x956/0xb30 [ 848.299343][T17053] ? __pfx___might_resched+0x10/0x10 [ 848.299379][T17053] ? __lock_acquire+0xab9/0xd20 [ 848.299408][T17053] ? aa_sk_perm+0x81e/0x950 [ 848.299430][T17053] ? __pfx_aa_sk_perm+0x10/0x10 [ 848.299449][T17053] ? aa_sock_opt_perm+0xff/0x1b0 [ 848.299473][T17053] ipv6_setsockopt+0x59/0x170 [ 848.299492][T17053] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 848.299517][T17053] do_sock_setsockopt+0x17c/0x1b0 [ 848.299545][T17053] __x64_sys_setsockopt+0x13f/0x1b0 [ 848.299575][T17053] do_syscall_64+0xfa/0xfa0 [ 848.299592][T17053] ? lockdep_hardirqs_on+0x9c/0x150 [ 848.299609][T17053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.299634][T17053] ? clear_bhb_loop+0x60/0xb0 [ 848.299656][T17053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.299674][T17053] RIP: 0033:0x7f3fa258efc9 [ 848.299690][T17053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.299709][T17053] RSP: 002b:00007f3fa33e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 848.299729][T17053] RAX: ffffffffffffffda RBX: 00007f3fa27e5fa0 RCX: 00007f3fa258efc9 [ 848.299742][T17053] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003 [ 848.299753][T17053] RBP: 00007f3fa33e6090 R08: 0000000000000014 R09: 0000000000000000 [ 848.299764][T17053] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 848.299776][T17053] R13: 00007f3fa27e6038 R14: 00007f3fa27e5fa0 R15: 00007f3fa290fa28 [ 848.299806][T17053] [ 848.409302][T16344] usb 2-1: Using ep0 maxpacket: 8 [ 848.411532][T16344] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 848.561868][T16344] usb 2-1: config 0 has no interface number 0 [ 848.598269][T16344] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 848.610520][T16344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.618541][T16344] usb 2-1: Product: syz [ 848.639234][T16344] usb 2-1: Manufacturer: syz [ 848.645082][T16344] usb 2-1: SerialNumber: syz [ 848.658323][ T5906] imon 3-1:155.0: unable to initialize intf0, err 0 [ 848.667855][T16344] usb 2-1: config 0 descriptor?? [ 848.673732][ T5906] imon:imon_probe: failed to initialize context! [ 848.680307][ T5906] imon 3-1:155.0: unable to register, err -19 [ 848.704215][T16344] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 848.707018][ T5906] usb 3-1: USB disconnect, device number 101 [ 848.733152][T16344] pctv452e: pctv452e_power_ctrl: 1 [ 848.733152][T16344] [ 848.776587][T16344] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 848.776587][T16344] [ 848.823294][T16344] dvb-usb: bulk message failed: -22 (5/0) [ 848.840318][T16344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 848.860011][T16344] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 848.868440][T16344] usb 2-1: media controller created [ 848.917725][T16344] dvb-usb: bulk message failed: -22 (8/0) [ 848.928593][T16344] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 848.952970][T16344] dvb-usb: MAC address reading failed. [ 848.952999][T17048] dvb-usb: bulk message failed: -22 (7/0) [ 849.040063][T17048] pctv452e: I2C error -22; AA 02 04 00 02 -> aa 02 31 03 04 00 02 [ 849.096680][T16344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 849.191081][T17066] loop6: detected capacity change from 0 to 7 [ 849.214184][T17066] Dev loop6: unable to read RDB block 7 [ 849.259358][T17066] loop6: unable to read partition table [ 849.339238][T17066] loop6: partition table beyond EOD, truncated [ 849.385830][T17066] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 849.458446][T16344] DVB: Unable to find symbol stb0899_attach() [ 849.499444][T16344] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 849.778488][T17074] FAULT_INJECTION: forcing a failure. [ 849.778488][T17074] name failslab, interval 1, probability 0, space 0, times 0 [ 849.829436][T17074] CPU: 0 UID: 0 PID: 17074 Comm: syz.2.2990 Not tainted syzkaller #0 PREEMPT(full) [ 849.829458][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 849.829470][T17074] Call Trace: [ 849.829478][T17074] [ 849.829486][T17074] dump_stack_lvl+0x189/0x250 [ 849.829510][T17074] ? __pfx____ratelimit+0x10/0x10 [ 849.829536][T17074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.829553][T17074] ? __pfx__printk+0x10/0x10 [ 849.829576][T17074] ? __lock_acquire+0xab9/0xd20 [ 849.829605][T17074] should_fail_ex+0x414/0x560 [ 849.829635][T17074] should_failslab+0xa8/0x100 [ 849.829659][T17074] kmem_cache_alloc_noprof+0x74/0x6e0 [ 849.829678][T17074] ? skb_clone+0x212/0x3a0 [ 849.829700][T17074] skb_clone+0x212/0x3a0 [ 849.829721][T17074] __netlink_deliver_tap+0x404/0x850 [ 849.829757][T17074] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.829783][T17074] netlink_deliver_tap+0x19c/0x1b0 [ 849.829808][T17074] netlink_unicast+0x7fa/0x9e0 [ 849.829838][T17074] ? __pfx_netlink_unicast+0x10/0x10 [ 849.829861][T17074] ? netlink_sendmsg+0x642/0xb30 [ 849.829881][T17074] ? skb_put+0x11b/0x210 [ 849.829907][T17074] netlink_sendmsg+0x805/0xb30 [ 849.829941][T17074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.829969][T17074] ? aa_sock_msg_perm+0xf1/0x1d0 [ 849.829991][T17074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.830013][T17074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.830038][T17074] __sock_sendmsg+0x21c/0x270 [ 849.830062][T17074] ____sys_sendmsg+0x505/0x830 [ 849.830086][T17074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.830121][T17074] ? import_iovec+0x74/0xa0 [ 849.830149][T17074] ___sys_sendmsg+0x21f/0x2a0 [ 849.830169][T17074] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.830230][T17074] ? __fget_files+0x2a/0x420 [ 849.830251][T17074] ? __fget_files+0x3a0/0x420 [ 849.830282][T17074] __x64_sys_sendmsg+0x19b/0x260 [ 849.830303][T17074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.830331][T17074] ? __pfx_ksys_write+0x10/0x10 [ 849.830354][T17074] ? do_syscall_64+0xbe/0xfa0 [ 849.830376][T17074] do_syscall_64+0xfa/0xfa0 [ 849.830396][T17074] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.830413][T17074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.830431][T17074] ? clear_bhb_loop+0x60/0xb0 [ 849.830453][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.830469][T17074] RIP: 0033:0x7f587198efc9 [ 849.830487][T17074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.830503][T17074] RSP: 002b:00007f58728bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.830523][T17074] RAX: ffffffffffffffda RBX: 00007f5871be5fa0 RCX: 00007f587198efc9 [ 849.830537][T17074] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 849.830549][T17074] RBP: 00007f58728bc090 R08: 0000000000000000 R09: 0000000000000000 [ 849.830561][T17074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.830572][T17074] R13: 00007f5871be6038 R14: 00007f5871be5fa0 R15: 00007f5871d0fa28 [ 849.830604][T17074] [ 849.830774][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2990'. [ 850.140898][T16344] rc_core: IR keymap rc-tt-1500 not found [ 850.146641][T16344] Registered IR keymap rc-empty [ 850.153573][T16344] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 850.178468][T16344] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input95 [ 850.239512][T16344] dvb-usb: schedule remote query interval to 100 msecs. [ 850.255671][T16344] pctv452e: pctv452e_power_ctrl: 0 [ 850.255671][T16344] [ 850.270169][T16344] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 850.371683][T13776] net_ratelimit: 29 callbacks suppressed [ 850.371701][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 850.385309][T16588] dvb-usb: bulk message failed: -22 (4/0) [ 850.396342][T16588] dvb-usb: error -22 while querying for an remote control event. [ 850.437159][T16344] usb 2-1: USB disconnect, device number 104 [ 850.655767][T17082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.667339][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 850.979333][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.099386][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.134251][T16344] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 851.240025][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.395700][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.608776][ T24] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 851.615612][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.739332][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.905657][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 851.941737][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 851.963250][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.989500][ T24] usb 3-1: Product: syz [ 852.002488][ T24] usb 3-1: Manufacturer: syz [ 852.037620][T16588] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 852.082939][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 852.116393][ T24] usb 3-1: SerialNumber: syz [ 852.249307][T16588] usb 4-1: Using ep0 maxpacket: 32 [ 852.410067][T16588] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 852.420798][T16588] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 852.565482][T16588] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 852.741836][T16588] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 852.992312][T16588] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 853.002786][T16588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.011242][T16588] usb 4-1: Product: syz [ 853.015502][T16588] usb 4-1: Manufacturer: syz [ 853.021754][T16588] usb 4-1: SerialNumber: syz [ 853.109891][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 853.148920][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'. [ 853.308359][T16588] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input96 [ 853.409904][T16588] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 853.439346][T16588] (id 0x00) [ 853.577446][T16588] rc_core: IR keymap rc-imon-pad not found [ 853.587985][T16588] Registered IR keymap rc-empty [ 853.619361][T16588] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 853.751355][T16588] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 853.822644][T17118] FAULT_INJECTION: forcing a failure. [ 853.822644][T17118] name failslab, interval 1, probability 0, space 0, times 0 [ 853.839411][T17118] CPU: 0 UID: 0 PID: 17118 Comm: syz.0.3001 Not tainted syzkaller #0 PREEMPT(full) [ 853.839439][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 853.839449][T17118] Call Trace: [ 853.839457][T17118] [ 853.839465][T17118] dump_stack_lvl+0x189/0x250 [ 853.839486][T17118] ? __pfx____ratelimit+0x10/0x10 [ 853.839511][T17118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.839529][T17118] ? __pfx__printk+0x10/0x10 [ 853.839550][T17118] ? __pfx___might_resched+0x10/0x10 [ 853.839575][T17118] ? fs_reclaim_acquire+0x7d/0x100 [ 853.839601][T17118] should_fail_ex+0x414/0x560 [ 853.839633][T17118] should_failslab+0xa8/0x100 [ 853.839657][T17118] kmem_cache_alloc_noprof+0x74/0x6e0 [ 853.839676][T17118] ? __kernfs_new_node+0xd7/0x7e0 [ 853.839699][T17118] __kernfs_new_node+0xd7/0x7e0 [ 853.839716][T17118] ? __lock_acquire+0xab9/0xd20 [ 853.839746][T17118] ? __pfx___kernfs_new_node+0x10/0x10 [ 853.839765][T17118] ? kernfs_root+0x1c/0x230 [ 853.839789][T17118] ? kernfs_root+0x1c/0x230 [ 853.839804][T17118] ? kernfs_root+0x1c/0x230 [ 853.839816][T17118] ? kernfs_root+0x1c/0x230 [ 853.839844][T17118] kernfs_new_node+0x102/0x210 [ 853.839866][T17118] __kernfs_create_file+0x4b/0x2e0 [ 853.839891][T17118] sysfs_add_file_mode_ns+0x238/0x300 [ 853.839923][T17118] internal_create_group+0x66d/0x1110 [ 853.839957][T17118] ? __pfx_internal_create_group+0x10/0x10 [ 853.839986][T17118] sysfs_create_groups+0x59/0x120 [ 853.840007][T17118] device_add_attrs+0x13f/0x5a0 [ 853.840036][T17118] ? __pfx_device_add_attrs+0x10/0x10 [ 853.840055][T17118] ? kobject_put+0x43f/0x480 [ 853.840079][T17118] ? device_add_class_symlinks+0x21f/0x240 [ 853.840103][T17118] device_add+0x496/0xb50 [ 853.840129][T17118] input_register_device+0x9d3/0x1140 [ 853.840152][T17118] ? input_ff_create+0x235/0x300 [ 853.840179][T17118] uinput_create_device+0x422/0x670 [ 853.840212][T17118] uinput_ioctl_handler+0x3f0/0x1570 [ 853.840238][T17118] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 853.840278][T17118] ? __fget_files+0x2a/0x420 [ 853.840304][T17118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 853.840327][T17118] ? __pfx_uinput_ioctl+0x10/0x10 [ 853.840349][T17118] __se_sys_ioctl+0xfc/0x170 [ 853.840369][T17118] do_syscall_64+0xfa/0xfa0 [ 853.840389][T17118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.840406][T17118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 853.840424][T17118] ? clear_bhb_loop+0x60/0xb0 [ 853.840446][T17118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.840463][T17118] RIP: 0033:0x7f29d398efc9 [ 853.840481][T17118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.840496][T17118] RSP: 002b:00007f29d1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.840515][T17118] RAX: ffffffffffffffda RBX: 00007f29d3be5fa0 RCX: 00007f29d398efc9 [ 853.840529][T17118] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 853.840541][T17118] RBP: 00007f29d1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 853.840552][T17118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.840562][T17118] R13: 00007f29d3be6038 R14: 00007f29d3be5fa0 R15: 00007f29d3d0fa28 [ 853.840594][T17118] [ 854.161497][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.484287][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 