last executing test programs: 5.948715593s ago: executing program 1 (id=902): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000740)=0x2000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r5 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.555047494s ago: executing program 2 (id=905): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x0, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) 5.444333542s ago: executing program 2 (id=908): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x7) write(r3, &(0x7f0000000240)="c6", 0x1) 5.241308652s ago: executing program 2 (id=913): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYRES8], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}, 0x50) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006103, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x9498e17e2907101c, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x99, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xdd4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x80, 0x9}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x40045506, &(0x7f0000000100)=0x1e) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.207723074s ago: executing program 1 (id=914): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) recvmmsg$unix(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/105, 0x69}, {&(0x7f00000008c0)=""/28, 0x1c}], 0xa, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000a80)=""/152, 0x98}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/136, 0x88}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/196, 0xc4}, {&(0x7f0000000f80)=""/40, 0x28}], 0x7, &(0x7f0000001040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001140)=""/125, 0x7d}, {&(0x7f00000011c0)=""/109, 0x6d}, {&(0x7f0000001240)=""/10, 0xa}], 0x3, &(0x7f00000012c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001300), 0x6e, &(0x7f00000025c0)=[{&(0x7f0000001380)=""/116, 0x74}, {&(0x7f0000001400)=""/156, 0x9c}, {&(0x7f00000014c0)=""/233, 0xe9}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4, &(0x7f0000002600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002680), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002700)=""/201, 0xc9}, {&(0x7f0000002800)=""/191, 0xbf}, {&(0x7f00000028c0)=""/183, 0xb7}, {&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/44, 0x2c}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000002b80)=""/95, 0x5f}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/60, 0x3c}, {&(0x7f0000003c40)=""/226, 0xe2}, {&(0x7f0000005e00)=""/250, 0xfa}, {&(0x7f0000003e40)=""/147, 0x93}], 0x6, &(0x7f0000003f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003fc0), 0x6e, &(0x7f0000005300)=[{&(0x7f0000004040)=""/152, 0x98}, {&(0x7f0000004100)=""/97, 0x61}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/170, 0xaa}, {&(0x7f0000005240)=""/168, 0xa8}], 0x5, &(0x7f0000005380)}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f00000053c0)=""/234, 0xea}, {&(0x7f00000054c0)=""/58, 0x3a}, {&(0x7f0000005500)=""/255, 0xff}, {&(0x7f0000005600)=""/79, 0x4f}, {&(0x7f0000005680)=""/78, 0x4e}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000057c0)=""/93, 0x5d}, {&(0x7f0000005840)=""/201, 0xc9}], 0x8, &(0x7f00000059c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000005ac0)=@abs, 0x6e, &(0x7f0000006e00)=[{&(0x7f0000005b40)=""/187, 0xbb}, {&(0x7f0000005c00)=""/6, 0x6}, {&(0x7f0000005c40)=""/27, 0x1b}, {&(0x7f0000005c80)=""/245, 0xf5}, {&(0x7f0000005d80)=""/106, 0x6a}, {&(0x7f0000007140)=""/4096, 0x1000}], 0x6, &(0x7f0000006e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x0, &(0x7f0000007100)={0x0, 0x989680}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x10) accept$alg(r1, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4276}], 0x1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.25688374s ago: executing program 1 (id=924): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000a3051e000098149e36cf44b6d7624ca0b3a95e130abce48bfed3e43da9223a93842ebae3ae461d1c6d039893f21d5b9151ddde6ccdd16165d929e12535ab2672b8433c7723dc005c5555c81ac0c4f6ed167155c196e2d3120932c5b84a3854e4fdab87c072bfb1effdb697bddda74fac99c7c291c79ee8134beaf7b4008a9a9129099fbf9483863b4d8459fb5af70b5bdd60ec24a9737a824c5b9c4c7ce17b7b00b85050959766d7cb7ace86604b003b49021405c52ce8877674a2d0aa30e6831f4f5f0fd10fbb3b268f8f25860e517a3dce3b6b0454d278b15899188b3d10eb95334ce066f3b8c05e2dae5b"], 0x0}, 0x0) 3.227338413s ago: executing program 3 (id=931): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 3.15717141s ago: executing program 3 (id=932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x6002, 0x4, 0x3e8, 0x1f0, 0x300, 0x1f0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x30}, @empty=0x4000000, 0x0, 0x1b5b06c8546e5389, 0x10, 0x2, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x7, 0x9, 0x7cc, 0x5, 0x4, 'batadv_slave_1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x6}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x4}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x438) 