last executing test programs: 7m51.534720137s ago: executing program 4 (id=1346): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r1 = syz_io_uring_setup(0x160d, &(0x7f0000000140)={0x0, 0xaa6a, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b1b, &(0x7f0000000040)) 7m48.155545355s ago: executing program 4 (id=1359): set_mempolicy(0x2, &(0x7f0000000140)=0x2, 0x5) openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x80101, 0x0) (fail_nth: 9) 7m46.422327425s ago: executing program 4 (id=1364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x43, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @empty}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc772dabd183ff3763f799f91cf7e5e8260998cddaec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1e, 0x241, @loopback, 0xffff}, 0x1c) 7m45.574185776s ago: executing program 4 (id=1366): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x80, 0xa, 0x4, 0xb2d4, 0x0, 0x3, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x8, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x402, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7", @ANYRES8=r1, @ANYRES16=r0, @ANYRES16], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}, {0x0, 0x0}, {0x0, 0x0}, {0x53, &(0x7f0000000580)=@string={0x53, 0x3, "102cdc4a5254e903a7d1dcdb4055d0c68d0f2370d94d5e1ea54ac4113daf0c4d5ff621416628551a45f13a851393b4fa4c0e663145da1e1883874752aa30304dd695ab5c5a1635b3e57e39dcf53154bebb"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1450}}]}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000000)) 7m42.37420322s ago: executing program 4 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x28802, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet(0x2, 0x2, 0x307fea7b) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1}, 0x10}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000140)=[{0x8, 0x3, 0x6, 0xdd}, {0x2, 0x1, 0x3, 0xfffffffd}, {0xb, 0x5, 0x0, 0x800}, {0x16cd, 0x5, 0xa, 0x5}, {0x5, 0x0, 0x0, 0x7}]}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x10001d, 0x18b, &(0x7f0000000440)}) r9 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x8}, {r2, 0x80}, {r8, 0x2004}, {r3, 0x2002}, {r0, 0x2000}, {r3, 0x20}, {r6, 0x23}, {r7, 0x6025}, {r6, 0x80}, {r9, 0x288}], 0xa, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000686000/0x1000)=nil, 0x1000, 0x0, 0x600, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m41.982287946s ago: executing program 4 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x8000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) 7m40.691936446s ago: executing program 32 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x8000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00042000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 19.561954658s ago: executing program 2 (id=2793): r0 = socket(0x1e, 0x80000, 0x7ab1) syz_emit_ethernet(0x1ee, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021001b83a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000055a8bfe9f747ac168519ee26c00002f000000000000050200000103000000009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa37105020000008c65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e00338b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639"], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc}, 0x10) socket(0x5, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="14000000520000000000000100"/25], 0x0, 0x1600) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b19, &(0x7f0000000040)) 16.42258472s ago: executing program 2 (id=2802): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r2 = syz_io_uring_setup(0x160d, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001200)={{r1}, r7, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000000001"]}, @subvolid=0x8}) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x8, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r10, 0x8b1b, &(0x7f0000000040)) 14.651218582s ago: executing program 2 (id=2810): unshare(0x2060000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x4a243) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x11}, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000280), 0x171402, 0x0) 11.192944325s ago: executing program 2 (id=2816): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x400000013) (fail_nth: 4) 11.028772125s ago: executing program 3 (id=2818): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000f100109050b362f"], 0x0) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000003300)=""/4112, 0x1010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13b9}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x94, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r6 = fsopen(&(0x7f0000000400)='securityfs\x00', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a1800000b00000081020885047e860b8c83", @ANYRESHEX=r4, @ANYRES64=r6, @ANYRES16=r1, @ANYRESHEX]) socket$inet_smc(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r7 = memfd_secret(0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000a40)=""/4096) ppoll(&(0x7f0000000100)=[{r7, 0x200}], 0x1, &(0x7f0000000280), &(0x7f0000000300)={[0x10000, 0x7f55]}, 0x8) unshare(0x40020000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x47) 9.790071901s ago: executing program 2 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x200, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000140)) r7 = openat$binderfs_ctrl(0xffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r7, 0xc1086201, &(0x7f0000000740)={'binder0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400"], 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r9 = io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x80, 0xfffffffe, 0x11}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, r10, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r12 = fanotify_init(0x200, 0x0) fanotify_mark(r12, 0x1, 0x4800003e, r11, 0x0) creat(&(0x7f0000000440)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) syz_usb_connect$cdc_ncm(0x1, 0x6f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x6, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "e0"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x876, 0x80, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0xd8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x9, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x37, 0x2, 0x6}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xff, 0x49, 0x8, 0xff, 0xc}, 0x10b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5, [{0x33, &(0x7f0000000200)=@string={0x33, 0x3, "ee99c71a154afef36973d8bb3033ccf0c9b7ff1c1d1cd51f621abf63a6be8c55eb7aae6b76809c2a473d7348f1c0d2ce73"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41b}}, {0xb9, &(0x7f0000000400)=@string={0xb9, 0x3, "ec1909c4fd91b606d389ac2a32b764f46ff37ccd3b27b55bdb459cfbb60a8ae2e5e1a1cae1749fe5c9f689b3c8999bdc3bac8b03204c3cde9dc5c2cd662f83c2ee37021cb849777c44f46d1ef59d12063db0389d8cbef128c363bc7286c899684bbe87237c42ee1ad4fb14b9cc34c3f9144ddd653bd2951cc323826d6f74747e87d35f76eafa31c39b622404a0e6910edc5270c16dcfea1c0d7b5e2c79c600d822da9bb23981a26ce1757c89ab98eba886f86d80bd49e8"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40b}}, {0xbf, &(0x7f0000000680)=@string={0xbf, 0x3, "772ff8d984809e6eec05cb57c1c0bff3b732f97b7a7fa1ebd5ff0f9ce5d1987e83b93ebeadd0154f2310b22cc80d6389d80f418f5da4e3d934980c68b4836af5f1f5740f75a59bcdb8e7f2b854a62410dccc515b185232f79ab0660e5023e81d7a12e14f4e918743d869deac2a57f91c75a6913e4d178916dbe6217f3ca11cccbb3f8e123b1bd2fefca705d82b59075f582b7f6e0451edf217c6ec0541d1938297b0949e410d3a96a05dd028af33aa8d74b75182c784fe724a0dee165e"}}]}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f00000002c0)) 7.662165287s ago: executing program 0 (id=2827): unshare(0x2060000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x11}, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000280), 0x171402, 0x0) 6.67833295s ago: executing program 3 (id=2831): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000040)={0xfa, &(0x7f0000000000)=[{}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}], 0x20}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0}}], 0x2, 0x24001844) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) 4.990266136s ago: executing program 3 (id=2832): r0 = socket(0x1e, 0x80000, 0x7ab1) syz_emit_ethernet(0x1ee, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc}, 0x10) socket(0x5, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="14000000520000000000000100"/27], 0x0, 0x1600) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b19, &(0x7f0000000040)) 3.898104236s ago: executing program 5 (id=2835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7, 0x80000000, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x7800, 0xa, 0x542}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r3, @ANYBLOB="fb00060b0a000200aaaaaaaaaabb00000c000e80050001"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x0, 0x8, {{0x1d, 0x4, 0x0, 0x30, 0x74, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x2c, [@rand_addr=0x64010102, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xb3, 0x3, 0x6, [{@multicast2, 0x1700d5dc}, {@multicast2, 0x5}, {@broadcast, 0x6}, {@multicast2, 0x9}, {@multicast1, 0x7}]}, @cipso={0x86, 0x13, 0x1, [{0x6, 0xd, "d7a33ba7fdad6728c8ebe3"}]}, @generic={0x44, 0xf, "12360429a0a2679020c143af4f"}]}}}}}) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) syz_open_procfs(0x0, 0x0) 3.721543086s ago: executing program 0 (id=2837): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r2 = syz_io_uring_setup(0x160d, &(0x7f0000000140)={0x0, 0xaa6a, 0x80}, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001200)={{r1}, r6, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000000001"]}, @subvolid=0x8}) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x8, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r9, 0x8b1b, &(0x7f0000000040)) 3.544083074s ago: executing program 1 (id=2838): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) 2.53370942s ago: executing program 1 (id=2839): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, 0x0, 0x0) 2.525658944s ago: executing program 5 (id=2840): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) 2.460492977s ago: executing program 1 (id=2841): socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) read(r3, &(0x7f0000000740)=""/141, 0x8d) (async) read(r3, &(0x7f0000000740)=""/141, 0x8d) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYBLOB="002096cea88ca64409a99775dbb2a468e6f0b9b88392fb95795f62d5d47fcd634baf06323a65b446062c171b838abf7521c4291c125ecefad1d7910e9c57fdc937a4b5a52a9eadd73c23f89514a03fd868e28991072b9535484df3a52e485c710a0313cfd2eacc976131299e4fb4c5c10b52f2dbefdb40f74ef9cd0ba1f2b6343c3591651c7a21c395d47934681e3efe18ba039b68788f1cbc87238dea0b5ec4fcc6fbbe0e49e3b238e5c1e88cb04bb5b00cb442223ea1fc3a160673bd960e2caa0238ea1e537a6e", @ANYBLOB="237725e1961f0be8a51a23b1496ad0aebca02c62bcf35b23f6f7395be3151ad572adf4ca15d23376bb414ed570386edd74"], 0x0) syz_usb_connect$uac1(0x1, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086b1d01014000010203010902860003010460010904000000010100000a240110000702010205240504010824050107441ce777740c240202ff01029f04005606052405040c09240305000001020209040100000102000009040101010102000009050109000206040c0725010107b80009040200000102000009040201010102000009058209400001fa0707250180090002"], &(0x7f00000090c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.459414149s ago: executing program 5 (id=2842): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x21, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') 2.314329972s ago: executing program 5 (id=2843): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x267) socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="200000002900000032000000fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="100000002900000008000000bb00000010000000290000003e000000060000002000"], 0x60}}], 0x1, 0x4001c00) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x400) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="93fc3e0470f30e3bd68808aa93019acc31a7b703361fc2c77011c7c2d619b06d517474472272f727058834f704076f", 0x2f}, {&(0x7f0000000c80)="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", 0x1000}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r5) 2.294520294s ago: executing program 1 (id=2844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) capset(0x0, &(0x7f0000001080)={0x200000, 0x200000}) unshare(0x22020400) unshare(0x2c020400) 2.223139477s ago: executing program 5 (id=2845): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001300)={'rose0\x00', &(0x7f0000001280)=@ethtool_rxfh={0x47, 0x4d, 0x8000, 0xcdc, 0xc0, "5d6e0f", 0x400002}}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "e822dc7f"}]}}, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$IPSET_CMD_SAVE(r3, 0x0, 0x40084) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20001) sync() ioprio_set$pid(0x2, 0x0, 0x6000) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r1, 0xcb0ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x8f2}}}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001200)={'ip_vti0\x00', &(0x7f0000001180)={'gre0\x00', r5, 0x700, 0x20, 0x3, 0x9, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast2, @remote, {[@generic={0x82, 0xb, "ec667eaf2aee8b08cb"}, @rr={0x7, 0xb, 0xca, [@remote, @local]}]}}}}}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r5, 0x1, 0x0, @multicast}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0xaa3, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x6, 0x4b, 0x9a, 0x8, 0x7a69, 0x1, 0x2d7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa91, 0x4, 0x6, 0x0, 0x50, 0x62, [{{0x9, 0x4, 0x99, 0x3f, 0x7, 0xe, 0x5a, 0xf, 0x81, [@hid_hid={0x9, 0x21, 0x7757, 0x80, 0x1, {0x22, 0x1af}}, @uac_control={{0xa, 0x24, 0x1, 0x8000, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x5, 0x2, 0x85}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x7, '8'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x1}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x1, 0x5}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0xfe, 0xfd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x401}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x98, 0x40, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x1800}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x4, 0x6, 0x6, [@generic={0x7f, 0xa, "446732dbb9bac19652cea2077e26839c818077c6be4f435fccb284f3770b55896d104366d7cd2d3fa1c12eab91dea05dbfd591720a9024f3ad784102ee57c9b699058ecbf42a1ffb8c388fbb76ec3592e5f82d0e8f5adfeaee8fac12e9c8afb0403cee1063e524cccdfa6ca3c06aef5e13aa6785a7fd693b34afc5fc86"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x28, 0x1, 0x0, 0x95, [@generic={0x1a, 0x24, "ffbb8ceb2cb9285160e4132efc722078feeff5364b41b440"}, @generic={0x33, 0xc, "1a2a07d876b559d21a1ce01f0a0280fca0d53cf63d5d8d8d4b0f88a2edbf9a55fa11c108d9fe924a2d82f23849f1c93296"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf1, 0xfff7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0xf0, 0x18, [@generic={0xd0, 0xe, "3038955ec76b2174af125add61afa4b115d682103dcafb21845dd56465de3eed95f309d7d8a48157381b718c530b92f81e676908c6a768a9fffb9499024408e6d279234215e5d41111820c2e3b557d6e1b3cb6c507b2976e29e840e54078b7fd2a498d5a984807a26321e19e36d78177ce7a0148b7a41e92da80fb1c86246f31aae80044f05d011670364067739707e2ad4834f15359382f4096030ce5d827e40f069a7fdd0d02c9758419ca40ba85bb59e862c83b70e6ee2ebc16099b039acf9994d92798314b0a66a0f735accc"}, @generic={0xe9, 0x8, "3575d377b0612a7b75c2e91fae28d90aa7052c4c34c5bc8b92891aa1bd6cb689f560c6a93e8c983ba994e54e5a6145cd726f5c093dbde4e17867d4c68a6301cee947f84b93da55286df3f475a23594304207760dcbe5a7ccb60c1bd494ca06843560f895db461dc616221c1214e14ac896bf72b5959a28ce393306ce055bd1d15cc147a368045c49e5d84e052a4672199c601eda287cd451db9c21f71688c63c097191c1348c05bb7e7fe109afb10eb32b136ff8bbcba25230f03c99e9138fb81f939ce2875d3ee72d25ed845f722346318bf1ccdc7117f988d20cde569a3b69f92f829ed579af"}]}}]}}, {{0x9, 0x4, 0x5e, 0x0, 0x3, 0xcf, 0xfa, 0x8a, 0xd, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0xe8}, @as_header={0x7, 0x24, 0x1, 0x7, 0x0, 0x2}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x0, 0x9, 'k*H'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xff00, 0x5, "42d18668"}, @as_header={0x7, 0x24, 0x1, 0x68, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe000, 0x0, 0x3, "54a0f0a9835a"}]}], [{{0x9, 0x5, 0x8, 0x8, 0x200, 0x8, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x64, 0x8001}, @generic={0xaf, 0x4, "7559775c2a0f0392be0fab39036a5fdbfff863ca3016a911c2b3bc564861a3496625bbb55a7432b21de9cff7b31c9a38eee3420c5c50633c0c5031ccb6fc2ec21705d6c381b22bff837a04133a9655e3d3c8b665bcac52a58a439661947bc3134003e9f02ca1b5d69ae6169cd68be50bea7cc5f87a3ce0ff66edddc213fcde1a26201bd74e284051c394e441a6825855e5443446f0e0433f2004766fd72478b72d73b77c8b6777a432fb098f9d"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2, 0xa, 0x3, [@generic={0xc6, 0x22, "3c7c352af6854c7dd23db530f6fe2d9bb13a3e57667cd7f221f5ef705206aa985274b02e89d8e55a111e5a4524f6d57462a98cd768496c4eadbad0b0fc2c5c3eef37cfe0a59eba8c49de3fd170bbadd1552511d47ead6e0c9895a44e8ceabb7fc11bd3349caf866ec56c19aa3323ff2becb49e1e85ef41c8cfb1adc0ace0d1ca30ea32796ef7a1d6abf550d38068728ce84a029e34afe47171bb4f18da3536873475e2f97e26ee946fe9a9b4e17f465375f57b181259aebad65ff08d5c3fd257c74d0731"}, @generic={0x8, 