854.510244][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 854.566540][T16588] imon:send_packet: packet tx failed (-71) [ 854.577151][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 854.593008][T16588] imon 4-1:155.0: remote input dev register failed [ 854.602114][T16588] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 854.696311][T16588] imon 4-1:155.0: unable to initialize intf0, err 0 [ 854.704111][T16588] imon:imon_probe: failed to initialize context! [ 854.712794][T16588] imon 4-1:155.0: unable to register, err -19 [ 854.730510][T16588] usb 4-1: USB disconnect, device number 125 [ 854.800037][ T24] usb 3-1: USB disconnect, device number 102 [ 855.163389][T17126] tipc: Enabling of bearer rejected, failed to enable media [ 855.399392][T13780] net_ratelimit: 22 callbacks suppressed [ 855.399406][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 855.477024][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3006'. [ 855.746970][T17142] vlan2: entered allmulticast mode [ 855.754123][T17142] bridge0: entered allmulticast mode [ 855.868666][T17142] bridge1: port 1(vlan2) entered blocking state [ 855.937176][T17142] bridge1: port 1(vlan2) entered disabled state [ 856.033559][T17142] vlan2: entered promiscuous mode [ 856.138425][T17142] bridge0: entered promiscuous mode [ 856.199291][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 856.319469][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 856.457200][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 856.492891][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 856.673827][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 856.789336][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 856.899265][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 857.019171][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 857.201392][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 857.421824][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 857.482876][T17167] input: syz1 as /devices/virtual/input/input99 [ 857.517436][T17167] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3012'. [ 858.213951][ T30] audit: type=1326 audit(1760733870.928:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.220328][T17181] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3017'. [ 858.262963][ T30] audit: type=1326 audit(1760733870.928:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.346812][ T30] audit: type=1326 audit(1760733870.928:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.382749][ T30] audit: type=1326 audit(1760733870.928:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.406750][ T30] audit: type=1326 audit(1760733870.928:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.430229][ T30] audit: type=1326 audit(1760733870.928:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.453048][ T30] audit: type=1326 audit(1760733870.928:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.475961][ T30] audit: type=1326 audit(1760733870.928:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.524412][ T30] audit: type=1326 audit(1760733870.928:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.608209][ T30] audit: type=1326 audit(1760733870.928:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 858.639462][T16344] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 858.676425][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 858.802147][T16344] usb 4-1: Using ep0 maxpacket: 32 [ 858.810804][T16344] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 858.829597][ T5890] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 858.839334][T16344] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 858.861527][T16344] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 858.879220][T16344] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 858.895747][T16344] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 858.910418][T16344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.941045][T16344] usb 4-1: Product: syz [ 858.945252][T16344] usb 4-1: Manufacturer: syz [ 858.961379][T16344] usb 4-1: SerialNumber: syz [ 858.991821][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 859.000300][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 859.010809][T16344] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input100 [ 859.029569][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.050559][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.203266][T17201] usb usb8: usbfs: process 17201 (syz.0.3020) did not claim interface 0 before use [ 859.845593][ T5890] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 860.495683][T13773] net_ratelimit: 17 callbacks suppressed [ 860.495704][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 860.525593][T16344] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 860.569336][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.580719][T16344] (id 0x00) [ 860.652002][ T5890] usb 2-1: config 0 descriptor?? [ 860.679246][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 860.679349][T16344] rc_core: IR keymap rc-imon-pad not found [ 860.799148][T16344] Registered IR keymap rc-empty [ 860.804151][T16344] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 860.819082][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 860.893997][T16344] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 860.969822][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 861.010319][T16344] imon:send_packet: packet tx failed (-71) [ 861.039690][T16344] imon 4-1:155.0: remote input dev register failed [ 861.049389][T16344] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 861.064834][T16344] imon 4-1:155.0: unable to initialize intf0, err 0 [ 861.074272][T16344] imon:imon_probe: failed to initialize context! [ 861.079213][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 861.090233][ T5890] glorious 0003:258A:0033.0023: unknown main item tag 0x1 [ 861.097814][ T5890] glorious 0003:258A:0033.0023: unknown main item tag 0x2 [ 861.105548][T16344] imon 4-1:155.0: unable to register, err -19 [ 861.286438][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 861.306447][T16344] usb 4-1: USB disconnect, device number 126 [ 861.313052][ T5890] glorious 0003:258A:0033.0023: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 861.325515][T17211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3024'. [ 861.412207][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 861.422798][ T5890] usb 2-1: USB disconnect, device number 105 [ 861.539355][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 861.649621][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 861.759145][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 862.082020][T17220] binder: 17219:17220 ioctl c0306201 0 returned -14 [ 862.140068][T17217] pimreg: tun_chr_ioctl cmd 1074025681 [ 862.167643][T17217] pimreg: tun_chr_ioctl cmd 1075883590 [ 862.978557][T17236] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3031'. [ 863.032612][T12530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 863.042096][T12530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 863.050680][T12530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 863.058320][T12530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 863.065788][T12530] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 863.171927][T17229] tipc: Enabling of bearer rejected, failed to enable media [ 863.343485][T17243] Invalid logical block size (133) [ 864.401733][T17240] chnl_net:caif_netlink_parms(): no params data found [ 864.569180][T12507] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 864.771566][T12507] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.803306][T12507] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 864.819103][T12507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.846838][T12507] usb 2-1: Product: syz [ 864.867232][T12507] usb 2-1: Manufacturer: syz [ 864.880169][T12507] usb 2-1: SerialNumber: syz [ 864.901424][T17240] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.908734][T17240] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.913327][T12507] usb 2-1: config 0 descriptor?? [ 864.921900][T17240] bridge_slave_0: entered allmulticast mode [ 864.928067][T12507] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 864.935530][T17240] bridge_slave_0: entered promiscuous mode [ 864.949242][T12507] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 864.966940][T17240] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.984877][T17240] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.992953][T17240] bridge_slave_1: entered allmulticast mode [ 865.003836][T17240] bridge_slave_1: entered promiscuous mode [ 865.101029][T17239] Bluetooth: hci3: command tx timeout [ 865.144454][T12507] usb 2-1: USB disconnect, device number 106 [ 865.236682][T17240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.036772][T17286] FAULT_INJECTION: forcing a failure. [ 866.036772][T17286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.142578][T17286] CPU: 0 UID: 0 PID: 17286 Comm: syz.4.3041 Not tainted syzkaller #0 PREEMPT(full) [ 866.142602][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 866.142612][T17286] Call Trace: [ 866.142619][T17286] [ 866.142627][T17286] dump_stack_lvl+0x189/0x250 [ 866.142650][T17286] ? __pfx____ratelimit+0x10/0x10 [ 866.142675][T17286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.142692][T17286] ? __pfx__printk+0x10/0x10 [ 866.142709][T17286] ? __might_fault+0xb0/0x130 [ 866.142736][T17286] should_fail_ex+0x414/0x560 [ 866.142765][T17286] _copy_from_user+0x2d/0xb0 [ 866.142787][T17286] generic_map_update_batch+0x57c/0x7f0 [ 866.142824][T17286] ? __pfx_generic_map_update_batch+0x10/0x10 [ 866.142841][T17286] ? __fget_files+0x2a/0x420 [ 866.142866][T17286] ? __pfx_generic_map_update_batch+0x10/0x10 [ 866.142882][T17286] bpf_map_do_batch+0x39b/0x630 [ 866.142909][T17286] __sys_bpf+0x690/0x860 [ 866.142931][T17286] ? __pfx___sys_bpf+0x10/0x10 [ 866.142965][T17286] ? ksys_write+0x22a/0x250 [ 866.142986][T17286] ? __pfx_ksys_write+0x10/0x10 [ 866.143009][T17286] __x64_sys_bpf+0x7c/0x90 [ 866.143029][T17286] do_syscall_64+0xfa/0xfa0 [ 866.143046][T17286] ? lockdep_hardirqs_on+0x9c/0x150 [ 866.143062][T17286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.143078][T17286] ? clear_bhb_loop+0x60/0xb0 [ 866.143098][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.143115][T17286] RIP: 0033:0x7fba97f8efc9 [ 866.143131][T17286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.143145][T17286] RSP: 002b:00007fba98d98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.143163][T17286] RAX: ffffffffffffffda RBX: 00007fba981e5fa0 RCX: 00007fba97f8efc9 [ 866.143177][T17286] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 866.143187][T17286] RBP: 00007fba98d98090 R08: 0000000000000000 R09: 0000000000000000 [ 866.143199][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.143209][T17286] R13: 00007fba981e6038 R14: 00007fba981e5fa0 R15: 00007fba9830fa28 [ 866.143236][T17286] [ 866.833306][ T60] bond2 (unregistering): (slave geneve2): Releasing active interface [ 867.179355][T17239] Bluetooth: hci3: command tx timeout [ 867.313145][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.323975][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.335001][ T60] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 867.345813][ T60] bond0 (unregistering): Released all slaves [ 867.364800][ T60] bond1 (unregistering): Released all slaves [ 867.574213][ T60] bond2 (unregistering): Released all slaves [ 867.807638][ T60] bond3 (unregistering): Released all slaves [ 868.073451][T17305] netlink: 'syz.4.3046': attribute type 1 has an invalid length. [ 868.117818][T12507] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 868.164086][T12507] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 868.651566][ T60] bond4 (unregistering): Released all slaves [ 868.727966][ T60] bond5 (unregistering): Released all slaves [ 869.075689][ T60] bond6 (unregistering): Released all slaves [ 869.100295][T12507] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 869.259295][T12507] usb 3-1: Using ep0 maxpacket: 16 [ 869.266786][T12507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 869.276896][T17239] Bluetooth: hci3: command tx timeout [ 869.287027][T12507] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 869.297243][T12507] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 869.298866][ T60] bond7 (unregistering): Released all slaves [ 869.307973][T12507] usb 3-1: config 13 has no interface number 0 [ 869.320284][T12507] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 869.330564][T12507] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 869.344804][T12507] usb 3-1: config 13 interface 50 has no altsetting 0 [ 869.354925][T12507] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 869.364213][T12507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.372552][T12507] usb 3-1: Product: syz [ 869.376756][T12507] usb 3-1: Manufacturer: syz [ 869.381828][T12507] usb 3-1: SerialNumber: syz [ 869.390868][T17310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.486432][ T60] bond8 (unregistering): Released all slaves [ 869.505269][T17240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.516839][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3040'. [ 