3.055032922s ago: executing program 3 (id=933): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400082, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1_to_team\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x200, 0xfe, &(0x7f0000000040)="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"}], 0x1}) 2.440001306s ago: executing program 1 (id=936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x6, @loopback, 0xd}, @in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x32d}, @in6={0xa, 0x4e22, 0x6, @remote}, @in6={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}], 0x70) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x10) (async) listen(r0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r3 = fcntl$dupfd(r2, 0x406, r0) (async) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01RZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\a\xf8\xe3\x95U\xc7\xb5k(\x11\xb7%\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xe5\xf6\xe81\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x06\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\xdf6\x1e\r\xc1 \xe2\x8f\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\xd8zL\x8a\x1a\xa8\x18x\xc1\xedg\xff\'\x9a7\n\x01\x87\x9a\xcb\xa3\x97\x8f \x12Qo}jC\x85\x9f\xb6\x8f\xa47$\xecy\x14\xae\xb9\x86C\x9fQnG\nw\x8c\xb9\xa9g\xd6jP.e\xcb&\xeb\xc0\\f\x85\x98N\xaa\x97\x92\xdb\x16J@\xb1\x90\a\xaf\xe1I]\xd6\xcb\x83\xa38\x0e\xf5\x11\xa34\\\xf1+\x80\x01\xbe\xd1\xd1\x1f\xd6q\xc5\xd5\xc7\x95\x9a\xc4= )Eq\xa1[\x14\x98\xfb\xef\x1b\x9d\xa7\xda\xe8T9\xc1\xc2\xd3\x02\xb0\xb1^<.O~~\'b\v\xe8\x84n\x82Mz\xb0\x89\xf6\xb2\xd6L4\x02\xae\xf3\xcaz\te\xc7\xd2!A,\x8609L\x02@\x16\xbah\x87\x97>]\xf0\xb0\x17\xe1\xf9\x7f\xec\x98\x92T', 0x3, 0x17a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) syz_io_uring_setup(0x3253, &(0x7f0000000580)={0x0, 0xa188, 0x400, 0x1, 0x2d0, 0x0, r0}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) (async) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000780)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x81) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.437886436s ago: executing program 3 (id=937): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x18a42000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x0, @empty, 0x6}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000240)="f55f87b3b0200022e45b2d4aa4d5", 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000400)=[{r3, 0x298}], 0x1, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000380)=0x66) gettid() unshare(0xa000200) 2.337779416s ago: executing program 1 (id=939): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400"], 0x38}}, 0x0) 2.25641111s ago: executing program 4 (id=940): socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) (async, rerun: 64) unshare(0x0) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async, rerun: 32) socket(0x10, 0x3, 0x0) (rerun: 32) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) (async, rerun: 32) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="289ebeda0f00"/20, @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4004010) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xa440) (async) r6 = syz_clone(0x805000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r6, 0x0, &(0x7f0000000080)={0x6, 0xffffffffffffffff}, 0x0) 2.234086219s ago: executing program 1 (id=941): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x109002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000140)={0x28, 0x0, r1, r1, 0x4, 0x8, 0x8}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0xffffffffffffffdf, &(0x7f00000003c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7f25}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x20005}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) sendmmsg$inet(r5, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f00000006c0)="3118944f0cb6f5fb3d9f8e69cdadb4df2f504369308c98d390766f45921b80c820b1fd7262cc3b56161fe78a55f37aee3d4449745edd72a0a9c090089e2fe9459f29e19c019a2e4e141219f7b418fea8eda14377d4b886ce240bb9e37138663886c1b21b139718449675f4a936", 0x6d}, {&(0x7f0000002040)="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", 0xbd4}], 0x2}}], 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x5a848, 0x100000000000000}) r10 = syz_usb_connect(0x0, 0xe28, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x310, 0x3, 0xe2, 0xb, 0x20, 0x5}, 0xda, &(0x7f0000001280)={0x5, 0xf, 0xda, 0x1, [@generic={0xd5, 0x10, 0x4, "fd25f5012056c4d4972c0810a0c347a5a8f735b9cbbc0e3c7843c06eaa8aedcd05469ae2972abd10077d72b172cbe4a170c6d59c52b9a53419f23e7654029870e1f6c836ea47f5fbdf52a1599a8fc65eade691c594df0bb5bd5ef8ee2f56bfaf1a46258a7269c73c804155f8f47a2ab487ed8cab7293fb21aa1ebf98af3e5723bc328601e28948d65f9ac86788463d6541a790e66153e9764cc6c2e848862bbaa71ff18b35a1e28a57fd40eedcbf50396befa9dd1c7194b88da67f53cbff7d5c552122cca5b5fd06a02cf61465f7d03addb8"}]}, 