0x11, "66c40a3490aa"}]}}, {{0x9, 0x5, 0x0, 0x36, 0x400, 0x8, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xfff}]}}]}}, {{0x9, 0x4, 0x5b, 0x1, 0xb, 0xb8, 0xcb, 0x1, 0xd4, [@generic={0xd1, 0x22, "a4a654306ff8e4e97327bfb273263792552cb6444162c1260bc90399365bc38027bb7d85f6d2dcf66a1710ef974841f7906eb24adafd3d829f1761f8b35548626f0793447565f4fa29bae2d9c7722a0b99ad35fb4579225048c02e41a16c0d87d97c6c98f8d3213948275afa360b2d074d0fae60b0af7f61d6561960abb0f662a1c7ba1df362415af13c8fe915ac9b10bd8b220544edd0638960d145df541fa9df878c5c1e4f7444a91a49003330a911ebb95e28eb293a8dc09a4d56a9d5813464028024c10c522652de8d65e22cb6"}], [{{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0x5, 0x8, [@generic={0x9d, 0x31, "27d5507da4eb275b0c7dbf335d7b2a3988f4c69338b0df09792592e21a3344a51b1759817240e27823fbdc70de4e17fd289435e64ba2e54dc96c775861770d9baa7d3b8932e74d3ae61c94bec9ce24e341d82bd833da55b85f302d3b8364f604967c0f8d4d9e6b1062a058841cb8087b203b4e97b2f14c06aaebd85c34944d1c94243060287ff63aa0d4c6b9502c4f7fd06b5c51b6fb68eddf591e"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x2, 0x1, 0x95, [@generic={0x7b, 0xb, "213f74934dc26f2ad280bce10a32a9549bc6750b9ceb8a59b9f3a51f5199fff742d95bc7c086e3091a4adb92304dfb3f7c9c4a25053391cd9c00671d6f93ba922cb07af29ac4e0999ddb77f7648fb8ebdf840e4f435653fc4c5f1f0679234baa5cb4f3fbde3525ffb87da4a90d6e047482ea23b4d5d157c8db"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x6, 0x9, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x8}, @generic={0x74, 0x23, "6583b50d50de379932adb0d3fc49dde1615a60b68b83616d6b0018b11943ef711a9b78396f8e82e1cb56280377297d0deefb6817f41c4328bb8d0a8f7ae16e9ed8477bfee6d737b0cfccb70b25ea465cb734bc7e7ea05bd9566f64e5292c212a386966cf8d83ce9c311f906a41bae129b572"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x3, 0x8, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xd5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe3, 0x9}]}}, {{0x9, 0x5, 0x4934303f5b31b30d, 0x4, 0x10, 0x85, 0xc7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xf29}, @generic={0x42, 0xe, "d8c6cd77254dc4c02afa4d82c57455aa17a095244ce6b802a8e622d6bed0534c70643ff20093115e7e2c26e5e60e49789035ec84c086462595f36a260984298b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x9, 0xe2, 0x1f, [@generic={0x1f, 0x2, "221a016d4127af379a6688ef027bcbd1dc26c7f142fb0b36b31e97f00d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x7, 0x3, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x6, 0x2, 0xed, [@generic={0xed, 0x5, "43da6de10e3e5dba56f7676695606310b1f7e78eef400454b528cd0411948125013f208c9969dd3bb5ac6e50bf1f02e0fb03f58b608fc2dddddcc2febcb353a6ad0abbfb33514d69aeb7b37302ad63195c0813f8b295e8998d4146178867908cc301e13335c446e2aa3ee6c08109642887ef5420b18ce597f7344d3d1ef5f22f6bec029a57eb8d0f24eb7e85c308671f1539e38462a2bf745e478e470b08d785fa617c6b28fee6e86a3240fb2865122d945b8370c19b670f098efcd537e863abc56dd41bf69b55ff2ae79bd1ab5ae9f35ac7d77c1804e2b2023f83370df9366b83a78e17282a3ac2e554fd"}, @generic={0x1c, 0x23, "af445dfb758fd923b62f16e18681b105ada7ed7a01a926642a6b"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x1, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}, @generic={0x40, 0x23, "812917a90640d5a306f05ae5b10ed4f08b6702a60dee191ed7089292c2e8466d9539e5e5899bc478b9a99e5aedbb3aae92a6e777f135eb9a23067cbd5dc4"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x438, 0xd6, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x51, 0x9, 0x3, 0xb6, 0x9b, 0x6f, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xc81}}, @generic={0x80, 0x31, "5679105f87eb51a067dfbb7a101a0c7fe6dff9b1a3e5f4cd191e340ae6420c10900433352de1e8bd90b40fb8414ffbc2d70e41bc03037a0ed7de70337c1e08070d639586ea58b6028d2cd385fb851657044dd74580aac63971a73b9ac52b860e7ae8dbbd815b847321e3e264aab1dd18746950ef78b49df57c095fdc5d48"}], [{{0x9, 0x5, 0x87, 0x1, 0x77f, 0x3, 0xfe, 0x0, [@generic={0x1a, 0x6, "b5c3f66ba92a5793547d27c15421b50318380ae596139775"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x1e, 0x3, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x5, 0xc9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x1, 0xf43}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x2}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xc, 0x40, 0xc8, 0x18, 0x5}, 0xf7, &(0x7f0000000300)=ANY=[@ANYBLOB="050ff700041410040321d79f039ce312b89d9d894a2745923f1410049e3054b97a7a75a355323807cacacf12640b10010c940001097f006bbf1004728e32e4cf70f39f4eeee7b2a31f55defa1acd2c37fa4dd8822c2566878a8d52ed6acaae1ac9620410a2bdcfae3ab72c1402129490aafa0d34ae755fbe5c229dfae044964ede1d320d5e8ea2ff602999d923c8967893bfed61ce4c4237c97f5bfa96466139e47b6d4d9ae90609451907e6079ebfcf75eb1c237af8a87fe2f06c1a9d49d610d0314c61209b92578e4662c33de46b69ec07cf9f371fc6246e4b303b21929bcf2906dd6d3c8f26d3a71a0d405171a2833d22337d4edec8"], 0x1, [{0x1f, &(0x7f0000000040)=@string={0x1f, 0x3, "149a0b03c5e06c1f3d2420e1c899a5a8f32e1399d23c98e327138aa251"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="2004c1000000c1224067d5d86e09cf39291df03100a6e42e391bbd0e3613b51a2e72f8b249fff9186d07f64bfeff322bdc9e6959d258e24c49a34524bf8c777599d74dda69a0c39838847d612339fd7cdd96c08e6280eb5bf63aa7b5cd525917c069c64b34f052a5bfd777a5e899761deae6637268023ddc11533a7a81d5a4739ba9fe20ce07475f7e87b28e36c5259470d7b491105e63e2644470f288b786a5a62d8c224f611e4f894325f2964a79e93dcc642a1050734edaecc58f748fed107b969991cc7008"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000001080)={0x40, 0x16, 0xda, "a3b5f82a3e8e19473610e4e9a36bf066da883f6fbfb9b6d2dc5801ced486994d443bf73ef799a14474723d0746c948275d50e8d8bbf8b688bcf0d4e4ba1c613f75db0aede2f1c7ba7a7c27eb766ec0ab610bc0cf488e703a4be29db87492e3ab4b7e3707fcf6acb0cd115ea4de289bd70b40cb9b9f3bb5192bca1c4ba28b950cc6e5337d37137576a30969dc7eb4dd8a06c7cf24b4cb164e9832d48fc434f2bc4615db38c40bd2990691bde037f6df7f7274ceae26a0c01085aa5c5935c94835cc57994d21994da762ccc78b77e477d8019c82c5ba531b8d4a7e"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc}}) 1.878398095s ago: executing program 3 (id=2846): syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009"], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000000000000080000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x005n%^\t'], 0x38}, 0x300}, 0x0) 1.81851742s ago: executing program 1 (id=2847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000", @ANYRES64], 0x50}}, 0x20044084) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r5, &(0x7f0000000200), 0x0, 0xffffffff, 0x7, 0x8) socket(0x2000000015, 0x80005, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000007f000001000000000000000000000000090000000000000000000000000000000000000000000000fdffffffffffffff700900000000000008000000000000000000000000000000800a000000000000000000000000000003000000000000000000000000000000a6000000000000000400000000000000000000002abd7000033500000a00000400000000480003006465666c61746500"/185], 0x150}}, 0x0) socket(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="780000001000030400"/18, @ANYBLOB, @ANYRES32=r7], 0x78}}, 0x20000800) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 1.673450224s ago: executing program 0 (id=2848): ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c"], 0x40}], 0x1}, 0x0) 1.601929463s ago: executing program 0 (id=2849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7, 0x80000000, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000, 0x7800, 0xa, 0x542}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x0, 0x8, {{0x1d, 0x4, 0x0, 0x30, 0x74, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x2c, [@rand_addr=0x64010102, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xb3, 0x3, 0x6, [{@multicast2, 0x1700d5dc}, {@multicast2, 0x5}, {@broadcast, 0x6}, {@multicast2, 0x9}, {@multicast1, 0x7}]}, @cipso={0x86, 0x13, 0x1, [{0x6, 0xd, "d7a33ba7fdad6728c8ebe3"}]}, @generic={0x44, 0xf, "12360429a0a2679020c143af4f"}]}}}}}) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) syz_open_procfs(0x0, 0x0) 842.432914ms ago: executing program 1 (id=2850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) 493.309879ms ago: executing program 3 (id=2852): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\t'], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x30, r5, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac09]}]]}, 0x30}}, 0x0) 255.165754ms ago: executing program 0 (id=2853): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) 66.133098ms ago: executing program 3 (id=2854): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async, rerun: 32) listen(r2, 0xda90) (async, rerun: 32) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000740)=""/51, 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) (async, rerun: 32) r5 = dup(r4) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x8004) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000), &(0x7f0000000200)=""/190, &(0x7f00000000c0)="1a6f97f2cf604ec5b15863ebfb14b086ab74f81e49cc36dfa7b97c0a10012a8060f04cb052c7fc5fdb349809491307a1269d76fb31603b673aeaa5d73ca8dedb2299a7d01bc8bb062fe6f7e15210d867b705bc69866033e9956ef0f7506b5cac0689f4f7140d2848137f82bc9d03f4", &(0x7f00000002c0)="78f63327021a582e63ee1340b130c7c3b1ae31f31ce88539e92f45051a728e6b9a7f6ada3d4ec71d0d5e83017a7cc9d1d0381c23944fdbe82c653d07bf17df508e57e392ec5e44b2555d845969b511770692f6f40556e2101ee58a9ca7ec1a8a868e361491cda543c6430f489c2c67f11acec79394da0257dde740042c485f003de16c7350ff3f50a96aa35c175ce2b51e821ed175", 0xcdad, 0x1, 0x4}, 0x38) 28.252381ms ago: executing program 2 (id=2855): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) capset(0x0, &(0x7f0000001080)={0x200000, 0x200000}) unshare(0x22020400) unshare(0x2c020400) (fail_nth: 3) 19.412986ms ago: executing program 5 (id=2856): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') (fail_nth: 7) 0s ago: executing program 0 (id=2857): r0 = socket(0x1e, 0x80000, 0x7ab1) syz_emit_ethernet(0x1ee, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc}, 0x10) socket(0x5, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="14000000520000000000000100"/27], 0x0, 0x1600) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b19, &(0x7f0000000040)) kernel console output (not intermixed with test programs): , Product=0, SerialNumber=0 [ 779.964049][T12036] usb 2-1: usb_control_msg returned -32 [ 779.970009][T12036] usbtmc 2-1:16.0: can't read capabilities [ 780.161661][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2541'. [ 780.171655][T15295] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 782.045702][ T49] net_ratelimit: 25 callbacks suppressed [ 782.045716][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.151531][ T24] usb 2-1: USB disconnect, device number 118 [ 782.176886][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.355315][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.474869][T15314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2558'. [ 782.545268][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.643747][T15316] loop6: detected capacity change from 0 to 524287999 [ 782.655868][ T24] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 782.657002][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.677461][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 782.695868][T15316] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2548'. [ 782.707581][ T30] audit: type=1326 audit(1759221483.809:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 782.753303][ T30] audit: type=1326 audit(1759221483.809:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 782.784314][ T30] audit: type=1326 audit(1759221483.829:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 782.807112][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.862675][ T30] audit: type=1326 audit(1759221483.829:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 782.885461][ T120] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 782.885877][ T5842] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 782.903776][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 782.915473][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 782.923538][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 782.938602][ T30] audit: type=1326 audit(1759221483.829:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 782.963347][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 782.980042][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 782.990007][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.998378][ T24] usb 2-1: Product: syz [ 783.002861][ T24] usb 2-1: Manufacturer: syz [ 783.008571][ T24] usb 2-1: SerialNumber: syz [ 783.025115][ T24] usb 2-1: config 0 descriptor?? [ 783.030880][T15312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 783.044804][T15312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 783.053149][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 783.060894][ T120] usb 1-1: Using ep0 maxpacket: 32 [ 783.073049][ T120] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.073167][ T24] usb 2-1: ucan: probing device on interface #0 [ 783.100345][ T120] usb 1-1: config 0 has no interfaces? [ 783.108588][ T120] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 783.115329][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 783.118033][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.134736][ T5842] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 783.143766][ T5842] usb 3-1: config 0 has no interface number 0 [ 783.150668][ T5842] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 783.167518][ T5842] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 783.186087][ T120] usb 1-1: config 0 descriptor?? [ 783.192638][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 783.221732][ T5842] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 783.268933][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.270421][T15323] netlink: 'syz.3.2546': attribute type 10 has an invalid length. [ 783.279167][ T5842] usb 3-1: Product: syz [ 783.292457][ T5842] usb 3-1: Manufacturer: syz [ 783.299082][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2546'. [ 783.310487][ T5842] usb 3-1: SerialNumber: syz [ 783.320712][ T5842] usb 3-1: config 0 descriptor?? [ 783.327254][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 783.347953][T15319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 783.360688][T15319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 783.379826][ T5842] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.422383][T15321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.431694][T15321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.840271][ T24] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 783.899036][ T5842] usb 3-1: USB disconnect, device number 102 [ 783.979700][ T24] usb 2-1: USB disconnect, device number 119 [ 784.774423][T15340] binder: 15339:15340 ioctl c0306201 800000c0 returned -14 [ 784.952132][T15353] trusted_key: encrypted_key: insufficient parameters specified [ 785.335531][ T24] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 785.487211][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.560374][ T120] usb 1-1: USB disconnect, device number 123 [ 785.615143][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.664347][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 785.695284][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.989233][ T24] usb 4-1: usb_control_msg returned -32 [ 786.022642][ T24] usbtmc 4-1:16.0: can't read capabilities [ 786.291370][T12036] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 786.425535][T12036] usb 6-1: device descriptor read/64, error -71 [ 786.670227][T12036] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 786.807212][T12036] usb 6-1: device descriptor read/64, error -71 [ 786.918372][T12036] usb usb6-port1: attempt power cycle [ 787.257068][T12036] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 787.286038][T12036] usb 6-1: device descriptor read/8, error -71 [ 787.525473][T12036] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 787.546838][T12036] usb 6-1: device descriptor read/8, error -71 [ 787.668394][T12036] usb usb6-port1: unable to enumerate USB device [ 787.948867][T11201] usb 4-1: USB disconnect, device number 111 [ 788.154567][T15374] loop6: detected capacity change from 0 to 524287999 [ 788.183992][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 788.204407][T15374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2563'. [ 788.228837][ T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 788.274529][ T30] audit: type=1326 audit(1759221489.369:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 788.307695][ T30] audit: type=1326 audit(1759221489.369:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 788.348015][ T30] audit: type=1326 audit(1759221489.369:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 788.393595][ T30] audit: type=1326 audit(1759221489.369:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 788.428658][ T30] audit: type=1326 audit(1759221489.369:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.3.