869.545516][T17305] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 869.616081][ T80] net_ratelimit: 15 callbacks suppressed [ 869.616106][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 869.753567][T17240] team0: Port device team_slave_0 added [ 869.760685][ T60] tipc: Left network mode [ 869.781650][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 869.781667][ T30] audit: type=1326 audit(1760733882.498:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 869.783825][T17240] team0: Port device team_slave_1 added [ 869.795186][T17317] FAULT_INJECTION: forcing a failure. [ 869.795186][T17317] name failslab, interval 1, probability 0, space 0, times 0 [ 869.811299][ T30] audit: type=1326 audit(1760733882.498:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 869.816190][T17317] CPU: 1 UID: 0 PID: 17317 Comm: syz.4.3050 Not tainted syzkaller #0 PREEMPT(full) [ 869.816216][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 869.816227][T17317] Call Trace: [ 869.816236][T17317] [ 869.816244][T17317] dump_stack_lvl+0x189/0x250 [ 869.816268][T17317] ? __pfx____ratelimit+0x10/0x10 [ 869.816294][T17317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.816313][T17317] ? __pfx__printk+0x10/0x10 [ 869.816336][T17317] ? __pfx___might_resched+0x10/0x10 [ 869.816358][T17317] ? fs_reclaim_acquire+0x7d/0x100 [ 869.816389][T17317] should_fail_ex+0x414/0x560 [ 869.816420][T17317] should_failslab+0xa8/0x100 [ 869.816443][T17317] __kmalloc_cache_noprof+0x6f/0x6f0 [ 869.816463][T17317] ? audit_log_d_path+0xb8/0x1a0 [ 869.816487][T17317] audit_log_d_path+0xb8/0x1a0 [ 869.816508][T17317] audit_log_d_path_exe+0x42/0x70 [ 869.816526][T17317] audit_log_task+0x2b3/0x3c0 [ 869.816546][T17317] ? __pfx_audit_log_task+0x10/0x10 [ 869.816565][T17317] ? __pfx___cant_migrate+0x10/0x10 [ 869.816593][T17317] audit_seccomp+0x86/0x190 [ 869.816615][T17317] __seccomp_filter+0xce4/0x1e10 [ 869.816650][T17317] ? __pfx___seccomp_filter+0x10/0x10 [ 869.816676][T17317] ? _raw_spin_unlock_irq+0x2e/0x50 [ 869.816700][T17317] ? signal_setup_done+0x230/0x310 [ 869.816728][T17317] ? arch_do_signal_or_restart+0x485/0x790 [ 869.816752][T17317] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 869.816788][T17317] ? __secure_computing+0xe2/0x2a0 [ 869.816817][T17317] syscall_trace_enter+0xaa/0x160 [ 869.816838][T17317] ? asm_int80_emulation+0x1a/0x20 [ 869.816856][T17317] do_int80_emulation+0x101/0x390 [ 869.816875][T17317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.816892][T17317] ? clear_bhb_loop+0x60/0xb0 [ 869.816909][T17317] ? clear_bhb_loop+0x60/0xb0 [ 869.816928][T17317] asm_int80_emulation+0x1a/0x20 [ 869.816945][T17317] RIP: 0033:0x200000000006 [ 869.816967][T17317] Code: Unable to access opcode bytes at 0x1fffffffffdc. [ 869.816976][T17317] RSP: 002b:00007fba98d97a78 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 869.816996][T17317] RAX: ffffffffffffffda RBX: 00007fba981e5fa0 RCX: 00007fba97f8efc9 [ 869.817010][T17317] RDX: 00007fba98d97a80 RSI: 00007fba98d97bb0 RDI: 000000000000000d [ 869.817022][T17317] RBP: 00007fba98d98090 R08: 0000000000000000 R09: 0000000000000000 [ 869.817033][T17317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.817044][T17317] R13: 00007fba981e6038 R14: 00007fba981e5fa0 R15: 00007fba9830fa28 [ 869.817074][T17317] [ 870.092586][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 870.099780][ T30] audit: type=1326 audit(1760733882.498:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba97f8d810 code=0x7ffc0000 [ 870.149536][ T30] audit: type=1326 audit(1760733882.498:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba97f8da7f code=0x7ffc0000 [ 870.155125][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.189853][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.352845][T12507] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.365888][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 870.385244][ T30] audit: type=1326 audit(1760733882.498:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 870.391687][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.418285][T12507] usb 3-1: MIDIStreaming interface descriptor not found [ 870.431238][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 870.478760][ T30] audit: type=1326 audit(1760733882.498:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="" sig=0 arch=40000003 syscall=15 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 870.530727][T17240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.538274][ T24] usb 4-1: config 0 descriptor?? [ 870.578314][ T24] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 870.586341][T17240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.586964][T12507] usb 3-1: USB disconnect, device number 103 [ 870.660541][ T30] audit: type=1326 audit(1760733882.528:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fba97f8d9dc code=0x7ffc0000 [ 871.041861][T17318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3049'. [ 871.193562][T17240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.209161][ T30] audit: type=1326 audit(1760733882.528:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba97f8da7f code=0x7ffc0000 [ 871.255599][ T30] audit: type=1326 audit(1760733882.528:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fba97f8dc2a code=0x7ffc0000 [ 871.287636][T17240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.288626][ T24] gspca_sunplus: reg_w_riv err -110 [ 871.303315][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 871.309319][T17240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.339863][T17239] Bluetooth: hci3: command tx timeout [ 871.450354][ T30] audit: type=1326 audit(1760733882.528:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17316 comm="syz.4.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 871.482970][T17240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.583695][T17329] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 871.616562][T17329] team0: Port device batadv1 added [ 871.629375][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 871.759310][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 871.769278][T12507] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 871.888173][T17240] hsr_slave_0: entered promiscuous mode [ 871.897076][T17240] hsr_slave_1: entered promiscuous mode [ 871.929004][T17240] debugfs: 'hsr0' already exists in 'hsr' [ 871.929251][T12507] usb 3-1: Using ep0 maxpacket: 32 [ 871.960338][T12507] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 871.975143][T17240] Cannot create hsr debugfs directory [ 871.986127][T12507] usb 3-1: config 0 has no interface number 0 [ 872.003138][T12507] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 872.026334][T12507] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 872.045247][T12507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.065637][T12507] usb 3-1: Product: syz [ 872.083095][T12507] usb 3-1: Manufacturer: syz [ 872.093709][T12507] usb 3-1: SerialNumber: syz [ 872.118274][T12507] usb 3-1: config 0 descriptor?? [ 872.131201][T17324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.163698][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 872.396971][T17324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.566082][T12507] net1080 3-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 7a:5e:35:c8:51:fd [ 872.579168][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 872.713364][ T5890] usb 4-1: USB disconnect, device number 127 [ 872.757080][ T60] hsr_slave_0: left promiscuous mode [ 872.804046][ T60] hsr_slave_1: left promiscuous mode [ 872.825263][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.844571][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.609240][T16344] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 873.730226][ T5890] usb 3-1: USB disconnect, device number 104 [ 873.799337][T16344] usb 4-1: Using ep0 maxpacket: 32 [ 873.804885][ T5890] net1080 3-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 873.888232][T16344] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 873.906744][T16344] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 874.022741][T16344] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 874.039682][T16344] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 874.063331][T16344] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 874.074117][T16344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.086164][T16344] usb 4-1: Product: syz [ 874.090710][T16344] usb 4-1: Manufacturer: syz [ 874.095403][T16344] usb 4-1: SerialNumber: syz [ 874.120358][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 874.148523][T16344] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input102 [ 874.332165][T16344] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 874.341010][T16344] (id 0x00) [ 874.450368][T16344] rc_core: IR keymap rc-imon-pad not found [ 874.458583][T16344] Registered IR keymap rc-empty [ 874.488006][T16344] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 874.499286][T16344] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 874.833186][T16344] imon:send_packet: packet tx failed (-71) [ 874.861619][T16344] imon 4-1:155.0: remote input dev register failed [ 874.875610][T16344] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 874.898958][T16344] imon 4-1:155.0: unable to initialize intf0, err 0 [ 874.906708][T16344] imon:imon_probe: failed to initialize context! [ 874.913513][T16344] imon 4-1:155.0: unable to register, err -19 [ 874.920768][ T60] team0 (unregistering): Port device team_slave_1 removed [ 874.929671][T16344] usb 4-1: USB disconnect, device number 2 [ 875.033036][ T60] team0 (unregistering): Port device team_slave_0 removed [ 876.290898][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 876.380728][T17387] tipc: Enabling of bearer rejected, failed to enable media [ 876.419597][ T5890] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 876.658454][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 876.669930][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.711716][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 876.747186][ T5890] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 876.823220][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.860202][ T5890] usb 3-1: config 0 descriptor?? [ 876.864190][T17396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3067'. [ 876.914906][T17398] loop2: detected capacity change from 0 to 7 [ 876.939720][ T5890] usb 3-1: can't set config #0, error -71 [ 876.968595][ T5890] usb 3-1: USB disconnect, device number 105 [ 877.009310][ T5839] Dev loop2: unable to read RDB block 7 [ 877.019829][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 877.040649][ T5839] loop2: unable to read partition table [ 877.046543][ T5839] loop2: partition table beyond EOD, truncated [ 877.130492][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 877.138076][T17398] Dev loop2: unable to read RDB block 7 [ 877.148095][T17398] loop2: unable to read partition table [ 877.158510][T17398] loop2: partition table beyond EOD, truncated [ 877.199540][T17398] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 877.349160][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 877.383425][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 877.451534][ T60] IPVS: stop unused estimator thread 0... [ 877.560978][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.588547][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 877.611092][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 877.649216][ T5906] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 877.673695][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 877.682357][ T5906] usb 4-1: SerialNumber: syz [ 877.763047][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 877.898901][ T5906] usb 4-1: 0:2 : does not exist [ 877.905690][T17240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 877.969459][ T5906] usb 4-1: USB disconnect, device number 3 [ 877.993923][T17240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 878.036505][T17240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 878.105738][T17240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 878.230422][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 878.440274][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 878.540572][T17240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.571209][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 878.594801][T17240] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.634612][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.641803][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.692724][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.699932][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.819177][T16588] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 878.860849][T17240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.992241][T17240] veth0_vlan: entered promiscuous mode [ 879.010069][T16588] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.047361][T16588] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.072911][T17240] veth1_vlan: entered promiscuous mode [ 879.128983][T16588] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.135241][T17240] veth0_macvtap: entered promiscuous mode [ 879.138743][T16588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.152955][T16588] usb 4-1: Product: syz [ 879.161230][T16588] usb 