0x4, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$hid(r10, &(0x7f0000001740)={0x24, &(0x7f0000001500)={0x40, 0x9, 0xe6, {0xe6, 0x2, "27c427180c4b053f786e6447b6f5e32a41a7d3dde2f0d94d74ca2be2e5b82c7cc2000b20e794932e4df484656a2c66642601b27a5ad91bfe546a710e6f61391662d82142a42b47f50dd07f68e364a2b712bb3addf237fe5cc656d75dcad338e575a68d5a56a32e62c36b7f5a4f67a0aeac8ef4c235ab0bdfc8d6dea899fd5272d50dc5883704f5c49ea8a888f002e4c6f9d075fe77d6f3ba97a22d87f351d43c3f0d50261e91bb35b4bc4d25ed09ad4bcf9cd4d34a5c0f2efd3a62d173a8f57a493746b27d49c29556d173d3b6d4d8a81b153329388d8001064c907960a38148a44dcd94"}}, &(0x7f0000001600)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "ed7f62436ae46b7e133dbe408291453c0ea49af6b77e14b22ff654cde25b8087fea9bdd434c3cfbe0c6f00e4828d46fd84da8586402cb2c021a07eb989ebc59893eac9d755e708066edefac4629afceef76942cbe482755102cee7aa283745e2cdfade108572b1ac0c5ea3ef50ae4b36acf0bd1df0ba9e6dc354b106e9342451c7772e229f6a64ee864751a2fc4c26987d363c698ce0e36f1a397fb002b15279aa6e0966aa04cfe5877f906cd9"}}, &(0x7f00000016c0)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x4, "70257796"}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_4={0x3, 0x1, 0x7, "a2c77a51"}, @local=@item_4={0x3, 0x2, 0x9, "af220243"}]}}, &(0x7f0000001700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x51b}}}}, &(0x7f0000001980)={0x2c, &(0x7f0000001780)={0x0, 0x30, 0x17, "e14fd34bbab7aa2d675bc4e9fa29b137c743467d800e7c"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000001840)={0x20, 0x1, 0xf8, "6e7e41d8ae68ca298f828de159a9d487984ef367a30954a1171527efd2841f76ba8d93a59d59729137c8f38bdbd623b451cd53c3570f1e9dca065d409976d4256beff59027ba9bf3a7b3011bfb4541a037a1e036a9ef7ca95ce64f1c2c64faa62ee6362a991a1de3a169d0f006e521959458cc0105bdebb9de6aa0c066a807c924bcb3ce828c1aa3dec7d0db2d913f4d17ae95447e405a2b5748b5d4a7cd6cf3fe821be0020d47d5a094d151739a378100d69ed93f2c333145c9eb22fe4595ca63c5d2f66f57cb8b3308b39e78c7ddb23d487416e155b58f216b967242296031f4a48d12bdd407073cddf9058746013ba621f82927eb9a99"}, &(0x7f0000001940)={0x20, 0x3, 0x1, 0x9}}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000000080)="93653573dff77390ac818de7b9ffed2f5b53736a95d29fdac48f5a0a20cdd71a7d", 0x21, 0xe}) 2.042267228s ago: executing program 2 (id=942): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.882140143s ago: executing program 2 (id=943): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.734617805s ago: executing program 2 (id=944): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0xfffffffffffffffe, &(0x7f0000006480)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1}}, 0x40) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x41}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) syz_usb_connect$uac1(0x1, 0xec, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x0, 0x0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa9, 0x31}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x3, 0xa, 0x4, 0xcf, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x2], 0xcb}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x2, 0x4, "cb2f"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x402, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x1, 0x6, 0xc6, "53ff1a3020fdc0"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x6f, 0x8, '\r'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xf, 0x10, 0x1, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0xc0, 0x5, {0x7, 0x25, 0x1, 0x8, 0xa, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x46, 0x1003}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0x81, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0x9b, "6fcfc274dcba"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x58a7, 0x9, 0x4, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x6, 0x8, 'u'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x4, 0x2, {0x7, 0x25, 0x1, 0xc, 0x6, 0x9ece}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1a, 0x2, 0x9, 0x8, 0x49}, 0xff, &(0x7f0000000340)={0x5, 0xf, 0xff, 0x5, [@generic={0xca, 0x10, 0x3, "d400f3b55dd284ce8425093868a45b900245782deebf3a8b412a2be41c9bfe926383a059b491b0761e058100243418ff70abd3114083bda60b7de1a8a6718e324264d35aff15f2ea78b62293662982ebf06bbb68b54770cb7851e558a8fe34e9a0fa6d85bb85cdd45361ab2cc19f965727266377ca9b0f0f564c5d27e372952da0131e2eba1bce98054af6d03def102defc560e44f76bdb3312f4755628eb26f6fdedeb75ddbfde7928e1ec8721d081ad19fe7c839d2d2bb6f1970edd601c1453f439a00dd6cca"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x2, 0x0, 0xf, [0xff00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x45, 0x0, 0xe5d8, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0xed, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x64, 0xf4, 0x3, 0x3}]}, 0x5, [{0x9, &(0x7f0000000440)=@string={0x9, 0x3, "733cfae2e69853"}}, {0x5a, &(0x7f0000000480)=@string={0x5a, 0x3, "3ee3daf0807cbf00c40c7dc2edf8d0769b7a8dde11de13fa250a97815c4d8ce4d370646ec922753a6b2e9ae31b3c4cedaabbbdc07b020876f749417ff83e461f81d13a55923f89345dee7c9ba7a163e9ecc683450758d8ac"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x427}}, {0x9, &(0x7f0000000540)=@string={0x9, 