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 788.566756][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.584807][ T24] usb 2-1: config 0 has no interfaces? [ 788.608451][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 788.645481][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.671590][ T24] usb 2-1: config 0 descriptor?? [ 788.953749][ T4504] net_ratelimit: 11 callbacks suppressed [ 788.953769][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.032309][T15378] FAULT_INJECTION: forcing a failure. [ 789.032309][T15378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.067875][T15378] CPU: 0 UID: 0 PID: 15378 Comm: syz.5.2564 Not tainted syzkaller #0 PREEMPT(full) [ 789.067900][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 789.067913][T15378] Call Trace: [ 789.067920][T15378] [ 789.067929][T15378] dump_stack_lvl+0x189/0x250 [ 789.067955][T15378] ? __pfx____ratelimit+0x10/0x10 [ 789.067975][T15378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 789.067996][T15378] ? __pfx__printk+0x10/0x10 [ 789.068014][T15378] ? __might_fault+0xb0/0x130 [ 789.068047][T15378] should_fail_ex+0x414/0x560 [ 789.068078][T15378] _copy_from_user+0x2d/0xb0 [ 789.068102][T15378] dev_ethtool+0xd0/0x19b0 [ 789.068129][T15378] ? __lock_acquire+0xab9/0xd20 [ 789.068150][T15378] ? __pfx_dev_ethtool+0x10/0x10 [ 789.068182][T15378] ? dev_load+0x21/0x1f0 [ 789.068202][T15378] ? dev_load+0x21/0x1f0 [ 789.068222][T15378] dev_ioctl+0x392/0x1150 [ 789.068245][T15378] compat_sock_ioctl+0xc3b/0xc80 [ 789.068276][T15378] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 789.068303][T15378] ? __fget_files+0x3a0/0x420 [ 789.068319][T15378] ? __fget_files+0x2a/0x420 [ 789.068338][T15378] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 789.068365][T15378] __ia32_compat_sys_ioctl+0x543/0x840 [ 789.068390][T15378] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 789.068412][T15378] ? __fget_files+0x3a0/0x420 [ 789.068435][T15378] ? fput+0xa0/0xd0 [ 789.068455][T15378] ? ksys_write+0x22a/0x250 [ 789.068486][T15378] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.068508][T15378] __do_fast_syscall_32+0xb6/0x2b0 [ 789.068529][T15378] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.068558][T15378] do_fast_syscall_32+0x34/0x80 [ 789.068578][T15378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 789.068598][T15378] RIP: 0023:0xf7f67539 [ 789.068614][T15378] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 789.068630][T15378] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 789.068649][T15378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 789.068662][T15378] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.068673][T15378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 789.068684][T15378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 789.068695][T15378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 789.068720][T15378] [ 789.426889][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.563124][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.659641][T15393] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2570'. [ 789.695931][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.815229][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.845454][ T24] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 789.935209][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.975322][ T120] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 790.013105][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 790.024392][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 790.046301][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 790.052008][T15397] netlink: 'syz.5.2567': attribute type 10 has an invalid length. [ 790.066272][T15397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2567'. [ 790.075911][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.087950][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.096939][T15397] bridge0: port 3(dummy0) entered blocking state [ 790.104793][T15397] bridge0: port 3(dummy0) entered disabled state [ 790.113686][T15391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 790.125575][ T120] usb 4-1: Using ep0 maxpacket: 32 [ 790.130308][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 790.132719][ T120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.153252][T15397] dummy0: entered allmulticast mode [ 790.160926][T15397] dummy0: entered promiscuous mode [ 790.167692][T15397] bridge0: port 3(dummy0) entered blocking state [ 790.174163][T15397] bridge0: port 3(dummy0) entered forwarding state [ 790.199778][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.403596][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.423827][ T120] usb 4-1: config 0 has no interfaces? [ 790.446520][ T120] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 790.523585][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.538865][ T120] usb 4-1: config 0 descriptor?? [ 790.545743][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.687078][ T24] usb 3-1: USB disconnect, device number 103 [ 790.832131][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.841082][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.040733][T12036] usb 2-1: USB disconnect, device number 120 [ 791.216160][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 791.417412][ T24] usb 6-1: config 0 has no interfaces? [ 791.434733][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.478009][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.185221][ T24] usb 6-1: Product: syz [ 792.196197][ T24] usb 6-1: Manufacturer: syz [ 792.208678][T15423] FAULT_INJECTION: forcing a failure. [ 792.208678][T15423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.225792][ T24] usb 6-1: SerialNumber: syz [ 792.397857][ T24] usb 6-1: config 0 descriptor?? [ 792.414984][T15423] CPU: 1 UID: 0 PID: 15423 Comm: syz.0.2575 Not tainted syzkaller #0 PREEMPT(full) [ 792.415011][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 792.415021][T15423] Call Trace: [ 792.415027][T15423] [ 792.415034][T15423] dump_stack_lvl+0x189/0x250 [ 792.415060][T15423] ? __pfx____ratelimit+0x10/0x10 [ 792.415077][T15423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.415095][T15423] ? __pfx__printk+0x10/0x10 [ 792.415114][T15423] ? __might_fault+0xb0/0x130 [ 792.415144][T15423] should_fail_ex+0x414/0x560 [ 792.415173][T15423] _copy_from_user+0x2d/0xb0 [ 792.415196][T15423] move_addr_to_kernel+0x7e/0x160 [ 792.415214][T15423] get_compat_msghdr+0x3bd/0x4a0 [ 792.415248][T15423] ? __pfx_get_compat_msghdr+0x10/0x10 [ 792.415278][T15423] ___sys_sendmsg+0x193/0x2a0 [ 792.415302][T15423] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.415356][T15423] ? __fget_files+0x2a/0x420 [ 792.415372][T15423] ? __fget_files+0x3a0/0x420 [ 792.415397][T15423] __sys_sendmmsg+0x28e/0x430 [ 792.415424][T15423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 792.415455][T15423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.415489][T15423] ? ksys_write+0x22a/0x250 [ 792.415522][T15423] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 792.415545][T15423] __do_fast_syscall_32+0xb6/0x2b0 [ 792.415565][T15423] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.415585][T15423] do_fast_syscall_32+0x34/0x80 [ 792.415602][T15423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.415619][T15423] RIP: 0023:0xf7f87539 [ 792.415633][T15423] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.415648][T15423] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 792.415666][T15423] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 792.415678][T15423] RDX: 0000000000000001 RSI: 0000000004008810 RDI: 0000000000000000 [ 792.415689][T15423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.415699][T15423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 792.415710][T15423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.415734][T15423] [ 792.776852][T12036] usb 4-1: USB disconnect, device number 112 [ 793.267475][T15406] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 794.049202][ T12] net_ratelimit: 18 callbacks suppressed [ 794.049222][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 794.123922][T15440] loop6: detected capacity change from 0 to 524287999 [ 794.172989][T15440] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2579'. [ 794.182488][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 794.183196][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 794.250632][T15441] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 794.315198][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 794.330637][ T30] audit: type=1326 audit(1759221495.429:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 794.618608][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 794.638089][ T30] audit: type=1326 audit(1759221495.429:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 794.735722][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 794.795259][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 794.853656][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.884012][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 794.946007][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.025133][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.075615][ T5927] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 795.092533][T11201] usb 6-1: USB disconnect, device number 60 [ 795.194707][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2583'. [ 795.246953][ T5927] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 795.271767][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.300276][ T5927] usb 2-1: config 0 descriptor?? [ 795.539016][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.675583][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.740607][ T5927] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 796.029719][T15465] loop8: detected capacity change from 0 to 8535 [ 796.052809][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.071432][T15466] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2587'. [ 796.081059][T12036] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 796.095755][T15465] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 796.124931][T15465] loop8: p1 start 540042604 is beyond EOD, truncated [ 796.150463][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 796.155362][T15465] loop8: p2 start 528661076 is beyond EOD, truncated [ 796.168414][T15459] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 796.189963][T15465] loop8: p3 size 20667868 extends beyond EOD, truncated [ 796.199498][T15465] loop8: p4 start 3529794595 is beyond EOD, truncated [ 796.215747][T15465] loop8: p5 start 2690239768 is beyond EOD, truncated [ 796.355559][T12036] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.368543][T15465] loop8: p6 start 1431538145 is beyond EOD, truncated [ 796.375502][T15465] loop8: p7 start 1634731803 is beyond EOD, truncated [ 796.495367][T11201] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 796.495532][T15465] loop8: p8 start 614672050 is beyond EOD, [ 796.503171][T12036] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 796.556572][T12036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.564695][T15465] truncated [ 796.575241][T15465] loop8: p9 start 609447309 is beyond EOD, truncated [ 796.582120][T12036] usb 3-1: Product: syz [ 796.586978][T12036] usb 3-1: Manufacturer: syz [ 796.593257][T15465] loop8: p10 start 3832541991 is beyond EOD, truncated [ 796.603762][T12036] usb 3-1: SerialNumber: syz [ 796.613309][T12036] usb 3-1: config 0 descriptor?? [ 796.619005][T15465] loop8: p11 start 3286981679 is beyond EOD, truncated [ 796.715217][T11201] usb 6-1: Using ep0 maxpacket: 32 [ 796.777963][T11201] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.802801][T12036] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 796.808660][T11201] usb 6-1: config 0 has no interfaces? [ 796.929677][ T5927] [drm:udl_init] *ERROR* Selecting channel failed [ 796.946216][T11201] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 796.953472][ T7763] udevd[7763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.006543][ T5927] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 797.007775][T11201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.037627][ T5927] [drm] Initialized udl on minor 2 [ 797.070111][ T5927] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 797.106197][ T5927] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 797.116054][ T5907] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 797.238554][ T5907] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 797.259349][ T5927] usb 2-1: USB disconnect, device number 121 [ 797.260395][T11201] usb 6-1: config 0 descriptor?? [ 797.293638][ T5907] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 797.573475][T15469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.587231][T15469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.626818][T15485] bridge_slave_0: entered promiscuous mode [ 798.559861][ T7763] udevd[7763]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 798.922404][ T5927] usb 3-1: USB disconnect, device number 104 [ 799.120130][ T4504] net_ratelimit: 20 callbacks suppressed [ 799.120152][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 799.182857][T11201] usb 6-1: USB disconnect, device number 61 [ 799.263879][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 799.537187][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 799.659350][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 799.728047][ T5927] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 799.788287][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 799.890531][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.915172][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 799.983521][ T5927] usb 3-1: config 0 has no interfaces? [ 800.003891][ T5842] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 800.025380][T11201] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 800.037765][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.062902][ T5927] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 800.132393][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.169354][ T5842] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 800.182664][ T5842] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 800.207382][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.238205][T11201] usb 4-1: config 0 has no interfaces? [ 800.249308][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.266321][T11201] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 800.301864][T11201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.315933][T15505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 800.354277][T15505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 800.379981][ T5927] usb 3-1: config 0 descriptor?? [ 800.388019][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.461330][ T5842] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 800.478158][T11201] usb 4-1: Product: syz [ 800.526391][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.585151][T11201] usb 4-1: Manufacturer: syz [ 800.600707][T11201] usb 4-1: SerialNumber: syz [ 800.635730][T11201] usb 4-1: config 0 descriptor?? [ 801.018164][T15506] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 801.365416][T12036] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 801.527804][T12036] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.538625][T12036] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.555094][T12036] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 801.564728][T12036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.572850][T12036] usb 2-1: Product: syz [ 801.580768][T12036] usb 2-1: Manufacturer: syz [ 801.593428][T12036] usb 2-1: SerialNumber: syz [ 801.609108][T12036] usb 2-1: config 0 descriptor?? [ 801.641789][T12036] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 801.742385][ T7763] udevd[7763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 802.056150][T12036] usb 3-1: USB disconnect, device number 105 [ 802.114692][T15514] FAULT_INJECTION: forcing a failure. [ 802.114692][T15514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.159797][T15514] CPU: 0 UID: 0 PID: 15514 Comm: syz.2.2598 Not tainted syzkaller #0 PREEMPT(full) [ 802.159821][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 802.159832][T15514] Call Trace: [ 802.159839][T15514] [ 802.159847][T15514] dump_stack_lvl+0x189/0x250 [ 802.159877][T15514] ? __pfx____ratelimit+0x10/0x10 [ 802.159896][T15514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.159916][T15514] ? __pfx__printk+0x10/0x10 [ 802.159931][T15514] ? __might_fault+0xb0/0x130 [ 802.159963][T15514] should_fail_ex+0x414/0x560 [ 802.159992][T15514] _copy_from_user+0x2d/0xb0 [ 802.160014][T15514] __se_sys_sched_setattr+0x1b1/0x590 [ 802.160039][T15514] ? __pfx___se_sys_sched_setattr+0x10/0x10 [ 802.160058][T15514] ? ksys_write+0x22a/0x250 [ 802.160085][T15514] ? __secure_computing+0xe2/0x2a0 [ 802.160110][T15514] __do_fast_syscall_32+0xb6/0x2b0 [ 802.160131][T15514] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.160153][T15514] do_fast_syscall_32+0x34/0x80 [ 802.160171][T15514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.160191][T15514] RIP: 0023:0xf7f36539 [ 802.160205][T15514] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 802.160219][T15514] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 000000000000015f [ 802.160238][T15514] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 