4-1: Manufacturer: syz [ 879.178375][T16588] usb 4-1: SerialNumber: syz [ 879.187839][T17240] veth1_macvtap: entered promiscuous mode [ 879.237724][T16588] cdc_ncm 4-1:1.0: skipping garbage [ 879.269298][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 879.285870][T17240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.306354][T17240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.325507][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.337224][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.351295][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.360591][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.449480][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 879.463033][ T24] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 879.473968][ T24] usb 2-1: config 0 has no interface number 0 [ 879.490995][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 879.508669][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.519234][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.530390][ T24] usb 2-1: Product: syz [ 879.537381][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.549118][ T24] usb 2-1: Manufacturer: syz [ 879.557401][ T24] usb 2-1: SerialNumber: syz [ 879.574123][ T24] usb 2-1: config 0 descriptor?? [ 879.598598][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 879.615361][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 879.615361][ T24] [ 879.627753][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.637827][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 879.637827][ T24] [ 879.648838][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.667032][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 879.684749][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 879.697036][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 879.707795][ T24] usb 2-1: media controller created [ 879.713502][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 879.719886][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 879.727965][ T24] dvb-usb: MAC address reading failed. [ 879.789398][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 879.801476][T17450] dvb-usb: bulk message failed: -22 (7/0) [ 879.807207][T17450] pctv452e: I2C error -22; AA 02 04 00 02 -> aa 02 31 03 04 00 02 [ 879.915656][ T24] DVB: Unable to find symbol stb0899_attach() [ 879.942726][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 880.110554][ T24] rc_core: IR keymap rc-tt-1500 not found [ 880.116973][ T24] Registered IR keymap rc-empty [ 880.135818][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 880.286832][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input104 [ 880.346461][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 880.354554][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 880.354554][ T24] [ 880.362981][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 880.478444][ T43] dvb-usb: bulk message failed: -22 (4/0) [ 880.505434][ T43] dvb-usb: error -22 while querying for an remote control event. [ 880.630376][ T24] usb 2-1: USB disconnect, device number 107 [ 881.192220][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 881.550806][T17492] usb usb8: usbfs: process 17492 (syz.0.3083) did not claim interface 0 before use [ 881.564439][ T3560] net_ratelimit: 15 callbacks suppressed [ 881.564481][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 881.723038][T16588] cdc_ncm 4-1:1.0: bind() failure [ 881.790563][T16588] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 881.871604][T16588] usb 4-1: USB disconnect, device number 4 [ 882.649623][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 882.759857][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 882.889319][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 882.938946][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.954740][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.968231][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.981021][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.988797][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 883.009230][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 883.119212][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 883.224083][T17503] netlink: 'syz.3.3085': attribute type 1 has an invalid length. [ 883.335576][T17507] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3085'. [ 883.486260][T17509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3085'. [ 883.619244][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 883.752446][T17509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 883.830863][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 884.089920][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 884.183982][T17499] chnl_net:caif_netlink_parms(): no params data found [ 884.269220][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 884.343387][T17499] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.350876][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.358174][T17499] bridge_slave_0: entered allmulticast mode [ 884.366564][T17499] bridge_slave_0: entered promiscuous mode [ 884.376605][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.384650][T17499] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.393614][T17499] bridge_slave_1: entered allmulticast mode [ 884.404316][T17499] bridge_slave_1: entered promiscuous mode [ 884.449241][T17499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.463643][T17499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.471033][T16344] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 884.547330][T17499] team0: Port device team_slave_0 added [ 884.564410][T17499] team0: Port device team_slave_1 added [ 884.609010][T17499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.620631][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.633147][T16344] usb 2-1: Using ep0 maxpacket: 8 [ 884.646596][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.648146][T17499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.692755][T17499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.702584][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.728485][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.971230][T17499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.984289][T16344] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 884.997625][T16344] usb 2-1: config 0 has no interface number 0 [ 885.017023][T16344] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 885.029115][T16344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.029189][T17498] Bluetooth: hci0: command tx timeout [ 885.044912][T16344] usb 2-1: Product: syz [ 885.059463][T16344] usb 2-1: Manufacturer: syz [ 885.064088][T16344] usb 2-1: SerialNumber: syz [ 885.082288][T16344] usb 2-1: config 0 descriptor?? [ 885.091357][T16344] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 885.139194][T16344] pctv452e: pctv452e_power_ctrl: 1 [ 885.139194][T16344] [ 885.146686][T16344] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 885.146686][T16344] [ 885.169248][T16344] dvb-usb: bulk message failed: -22 (5/0) [ 885.190435][T16344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 885.222621][T16344] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 885.231514][T16344] usb 2-1: media controller created [ 885.243719][T16344] dvb-usb: bulk message failed: -22 (8/0) [ 885.258001][T16344] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 885.372535][T17542] dvb-usb: bulk message failed: -22 (7/0) [ 885.378460][T17542] pctv452e: I2C error -22; AA 02 04 00 02 -> aa 02 31 03 04 00 02 [ 885.386585][T16344] dvb-usb: MAC address reading failed. [ 885.432999][T16344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.531701][T17499] hsr_slave_0: entered promiscuous mode [ 885.534388][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 885.557680][T17499] hsr_slave_1: entered promiscuous mode [ 885.567806][T16344] DVB: Unable to find symbol stb0899_attach() [ 885.601219][T17499] debugfs: 'hsr0' already exists in 'hsr' [ 885.603088][T16344] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 885.607001][T17499] Cannot create hsr debugfs directory [ 885.992336][T16344] rc_core: IR keymap rc-tt-1500 not found [ 886.001583][T16344] Registered IR keymap rc-empty [ 886.016257][T16344] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 886.141803][T16344] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input105 [ 886.169445][T16344] dvb-usb: schedule remote query interval to 100 msecs. [ 886.198202][T16344] pctv452e: pctv452e_power_ctrl: 0 [ 886.198202][T16344] [ 886.227251][T16344] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 886.281800][T16344] usb 2-1: USB disconnect, device number 108 [ 886.329679][ T1210] dvb-usb: bulk message failed: -22 (4/0) [ 886.355258][ T1210] dvb-usb: error -22 while querying for an remote control event. [ 886.598670][T16344] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 886.773522][T17592] usb usb8: usbfs: process 17592 (syz.4.3097) did not claim interface 0 before use [ 887.267316][T17498] Bluetooth: hci0: command tx timeout [ 887.455109][T13780] net_ratelimit: 2 callbacks suppressed [ 887.455131][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 887.639215][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 887.696192][T17582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.890580][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 887.999336][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 888.120589][T17604] tipc: Enabling of bearer rejected, failed to enable media [ 888.190266][T17499] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 888.290756][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 888.459465][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 888.562847][T17499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 888.602138][T17499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 888.630443][T17499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 888.666551][T17499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 888.949335][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 889.095621][T17499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.110640][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 889.171556][T17499] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.188976][T17615] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 889.217004][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.224154][T13770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.289248][T17618] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3101'. [ 889.296834][T13770] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.305446][T13770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.353979][T17498] Bluetooth: hci0: command tx timeout [ 889.416444][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3101'. [ 889.430421][T17618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.577553][T17499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.690583][T17624] IPv6: addrconf: prefix option has invalid lifetime [ 889.714957][T17624] bridge0: port 3(syz_tun) entered blocking state [ 889.728744][T17624] bridge0: port 3(syz_tun) entered disabled state [ 889.740437][T17624] syz_tun: entered allmulticast mode [ 889.752488][T17624] syz_tun: entered promiscuous mode [ 889.762514][T17624] bridge0: port 3(syz_tun) entered blocking state [ 889.769090][T17624] bridge0: port 3(syz_tun) entered forwarding state [ 889.779300][T17626] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 889.791727][T17626] bond0: (slave lo): Error: Device can not be enslaved while up [ 889.800485][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 889.821689][T17626] snd_aloop snd_aloop.0: control 2:1883:2954:syz1:64272 is already present [ 889.846555][T17499] veth0_vlan: entered promiscuous mode [ 889.913438][T17499] veth1_vlan: entered promiscuous mode [ 889.956982][T17499] veth0_macvtap: entered promiscuous mode [ 889.972816][T17499] veth1_macvtap: entered promiscuous mode [ 890.005338][T17499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.025449][T17499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.050161][T13773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.059364][T13773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.074837][T13773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.094746][T13773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.333579][T13780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.341881][T13780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.588735][T13773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.598317][T13773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.817673][T17643] netlink: 'syz.2.3081': attribute type 1 has an invalid length. [ 891.433611][T17498] Bluetooth: hci0: command tx timeout [ 891.461228][T17657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3112'. [ 891.900813][T17664] tipc: Enabling of bearer rejected, failed to enable media [ 892.333190][T17668] bridge0: port 3(syz_tun) entered blocking state [ 892.339831][T17668] bridge0: port 3(syz_tun) entered disabled state [ 892.349349][T17668] syz_tun: entered allmulticast mode [ 892.365996][T17668] syz_tun: entered promiscuous mode [ 892.371965][T17668] bridge0: port 3(syz_tun) entered blocking state [ 