0x3, "08ca9698a1704d"}}, {0x7b, &(0x7f00000005c0)=@string={0x7b, 0x3, "69c2514884ba653ff1b067f7795466771f9d309670e497680f2d8bbf051c7fbdeee02a6dc23683e264ce29f9fae1da3e8f2795ee1d303ea5d0b82c8141dbf0823e870697518e91e6b2ddc1b7bcb59aa0d03004d0ee1237d73bfc3ec7c205d3e0a98b7e811ecb767a7e6b0b17f9254bf81be7e7d9f64b1c6a5f"}}]}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.540511613s ago: executing program 4 (id=945): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x100) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.259534928s ago: executing program 0 (id=947): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400082, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1_to_team\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x200, 0xfe, &(0x7f0000000040)="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"}], 0x1}) 985.212998ms ago: executing program 3 (id=948): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xec) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x200006, 0x0) splice(r6, 0x0, r3, 0x0, 0xa, 0x7) write(r4, &(0x7f0000000240)="c6", 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x40}, 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x5}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) 916.35857ms ago: executing program 4 (id=949): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (fail_nth: 3) 894.715054ms ago: executing program 4 (id=950): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 862.992379ms ago: executing program 4 (id=951): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e0000001080002"], 0x38}}, 0x0) 803.127112ms ago: executing program 4 (id=952): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2002, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x0, 0x800, 0x2fd2, 0x3147504d, [0x40, 0x3], [0xb, 0x5], 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = syz_io_uring_complete(0x0, 0x0) write$char_usb(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x10}]}}]}, 0x3c}}, 0x40014) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3d, 0x7, 0x3, 0xa840, r1, 0x2fbc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x9, @value=r1}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x256c, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x75, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x84c2, 0x10, 0x1, {0x22, 0x9c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x5, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001680)={0x24, 0x0, &(0x7f00000015c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, 0x0, &(0x7f0000001640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x20f}}}}, &(0x7f0000001900)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001e40)={0x24, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="00033800000038034f0792954d725909e49e9efa92f38a54c9f7809e6d6966bd29cb89c2d41e91ccb6cd837b090306c12f9f691d5df3a258000000000000"], 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x80001a, 0x1, 0x1, "3a8e07ca5de21f00713c8fa98601acc620004b0000002100", 0x3231564e}) 679.889623ms ago: executing program 0 (id=953): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 662.944659ms ago: executing program 0 (id=954): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socket$alg(0x26, 0x5, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c00028006000f000304"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r6 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, 0x0) io_uring_setup(0x800005, &(0x7f0000000040)={0x0, 0xc8a1, 0x80, 0x1, 0xc0, 0x0, r6}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200f0c000000bbe345ff3b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_getoverrun(r1) 577.429341ms ago: executing program 3 (id=955): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x3d, 0x22, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) pipe(0x0) r7 = creat(0x0, 0xdafbe5d6891b6e4) close(r7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="150000001000010000000000000000000000000a14000000090a010400000000000000000000000d20000000090a010400000000000000000a0000090900020073797a320000000034000000140a03000000000000000000030000070900010073797a30000000000c0006400000000000000002080003400000000318000000120a"], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) 56.369986ms ago: executing program 0 (id=956): unshare(0xc040480) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_timedsend(r0, 0x0, 0x0, 0x4, &(0x7f0000003300)) 48.618155ms ago: executing program 0 (id=957): unshare(0x20000400) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x1000000, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000080)=0x8001, 0x14ffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r2, &(0x7f0000001800)={0x2020}, 0x2020) pread64(r2, &(0x7f0000000180)=""/131, 0x83, 0x9) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000000)) 0s ago: executing program 0 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x4932, 0xc2, 