802.160251][T15514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 802.160261][T15514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 802.160270][T15514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 802.160280][T15514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.160304][T15514] [ 802.818630][T11201] usb 4-1: USB disconnect, device number 113 [ 803.815734][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2601'. [ 803.825885][T15533] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 804.266340][ T12] net_ratelimit: 25 callbacks suppressed [ 804.266356][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 804.475180][T12036] usb 2-1: USB disconnect, device number 122 [ 804.722287][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 804.856582][T12036] usb 1-1: USB disconnect, device number 124 [ 804.882275][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.019405][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.156822][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.253538][ T5907] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 805.275581][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.385432][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.424039][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.485109][ T5907] usb 2-1: config 0 has no interfaces? [ 805.490894][ T5907] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.515213][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.522691][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.537656][ T5907] usb 2-1: config 0 descriptor?? [ 805.545551][T12036] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 805.636393][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.705307][T12036] usb 1-1: device descriptor read/64, error -71 [ 805.767974][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.865142][ T5907] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 805.957367][T12036] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 806.049748][ T5907] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 806.061108][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.070746][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.082189][T15560] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 806.093679][T15560] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 806.105797][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.125621][T12036] usb 1-1: device descriptor read/64, error -71 [ 806.235920][T12036] usb usb1-port1: attempt power cycle [ 806.648767][T12036] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 806.807264][T15563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2611'. [ 806.841880][T12036] usb 1-1: device descriptor read/8, error -71 [ 807.107841][T12036] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 807.162846][T12036] usb 1-1: device descriptor read/8, error -71 [ 807.293492][T12036] usb usb1-port1: unable to enumerate USB device [ 807.754439][T12036] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 807.936968][T11201] usb 2-1: USB disconnect, device number 123 [ 808.257393][T12036] usb 3-1: config 0 has no interfaces? [ 808.289290][T12036] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 808.334430][T12036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.345287][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 808.623951][T12036] usb 3-1: Product: syz [ 808.624249][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.651940][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.652538][T12036] usb 3-1: Manufacturer: syz [ 808.658765][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.663102][T12036] usb 3-1: SerialNumber: syz [ 808.682241][T12036] usb 3-1: config 0 descriptor?? [ 808.688688][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.813713][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 808.823385][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.833924][ T24] usb 6-1: Product: syz [ 808.838507][ T24] usb 6-1: Manufacturer: syz [ 808.843302][ T24] usb 6-1: SerialNumber: syz [ 809.036346][T15575] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 809.366373][ T49] net_ratelimit: 23 callbacks suppressed [ 809.366393][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.389266][ T24] usb 6-1: config 0 descriptor?? [ 809.498145][ T24] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 809.536433][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.599141][ T7763] udevd[7763]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 809.724965][ T24] usb 4-1: USB disconnect, device number 114 [ 809.745968][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.828659][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 809.838845][T15601] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2621'. [ 809.848242][T15601] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2621'. [ 810.055571][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.165198][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.235180][T12036] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 810.325605][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.385203][T12036] usb 1-1: Using ep0 maxpacket: 16 [ 810.520225][T12036] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 810.533180][T12036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 810.610910][T12036] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 810.624417][T12036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.656969][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.657663][T12036] usb 1-1: Product: syz [ 810.669075][T12036] usb 1-1: Manufacturer: syz [ 810.673819][T12036] usb 1-1: SerialNumber: syz [ 810.692187][T12036] usb 1-1: config 0 descriptor?? [ 810.700722][T12036] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 810.719712][T12036] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 810.805951][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.925939][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 811.045542][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 811.085544][T11201] usb 3-1: USB disconnect, device number 106 [ 811.200453][T15624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 811.317943][T12036] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 811.344829][T12036] em28xx 1-1:0.0: Config register raw data: 0x56 [ 811.462878][ T30] audit: type=1326 audit(1759221512.559:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 811.486446][T15631] FAULT_INJECTION: forcing a failure. [ 811.486446][T15631] name failslab, interval 1, probability 0, space 0, times 0 [ 811.495298][ T5842] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 811.499404][ T30] audit: type=1326 audit(1759221512.559:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 811.529134][T15631] CPU: 0 UID: 0 PID: 15631 Comm: syz.2.2630 Not tainted syzkaller #0 PREEMPT(full) [ 811.529158][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 811.529169][T15631] Call Trace: [ 811.529177][T15631] [ 811.529186][T15631] dump_stack_lvl+0x189/0x250 [ 811.529213][T15631] ? __pfx____ratelimit+0x10/0x10 [ 811.529232][T15631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.529253][T15631] ? __pfx__printk+0x10/0x10 [ 811.529276][T15631] ? __pfx___might_resched+0x10/0x10 [ 811.529299][T15631] should_fail_ex+0x414/0x560 [ 811.529329][T15631] should_failslab+0xa8/0x100 [ 811.529355][T15631] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 811.529380][T15631] ? __alloc_skb+0x112/0x2d0 [ 811.529404][T15631] __alloc_skb+0x112/0x2d0 [ 811.529428][T15631] audit_log_start+0x152/0x870 [ 811.529454][T15631] ? __pfx_audit_log_start+0x10/0x10 [ 811.529478][T15631] ? migrate_enable+0x29c/0x3c0 [ 811.529503][T15631] ? __pfx_migrate_enable+0x10/0x10 [ 811.529528][T15631] audit_seccomp+0x64/0x190 [ 811.529555][T15631] ? clear_bhb_loop+0x60/0xb0 [ 811.529575][T15631] ? clear_bhb_loop+0xe/0xb0 [ 811.529597][T15631] __seccomp_filter+0x9aa/0x1a40 [ 811.529624][T15631] ? ksys_write+0x1cb/0x250 [ 811.529647][T15631] ? __pfx___seccomp_filter+0x10/0x10 [ 811.529666][T15631] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 811.529686][T15631] ? __pfx_vfs_write+0x10/0x10 [ 811.529711][T15631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 811.529734][T15631] ? __fget_files+0x3a0/0x420 [ 811.529762][T15631] ? ksys_write+0x22a/0x250 [ 811.529788][T15631] ? __secure_computing+0xe2/0x2a0 [ 811.529808][T15631] syscall_trace_enter+0xaa/0x160 [ 811.529827][T15631] __do_fast_syscall_32+0x99/0x2b0 [ 811.529854][T15631] do_fast_syscall_32+0x34/0x80 [ 811.529874][T15631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.529894][T15631] RIP: 0023:0xf7f36539 [ 811.529909][T15631] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 811.529925][T15631] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 000000000000018d [ 811.529943][T15631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 811.529956][T15631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 811.529966][T15631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.529977][T15631] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 811.529987][T15631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.530014][T15631] [ 811.530058][T15631] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 811.793156][T12036] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 811.800161][T12036] em28xx 1-1:0.0: No AC97 audio processor [ 811.805979][ T30] audit: type=1326 audit(1759221512.589:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 811.829791][ T30] audit: type=1326 audit(1759221512.589:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 811.869040][T15631] audit: out of memory in audit_log_start [ 811.895605][T12036] usb 1-1: USB disconnect, device number 3 [ 811.983961][ T120] usb 6-1: USB disconnect, device number 62 [ 811.995225][T12036] em28xx 1-1:0.0: Disconnecting em28xx [ 812.038756][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.052144][T12036] em28xx 1-1:0.0: Freeing device [ 812.059750][ T5842] usb 4-1: config 0 has no interfaces? [ 812.072861][ T30] audit: type=1326 audit(1759221513.169:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 812.107086][ T5842] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.134334][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.161170][ T5842] usb 4-1: config 0 descriptor?? [ 812.336575][ T30] audit: type=1326 audit(1759221513.199:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 812.629972][ T30] audit: type=1326 audit(1759221513.199:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 812.732322][ T30] audit: type=1326 audit(1759221513.199:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 812.956992][T12036] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 813.132605][T12036] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 813.142962][T12036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.172483][T12036] usb 3-1: config 0 descriptor?? [ 813.194651][T12036] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 813.204493][T12036] dvb-usb: bulk message failed: -22 (3/0) [ 813.240409][T12036] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 813.280818][T12036] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 813.298985][T12036] usb 3-1: media controller created [ 813.311382][T12036] dvb-usb: bulk message failed: -22 (5/0) [ 813.325869][T12036] dvb-usb: MAC address reading failed. [ 813.358408][T12036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.392322][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2632'. [ 813.418921][T12036] dvb-usb: bulk message failed: -22 (6/0) [ 813.467182][T12036] dvb-usb: bulk message failed: -22 (6/0) [ 813.492184][T12036] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 813.538314][T12036] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 813.867468][T12036] dvb-usb: schedule remote query interval to 100 msecs. [ 813.879157][T12036] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 813.894908][T12036] usb 3-1: USB disconnect, device number 107 [ 813.923185][T12036] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 814.085218][T11201] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 814.275995][T15652] FAULT_INJECTION: forcing a failure. [ 814.275995][T15652] name failslab, interval 1, probability 0, space 0, times 0 [ 814.296973][T11201] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 814.319679][T15652] CPU: 0 UID: 0 PID: 15652 Comm: syz.2.2635 Not tainted syzkaller #0 PREEMPT(full) [ 814.319704][T15652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.319715][T15652] Call Trace: [ 814.319723][T15652] [ 814.319732][T15652] dump_stack_lvl+0x189/0x250 [ 814.319758][T15652] ? __pfx____ratelimit+0x10/0x10 [ 814.319777][T15652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.319798][T15652] ? __pfx__printk+0x10/0x10 [ 814.319820][T15652] ? __pfx___might_resched+0x10/0x10 [ 814.319842][T15652] should_fail_ex+0x414/0x560 [ 814.319872][T15652] should_failslab+0xa8/0x100 [ 814.319898][T15652] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 814.319922][T15652] ? __alloc_skb+0x112/0x2d0 [ 814.319946][T15652] __alloc_skb+0x112/0x2d0 [ 814.319984][T15652] netlink_sendmsg+0x5c6/0xb30 [ 814.320013][T15652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.320035][T15652] ? __import_iovec+0x5d4/0x7f0 [ 814.320054][T15652] ? aa_sock_msg_perm+0xf1/0x1d0 [ 814.320073][T15652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 814.320092][T15652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.320113][T15652] __sock_sendmsg+0x21c/0x270 [ 814.320133][T15652] ____sys_sendmsg+0x505/0x830 [ 814.320161][T15652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 814.320197][T15652] ___sys_sendmsg+0x21f/0x2a0 [ 814.320221][T15652] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.320275][T15652] ? __fget_files+0x2a/0x420 [ 814.320291][T15652] ? __fget_files+0x3a0/0x420 [ 814.320323][T15652] __sys_sendmsg+0x164/0x220 [ 814.320347][T15652] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.320384][T15652] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.320406][T15652] __do_fast_syscall_32+0xb6/0x2b0 [ 814.320426][T15652] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.320448][T15652] do_fast_syscall_32+0x34/0x80 [ 814.320468][T15652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.320488][T15652] RIP: 0023:0xf7f36539 [ 814.320503][T15652] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 814.320518][T15652] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 814.320536][T15652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 814.320549][T15652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 814.320558][T15652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.320568][T15652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 814.320579][T15652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.320605][T15652] [ 814.588925][T11201] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.626446][ T12] net_ratelimit: 23 callbacks suppressed [ 814.626462][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 814.714997][T12036] usb 4-1: USB disconnect, device number 115 [ 814.759240][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 814.794897][T11201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.881478][T15649] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 814.895748][T15649] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 814.917793][T11201] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.927067][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.213438][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.377447][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.476788][ T5842] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 815.505337][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.617125][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.654671][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 815.745940][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2638'. [ 815.777519][T15678] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 815.825877][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.866493][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.007737][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 816.415378][ T5842] usb 4-1: config 0 has no interfaces? [ 816.420916][ T5842] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 816.465151][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.556967][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 816.735522][ T5842] usb 4-1: config 0 descriptor?? [ 817.444086][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.467740][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.485497][T12036] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 817.524485][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 817.539511][T15690] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2644'. [ 817.548972][T15690] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2644'. [ 817.787311][T12036] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 817.795830][T12036] usb 2-1: config 0 has no interface number 0 [ 817.815255][T12036] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 