892.378454][T17668] bridge0: port 3(syz_tun) entered forwarding state [ 892.532573][T13770] net_ratelimit: 18 callbacks suppressed [ 892.532589][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 892.679913][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 892.965293][T17686] usb usb8: usbfs: process 17686 (syz.2.3117) did not claim interface 0 before use [ 893.646892][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 893.799217][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 893.929199][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 894.049163][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 894.074203][T17699] 8021q: VLANs not supported on caif0 [ 894.169895][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 894.209311][ T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 894.289377][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 894.412692][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.424639][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 894.434489][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.499372][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'. [ 895.011469][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 895.025768][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 895.029490][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.102929][ T24] usb 2-1: config 0 descriptor?? [ 895.241976][T17708] FAULT_INJECTION: forcing a failure. [ 895.241976][T17708] name failslab, interval 1, probability 0, space 0, times 0 [ 895.265276][T17708] CPU: 0 UID: 0 PID: 17708 Comm: syz.2.3125 Not tainted syzkaller #0 PREEMPT(full) [ 895.265304][T17708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 895.265317][T17708] Call Trace: [ 895.265325][T17708] [ 895.265336][T17708] dump_stack_lvl+0x189/0x250 [ 895.265362][T17708] ? __pfx____ratelimit+0x10/0x10 [ 895.265390][T17708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.265410][T17708] ? __pfx__printk+0x10/0x10 [ 895.265444][T17708] should_fail_ex+0x414/0x560 [ 895.265475][T17708] should_failslab+0xa8/0x100 [ 895.265509][T17708] __kmalloc_cache_noprof+0x6f/0x6f0 [ 895.265528][T17708] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 895.265547][T17708] ? sctp_add_bind_addr+0x8c/0x370 [ 895.265573][T17708] sctp_add_bind_addr+0x8c/0x370 [ 895.265595][T17708] sctp_copy_local_addr_list+0x30b/0x4e0 [ 895.265619][T17708] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 895.265638][T17708] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 895.265658][T17708] ? sctp_v6_is_any+0x64/0x80 [ 895.265679][T17708] ? sctp_copy_one_addr+0x93/0x360 [ 895.265701][T17708] sctp_bind_addr_copy+0xb3/0x3c0 [ 895.265721][T17708] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 895.265750][T17708] sctp_connect_new_asoc+0x2e0/0x690 [ 895.265775][T17708] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 895.265796][T17708] ? __local_bh_enable_ip+0x12d/0x1c0 [ 895.265833][T17708] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 895.265856][T17708] ? security_sctp_bind_connect+0x7e/0x2e0 [ 895.265884][T17708] sctp_sendmsg+0x155c/0x2810 [ 895.265916][T17708] ? __pfx_sctp_sendmsg+0x10/0x10 [ 895.265941][T17708] ? aa_sk_perm+0x81e/0x950 [ 895.265965][T17708] ? __pfx_aa_sk_perm+0x10/0x10 [ 895.265988][T17708] ? sock_rps_record_flow+0x19/0x410 [ 895.266016][T17708] ? inet_sendmsg+0x2f4/0x370 [ 895.266043][T17708] __sock_sendmsg+0x19c/0x270 [ 895.266070][T17708] ____sys_sendmsg+0x505/0x830 [ 895.266095][T17708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.266131][T17708] ? import_iovec+0x74/0xa0 [ 895.266158][T17708] ___sys_sendmsg+0x21f/0x2a0 [ 895.266179][T17708] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.266234][T17708] ? __fget_files+0x2a/0x420 [ 895.266256][T17708] ? __fget_files+0x3a0/0x420 [ 895.266287][T17708] __x64_sys_sendmsg+0x19b/0x260 [ 895.266308][T17708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.266335][T17708] ? __pfx_ksys_write+0x10/0x10 [ 895.266360][T17708] ? do_syscall_64+0xbe/0xfa0 [ 895.266383][T17708] do_syscall_64+0xfa/0xfa0 [ 895.266401][T17708] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.266419][T17708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.266438][T17708] ? clear_bhb_loop+0x60/0xb0 [ 895.266461][T17708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.266479][T17708] RIP: 0033:0x7f2c44d8efc9 [ 895.266508][T17708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.266524][T17708] RSP: 002b:00007f2c45c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.266545][T17708] RAX: ffffffffffffffda RBX: 00007f2c44fe5fa0 RCX: 00007f2c44d8efc9 [ 895.266560][T17708] RDX: 0000000004008084 RSI: 00002000000000c0 RDI: 0000000000000003 [ 895.266573][T17708] RBP: 00007f2c45c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 895.266585][T17708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.266596][T17708] R13: 00007f2c44fe6038 R14: 00007f2c44fe5fa0 R15: 00007f2c4510fa28 [ 895.266629][T17708] [ 895.516158][ T24] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 895.817991][T17695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.827078][T17695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.852345][T17695] F2FS-fs: Conflicting test_dummy_encryption options [ 895.882065][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0025/input/input106 [ 895.961710][T12507] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 896.066039][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 896.110676][T17723] vlan2: entered promiscuous mode [ 896.116510][T17723] macvtap0: entered promiscuous mode [ 896.132209][T12507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.150976][ T24] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 896.168249][T12507] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 896.180812][ T24] usb 2-1: USB disconnect, device number 109 [ 896.189349][T12507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.204410][T12507] usb 3-1: config 0 descriptor?? [ 896.259180][ T855] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 896.345810][T17725] fido_id[17725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 896.357591][T17724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3128'. [ 896.431813][ T855] usb 4-1: Using ep0 maxpacket: 32 [ 896.445166][ T855] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 896.609143][ T855] usb 4-1: config 0 has no interfaces? [ 896.618863][ T855] usb 4-1: config 0 has no interfaces? [ 896.641520][T17734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 896.873472][ T855] usb 4-1: config 0 has no interfaces? [ 896.877629][ T855] usb 4-1: config 0 has no interfaces? [ 896.882183][ T855] usb 4-1: config 0 has no interfaces? [ 896.884374][ T855] usb 4-1: config 0 has no interfaces? [ 896.885437][ T855] usb 4-1: config 0 has no interfaces? [ 896.888870][ T855] usb 4-1: config 0 has no interfaces? [ 896.892963][ T855] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 896.892982][ T855] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 896.892993][ T855] usb 4-1: Product: syz [ 896.893007][ T855] usb 4-1: Manufacturer: syz [ 896.893015][ T855] usb 4-1: SerialNumber: syz [ 896.894935][ T855] usb 4-1: config 0 descriptor?? [ 897.190102][T17720] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3130'. [ 897.244294][T17741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3133'. [ 897.244392][T17741] netem: invalid attributes len -24 [ 897.244403][T17741] netem: change failed [ 897.409329][ T855] usb 4-1: USB disconnect, device number 5 [ 897.619802][ T3560] net_ratelimit: 10 callbacks suppressed [ 897.619859][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 897.739221][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 897.859364][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 897.997106][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 898.192106][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 898.281865][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3137'. [ 898.342047][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 898.536303][T17762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3136'. [ 898.560645][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 898.594175][T17764] binder: 17763:17764 ioctl c0306201 0 returned -14 [ 898.744151][T12507] usbhid 3-1:0.0: can't add hid device: -71 [ 898.750274][T12507] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 898.774796][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 898.782359][T12507] usb 3-1: USB disconnect, device number 106 [ 898.991316][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 899.001783][T17771] FAULT_INJECTION: forcing a failure. [ 899.001783][T17771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.057462][T17771] CPU: 0 UID: 0 PID: 17771 Comm: syz.2.3141 Not tainted syzkaller #0 PREEMPT(full) [ 899.057487][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 899.057497][T17771] Call Trace: [ 899.057504][T17771] [ 899.057513][T17771] dump_stack_lvl+0x189/0x250 [ 899.057536][T17771] ? __pfx____ratelimit+0x10/0x10 [ 899.057568][T17771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.057584][T17771] ? __pfx__printk+0x10/0x10 [ 899.057605][T17771] ? get_sigframe+0x596/0x7d0 [ 899.057631][T17771] should_fail_ex+0x414/0x560 [ 899.057661][T17771] _copy_to_user+0x31/0xb0 [ 899.057686][T17771] copy_siginfo_to_user+0x22/0xc0 [ 899.057709][T17771] x64_setup_rt_frame+0x776/0xd40 [ 899.057746][T17771] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 899.057770][T17771] ? arch_do_signal_or_restart+0x385/0x790 [ 899.057792][T17771] arch_do_signal_or_restart+0x3f1/0x790 [ 899.057813][T17771] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 899.057833][T17771] ? exit_to_user_mode_loop+0x40/0x130 [ 899.057848][T17771] exit_to_user_mode_loop+0x72/0x130 [ 899.057860][T17771] do_syscall_64+0x2bd/0xfa0 [ 899.057871][T17771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.057881][T17771] ? asm_sysvec_call_function_single+0x1a/0x20 [ 899.057891][T17771] ? clear_bhb_loop+0x60/0xb0 [ 899.057902][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.057912][T17771] RIP: 0033:0x7f2c44d8efc7 [ 899.057923][T17771] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 899.057932][T17771] RSP: 002b:00007f2c45c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 899.057944][T17771] RAX: 000000000000012b RBX: 00007f2c44fe5fa0 RCX: 00007f2c44d8efc9 [ 899.057952][T17771] RDX: 0000000000000001 RSI: 0000200000011c40 RDI: 0000000000000004 [ 899.057958][T17771] RBP: 00007f2c45c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 899.057965][T17771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.057971][T17771] R13: 00007f2c44fe6038 R14: 00007f2c44fe5fa0 R15: 00007f2c4510fa28 [ 899.057987][T17771] [ 899.329866][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 900.343236][T17786] fuse: Bad value for 'fd' [ 900.909411][T16588] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 901.089185][T16588] usb 4-1: config 0 has an invalid interface number: 129 but max is 0 [ 901.089219][ T855] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 901.097796][T16588] usb 4-1: config 0 has no interface number 0 [ 901.152777][T16588] usb 4-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 901.175846][T16588] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 901.189275][T16588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.197328][T16588] usb 4-1: Product: syz [ 901.210623][T16588] usb 4-1: Manufacturer: syz [ 901.215416][T16588] usb 4-1: SerialNumber: syz [ 901.226944][T16588] r8152-cfgselector 4-1: Unknown version 0x0000 [ 901.233724][T16588] r8152-cfgselector 4-1: config 0 descriptor?? [ 901.326566][ T855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.343529][ T855] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 901.353224][ T855] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 901.361720][ T855] usb 3-1: Product: syz [ 901.366057][ T855] usb 3-1: SerialNumber: syz [ 901.395453][T16588] r8152 4-1:0.129: Expected endpoints are not found [ 901.395828][ T855] usb 3-1: config 0 descriptor?? [ 901.486669][T17800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.512023][ T855] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 901.518298][T17800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.521311][ T855] usb 3-1: Detected SIO [ 901.544325][ T855] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 901.714306][T17807] fuse: Invalid uid '00000000000000000006' [ 901.725238][ T855] usb 3-1: USB disconnect, device number 107 [ 901.737689][ T855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 901.749976][ T855] ftdi_sio 3-1:0.0: device disconnected [ 902.071191][T17815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.551483][T17825] usb usb8: usbfs: process 17825 (syz.4.3157) did not claim interface 0 before use [ 903.708541][T13770] net_ratelimit: 20 callbacks suppressed [ 903.708557][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 903.870400][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 903.929388][ T5890] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 903.988726][T17830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3159'. [ 904.019809][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 904.130655][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 904.172245][T17836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3161'. [ 