0x1, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r0}, 0x38) (fail_nth: 28) kernel console output (not intermixed with test programs): id=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.265614][ T30] audit: type=1326 audit(1779556187.837:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.354980][ T30] audit: type=1326 audit(1779556187.837:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.438697][ T30] audit: type=1326 audit(1779556187.837:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.515350][ T30] audit: type=1326 audit(1779556187.837:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.600367][ T30] audit: type=1326 audit(1779556187.837:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.685204][ T30] audit: type=1326 audit(1779556187.837:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3475f9ce59 code=0x7ffc0000 [ 276.709522][ T5714] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 276.865567][ T5714] usb 5-1: device descriptor read/64, error -71 [ 276.885603][ T992] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 276.980397][ T7116] netlink: 88 bytes leftover after parsing attributes in process `syz.1.426'. [ 277.020296][ T992] usb 1-1: device descriptor read/64, error -71 [ 277.115652][ T5714] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.259901][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 277.270670][ T5714] usb 5-1: device descriptor read/64, error -71 [ 277.277084][ T992] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 277.284761][ T7126] netlink: 5 bytes leftover after parsing attributes in process `syz.1.431'. [ 277.296462][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 277.306163][ T7126] binder: 7125:7126 ioctl 40505331 200000000300 returned -22 [ 277.385942][ T5714] usb usb5-port1: attempt power cycle [ 277.417919][ T992] usb 1-1: device descriptor read/64, error -71 [ 277.526307][ T992] usb usb1-port1: attempt power cycle [ 277.725561][ T5714] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 277.766275][ T5714] usb 5-1: device descriptor read/8, error -71 [ 277.797609][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.806551][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.857180][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 277.885870][ T992] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 277.928090][ T992] usb 1-1: device descriptor read/8, error -71 [ 278.015650][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 278.027896][ T5714] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 278.039666][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.057074][ T5714] usb 5-1: device descriptor read/8, error -71 [ 278.063894][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 278.075337][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 278.091857][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.100157][ T24] usb 2-1: Product: syz [ 278.104360][ T24] usb 2-1: Manufacturer: syz [ 278.109156][ T24] usb 2-1: SerialNumber: syz [ 278.118651][ T24] usb 2-1: config 0 descriptor?? [ 278.167200][ T5714] usb usb5-port1: unable to enumerate USB device [ 278.176008][ T992] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 278.195967][ T992] usb 1-1: device descriptor read/8, error -71 [ 278.307843][ T992] usb usb1-port1: unable to enumerate USB device [ 278.332798][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 278.344786][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 278.367049][ T24] imon:send_packet: packet tx failed (-71) [ 278.385826][ T24] imon 2-1:0.0: panel buttons/knobs setup failed [ 278.435505][ T24] rc_core: IR keymap rc-imon-pad not found [ 278.441369][ T24] Registered IR keymap rc-empty [ 278.446842][ T24] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 278.457214][ T24] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 278.468879][ T24] imon:send_packet: packet tx failed (-71) [ 278.495627][ T24] imon 2-1:0.0: remote input dev register failed [ 278.502199][ T24] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 278.524140][ T24] imon 2-1:0.0: unable to initialize intf0, err 0 [ 278.530737][ T24] imon:imon_probe: failed to initialize context! [ 278.538432][ T24] imon 2-1:0.0: unable to register, err -19 [ 278.547672][ T24] usb 2-1: USB disconnect, device number 16 [ 278.845518][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 278.878314][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.891982][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.996921][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 279.026932][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 279.041722][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.051587][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 279.060991][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.069248][ T24] usb 2-1: Product: syz [ 279.073429][ T24] usb 2-1: Manufacturer: syz [ 279.078491][ T24] usb 2-1: SerialNumber: syz [ 279.089991][ T24] usb 2-1: config 0 descriptor?? [ 279.095955][ T7134] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 279.165029][ T7149] netlink: 'syz.0.441': attribute type 7 has an invalid length. [ 279.197720][ T3273] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.207004][ T7149] netlink: 'syz.0.441': attribute type 7 has an invalid length. [ 279.216933][ T3273] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.228601][ T7149] netlink: 'syz.0.441': attribute type 7 has an invalid length. [ 279.233270][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 279.236830][ T3273] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.245882][ T7150] netlink: 5 bytes leftover after parsing attributes in process `syz.4.442'. [ 279.265279][ T3273] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.282844][ T7150] binder: 7148:7150 ioctl 40505331 200000000300 returned -22 [ 279.308019][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 279.339189][ T24] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 279.339661][ T7153] fuse: Bad value for 'fd' [ 279.542989][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.563368][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.612981][ T24] rc_core: IR keymap rc-imon-pad not found [ 279.619006][ T1103] net_ratelimit: 27 callbacks suppressed [ 279.619025][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 279.638216][ T24] Registered IR keymap rc-empty [ 279.650777][ T24] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 279.680375][ T24] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 279.725999][ T24] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 279.742849][ T24] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 279.765541][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 279.803575][ T24] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:17> initialized [ 279.876610][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 279.995521][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 280.115527][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 280.172168][ T7181] QAT: Device 198 not found [ 280.181404][ T7183] fuse: Bad value for 'fd' [ 280.210413][ T7185] imon:display_open: display port is already open [ 280.227131][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 280.378366][ T7194] input: syz1 as /devices/virtual/input/input16 [ 280.401205][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 280.466243][ T7199] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 280.480548][ T7191] libceph: resolve '0..' (ret=-3): failed [ 280.630738][ T7202] bond1: (slave geneve2): making interface the new active one [ 280.667025][ T7202] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 280.683755][ T7184] netlink: 'syz.3.451': attribute type 13 has an invalid length. [ 280.710575][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 280.720458][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 280.880099][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 280.894775][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 280.906044][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 281.028433][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 281.217133][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 281.314214][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 281.333738][ T2365] pvrusb2: Failure uploading firmware1 [ 281.340299][ T2365] pvrusb2: Device initialization was not successful. [ 281.348467][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 281.361720][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 281.393073][ T5743] usb 2-1: USB disconnect, device number 17 [ 281.398512][ T2365] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 281.423460][ T807] pvrusb2: Device being rendered inoperable [ 281.457786][ T2365] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 282.047305][ T7234] __nla_validate_parse: 1 callbacks suppressed [ 282.047321][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 282.169965][ T7234] bridge1: port 1(dummy0) entered blocking state [ 282.195661][ T7240] netlink: 'syz.1.469': attribute type 10 has an invalid length. [ 282.206922][ T7234] bridge1: port 1(dummy0) entered disabled state [ 282.219268][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.469'. [ 282.237791][ T7234] dummy0: entered allmulticast mode [ 282.253601][ T7234] dummy0: entered promiscuous mode [ 282.314012][ T7240] bridge1: port 1(dummy0) entered blocking state [ 282.321340][ T7240] bridge1: port 1(dummy0) entered forwarding state [ 282.348227][ T7240] dummy0: left allmulticast mode [ 282.357288][ T7240] bridge1: port 1(dummy0) entered disabled state [ 282.697706][ T7249] program syz.1.