817.859388][T12036] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 817.872119][T12036] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 817.885851][T12036] usb 2-1: config 0 interface 128 has no altsetting 0 [ 817.898371][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'. [ 817.912150][T15694] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2646'. [ 817.923181][T15694] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2646'. [ 818.174503][T12036] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 818.658624][T12036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.700793][T11201] usb 6-1: USB disconnect, device number 63 [ 818.717261][T12036] usb 2-1: Product: syz [ 818.810242][T12036] usb 2-1: Manufacturer: syz [ 818.827882][T12036] usb 2-1: SerialNumber: syz [ 818.856190][T12036] usb 2-1: config 0 descriptor?? [ 818.884937][T12036] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 818.917912][ T5927] usb 4-1: USB disconnect, device number 116 [ 818.972153][T12036] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 819.021512][T12036] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 819.118817][T12036] usb 2-1: USB disconnect, device number 124 [ 819.641605][ T1157] net_ratelimit: 11 callbacks suppressed [ 819.641620][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 819.905648][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 820.035299][T12036] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 820.043338][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 820.156686][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 820.175109][ T5842] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 820.326812][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 820.335355][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 820.344645][T12036] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.356085][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.382509][ T5842] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 820.404129][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.406792][T12036] usb 1-1: config 0 has no interfaces? [ 820.432361][T12036] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.460754][T12036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.499118][T12036] usb 1-1: config 0 descriptor?? [ 820.514255][ T5842] usb 6-1: Product: syz [ 820.524363][ T5842] usb 6-1: Manufacturer: syz [ 820.526146][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 820.544292][ T5842] usb 6-1: SerialNumber: syz [ 820.579219][T15724] netlink: 'syz.1.2653': attribute type 21 has an invalid length. [ 820.587302][T15724] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2653'. [ 820.628441][ T5842] usb 6-1: config 0 descriptor?? [ 820.642546][ T5842] hub 6-1:0.0: bad descriptor, ignoring hub [ 820.653154][ T5842] hub 6-1:0.0: probe with driver hub failed with error -5 [ 820.690049][T15724] netlink: 'syz.1.2653': attribute type 4 has an invalid length. [ 820.703643][T15724] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2653'. [ 820.792355][ T5842] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.847427][T15726] batadv1: entered promiscuous mode [ 820.853988][T15726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 820.867196][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 820.886772][ T5842] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 820.943600][ T7763] udevd[7763]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.993135][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.995323][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.043270][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.186508][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.276040][ T5842] usb 6-1: USB disconnect, device number 64 [ 821.296322][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.673797][T15707] syz.5.2650 (15707) used greatest stack depth: 18392 bytes left [ 822.596369][T15746] ip6gre1: entered allmulticast mode [ 822.769322][ T5842] usb 1-1: USB disconnect, device number 4 [ 823.036388][T15756] trusted_key: encrypted_key: insufficient parameters specified [ 823.044496][ T5927] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 823.407197][ T5927] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 823.422682][ T5927] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.577154][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.643801][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 823.655827][T15768] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2664'. [ 823.664886][T15768] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2664'. [ 823.710596][T15770] FAULT_INJECTION: forcing a failure. [ 823.710596][T15770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.744087][T15750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 823.751737][T15750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 823.780237][T15770] CPU: 1 UID: 0 PID: 15770 Comm: syz.3.2666 Not tainted syzkaller #0 PREEMPT(full) [ 823.780263][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 823.780274][T15770] Call Trace: [ 823.780283][T15770] [ 823.780291][T15770] dump_stack_lvl+0x189/0x250 [ 823.780319][T15770] ? __pfx____ratelimit+0x10/0x10 [ 823.780334][T15770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.780346][T15770] ? __pfx__printk+0x10/0x10 [ 823.780355][T15770] ? __might_fault+0xb0/0x130 [ 823.780377][T15770] should_fail_ex+0x414/0x560 [ 823.780403][T15770] _copy_from_user+0x2d/0xb0 [ 823.780427][T15770] do_tcp_setsockopt+0x47d/0x1f10 [ 823.780452][T15770] ? smc_setsockopt+0x181/0xab0 [ 823.780471][T15770] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 823.780484][T15770] ? __pfx___mutex_lock+0x10/0x10 [ 823.780500][T15770] ? __lock_acquire+0xab9/0xd20 [ 823.780511][T15770] ? sock_common_setsockopt+0x36/0xc0 [ 823.780521][T15770] ? tcp_setsockopt+0x3d/0xe0 [ 823.780531][T15770] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 823.780548][T15770] smc_setsockopt+0x232/0xab0 [ 823.780573][T15770] ? __pfx_smc_setsockopt+0x10/0x10 [ 823.780592][T15770] ? aa_sock_opt_perm+0xff/0x1b0 [ 823.780620][T15770] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 823.780634][T15770] ? __pfx_smc_setsockopt+0x10/0x10 [ 823.780645][T15770] do_sock_setsockopt+0x179/0x1b0 [ 823.780660][T15770] __ia32_sys_setsockopt+0x13f/0x1b0 [ 823.780676][T15770] __do_fast_syscall_32+0xb6/0x2b0 [ 823.780692][T15770] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.780715][T15770] do_fast_syscall_32+0x34/0x80 [ 823.780734][T15770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.780755][T15770] RIP: 0023:0xf7fe7539 [ 823.780770][T15770] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 823.780779][T15770] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 823.780791][T15770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 823.780797][T15770] RDX: 0000000000000007 RSI: 0000000080000000 RDI: 0000000000000004 [ 823.780803][T15770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.780809][T15770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 823.780815][T15770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.780829][T15770] [ 824.050540][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.809283][ T1039] net_ratelimit: 25 callbacks suppressed [ 824.809299][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 824.925529][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 824.947047][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.066072][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 825.085823][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.111918][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.152809][ T5927] usb 1-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 825.182418][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.236011][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.254502][ T5927] usb 1-1: config 0 descriptor?? [ 825.307558][ T5927] pwc: Philips PCA646VC USB webcam detected. [ 825.575166][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.716338][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.988181][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.011494][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'. [ 826.022216][T15803] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2671'. [ 826.032261][T15803] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2671'. [ 826.116523][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.235607][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.345303][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.958947][ T5934] usb 2-1: USB disconnect, device number 125 [ 827.093751][T15809] kvm: user requested TSC rate below hardware speed [ 827.229336][ T5927] pwc: send_video_command error -71 [ 827.234685][ T5927] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 827.243813][ T5927] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 827.271478][ T5927] usb 1-1: USB disconnect, device number 5 [ 827.346766][T12036] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 827.424193][T15819] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2678'. [ 827.495250][T12036] usb 3-1: device descriptor read/64, error -71 [ 827.685264][ T120] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 827.785133][T12036] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 827.837129][ T120] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 827.849659][ T120] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 827.869745][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.903927][T15822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 827.913495][T15822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 827.921809][T12036] usb 3-1: device descriptor read/64, error -71 [ 828.007453][ T120] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 828.039906][T12036] usb usb3-port1: attempt power cycle [ 828.389042][T12036] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 828.425970][T12036] usb 3-1: device descriptor read/8, error -71 [ 828.669398][T12036] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 828.727014][T12036] usb 3-1: device descriptor read/8, error -71 [ 828.835671][T12036] usb usb3-port1: unable to enumerate USB device [ 829.845611][ T1039] net_ratelimit: 27 callbacks suppressed [ 829.845632][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 829.965388][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.076537][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.195268][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.316471][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.436686][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.455428][ T5927] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 830.565225][T12036] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 830.574422][ T5934] usb 2-1: USB disconnect, device number 126 [ 830.616785][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 830.628210][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.645961][ T5927] usb 3-1: config 0 has no interfaces? [ 830.653374][ T5927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 830.664846][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.674598][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.681525][ T5927] usb 3-1: config 0 descriptor?? [ 830.733365][T12036] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 830.747461][T12036] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 830.772588][T12036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.809010][T15857] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 830.816795][T15857] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 830.825721][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.869564][T12036] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 830.957624][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.985379][T15855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.994184][T15855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.115200][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.586745][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 833.289182][T15889] netlink: 'syz.1.2692': attribute type 27 has an invalid length. [ 833.311709][ T5927] usb 3-1: USB disconnect, device number 112 [ 833.955111][ T5934] usb 4-1: USB disconnect, device number 117 [ 834.232648][T15889] tipc: Enabled bearer , priority 0 [ 834.235165][ T5842] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 834.325649][T15903] syzkaller0: entered promiscuous mode [ 834.333373][T15903] syzkaller0: entered allmulticast mode [ 834.374104][T15886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 834.438847][T15881] tipc: Resetting bearer [ 834.447771][ T5842] usb 3-1: config 1 interface 0 has no altsetting 0 [ 834.493679][T15880] tipc: Resetting bearer [ 834.501879][ T5842] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 834.517608][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.553766][ T5842] usb 3-1: Product: syz [ 834.561073][ T5842] usb 3-1: Manufacturer: syz [ 834.567160][ T5842] usb 3-1: SerialNumber: syz [ 834.588484][T15880] tipc: Disabling bearer [ 834.820159][ T5842] usbhid 3-1:1.0: can't add hid device: -71 [ 834.820363][ T5842] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 834.842896][ T5842] usb 3-1: USB disconnect, device number 113 [ 834.903936][ T1039] net_ratelimit: 18 callbacks suppressed [ 834.903954][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.056857][T15914] IPVS: set_ctl: invalid protocol: 1236 0.0.0.0:0 [ 835.227237][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.338008][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.355121][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 835.449238][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.507551][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.507583][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.507623][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.507683][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.570030][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.660462][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2705'. [ 835.714241][ T24] usb 1-1: usb_control_msg returned -32 [ 835.714288][ T24] usbtmc 1-1:16.0: can't read capabilities [ 835.735209][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.760903][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 835.760920][ T30] audit: type=1326 audit(1759221536.859:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.760949][ T30] audit: type=1326 audit(1759221536.859:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.760971][ T30] audit: type=1326 audit(1759221536.859:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.760993][ T30] audit: type=1326 audit(1759221536.859:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.761016][ T30] audit: type=1326 audit(1759221536.859:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.761037][ T30] audit: type=1326 audit(1759221536.859:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.761060][ T30] audit: type=1326 audit(1759221536.859:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.761082][ T30] audit: type=1326 audit(1759221536.859:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.761104][ T30] audit: type=1326 audit(1759221536.859:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.761127][ T30] audit: type=1326 audit(1759221536.859:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.2.2705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 835.885352][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 836.024174][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 836.125618][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 836.264331][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 836.955168][ T5934] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 836.955330][ T5927] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 837.116802][ T5934] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 837.125201][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 837.128378][ T5934] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 837.142605][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.152461][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.191837][ T5927] usb 3-1: config 0 has no interfaces? [ 837.198299][ T5927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 837.211592][T15941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 837.219593][T15941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 837.224567][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.239590][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 837.254246][ T5927] usb 3-1: config 0 descriptor?? [ 837.543075][T15942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.558253][T15942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.724865][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2710'. [ 837.770586][T15951] netlink: 133 bytes leftover after parsing attributes in process `syz.3.2710'. [ 837.795053][T15951] netlink: 133 bytes leftover after parsing attributes in process `syz.3.2710'. [ 838.078805][ T5934] usb 1-1: USB disconnect, device number 6 [ 839.615699][T12036] usb 3-1: USB disconnect, device number 114 [ 839.818850][ T5934] usb 2-1: USB disconnect, device number 127 [ 840.138320][ T1039] net_ratelimit: 26 callbacks suppressed [ 840.138340][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.261759][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2717'. [ 840.285574][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.303140][T15981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2717'. [ 840.331610][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2717'. [ 840.342560][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 840.356190][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2717'. [ 840.475877][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.525913][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 840.546798][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.560409][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.591492][ T5934] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 840.725356][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.742223][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.845528][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.902050][ T5934] usb 2-1: config 0 descriptor?? [ 840.972283][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.092025][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.578155][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.780947][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.898326][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 842.295166][ T5934] letsketch 0003:6161:4D15.0017: Device info: ⷷ [ 842.408012][ T5934] letsketch 0003:6161:4D15.0017: Device info: ᣍ [ 842.515160][ T120] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 842.611520][ T5934] letsketch 0003:6161:4D15.0017: Device info: ఁ [ 842.689457][ T120] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 842.719235][ T120] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 842.735227][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.822297][T16009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.831956][T16009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.847449][ T120] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.025300][T15969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.061427][T15969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.266003][ T5934] usb 2-1: Max retries (5) exceeded reading string descriptor 2 [ 843.273988][ T5934] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -71 [ 843.589721][ T5934] usb 2-1: USB disconnect, device number 2 [ 845.242329][ T13] net_ratelimit: 25 callbacks suppressed [ 845.242345][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 845.272561][T16052] sctp: [Deprecated]: syz.0.2735 (pid 16052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 845.272561][T16052] Use struct sctp_sack_info instead [ 845.525157][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 845.699296][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 845.829318][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.080887][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.233775][ T5842] usb 3-1: USB disconnect, device number 115 [ 846.245159][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.355092][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.470694][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.616655][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.635525][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2739'. [ 846.866823][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.523055][T16088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 847.885113][ T120] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 848.062560][ T120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.074006][ T120] usb 4-1: config 0 has no interfaces? [ 848.082214][ T120] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 848.113791][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.137738][ T120] usb 4-1: config 0 descriptor?? [ 849.440857][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 849.681777][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 849.693430][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 849.706780][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.744433][T16106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 849.756655][T16106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 849.819675][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 850.256045][T11771] net_ratelimit: 23 callbacks suppressed [ 850.256063][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 850.526618][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 850.631984][T16111] binder: 16110:16111 ioctl 3b85 80000140 returned -22 [ 850.688551][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 850.813081][ T24] usb 4-1: USB disconnect, device number 118 [ 850.894946][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.078325][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.215401][ T24] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 851.416022][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.425227][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 851.434416][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.451113][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.475453][ T5842] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 851.622824][ T1157] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.655495][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 851.677904][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.701518][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 851.719911][ T5842] usb 6-1: config 0 has no interfaces? [ 851.917286][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.925570][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.925814][ T5842] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 851.947469][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.974979][ T24] usb 4-1: config 0 descriptor?? [ 852.011188][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 852.089101][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 852.121702][ T5842] usb 6-1: config 0 descriptor?? [ 852.225894][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 852.424483][T16125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.512817][T16125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.142016][T12036] usb 1-1: USB disconnect, device number 7 [ 853.335299][ T120] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 853.509889][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 853.542020][ T120] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 853.558445][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.568363][ T120] usb 2-1: Product: syz [ 853.572756][ T120] usb 2-1: Manufacturer: syz [ 853.582410][ T120] usb 2-1: SerialNumber: syz [ 853.621573][ T120] usb 2-1: config 0 descriptor?? [ 853.755380][T12036] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 853.925344][T12036] usb 1-1: Using ep0 maxpacket: 16 [ 853.952104][T12036] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.103804][ T5842] usb 4-1: USB disconnect, device number 119 [ 854.111172][T12036] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.149475][T12036] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 854.187923][ T5927] usb 6-1: USB disconnect, device number 66 [ 854.231016][T12036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.262797][T12036] usb 1-1: config 0 descriptor?? [ 854.277940][T12036] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 854.511124][T16161] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2766'. [ 854.521583][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 854.521597][ T30] audit: type=1326 audit(1759221555.619:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 854.722932][ T30] audit: type=1326 audit(1759221555.619:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 854.892961][ T30] audit: type=1326 audit(1759221555.619:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 855.039068][ T30] audit: type=1326 audit(1759221555.619:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16155 comm="syz.5.2766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 855.325290][ T4504] net_ratelimit: 20 callbacks suppressed [ 855.325304][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.455177][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.581910][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.658961][T16170] trusted_key: encrypted_key: insufficient parameters specified [ 855.696557][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.727226][T12036] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 855.806325][ T4504] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.908240][T12036] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 855.908290][T12036] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 855.908312][T12036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.921051][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.925691][T16172] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 855.970974][T16172] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 855.978996][T12036] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.026303][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.059143][ T24] usb 2-1: USB disconnect, device number 3 [ 856.135177][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.247202][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.362196][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.541021][ T980] usb 1-1: USB disconnect, device number 8 [ 856.861503][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 857.005087][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 857.020749][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 857.045120][ T980] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 857.070941][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.081642][ T24] usb 2-1: Product: syz [ 857.107910][ T24] usb 2-1: Manufacturer: syz [ 857.124714][ T24] usb 2-1: SerialNumber: syz [ 857.182376][ T24] usb 2-1: config 0 descriptor?? [ 857.197749][ T980] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 857.209316][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.228374][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.248918][ T980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 857.286867][ T980] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 857.302992][ T980] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 857.312137][ T980] usb 1-1: Manufacturer: syz [ 857.325716][ T980] usb 1-1: config 0 descriptor?? [ 857.457824][T12036] usb 2-1: USB disconnect, device number 4 [ 857.547927][ T980] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 857.569117][ T980] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 858.151635][T16209] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2781'. [ 858.163192][ T30] audit: type=1326 audit(1759221559.259:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16205 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 858.187171][ T30] audit: type=1326 audit(1759221559.259:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16205 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 858.217134][ T30] audit: type=1326 audit(1759221559.259:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16205 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 858.240140][ T30] audit: type=1326 audit(1759221559.259:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16205 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 858.270988][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 858.283858][T16210] bond0: entered promiscuous mode [ 858.289637][T16210] bond_slave_0: entered promiscuous mode [ 858.296163][T16210] bond_slave_1: entered promiscuous mode [ 858.302057][T16210] team0: entered promiscuous mode [ 858.307885][T16210] team_slave_0: entered promiscuous mode [ 858.314347][T16210] team_slave_1: entered promiscuous mode [ 858.323076][T16210] batadv1: entered promiscuous mode [ 858.334334][T16210] bond0: entered allmulticast mode [ 858.339617][T16210] bond_slave_0: entered allmulticast mode [ 858.346719][T16210] bond_slave_1: entered allmulticast mode [ 858.352477][T16210] team0: entered allmulticast mode [ 858.358068][T16210] team_slave_0: entered allmulticast mode [ 858.363846][T16210] team_slave_1: entered allmulticast mode [ 858.369937][T16210] batadv1: entered allmulticast mode [ 858.523484][ T980] usb 6-1: USB disconnect, device number 67 [ 859.085261][ T980] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 859.116178][T16225] trusted_key: encrypted_key: insufficient parameters specified [ 859.317767][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 859.320425][ T980] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.320444][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.320455][ T980] usb 6-1: Product: syz [ 859.320463][ T980] usb 6-1: Manufacturer: syz [ 859.320471][ T980] usb 6-1: SerialNumber: syz [ 859.343219][ T980] usb 6-1: config 0 descriptor?? [ 859.379858][T16229] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 859.418620][T16231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2787'. [ 859.529462][ T24] usb 1-1: USB disconnect, device number 9 [ 859.956575][ T24] usb 6-1: USB disconnect, device number 68 [ 860.378478][ T13] net_ratelimit: 27 callbacks suppressed [ 860.378491][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.514313][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.645373][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.766704][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 860.974460][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.094949][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.218577][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.416310][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.589443][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.707163][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.715124][T12036] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 861.815362][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.866872][T12036] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 861.876979][T12036] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.912614][T12036] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 861.960201][T12036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.565156][T12036] usb 3-1: usb_control_msg returned -32 [ 862.575425][T12036] usbtmc 3-1:16.0: can't read capabilities [ 862.684910][T16276] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2797'. [ 862.695803][ T30] audit: type=1326 audit(1759221563.799:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16272 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 862.722269][ T30] audit: type=1326 audit(1759221563.799:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16272 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 862.744863][ T30] audit: type=1326 audit(1759221563.799:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16272 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 862.768498][ T30] audit: type=1326 audit(1759221563.799:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16272 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 862.827490][ T30] audit: type=1326 audit(1759221563.799:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16272 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 863.095224][ T5842] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 863.235172][ T5842] usb 4-1: device descriptor read/64, error -71 [ 863.480868][ T5842] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 863.635115][ T5842] usb 4-1: device descriptor read/64, error -71 [ 863.745542][ T5842] usb usb4-port1: attempt power cycle [ 864.066368][T16289] trusted_key: encrypted_key: insufficient parameters specified [ 864.085296][ T5842] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 864.108734][ T5842] usb 4-1: device descriptor read/8, error -71 [ 864.282650][ T120] usb 3-1: USB disconnect, device number 116 [ 864.345188][ T5842] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 864.366325][ T5842] usb 4-1: device descriptor read/8, error -71 [ 864.475380][ T5842] usb usb4-port1: unable to enumerate USB device [ 864.725280][ T120] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 864.906717][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 864.924712][ T120] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 864.941805][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.966490][ T120] usb 3-1: Product: syz [ 864.981807][ T120] usb 3-1: Manufacturer: syz [ 864.998168][ T120] usb 3-1: SerialNumber: syz [ 865.023501][ T120] usb 3-1: config 0 descriptor?? [ 865.410466][T11771] net_ratelimit: 27 callbacks suppressed [ 865.410489][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 865.490961][ T5842] usb 3-1: USB disconnect, device number 117 [ 865.548700][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 865.702218][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 865.754744][T16302] FAULT_INJECTION: forcing a failure. [ 865.754744][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 