904.221623][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 904.221640][ T30] audit: type=1326 audit(1760733916.938:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 904.239633][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 904.260560][T17828] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 904.261214][ T30] audit: type=1326 audit(1760733916.938:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 904.299329][T17828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3158'. [ 904.320718][T17842] FAULT_INJECTION: forcing a failure. [ 904.320718][T17842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.340938][ T30] audit: type=1326 audit(1760733916.938:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fba97f8efc9 code=0x7ffc0000 [ 904.350964][T17842] CPU: 1 UID: 0 PID: 17842 Comm: syz.2.3163 Not tainted syzkaller #0 PREEMPT(full) [ 904.350989][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 904.351000][T17842] Call Trace: [ 904.351009][T17842] [ 904.351017][T17842] dump_stack_lvl+0x189/0x250 [ 904.351042][T17842] ? __pfx____ratelimit+0x10/0x10 [ 904.351070][T17842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.351088][T17842] ? __pfx__printk+0x10/0x10 [ 904.351121][T17842] should_fail_ex+0x414/0x560 [ 904.351153][T17842] _copy_to_user+0x31/0xb0 [ 904.351178][T17842] simple_read_from_buffer+0xe1/0x170 [ 904.351204][T17842] proc_fail_nth_read+0x1b3/0x220 [ 904.351233][T17842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 904.351262][T17842] ? rw_verify_area+0x2a6/0x4d0 [ 904.351279][T17842] ? __lock_acquire+0xab9/0xd20 [ 904.351299][T17842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 904.351326][T17842] vfs_read+0x200/0xa30 [ 904.351343][T17842] ? fdget_pos+0x247/0x320 [ 904.351369][T17842] ? __pfx___mutex_lock+0x10/0x10 [ 904.351388][T17842] ? __pfx_vfs_read+0x10/0x10 [ 904.351408][T17842] ? __fget_files+0x2a/0x420 [ 904.351432][T17842] ? __fget_files+0x3a0/0x420 [ 904.351451][T17842] ? __fget_files+0x2a/0x420 [ 904.351480][T17842] ksys_read+0x145/0x250 [ 904.351501][T17842] ? __pfx_ksys_read+0x10/0x10 [ 904.351523][T17842] ? do_syscall_64+0xbe/0xfa0 [ 904.351545][T17842] do_syscall_64+0xfa/0xfa0 [ 904.351561][T17842] ? lockdep_hardirqs_on+0x9c/0x150 [ 904.351578][T17842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.351595][T17842] ? clear_bhb_loop+0x60/0xb0 [ 904.351620][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.351637][T17842] RIP: 0033:0x7f2c44d8d9dc [ 904.351654][T17842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 904.351669][T17842] RSP: 002b:00007f2c45c3e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.351688][T17842] RAX: ffffffffffffffda RBX: 00007f2c44fe5fa0 RCX: 00007f2c44d8d9dc [ 904.351702][T17842] RDX: 000000000000000f RSI: 00007f2c45c3e0a0 RDI: 0000000000000004 [ 904.351713][T17842] RBP: 00007f2c45c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 904.351724][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.351735][T17842] R13: 00007f2c44fe6038 R14: 00007f2c44fe5fa0 R15: 00007f2c4510fa28 [ 904.351772][T17842] [ 904.422967][T13776] bond10: (slave macvlan2): failed to get link speed/duplex [ 904.559296][ T5890] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 904.746582][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 904.754633][T17848] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 904.787863][ T5890] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 904.798180][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 904.811227][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 904.827819][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 904.839117][ T5890] usb 4-1: Product: syz [ 904.843313][ T5890] usb 4-1: Manufacturer: syz [ 904.856067][ T5890] usb 4-1: SerialNumber: syz [ 904.860093][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 904.863749][ T5890] usb 4-1: config 0 descriptor?? [ 904.886600][ T5890] usb 4-1: selecting invalid altsetting 0 [ 904.909526][ T855] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 904.984432][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'. [ 905.078067][ T855] usb 3-1: Using ep0 maxpacket: 16 [ 905.091179][ T855] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 905.135364][ T855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 905.160615][ T855] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 905.170173][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.186392][ T855] usb 3-1: Product: syz [ 905.191006][ T855] usb 3-1: Manufacturer: syz [ 905.195709][ T855] usb 3-1: SerialNumber: syz [ 905.199802][ T5890] usb 4-1: USB disconnect, device number 7 [ 905.330027][ T855] usb 3-1: config 0 descriptor?? [ 905.351180][ T855] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 905.497910][T17870] usb usb8: usbfs: process 17870 (syz.4.3170) did not claim interface 0 before use [ 906.061877][ T855] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 906.070620][T17871] usb usb8: usbfs: process 17871 (syz.0.3169) did not claim interface 0 before use [ 906.179295][ T855] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 906.188158][ T855] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 906.206900][ T855] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 907.411965][ T855] em28xx 3-1:0.0: No AC97 audio processor [ 907.539242][ T855] usb 3-1: USB disconnect, device number 108 [ 907.597554][ T855] em28xx 3-1:0.0: Disconnecting em28xx [ 907.725393][ T855] em28xx 3-1:0.0: Freeing device [ 907.738289][T17879] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 907.896733][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3171'. [ 908.239514][ T1210] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 908.384856][ T1210] usb 4-1: device descriptor read/64, error -71 [ 908.669708][ T1210] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 908.783324][ T80] net_ratelimit: 20 callbacks suppressed [ 908.783342][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 908.807914][T17901] binder: 17900:17901 ioctl c0306201 0 returned -14 [ 908.899896][ T1210] usb 4-1: device descriptor read/64, error -71 [ 909.018233][T17908] binder: 17902:17908 ioctl c0306201 200000000080 returned -14 [ 909.080650][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 909.088525][ T1210] usb usb4-port1: attempt power cycle [ 909.213137][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 909.409247][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 909.440319][ T1210] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 909.460768][ T1210] usb 4-1: device descriptor read/8, error -71 [ 909.569471][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 909.584878][T17918] fuse: Bad value for 'fd' [ 909.592712][T17918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3186'. [ 909.603130][T17918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3186'. [ 909.709278][ T1210] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 909.770603][ T1210] usb 4-1: device descriptor read/8, error -71 [ 909.808853][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 909.890101][ T1210] usb usb4-port1: unable to enumerate USB device [ 909.926283][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 910.145315][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 910.260963][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 910.419206][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 910.868168][T17927] netlink: 'syz.1.3188': attribute type 20 has an invalid length. [ 910.876390][T17927] IPv6: NLM_F_CREATE should be specified when creating new route [ 911.193806][T17943] pim6reg: entered allmulticast mode [ 911.642212][T17949] netlink: 'syz.3.3194': attribute type 10 has an invalid length. [ 911.689302][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.696683][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.711725][T17948] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 911.751375][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.758574][T17949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.766235][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.773384][T17949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.791682][T17949] bridge1: port 1(vlan2) entered blocking state [ 911.798118][T17949] bridge1: port 1(vlan2) entered forwarding state [ 911.807853][T17949] team0: Port device bridge0 added [ 911.828835][T17950] vlan2: entered allmulticast mode [ 911.879298][T17950] macsec0: entered allmulticast mode [ 911.884634][T17950] veth1_macvtap: entered allmulticast mode [ 912.423566][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3202'. [ 912.442205][T17971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.716269][ T30] audit: type=1326 audit(1760733925.428:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 912.833226][ T30] audit: type=1326 audit(1760733925.428:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 912.923503][ T30] audit: type=1326 audit(1760733925.428:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 913.037045][ T30] audit: type=1326 audit(1760733925.428:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 913.101868][T17982] netlink: 'syz.1.3206': attribute type 27 has an invalid length. [ 913.386227][T17990] usb usb8: usbfs: process 17990 (syz.2.3204) did not claim interface 0 before use [ 914.099204][ T30] audit: type=1326 audit(1760733925.428:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 914.149244][T13773] net_ratelimit: 19 callbacks suppressed [ 914.149259][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 914.182526][ T30] audit: type=1326 audit(1760733925.428:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 914.239752][ T30] audit: type=1326 audit(1760733925.428:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 914.263015][ T30] audit: type=1326 audit(1760733925.428:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17972 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c44d8efc9 code=0x7ffc0000 [ 914.319164][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 914.439350][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 914.507991][T17995] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3208'. [ 914.534753][T17994] FAULT_INJECTION: forcing a failure. [ 914.534753][T17994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.549568][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 914.597004][T17994] CPU: 0 UID: 0 PID: 17994 Comm: syz.4.3209 Not tainted syzkaller #0 PREEMPT(full) [ 914.597031][T17994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 914.597042][T17994] Call Trace: [ 914.597050][T17994] [ 914.597058][T17994] dump_stack_lvl+0x189/0x250 [ 914.597084][T17994] ? __pfx____ratelimit+0x10/0x10 [ 914.597109][T17994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.597128][T17994] ? __pfx__printk+0x10/0x10 [ 914.597147][T17994] ? __might_fault+0xb0/0x130 [ 914.597177][T17994] should_fail_ex+0x414/0x560 [ 914.597209][T17994] _copy_from_user+0x2d/0xb0 [ 914.597232][T17994] ___sys_sendmsg+0x158/0x2a0 [ 914.597254][T17994] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.597305][T17994] ? __fget_files+0x2a/0x420 [ 914.597325][T17994] ? __fget_files+0x3a0/0x420 [ 914.597356][T17994] __x64_sys_sendmsg+0x19b/0x260 [ 914.597376][T17994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.597402][T17994] ? __pfx_ksys_write+0x10/0x10 [ 914.597425][T17994] ? do_syscall_64+0xbe/0xfa0 [ 914.597447][T17994] do_syscall_64+0xfa/0xfa0 [ 914.597464][T17994] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.597481][T17994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.597498][T17994] ? clear_bhb_loop+0x60/0xb0 [ 914.597520][T17994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.597537][T17994] RIP: 0033:0x7fba97f8efc9 [ 914.597553][T17994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.597568][T17994] RSP: 002b:00007fba98d98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.597588][T17994] RAX: ffffffffffffffda RBX: 00007fba981e5fa0 RCX: 00007fba97f8efc9 [ 914.597601][T17994] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 914.597612][T17994] RBP: 00007fba98d98090 R08: 0000000000000000 R09: 0000000000000000 [ 914.597624][T17994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.597635][T17994] R13: 00007fba981e6038 R14: 00007fba981e5fa0 R15: 00007fba9830fa28 [ 914.597664][T17994] [ 914.660502][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 915.008706][T17998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 915.417775][T18005] bridge2: entered promiscuous mode [ 915.509199][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 915.526920][T18018] FAULT_INJECTION: forcing a failure. [ 915.526920][T18018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.573395][T18018] CPU: 1 UID: 0 PID: 18018 Comm: syz.0.3216 Not tainted syzkaller #0 PREEMPT(full) [ 915.573427][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 915.573438][T18018] Call Trace: [ 915.573446][T18018] [ 915.573456][T18018] dump_stack_lvl+0x189/0x250 [ 915.573480][T18018] ? __pfx____ratelimit+0x10/0x10 [ 915.573506][T18018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.573526][T18018] ? __pfx__printk+0x10/0x10 [ 915.573544][T18018] ? __might_fault+0xb0/0x130 [ 915.573575][T18018] should_fail_ex+0x414/0x560 [ 915.573606][T18018] _copy_from_iter+0x1de/0x1790 [ 915.573633][T18018] ? rcu_is_watching+0x15/0xb0 [ 915.573662][T18018] ? kmalloc_reserve+0xbd/0x290 [ 915.573687][T18018] ? __pfx__copy_from_iter+0x10/0x10 [ 915.573710][T18018] ? __build_skb_around+0x262/0x3f0 [ 915.573737][T18018] ? netlink_sendmsg+0x642/0xb30 [ 915.573761][T18018] ? skb_put+0x11b/0x210 [ 915.573789][T18018] netlink_sendmsg+0x6b2/0xb30 [ 915.573822][T18018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.573849][T18018] ? aa_sock_msg_perm+0xf1/0x1d0 [ 915.573872][T18018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 915.573893][T18018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.573918][T18018] __sock_sendmsg+0x21c/0x270 [ 915.573944][T18018] ____sys_sendmsg+0x505/0x830 [ 915.573967][T18018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.574003][T18018] ? import_iovec+0x74/0xa0 [ 915.574029][T18018] ___sys_sendmsg+0x21f/0x2a0 [ 915.574049][T18018] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.574102][T18018] ? __fget_files+0x2a/0x420 [ 915.574123][T18018] ? __fget_files+0x3a0/0x420 [ 915.574154][T18018] __x64_sys_sendmsg+0x19b/0x260 [ 915.574176][T18018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.574203][T18018] ? __pfx_ksys_write+0x10/0x10 [ 915.574226][T18018] ? do_syscall_64+0xbe/0xfa0 [ 915.574249][T18018] do_syscall_64+0xfa/0xfa0 [ 915.574266][T18018] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.574283][T18018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.574302][T18018] ? clear_bhb_loop+0x60/0xb0 [ 915.574324][T18018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.574342][T18018] RIP: 0033:0x7f03f2b8efc9 [ 915.574359][T18018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.574374][T18018] RSP: 002b:00007f03f3a90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.574395][T18018] RAX: ffffffffffffffda RBX: 00007f03f2de5fa0 RCX: 00007f03f2b8efc9 [ 915.574408][T18018] RDX: 0000000000000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 915.574429][T18018] RBP: 00007f03f3a90090 R08: 0000000000000000 R09: 0000000000000000 [ 915.574441][T18018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.574452][T18018] R13: 00007f03f2de6038 R14: 00007f03f2de5fa0 R15: 00007f03f2f0fa28 [ 915.574483][T18018] [ 915.879507][ T3560] bond10: (slave macvlan2): failed to get link speed/duplex [ 915.989250][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 916.099377][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 916.149188][ T855] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 916.209843][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 916.289461][T18026] kvm: pic: level sensitive irq not supported [ 916.289548][T18026] kvm: pic: non byte read [ 916.301605][ T855] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 916.311083][ T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.353058][ T855] usb 2-1: config 0 descriptor?? [ 916.374859][ T855] usb 2-1: selecting invalid altsetting 1 [ 916.452019][ T855] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 916.506756][T18038] program syz.3.3223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.568396][ T855] usb 2-1: USB disconnect, device number 110 [ 916.851143][T16344] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 917.011203][T16344] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 917.020686][T16344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.045357][T16344] usb 3-1: config 0 descriptor?? [ 917.625901][T18057] trusted_key: encrypted_key: insufficient parameters specified [ 917.779153][ T5890] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 917.929233][ T5890] usb 2-1: device descriptor read/64, error -71 [ 918.309824][T18043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.318751][T18043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.361245][ T5890] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 918.509322][ T5890] usb 2-1: device descriptor read/64, error -71 [ 918.619811][ T5890] usb usb2-port1: attempt power cycle [ 918.969469][ T5890] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 918.989872][ T5890] usb 2-1: device descriptor read/8, error -71 [ 919.140258][T16344] usb 3-1: Cannot set autoneg [ 919.145179][T16344] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 919.231684][T18086] usb usb8: usbfs: process 18086 (syz.3.3237) did not claim interface 0 before use [ 919.244546][T13770] net_ratelimit: 24 callbacks suppressed [ 919.244564][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 919.250118][T16344] usb 3-1: USB disconnect, device number 109 [ 920.509744][ T5890] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 920.561824][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 920.689297][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 920.750403][ T5890] usb 2-1: device not accepting address 114, error -71 [ 920.757729][ T5890] usb usb2-port1: unable to enumerate USB device [ 920.770741][T18095] netlink: 'syz.1.3242': attribute type 3 has an invalid length. [ 920.771658][T18097] IPv6: NLM_F_REPLACE set, but no existing node found! [ 920.810323][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 920.851138][T18099] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3243'. [ 920.930347][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 921.040145][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 921.179487][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 921.319847][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 921.348650][ T30] audit: type=1326 audit(1760733934.058:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.371208][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.382536][ T30] audit: type=1326 audit(1760733934.058:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.405006][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.413896][ T30] audit: type=1326 audit(1760733934.058:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.436283][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.442990][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 921.451227][ T30] audit: type=1326 audit(1760733934.058:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.473755][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.486963][ T30] audit: type=1326 audit(1760733934.058:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.551006][ T30] audit: type=1326 audit(1760733934.058:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.573435][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.590042][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 921.614791][ T30] audit: type=1326 audit(1760733934.058:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.637492][ T30] audit: type=1326 audit(1760733934.058:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.664784][ T30] audit: type=1326 audit(1760733934.058:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.687494][ T30] audit: type=1326 audit(1760733934.058:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.1.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5dead8efc9 code=0x7ffc0000 [ 921.943603][T18119] mac80211_hwsim hwsim22 *: renamed from wlan1 (while UP) [ 922.286220][T18126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.317724][ T5890] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 922.335470][ T5890] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 922.382684][T18129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.386410][ T60] wlan1: authenticated [ 922.410570][T13773] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 922.418675][T18126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.439382][T13773] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 922.458210][T13773] wlan1: associated [ 922.919138][ T855] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 923.092334][ T855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.112777][ T855] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 923.132296][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.155887][ T855] usb 4-1: config 0 descriptor?? [ 923.183500][ T855] pwc: Askey VC010 type 2 USB webcam detected. [ 923.420584][T12530] Bluetooth: hci1: command 0x0406 tx timeout [ 923.591064][ T855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 923.828502][ T855] pwc: recv_control_msg error -32 req 02 val 2700 [ 923.840667][ T855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 923.848834][ T855] pwc: recv_control_msg error -32 req 04 val 1000 [ 923.865711][ T855] pwc: recv_control_msg error -32 req 04 val 1300 [ 923.878802][ T855] pwc: recv_control_msg error -32 req 04 val 1400 [ 923.892583][ T855] pwc: recv_control_msg error -32 req 02 val 2000 [ 924.167240][ T855] pwc: recv_control_msg error -71 req 04 val 1500 [ 924.189178][ T855] pwc: recv_control_msg error -71 req 02 val 2500 [ 924.208021][ T855] pwc: recv_control_msg error -71 req 02 val 2400 [ 924.228503][ T855] pwc: recv_control_msg error -71 req 02 val 2600 [ 924.239513][ T855] pwc: recv_control_msg error -71 req 02 val 2900 [ 924.271195][T13773] net_ratelimit: 19 callbacks suppressed [ 924.271216][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 924.284632][ T855] pwc: recv_control_msg error -71 req 02 val 2800 [ 924.307134][ T855] pwc: recv_control_msg error -71 req 04 val 1100 [ 924.335629][ T855] pwc: recv_control_msg error -71 req 04 val 1200 [ 924.369832][ T855] pwc: Registered as video103. [ 924.409281][ T855] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 924.429184][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 924.472061][ T855] usb 4-1: USB disconnect, device number 12 [ 924.559255][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 924.669335][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 924.782948][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 924.922029][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 925.080120][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 925.209384][T13770] bond10: (slave macvlan2): failed to get link speed/duplex [ 925.333026][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 925.426324][T18177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3264'. [ 925.592824][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 927.151579][T18208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.701723][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 928.701740][ T30] audit: type=1326 audit(1760733941.418:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 928.758698][ T30] audit: type=1326 audit(1760733941.448:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 928.783088][ T30] audit: type=1326 audit(1760733941.448:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 928.848645][ T30] audit: type=1326 audit(1760733941.448:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 928.874192][ T30] audit: type=1326 audit(1760733941.448:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 928.922608][ T30] audit: type=1326 audit(1760733941.458:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 929.032178][ T30] audit: type=1326 audit(1760733941.468:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03f2b85e67 code=0x7ffc0000 [ 929.126210][ T30] audit: type=1326 audit(1760733941.468:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03f2b2b099 code=0x7ffc0000 [ 929.201708][ T30] audit: type=1326 audit(1760733941.468:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 929.275167][ T30] audit: type=1326 audit(1760733941.468:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18243 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f2b8efc9 code=0x7ffc0000 [ 929.371452][ T36] net_ratelimit: 30 callbacks suppressed [ 929.371473][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 929.470743][T18258] vlan2: entered promiscuous mode [ 929.475790][T18258] macvtap0: entered promiscuous mode [ 929.568610][T13773] bond10: (slave macvlan2): failed to get link speed/duplex [ 929.780291][ T36] bond10: (slave macvlan2): failed to get link speed/duplex [ 930.131911][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3301'. [ 930.141259][ T5890] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 930.307727][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 930.349369][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.451946][ T5890] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 930.465651][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.489402][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 930.499279][ T5890] usb 4-1: Product: syz [ 930.503499][ T5890] usb 4-1: Manufacturer: syz [ 930.517422][ T5890] usb 4-1: SerialNumber: syz [ 930.524051][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'. [ 930.553580][ T5890] usb 4-1: config 0 descriptor?? [ 930.578041][ T5890] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 930.619755][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 930.729153][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 930.755404][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 930.764583][T18282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3306'. [ 930.792378][ T5890] usb 4-1: USB disconnect, device number 13 [ 930.807983][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 930.834279][T18283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3306'. [ 930.843718][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 931.033606][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 931.329168][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 