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.005532][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 283.185784][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 283.200781][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.228444][ T9] usb 5-1: config 9 has an invalid interface number: 111 but max is 0 [ 283.243979][ T9] usb 5-1: config 9 has no interface number 0 [ 283.262408][ T9] usb 5-1: config 9 interface 111 has no altsetting 0 [ 283.280528][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=f7.35 [ 283.298158][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.312276][ T9] usb 5-1: Product: syz [ 283.324146][ T9] usb 5-1: Manufacturer: syz [ 283.332223][ T9] usb 5-1: SerialNumber: syz [ 283.582873][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.606047][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.621785][ T9] peak_usb 5-1:9.111 can0: unable to request usb[type=0 value=1] err=-71 [ 283.631731][ T9] peak_usb 5-1:9.111: unable to read PCAN-USB Pro FD firmware info (err -71) [ 283.706338][ T9] peak_usb 5-1:9.111: probe with driver peak_usb failed with error -71 [ 283.736004][ T9] usb 5-1: USB disconnect, device number 25 [ 284.164541][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.199275][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.220800][ T7273] fuse: Bad value for 'fd' [ 284.580479][ T7279] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.615574][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 284.649025][ T76] net_ratelimit: 25 callbacks suppressed [ 284.649054][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 284.665220][ T7281] fuse: Bad value for 'fd' [ 284.677141][ T7281] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.775615][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 284.796448][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 284.821776][ T9] usb 2-1: config 0 has no interface number 0 [ 284.836273][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 284.861894][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 284.877851][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 284.891966][ T9] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 284.900292][ T9] usb 2-1: Manufacturer: syz [ 284.904929][ T9] usb 2-1: SerialNumber: syz [ 284.905636][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 284.922253][ T9] usb 2-1: config 0 descriptor?? [ 285.025755][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 285.088604][ T7292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 285.095604][ T7292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.109658][ T7292] vhci_hcd vhci_hcd.0: Device attached [ 285.122344][ T7292] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 285.125619][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 285.128883][ T7292] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 285.139973][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 285.157978][ T9] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0 [ 285.159311][ T7295] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 285.168463][ T9] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 285.171202][ T7295] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 285.172131][ T7295] vhci_hcd vhci_hcd.0: Device attached [ 285.188406][ T7292] vhci_hcd vhci_hcd.0: Device attached [ 285.209049][ T7290] netlink: 80 bytes leftover after parsing attributes in process `syz.2.485'. [ 285.240251][ T7292] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(7) [ 285.246787][ T7292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.264806][ T7292] vhci_hcd vhci_hcd.0: Device attached [ 285.275882][ T7301] vhci_hcd: connection closed [ 285.278085][ T7298] vhci_hcd: connection closed [ 285.279200][ T3273] vhci_hcd vhci_hcd.4: stop threads [ 285.295969][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 285.296812][ T7296] vhci_hcd: connection closed [ 285.304117][ T7293] vhci_hcd: connection closed [ 285.312211][ T3273] vhci_hcd vhci_hcd.4: release socket [ 285.333872][ T3273] vhci_hcd vhci_hcd.4: disconnect device [ 285.344699][ T3273] vhci_hcd vhci_hcd.4: stop threads [ 285.350952][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 285.366356][ T992] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 285.377311][ T3273] vhci_hcd vhci_hcd.4: release socket [ 285.382831][ T7294] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 285.391886][ T24] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 285.401297][ T3273] vhci_hcd vhci_hcd.4: disconnect device [ 285.407120][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 285.415178][ T3273] vhci_hcd vhci_hcd.4: stop threads [ 285.421809][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 285.431103][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.440802][ T3273] vhci_hcd vhci_hcd.4: release socket [ 285.446381][ T24] usb 1-1: Product: syz [ 285.450640][ T3273] vhci_hcd vhci_hcd.4: disconnect device [ 285.457100][ T24] usb 1-1: Manufacturer: syz [ 285.461787][ T3273] vhci_hcd vhci_hcd.4: stop threads [ 285.467127][ T24] usb 1-1: SerialNumber: syz [ 285.471775][ T3273] vhci_hcd vhci_hcd.4: release socket [ 285.480571][ T3273] vhci_hcd vhci_hcd.4: disconnect device [ 285.487555][ T24] usb 