865.789460][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.1.2806 Not tainted syzkaller #0 PREEMPT(full) [ 865.789485][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.789497][T16302] Call Trace: [ 865.789504][T16302] [ 865.789511][T16302] dump_stack_lvl+0x189/0x250 [ 865.789537][T16302] ? __pfx____ratelimit+0x10/0x10 [ 865.789555][T16302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.789574][T16302] ? __pfx__printk+0x10/0x10 [ 865.789593][T16302] ? __pfx___might_resched+0x10/0x10 [ 865.789614][T16302] should_fail_ex+0x414/0x560 [ 865.789642][T16302] should_failslab+0xa8/0x100 [ 865.789667][T16302] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 865.789690][T16302] ? __alloc_skb+0x112/0x2d0 [ 865.789713][T16302] __alloc_skb+0x112/0x2d0 [ 865.789736][T16302] netlink_sendmsg+0x5c6/0xb30 [ 865.789765][T16302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.789787][T16302] ? __import_iovec+0x5d4/0x7f0 [ 865.789807][T16302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 865.789826][T16302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.789853][T16302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.789873][T16302] __sock_sendmsg+0x21c/0x270 [ 865.789893][T16302] ____sys_sendmsg+0x505/0x830 [ 865.789920][T16302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.789957][T16302] ___sys_sendmsg+0x21f/0x2a0 [ 865.789981][T16302] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.790035][T16302] ? __fget_files+0x2a/0x420 [ 865.790051][T16302] ? __fget_files+0x3a0/0x420 [ 865.790076][T16302] __sys_sendmsg+0x164/0x220 [ 865.790100][T16302] ? __pfx___sys_sendmsg+0x10/0x10 [ 865.790136][T16302] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.790158][T16302] __do_fast_syscall_32+0xb6/0x2b0 [ 865.790178][T16302] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.790199][T16302] do_fast_syscall_32+0x34/0x80 [ 865.790219][T16302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 865.790238][T16302] RIP: 0023:0xf708e539 [ 865.790254][T16302] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 865.790269][T16302] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 865.790287][T16302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 865.790299][T16302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 865.790310][T16302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.790320][T16302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 865.790330][T16302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.790355][T16302] [ 865.790564][T16304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2807'. [ 866.115627][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 866.246165][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 866.507630][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 866.578516][T16321] loop6: detected capacity change from 0 to 524287999 [ 866.763943][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 866.775425][T16321] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2811'. [ 866.827341][ T30] audit: type=1326 audit(1759221567.929:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16315 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 866.853562][T16314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.898316][ T30] audit: type=1326 audit(1759221567.929:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16315 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 867.029478][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.233902][T12036] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 867.295247][ T120] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 867.375118][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.468613][ T30] audit: type=1326 audit(1759221567.929:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16315 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 867.495718][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.557346][ T30] audit: type=1326 audit(1759221567.929:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16315 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 867.599195][ T30] audit: type=1326 audit(1759221567.929:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16315 comm="syz.5.2811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 867.628807][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.653994][ T120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.737226][T12036] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.751432][ T120] usb 4-1: config 0 has no interfaces? [ 867.768643][T12036] usb 3-1: config 0 has no interfaces? [ 867.805122][ T120] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 867.841738][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.856059][T12036] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 867.965189][ T980] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 868.008188][ T120] usb 4-1: config 0 descriptor?? [ 868.016058][T12036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.029272][T12036] usb 3-1: config 0 descriptor?? [ 868.117304][ T980] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.117329][ T980] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.117352][ T980] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 868.117365][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.322164][ T980] usb 6-1: usb_control_msg returned -32 [ 868.322195][ T980] usbtmc 6-1:16.0: can't read capabilities [ 869.082296][T16335] trusted_key: encrypted_key: insufficient parameters specified [ 869.486744][ T120] usb 3-1: USB disconnect, device number 118 [ 869.607771][ T24] usb 4-1: USB disconnect, device number 124 [ 869.789926][T16346] FAULT_INJECTION: forcing a failure. [ 869.789926][T16346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 869.849332][T16346] CPU: 0 UID: 0 PID: 16346 Comm: syz.2.2816 Not tainted syzkaller #0 PREEMPT(full) [ 869.849357][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 869.849367][T16346] Call Trace: [ 869.849375][T16346] [ 869.849383][T16346] dump_stack_lvl+0x189/0x250 [ 869.849409][T16346] ? __pfx____ratelimit+0x10/0x10 [ 869.849429][T16346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.849449][T16346] ? __pfx__printk+0x10/0x10 [ 869.849475][T16346] ? fs_reclaim_acquire+0x7d/0x100 [ 869.849501][T16346] should_fail_ex+0x414/0x560 [ 869.849530][T16346] prepare_alloc_pages+0x213/0x610 [ 869.849555][T16346] __alloc_frozen_pages_noprof+0x123/0x370 [ 869.849578][T16346] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 869.849611][T16346] alloc_pages_bulk_noprof+0x560/0x710 [ 869.849631][T16346] ? rcu_is_watching+0x15/0xb0 [ 869.849650][T16346] ? trace_kmalloc+0x1f/0xd0 [ 869.849670][T16346] ? __kmalloc_noprof+0x29b/0x4f0 [ 869.849691][T16346] ? copy_splice_read+0x143/0xa50 [ 869.849718][T16346] copy_splice_read+0x173/0xa50 [ 869.849753][T16346] ? __pfx_copy_splice_read+0x10/0x10 [ 869.849777][T16346] ? look_up_lock_class+0x74/0x170 [ 869.849798][T16346] ? register_lock_class+0x51/0x320 [ 869.849825][T16346] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 869.849854][T16346] ? alloc_pipe_info+0x374/0x4d0 [ 869.849877][T16346] ? __pfx_copy_splice_read+0x10/0x10 [ 869.849899][T16346] splice_direct_to_actor+0x4a6/0xcc0 [ 869.849941][T16346] ? __pfx_direct_splice_actor+0x10/0x10 [ 869.849965][T16346] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 869.849998][T16346] do_splice_direct+0x181/0x270 [ 869.850025][T16346] ? __pfx_do_splice_direct+0x10/0x10 [ 869.850047][T16346] ? common_file_perm+0x1b5/0x230 [ 869.850065][T16346] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 869.850084][T16346] ? bpf_lsm_file_permission+0x9/0x20 [ 869.850104][T16346] ? security_file_permission+0x75/0x290 [ 869.850127][T16346] ? rw_verify_area+0x255/0x4d0 [ 869.850152][T16346] do_sendfile+0x4da/0x7e0 [ 869.850179][T16346] ? __pfx_do_sendfile+0x10/0x10 [ 869.850202][T16346] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 869.850218][T16346] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.850239][T16346] __do_fast_syscall_32+0xb6/0x2b0 [ 869.850265][T16346] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.850287][T16346] do_fast_syscall_32+0x34/0x80 [ 869.850307][T16346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 869.850327][T16346] RIP: 0023:0xf7f36539 [ 869.850342][T16346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 869.850357][T16346] RSP: 002b:00000000f53e455c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 869.850375][T16346] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000008 [ 869.850387][T16346] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000000 [ 869.850397][T16346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.850407][T16346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 869.850418][T16346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.850443][T16346] [ 870.226022][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.232368][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.306895][ T980] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 870.356424][T16353] FAULT_INJECTION: forcing a failure. [ 870.356424][T16353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.403374][T16353] CPU: 1 UID: 0 PID: 16353 Comm: syz.0.2820 Not tainted syzkaller #0 PREEMPT(full) [ 870.403393][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 870.403400][T16353] Call Trace: [ 870.403405][T16353] [ 870.403410][T16353] dump_stack_lvl+0x189/0x250 [ 870.403428][T16353] ? __pfx____ratelimit+0x10/0x10 [ 870.403440][T16353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.403452][T16353] ? __pfx__printk+0x10/0x10 [ 870.403467][T16353] should_fail_ex+0x414/0x560 [ 870.403488][T16353] _copy_to_user+0x31/0xb0 [ 870.403503][T16353] simple_read_from_buffer+0xe1/0x170 [ 870.403521][T16353] proc_fail_nth_read+0x1b3/0x220 [ 870.403535][T16353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 870.403549][T16353] ? rw_verify_area+0x2a6/0x4d0 [ 870.403562][T16353] ? __lock_acquire+0xab9/0xd20 [ 870.403571][T16353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 870.403583][T16353] vfs_read+0x1fd/0xa30 [ 870.403596][T16353] ? fdget_pos+0x247/0x320 [ 870.403608][T16353] ? __pfx___mutex_lock+0x10/0x10 [ 870.403619][T16353] ? __pfx_vfs_read+0x10/0x10 [ 870.403633][T16353] ? __fget_files+0x2a/0x420 [ 870.403644][T16353] ? __fget_files+0x3a0/0x420 [ 870.403653][T16353] ? __fget_files+0x2a/0x420 [ 870.403666][T16353] ksys_read+0x145/0x250 [ 870.403681][T16353] ? __pfx_ksys_read+0x10/0x10 [ 870.403696][T16353] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.403708][T16353] __do_fast_syscall_32+0xb6/0x2b0 [ 870.403721][T16353] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.403733][T16353] do_fast_syscall_32+0x34/0x80 [ 870.403745][T16353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.403757][T16353] RIP: 0023:0xf7f87539 [ 870.403766][T16353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 870.403775][T16353] RSP: 002b:00000000f5476590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 870.403786][T16353] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5476620 [ 870.403793][T16353] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000 [ 870.403799][T16353] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 870.403805][T16353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 870.403811][T16353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.403825][T16353] [ 870.633550][ T1039] net_ratelimit: 19 callbacks suppressed [ 870.633564][ T1039] bond1: (slave macvlan2): failed to get link speed/duplex [ 870.685953][ T24] usb 6-1: USB disconnect, device number 69 [ 870.884307][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 870.884588][ T980] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 870.917790][ T980] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.935173][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.974487][T16348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 870.984171][T16348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 871.013087][T16355] loop6: detected capacity change from 0 to 524287999 [ 871.030276][ T980] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.063554][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 871.077045][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.087540][T16355] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2822'. [ 871.124459][ T30] audit: type=1326 audit(1759221572.219:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16354 comm="syz.5.2822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 871.176976][T16349] netdevsim netdevsim1: Direct firmware load for . [ 871.176976][T16349] failed with error -2 [ 871.188035][T16349] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 871.188035][T16349] [ 871.215869][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 871.275427][ T5842] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 871.284959][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.405314][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.417496][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 871.440899][ T30] audit: type=1326 audit(1759221572.219:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16354 comm="syz.5.2822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 871.469057][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 871.502861][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.504632][ T30] audit: type=1326 audit(1759221572.249:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16354 comm="syz.5.2822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 871.513637][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 871.575066][ T24] usb 1-1: Product: syz [ 871.579440][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.579657][ T24] usb 1-1: Manufacturer: syz [ 871.633963][ T24] usb 1-1: SerialNumber: syz [ 871.639003][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.794511][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.835223][ T5842] usb 3-1: config 0 has no interfaces? [ 871.854816][ T30] audit: type=1326 audit(1759221572.249:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16354 comm="syz.5.2822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 871.857824][ T24] usb 1-1: config 0 descriptor?? [ 871.885829][ T5842] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 871.894887][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.954569][ T5842] usb 3-1: config 0 descriptor?? [ 871.989083][ T30] audit: type=1326 audit(1759221572.249:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16354 comm="syz.5.2822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 872.016649][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 872.065574][ T30] audit: type=1326 audit(1759221573.039:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16364 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 872.165899][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 872.427142][ T61] bond1: (slave macvlan2): failed to get link speed/duplex [ 872.505609][T12036] usb 3-1: USB disconnect, device number 119 [ 872.574489][ T30] audit: type=1326 audit(1759221573.049:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16364 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 872.603508][ T30] audit: type=1326 audit(1759221573.049:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16364 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 872.628663][ T30] audit: type=1326 audit(1759221573.049:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16364 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f67558 code=0x7ffc0000 [ 872.663066][ T24] usb 1-1: USB disconnect, device number 10 [ 872.711894][ T30] audit: type=1326 audit(1759221573.049:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16364 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 872.748945][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 873.027662][T16377] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2826'. [ 873.571412][T16386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2828'. [ 873.627086][T12036] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 873.818800][ T5842] usb 4-1: USB disconnect, device number 125 [ 874.047652][T12036] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.231978][T12036] usb 1-1: config 0 has no interfaces? [ 874.296473][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2830'. [ 874.337742][T12036] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 874.646241][T12036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.682846][T12036] usb 1-1: config 0 descriptor?? [ 874.858025][T16400] trusted_key: encrypted_key: insufficient parameters specified [ 875.678666][T11771] net_ratelimit: 21 callbacks suppressed [ 875.678680][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 875.799514][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 875.926205][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 875.960609][T16407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2833'. [ 876.045297][T16226] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 876.055311][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.069068][T16411] loop6: detected capacity change from 0 to 524287999 [ 876.092754][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 