931.599965][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.606642][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.668393][T12530] Bluetooth: hci5: command 0x0406 tx timeout [ 933.923384][T18325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.238973][T18332] random: crng reseeded on system resumption [ 934.454839][ T60] net_ratelimit: 19 callbacks suppressed [ 934.454863][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 934.481303][T18335] IPVS: nq: FWM 3 0x00000003 - no destination available [ 934.489538][ T1210] IPVS: starting estimator thread 0... [ 934.589731][T18336] IPVS: using max 49 ests per chain, 117600 per kthread [ 934.771096][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 934.909329][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 935.039187][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 935.199150][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 935.320273][T13780] bond10: (slave macvlan2): failed to get link speed/duplex [ 935.429157][ T1210] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 935.709553][ T60] bond10: (slave macvlan2): failed to get link speed/duplex [ 935.762782][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 935.800003][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.879172][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 935.899784][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.952655][ T1210] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 935.995354][ T80] bond10: (slave macvlan2): failed to get link speed/duplex [ 936.003145][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.034977][ T1210] usb 3-1: config 0 descriptor?? [ 936.511911][ T1210] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 936.532084][ T1210] mcp2221 0003:04D8:00DD.0026: item fetching failed at offset 3/5 [ 936.569933][ T1210] mcp2221 0003:04D8:00DD.0026: can't parse reports [ 936.576598][ T1210] mcp2221 0003:04D8:00DD.0026: probe with driver mcp2221 failed with error -22 [ 936.668903][ T1210] usb 3-1: USB disconnect, device number 110 [ 938.021103][T18370] ================================================================== [ 938.029229][T18370] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 938.037675][T18370] Read of size 8 at addr ffff88807a30a288 by task syz.1.3330/18370 [ 938.045570][T18370] [ 938.047909][T18370] CPU: 0 UID: 0 PID: 18370 Comm: syz.1.3330 Not tainted syzkaller #0 PREEMPT(full) [ 938.047936][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 938.047949][T18370] Call Trace: [ 938.047958][T18370] [ 938.047967][T18370] dump_stack_lvl+0x189/0x250 [ 938.047993][T18370] ? __kasan_check_byte+0x12/0x40 [ 938.048016][T18370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.048036][T18370] ? lock_release+0x4b/0x3e0 [ 938.048062][T18370] ? __virt_addr_valid+0x4a5/0x5c0 [ 938.048084][T18370] print_report+0xca/0x240 [ 938.048106][T18370] ? change_page_attr_set_clr+0x625/0xfc0 [ 938.048130][T18370] kasan_report+0x118/0x150 [ 938.048154][T18370] ? change_page_attr_set_clr+0x625/0xfc0 [ 938.048181][T18370] change_page_attr_set_clr+0x625/0xfc0 [ 938.048208][T18370] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 938.048232][T18370] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 938.048254][T18370] ? memtype_reserve+0x874/0xb30 [ 938.048288][T18370] _set_pages_array+0x145/0x270 [ 938.048316][T18370] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 938.048347][T18370] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 938.048385][T18370] ? ww_mutex_lock+0x3f/0x1c0 [ 938.048408][T18370] drm_gem_shmem_mmap+0x193/0x460 [ 938.048428][T18370] drm_gem_mmap_obj+0x18a/0x4e0 [ 938.048453][T18370] drm_gem_mmap+0x384/0x640 [ 938.048476][T18370] ? __pfx_drm_gem_mmap+0x10/0x10 [ 938.048500][T18370] ? __mas_set_range+0x12f/0x3c0 [ 938.048529][T18370] mmap_region+0x18b4/0x2110 [ 938.048562][T18370] ? __pfx_mmap_region+0x10/0x10 [ 938.048587][T18370] ? rcu_is_watching+0x15/0xb0 [ 938.048613][T18370] ? trace_sched_exit_tp+0x36/0x110 [ 938.048634][T18370] ? __schedule+0x17ae/0x4cc0 [ 938.048708][T18370] ? do_mmap+0xba7/0x10d0 [ 938.048726][T18370] ? shmem_mapping+0xd/0x50 [ 938.048752][T18370] ? memfd_check_seals_mmap+0xc5/0x200 [ 938.048779][T18370] do_mmap+0xc45/0x10d0 [ 938.048802][T18370] ? __pfx_do_mmap+0x10/0x10 [ 938.048818][T18370] ? down_write_killable+0x178/0x230 [ 938.048842][T18370] ? __pfx_down_write_killable+0x10/0x10 [ 938.048863][T18370] ? common_file_perm+0x1b5/0x230 [ 938.048886][T18370] vm_mmap_pgoff+0x2a6/0x4d0 [ 938.048916][T18370] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 938.048942][T18370] ? __fget_files+0x2a/0x420 [ 938.048965][T18370] ? __fget_files+0x2a/0x420 [ 938.048987][T18370] ? __fget_files+0x2a/0x420 [ 938.049008][T18370] ksys_mmap_pgoff+0x51f/0x760 [ 938.049029][T18370] do_syscall_64+0xfa/0xfa0 [ 938.049044][T18370] ? lockdep_hardirqs_on+0x9c/0x150 [ 938.049060][T18370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.049077][T18370] ? clear_bhb_loop+0x60/0xb0 [ 938.049096][T18370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.049113][T18370] RIP: 0033:0x7f5dead8efc9 [ 938.049128][T18370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.049145][T18370] RSP: 002b:00007f5de8fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 938.049164][T18370] RAX: ffffffffffffffda RBX: 00007f5deafe6180 RCX: 00007f5dead8efc9 [ 938.049179][T18370] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 938.049192][T18370] RBP: 00007f5deae11f91 R08: 0000000000000008 R09: 0000000100000000 [ 938.049204][T18370] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 938.049217][T18370] R13: 00007f5deafe6218 R14: 00007f5deafe6180 R15: 00007f5deb10fa28 [ 938.049239][T18370] [ 938.049246][T18370] [ 938.383827][T18370] Allocated by task 18370: [ 938.388253][T18370] kasan_save_track+0x3e/0x80 [ 938.393109][T18370] __kasan_kmalloc+0x93/0xb0 [ 938.397702][T18370] __kvmalloc_node_noprof+0x5cd/0x910 [ 938.403164][T18370] drm_gem_get_pages+0x166/0xa20 [ 938.408119][T18370] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 938.414197][T18370] drm_gem_shmem_mmap+0x193/0x460 [ 938.419234][T18370] drm_gem_mmap_obj+0x18a/0x4e0 [ 938.424094][T18370] drm_gem_mmap+0x384/0x640 [ 938.428601][T18370] mmap_region+0x18b4/0x2110 [ 938.433203][T18370] do_mmap+0xc45/0x10d0 [ 938.437366][T18370] vm_mmap_pgoff+0x2a6/0x4d0 [ 938.441962][T18370] ksys_mmap_pgoff+0x51f/0x760 [ 938.446726][T18370] do_syscall_64+0xfa/0xfa0 [ 938.451321][T18370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.457569][T18370] [ 938.459894][T18370] The buggy address belongs to the object at ffff88807a30a200 [ 938.459894][T18370] which belongs to the cache kmalloc-192 of size 192 [ 938.474036][T18370] The buggy address is located 0 bytes to the right of [ 938.474036][T18370] allocated 136-byte region [ffff88807a30a200, ffff88807a30a288) [ 938.488534][T18370] [ 938.490857][T18370] The buggy address belongs to the physical page: [ 938.497268][T18370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a30a [ 938.506025][T18370] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 938.513555][T18370] page_type: f5(slab) [ 938.517530][T18370] raw: 00fff00000000000 ffff88813ffa63c0 0000000000000000 dead000000000001 [ 938.526102][T18370] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 938.534668][T18370] page dumped because: kasan: bad access detected [ 938.541075][T18370] page_owner tracks the page as allocated [ 938.546776][T18370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13708, tgid 13707 (syz.0.2068), ts 628521504365, free_ts 628449772569 [ 938.566143][T18370] post_alloc_hook+0x240/0x2a0 [ 938.570905][T18370] get_page_from_freelist+0x2365/0x2440 [ 938.576445][T18370] __alloc_frozen_pages_noprof+0x181/0x370 [ 938.582243][T18370] alloc_pages_mpol+0x232/0x4a0 [ 938.587082][T18370] allocate_slab+0x96/0x3a0 [ 938.591578][T18370] ___slab_alloc+0xe94/0x18a0 [ 938.596241][T18370] __slab_alloc+0x65/0x100 [ 938.600645][T18370] __kmalloc_noprof+0x471/0x7f0 [ 938.605482][T18370] io_cache_alloc_new+0x40/0x100 [ 938.610411][T18370] io_uring_cmd_prep+0x361/0x550 [ 938.615346][T18370] io_submit_sqes+0x935/0x1e60 [ 938.620108][T18370] __se_sys_io_uring_enter+0x2df/0x2b20 [ 938.625641][T18370] do_syscall_64+0xfa/0xfa0 [ 938.630130][T18370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.636006][T18370] page last free pid 13713 tgid 13707 stack trace: [ 938.642486][T18370] __free_frozen_pages+0xbc4/0xd30 [ 938.647587][T18370] tlb_remove_table_rcu+0x85/0x100 [ 938.652690][T18370] rcu_core+0xcab/0x1770 [ 938.656922][T18370] handle_softirqs+0x286/0x870 [ 938.661674][T18370] __irq_exit_rcu+0xca/0x1f0 [ 938.666252][T18370] irq_exit_rcu+0x9/0x30 [ 938.670486][T18370] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 938.676114][T18370] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 938.682080][T18370] [ 938.684389][T18370] Memory state around the buggy address: [ 938.690005][T18370] ffff88807a30a180: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 938.698051][T18370] ffff88807a30a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.706095][T18370] >ffff88807a30a280: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 938.714135][T18370] ^ [ 938.718444][T18370] ffff88807a30a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 938.726485][T18370] ffff88807a30a380: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 938.734615][T18370] ================================================================== [ 938.838145][T18370] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 938.845383][T18370] CPU: 1 UID: 0 PID: 18370 Comm: syz.1.3330 Not tainted syzkaller #0 PREEMPT(full) [ 938.854765][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 938.864832][T18370] Call Trace: [ 938.868115][T18370] [ 938.871050][T18370] dump_stack_lvl+0x99/0x250 [ 938.875653][T18370] ? __asan_memcpy+0x40/0x70 [ 938.880255][T18370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.885463][T18370] ? __pfx__printk+0x10/0x10 [ 938.890067][T18370] vpanic+0x237/0x6d0 [ 938.894062][T18370] ? __pfx_vpanic+0x10/0x10 [ 938.898575][T18370] ? preempt_schedule+0xae/0xc0 [ 938.903435][T18370] ? __pfx_preempt_schedule+0x10/0x10 [ 938.908824][T18370] panic+0xb9/0xc0 [ 938.912578][T18370] ? __pfx_panic+0x10/0x10 [ 938.917014][T18370] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 938.922920][T18370] ? change_page_attr_set_clr+0x625/0xfc0 [ 938.928629][T18370] check_panic_on_warn+0x89/0xb0 [ 938.933551][T18370] ? change_page_attr_set_clr+0x625/0xfc0 [ 938.939262][T18370] end_report+0x78/0x160 [ 938.943508][T18370] kasan_report+0x129/0x150 [ 938.948016][T18370] ? change_page_attr_set_clr+0x625/0xfc0 [ 938.953728][T18370] change_page_attr_set_clr+0x625/0xfc0 [ 938.959270][T18370] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 938.965324][T18370] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 938.971467][T18370] ? memtype_reserve+0x874/0xb30 [ 938.976401][T18370] _set_pages_array+0x145/0x270 [ 938.981245][T18370] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 938.987308][T18370] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 938.993890][T18370] ? ww_mutex_lock+0x3f/0x1c0 [ 938.998558][T18370] drm_gem_shmem_mmap+0x193/0x460 [ 939.003567][T18370] drm_gem_mmap_obj+0x18a/0x4e0 [ 939.008405][T18370] drm_gem_mmap+0x384/0x640 [ 939.012900][T18370] ? __pfx_drm_gem_mmap+0x10/0x10 [ 939.017922][T18370] ? __mas_set_range+0x12f/0x3c0 [ 939.022852][T18370] mmap_region+0x18b4/0x2110 [ 939.027441][T18370] ? __pfx_mmap_region+0x10/0x10 [ 939.032368][T18370] ? rcu_is_watching+0x15/0xb0 [ 939.037124][T18370] ? trace_sched_exit_tp+0x36/0x110 [ 939.042309][T18370] ? __schedule+0x17ae/0x4cc0 [ 939.047009][T18370] ? do_mmap+0xba7/0x10d0 [ 939.051324][T18370] ? shmem_mapping+0xd/0x50 [ 939.055815][T18370] ? memfd_check_seals_mmap+0xc5/0x200 [ 939.061266][T18370] do_mmap+0xc45/0x10d0 [ 939.065408][T18370] ? __pfx_do_mmap+0x10/0x10 [ 939.069982][T18370] ? down_write_killable+0x178/0x230 [ 939.075266][T18370] ? __pfx_down_write_killable+0x10/0x10 [ 939.080887][T18370] ? common_file_perm+0x1b5/0x230 [ 939.085903][T18370] vm_mmap_pgoff+0x2a6/0x4d0 [ 939.090501][T18370] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 939.095602][T18370] ? __fget_files+0x2a/0x420 [ 939.100182][T18370] ? __fget_files+0x2a/0x420 [ 939.104758][T18370] ? __fget_files+0x2a/0x420 [ 939.109336][T18370] ksys_mmap_pgoff+0x51f/0x760 [ 939.114087][T18370] do_syscall_64+0xfa/0xfa0 [ 939.118575][T18370] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.123754][T18370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.129942][T18370] ? clear_bhb_loop+0x60/0xb0 [ 939.134623][T18370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.140517][T18370] RIP: 0033:0x7f5dead8efc9 [ 939.144931][T18370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.164530][T18370] RSP: 002b:00007f5de8fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 939.172944][T18370] RAX: ffffffffffffffda RBX: 00007f5deafe6180 RCX: 00007f5dead8efc9 [ 939.180907][T18370] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 939.188866][T18370] RBP: 00007f5deae11f91 R08: 0000000000000008 R09: 0000000100000000 [ 939.196826][T18370] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 939.204785][T18370] R13: 00007f5deafe6218 R14: 00007f5deafe6180 R15: 00007f5deb10fa28 [ 939.212758][T18370] [ 939.216041][T18370] Kernel Offset: disabled [ 939.220345][T18370] Rebooting in 86400 seconds..