876.109127][T16411] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2834'. [ 876.165317][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.207456][T16226] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.218931][T16226] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.232199][T16226] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 876.241520][T16226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.278049][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.395333][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.456584][T16226] usb 4-1: usb_control_msg returned -32 [ 876.462330][T16226] usbtmc 4-1:16.0: can't read capabilities [ 876.505340][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.615457][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.725360][T11771] bond1: (slave macvlan2): failed to get link speed/duplex [ 877.003560][T16226] usb 1-1: USB disconnect, device number 11 [ 877.053672][T16419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2836'. [ 877.139229][T16419] IPv6: NLM_F_CREATE should be specified when creating new route [ 877.310488][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 877.310504][ T30] audit: type=1326 audit(1759221578.409:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 877.345133][ T30] audit: type=1326 audit(1759221578.409:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 877.424148][ T30] audit: type=1326 audit(1759221578.409:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 877.472546][T16226] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 877.519221][ T30] audit: type=1326 audit(1759221578.409:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 877.562076][ T30] audit: type=1326 audit(1759221578.409:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 877.608664][ T30] audit: type=1326 audit(1759221578.409:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 877.632441][ T30] audit: type=1326 audit(1759221578.409:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 877.955457][T16226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 877.989517][T16226] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 878.002809][T16226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.013688][ T30] audit: type=1326 audit(1759221578.409:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 878.039164][T16226] usb 1-1: Product: syz [ 878.047480][T16226] usb 1-1: Manufacturer: syz [ 878.053345][T16226] usb 1-1: SerialNumber: syz [ 878.062480][ T30] audit: type=1326 audit(1759221578.409:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 878.086054][T16226] usb 1-1: config 0 descriptor?? [ 878.109446][ T30] audit: type=1326 audit(1759221578.409:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16422 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 878.248387][T16427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2840'. [ 878.538591][ T120] usb 1-1: USB disconnect, device number 12 [ 878.781282][ T5842] usb 4-1: USB disconnect, device number 126 [ 878.835300][T16226] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 878.997366][T16447] loop6: detected capacity change from 0 to 524287999 [ 879.013058][ T7763] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 879.029736][T16447] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2847'. [ 879.057791][T16226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.070975][T16226] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.088471][T16226] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 879.098000][T16226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.109055][T16226] usb 6-1: config 0 descriptor?? [ 879.215123][ T5842] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 879.365467][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 879.409410][ T5842] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 879.427717][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.443731][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 879.456239][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.500666][ T5842] usbtmc 4-1:16.0: bulk endpoints not found [ 879.545412][T16226] lenovo 0003:17EF:60EE.0019: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 879.692122][ T120] usb 4-1: USB disconnect, device number 127 [ 880.007382][T16442] batadv_slave_1: entered promiscuous mode [ 880.016353][T16442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.025396][T16442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.039417][T16441] batadv_slave_1: left promiscuous mode [ 880.068063][T16226] lenovo 0003:17EF:60EE.0019: Fn-lock setting failed: -71 [ 880.083954][T16226] lenovo 0003:17EF:60EE.0019: Sensitivity setting failed: -71 [ 880.157359][T16226] usb 6-1: USB disconnect, device number 70 [ 880.598897][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2853'. [ 880.850274][T16474] FAULT_INJECTION: forcing a failure. [ 880.850274][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 880.889484][T16477] FAULT_INJECTION: forcing a failure. [ 880.889484][T16477] name failslab, interval 1, probability 0, space 0, times 0 [ 880.902923][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(full) [ 880.902947][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 880.902959][T16474] Call Trace: [ 880.902967][T16474] [ 880.902975][T16474] dump_stack_lvl+0x189/0x250 [ 880.903003][T16474] ? __pfx____ratelimit+0x10/0x10 [ 880.903022][T16474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 880.903039][T16474] ? __pfx__printk+0x10/0x10 [ 880.903057][T16474] ? __pfx___might_resched+0x10/0x10 [ 880.903071][T16474] ? fs_reclaim_acquire+0x7d/0x100 [ 880.903090][T16474] should_fail_ex+0x414/0x560 [ 880.903114][T16474] should_failslab+0xa8/0x100 [ 880.903136][T16474] kmem_cache_alloc_noprof+0x73/0x3c0 [ 880.903154][T16474] ? alloc_vfsmnt+0x23/0x430 [ 880.903174][T16474] alloc_vfsmnt+0x23/0x430 [ 880.903193][T16474] clone_mnt+0x67/0xae0 [ 880.903215][T16474] copy_tree+0xde/0x930 [ 880.903231][T16474] ? down_write+0x162/0x1f0 [ 880.903248][T16474] ? __pfx_down_write+0x10/0x10 [ 880.903271][T16474] ? alloc_mnt_ns+0x24e/0x310 [ 880.903286][T16474] copy_mnt_ns+0x178/0x820 [ 880.903298][T16474] ? rcu_is_watching+0x15/0xb0 [ 880.903314][T16474] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 880.903331][T16474] ? create_new_namespaces+0x31/0x720 [ 880.903348][T16474] create_new_namespaces+0xd1/0x720 [ 880.903365][T16474] ? bpf_lsm_capable+0x9/0x20 [ 880.903383][T16474] ? security_capable+0x7e/0x2e0 [ 880.903408][T16474] unshare_nsproxy_namespaces+0x11c/0x170 [ 880.903425][T16474] ksys_unshare+0x4c8/0x8c0 [ 880.903448][T16474] ? __pfx_ksys_unshare+0x10/0x10 [ 880.903463][T16474] ? ksys_write+0x1e1/0x250 [ 880.903486][T16474] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 880.903507][T16474] __ia32_sys_unshare+0x37/0x40 [ 880.903523][T16474] __do_fast_syscall_32+0xb6/0x2b0 [ 880.903546][T16474] ? lockdep_hardirqs_on+0x9c/0x150 [ 880.903564][T16474] do_fast_syscall_32+0x34/0x80 [ 880.903579][T16474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 880.903596][T16474] RIP: 0023:0xf7f36539 [ 880.903609][T16474] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 880.903621][T16474] RSP: 002b:00000000f540555c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 880.903637][T16474] RAX: ffffffffffffffda RBX: 000000002c020400 RCX: 0000000000000000 [ 880.903647][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 880.903655][T16474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.903664][T16474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 880.903673][T16474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.903694][T16474] [ 881.176502][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.201273][T16477] CPU: 1 UID: 0 PID: 16477 Comm: syz.5.2856 Not tainted syzkaller #0 PREEMPT(full) [ 881.201298][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 881.201308][T16477] Call Trace: [ 881.201316][T16477] [ 881.201324][T16477] dump_stack_lvl+0x189/0x250 [ 881.201350][T16477] ? __pfx____ratelimit+0x10/0x10 [ 881.201369][T16477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.201390][T16477] ? __pfx__printk+0x10/0x10 [ 881.201412][T16477] ? __pfx___might_resched+0x10/0x10 [ 881.201428][T16477] ? fs_reclaim_acquire+0x7d/0x100 [ 881.201450][T16477] should_fail_ex+0x414/0x560 [ 881.201486][T16477] should_failslab+0xa8/0x100 [ 881.201513][T16477] __kmalloc_noprof+0xcb/0x4f0 [ 881.201535][T16477] ? anon_vma_name_alloc+0x40/0xf0 [ 881.201562][T16477] anon_vma_name_alloc+0x40/0xf0 [ 881.201586][T16477] set_anon_vma_name+0x1d0/0x420 [ 881.201610][T16477] ? __pfx_vfs_write+0x10/0x10 [ 881.201633][T16477] ? __pfx_set_anon_vma_name+0x10/0x10 [ 881.201658][T16477] ? cap_task_prctl+0x1de/0xaa0 [ 881.201683][T16477] ? static_key_count+0x41/0x70 [ 881.201706][T16477] ? security_task_prctl+0x163/0x190 [ 881.201729][T16477] __se_sys_prctl+0xf95/0x1960 [ 881.201754][T16477] ? __pfx___se_sys_prctl+0x10/0x10 [ 881.201781][T16477] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.201797][T16477] ? __ia32_sys_prctl+0x20/0xc0 [ 881.201822][T16477] __do_fast_syscall_32+0xb6/0x2b0 [ 881.201842][T16477] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.201864][T16477] do_fast_syscall_32+0x34/0x80 [ 881.201884][T16477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.201904][T16477] RIP: 0023:0xf7f67539 [ 881.201918][T16477] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 881.201932][T16477] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 881.201951][T16477] RAX: ffffffffffffffda RBX: 0000000053564d41 RCX: 0000000000000000 [ 881.201964][T16477] RDX: 0000000080ffa000 RSI: 0000000000004000 RDI: 0000000080000780 [ 881.201975][T16477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.201986][T16477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 881.201997][T16477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.202023][T16477] [ 881.255523][T16478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 881.464293][T16474] ------------[ cut here ]------------ [ 881.469870][T16474] ida_free called for id=950 which is not allocated. [ 881.489472][T16474] WARNING: CPU: 0 PID: 16474 at lib/idr.c:592 ida_free+0x280/0x310 [ 881.497489][T16474] Modules linked in: [ 881.501425][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(full) [ 881.510951][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 881.521082][T16474] RIP: 0010:ida_free+0x280/0x310 [ 881.526088][T16474] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 31 28 0c 00 90 48 c7 c7 c0 26 76 8c 44 89 fe e8 e1 8c 55 f6 90 <0f> 0b 90 90 eb 34 e8 c5 02 92 f6 49 bd 00 00 00 00 00 fc ff df eb [ 881.545935][T16474] RSP: 0018:ffffc9000bf67880 EFLAGS: 00010246 [ 881.552023][T16474] RAX: bb0d7ec4a53f7900 RBX: 0000000000000a06 RCX: ffff8880255f9e00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 881.560292][T16474] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 881.568528][T16474] RBP: ffffc9000bf67968 R08: ffffc9000bf675a7 R09: 1ffff920017eceb4 [ 881.576622][T16474] R10: dffffc0000000000 R11: fffff520017eceb5 R12: 1ffff920017ecf14 [ 881.584611][T16474] R13: dffffc0000000000 R14: ffff88801def2000 R15: 00000000000003b6 [ 881.592745][T16474] FS: 0000000000000000(0000) GS:ffff88812637e000(0000) knlGS:0000000000000000 [ 881.601860][T16474] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 881.608336][T16478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 881.608977][T16474] CR2: 00000000f5473e7c CR3: 000000007d062000 CR4: 00000000003526f0 [ 881.625592][T16474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 881.633582][T16474] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 881.641882][T16474] Call Trace: [ 881.645315][T16474] [ 881.648247][T16474] ? __pfx_ida_free+0x10/0x10 [ 881.652914][T16474] ? namespace_unlock+0x486/0x760 [ 881.658118][T16474] free_mnt_ns+0x52/0xe0 [ 881.662353][T16474] namespace_unlock+0x529/0x760 [ 881.667527][T16474] ? __pfx_namespace_unlock+0x10/0x10 [ 881.672982][T16474] ? free_nsproxy+0x3e/0x350 [ 881.677786][T16474] free_nsproxy+0x3e/0x350 [ 881.682220][T16474] do_exit+0x6b0/0x2300 [ 881.687918][T16474] ? do_raw_spin_lock+0x121/0x290 [ 881.692955][T16474] ? __pfx_do_exit+0x10/0x10 [ 881.697841][T16474] do_group_exit+0x21c/0x2d0 [ 881.702450][T16474] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.707818][T16474] get_signal+0x1286/0x1340 [ 881.712317][T16474] arch_do_signal_or_restart+0x9a/0x750 [ 881.718054][T16474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 881.724197][T16474] ? exit_to_user_mode_loop+0x40/0x110 [ 881.729870][T16474] exit_to_user_mode_loop+0x75/0x110 [ 881.735379][T16474] __do_fast_syscall_32+0x1f4/0x2b0 [ 881.740570][T16474] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.745968][T16474] do_fast_syscall_32+0x34/0x80 [ 881.750842][T16474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.757408][T16474] RIP: 0023:0xf7f36539 [ 881.761464][T16474] Code: Unable to access opcode bytes at 0xf7f3650f. [ 881.768374][T16474] RSP: 002b:00000000f540560c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 881.776960][T16474] RAX: fffffffffffffe00 RBX: 00000000f73f5020 RCX: 0000000000000080 [ 881.784915][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f5024 [ 881.793077][T16474] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 881.801251][T16474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 881.809407][T16474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.817533][T16474] [ 881.820548][T16474] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 881.827836][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(full) [ 881.837181][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 881.847248][T16474] Call Trace: [ 881.850617][T16474] [ 881.853538][T16474] dump_stack_lvl+0x99/0x250 [ 881.858413][T16474] ? __asan_memcpy+0x40/0x70 [ 881.863091][T16474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.868284][T16474] ? __pfx__printk+0x10/0x10 [ 881.872868][T16474] vpanic+0x281/0x750 [ 881.876836][T16474] ? __pfx__printk+0x10/0x10 [ 881.881418][T16474] ? __pfx_vpanic+0x10/0x10 [ 881.885905][T16474] ? is_bpf_text_address+0x26/0x2b0 [ 881.891098][T16474] panic+0xb9/0xc0 [ 881.894811][T16474] ? __pfx_panic+0x10/0x10 [ 881.899225][T16474] __warn+0x31b/0x4b0 [ 881.903193][T16474] ? ida_free+0x280/0x310 [ 881.907501][T16474] ? ida_free+0x280/0x310 [ 881.911807][T16474] report_bug+0x2be/0x4f0 [ 881.916111][T16474] ? ida_free+0x280/0x310 [ 881.920419][T16474] ? ida_free+0x280/0x310 [ 881.924726][T16474] ? ida_free+0x282/0x310 [ 881.929043][T16474] handle_bug+0x84/0x160 [ 881.933276][T16474] exc_invalid_op+0x1a/0x50 [ 881.937788][T16474] asm_exc_invalid_op+0x1a/0x20 [ 881.942635][T16474] RIP: 0010:ida_free+0x280/0x310 [ 881.947553][T16474] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 31 28 0c 00 90 48 c7 c7 c0 26 76 8c 44 89 fe e8 e1 8c 55 f6 90 <0f> 0b 90 90 eb 34 e8 c5 02 92 f6 49 bd 00 00 00 00 00 fc ff df eb [ 881.967231][T16474] RSP: 0018:ffffc9000bf67880 EFLAGS: 00010246 [ 881.973282][T16474] RAX: bb0d7ec4a53f7900 RBX: 0000000000000a06 RCX: ffff8880255f9e00 [ 881.981233][T16474] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 881.989186][T16474] RBP: ffffc9000bf67968 R08: ffffc9000bf675a7 R09: 1ffff920017eceb4 [ 881.997138][T16474] R10: dffffc0000000000 R11: fffff520017eceb5 R12: 1ffff920017ecf14 [ 882.005105][T16474] R13: dffffc0000000000 R14: ffff88801def2000 R15: 00000000000003b6 [ 882.013102][T16474] ? __pfx_ida_free+0x10/0x10 [ 882.017780][T16474] ? namespace_unlock+0x486/0x760 [ 882.022802][T16474] free_mnt_ns+0x52/0xe0 [ 882.027033][T16474] namespace_unlock+0x529/0x760 [ 882.031903][T16474] ? __pfx_namespace_unlock+0x10/0x10 [ 882.037269][T16474] ? free_nsproxy+0x3e/0x350 [ 882.041841][T16474] free_nsproxy+0x3e/0x350 [ 882.046238][T16474] do_exit+0x6b0/0x2300 [ 882.050407][T16474] ? do_raw_spin_lock+0x121/0x290 [ 882.055413][T16474] ? __pfx_do_exit+0x10/0x10 [ 882.060008][T16474] do_group_exit+0x21c/0x2d0 [ 882.064604][T16474] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.069799][T16474] get_signal+0x1286/0x1340 [ 882.074298][T16474] arch_do_signal_or_restart+0x9a/0x750 [ 882.079841][T16474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 882.086250][T16474] ? exit_to_user_mode_loop+0x40/0x110 [ 882.091705][T16474] exit_to_user_mode_loop+0x75/0x110 [ 882.096984][T16474] __do_fast_syscall_32+0x1f4/0x2b0 [ 882.102185][T16474] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.107369][T16474] do_fast_syscall_32+0x34/0x80 [ 882.112213][T16474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 882.118521][T16474] RIP: 0023:0xf7f36539 [ 882.122578][T16474] Code: Unable to access opcode bytes at 0xf7f3650f. [ 882.129234][T16474] RSP: 002b:00000000f540560c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 882.137653][T16474] RAX: fffffffffffffe00 RBX: 00000000f73f5020 RCX: 0000000000000080 [ 882.145616][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f5024 [ 882.153604][T16474] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 882.161575][T16474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 882.169527][T16474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 882.177491][T16474] [ 882.180793][T16474] Kernel Offset: disabled [ 882.185132][T16474] Rebooting in 86400 seconds..