1-1: config 0 descriptor?? [ 285.506234][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 285.515543][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 285.625533][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 285.735919][ T24] gspca_sq930x: reg_r 001f failed -71 [ 285.745953][ T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 285.767140][ T24] usb 1-1: USB disconnect, device number 18 [ 286.042482][ T7312] FAULT_INJECTION: forcing a failure. [ 286.042482][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 286.066755][ T7314] FAULT_INJECTION: forcing a failure. [ 286.066755][ T7314] name failslab, interval 1, probability 0, space 0, times 0 [ 286.084503][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(full) [ 286.084527][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.084536][ T7312] Call Trace: [ 286.084542][ T7312] [ 286.084549][ T7312] dump_stack_lvl+0xe8/0x150 [ 286.084571][ T7312] should_fail_ex+0x412/0x560 [ 286.084594][ T7312] should_failslab+0xa8/0x100 [ 286.084619][ T7312] __kmalloc_noprof+0xe8/0x760 [ 286.084639][ T7312] ? tomoyo_encode+0x28b/0x550 [ 286.084662][ T7312] tomoyo_encode+0x28b/0x550 [ 286.084686][ T7312] tomoyo_realpath_from_path+0x58d/0x5d0 [ 286.084715][ T7312] tomoyo_check_open_permission+0x229/0x470 [ 286.084734][ T7312] ? tomoyo_check_open_permission+0x1d3/0x470 [ 286.084751][ T7312] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 286.084770][ T7312] ? __asan_memset+0x22/0x50 [ 286.084830][ T7312] security_file_open+0xa9/0x240 [ 286.084849][ T7312] do_dentry_open+0x384/0x14e0 [ 286.084871][ T7312] ? vfs_open+0x31/0x340 [ 286.084889][ T7312] vfs_open+0x3b/0x340 [ 286.084902][ T7312] ? path_openat+0x2df0/0x3860 [ 286.084924][ T7312] path_openat+0x2e08/0x3860 [ 286.084958][ T7312] ? __pfx_stack_trace_save+0x10/0x10 [ 286.084982][ T7312] ? stack_depot_save_flags+0x33/0x810 [ 286.085007][ T7312] ? __pfx_path_openat+0x10/0x10 [ 286.085024][ T7312] ? __x64_sys_openat+0x138/0x170 [ 286.085046][ T7312] ? __lock_acquire+0x6b5/0x2cf0 [ 286.085073][ T7312] do_file_open+0x23e/0x4a0 [ 286.085095][ T7312] ? __pfx_do_file_open+0x10/0x10 [ 286.085131][ T7312] ? _raw_spin_unlock+0x28/0x50 [ 286.085149][ T7312] ? alloc_fd+0x64b/0x6c0 [ 286.085173][ T7312] do_sys_openat2+0x113/0x200 [ 286.085193][ T7312] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.085212][ T7312] ? exc_page_fault+0x6a/0xc0 [ 286.085237][ T7312] ? do_user_addr_fault+0xc6f/0x1340 [ 286.085256][ T7312] __x64_sys_openat+0x138/0x170 [ 286.085275][ T7312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.085293][ T7312] do_syscall_64+0x15f/0xf80 [ 286.085307][ T7312] ? trace_irq_disable+0x3b/0x140 [ 286.085327][ T7312] ? clear_bhb_loop+0x40/0x90 [ 286.085347][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.085362][ T7312] RIP: 0033:0x7f8ca875d68e [ 286.085377][ T7312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 286.085394][ T7312] RSP: 002b:00007f8ca9611ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.085409][ T7312] RAX: ffffffffffffffda RBX: 00007f8ca96146c0 RCX: 00007f8ca875d68e [ 286.085419][ T7312] RDX: 0000000000000002 RSI: 00007f8ca883210a RDI: ffffffffffffff9c [ 286.085428][ T7312] RBP: 00007f8ca9614090 R08: 0000000000000000 R09: 0000000000000000 [ 286.085437][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 286.085445][ T7312] R13: 00002000000009c0 R14: 0000000000000000 R15: 00007f8ca8b3fa48 [ 286.085469][ T7312] [ 286.147178][ T7314] CPU: 1 UID: 0 PID: 7314 Comm: syz.4.492 Not tainted syzkaller #0 PREEMPT(full) [ 286.147201][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.147211][ T7314] Call Trace: [ 286.147218][ T7314] [ 286.147225][ T7314] dump_stack_lvl+0xe8/0x150 [ 286.147249][ T7314] should_fail_ex+0x412/0x560 [ 286.147274][ T7314] should_failslab+0xa8/0x100 [ 286.147297][ T7314] __kmalloc_noprof+0xe8/0x760 [ 286.147318][ T7314] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 286.147344][ T7314] tomoyo_realpath_from_path+0xe3/0x5d0 [ 286.147366][ T7314] ? tomoyo_domain+0xd7/0x130 [ 286.147391][ T7314] ? tomoyo_path_number_perm+0x219/0x630 [ 286.147408][ T7314] tomoyo_path_number_perm+0x246/0x630 [ 286.147429][ T7314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.147446][ T7314] ? __lock_acquire+0x6b5/0x2cf0 [ 286.147476][ T7314] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 286.147510][ T7314] ? __fget_files+0x2a/0x420 [ 286.147530][ T7314] ? __fget_files+0x2a/0x420 [ 286.147546][ T7314] ? __fget_files+0x3a0/0x420 [ 286.147561][ T7314] ? __fget_files+0x2a/0x420 [ 286.147582][ T7314] security_file_ioctl+0xc3/0x2a0 [ 286.147601][ T7314] __se_sys_ioctl+0x47/0x170 [ 286.147622][ T7314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.147639][ T7314] do_syscall_64+0x15f/0xf80 [ 286.147654][ T7314] ? trace_irq_disable+0x3b/0x140 [ 286.147674][ T7314] ? clear_bhb_loop+0x40/0x90 [ 286.147693][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.147708][ T7314] RIP: 0033:0x7f829c79ce59 [ 286.147724][ T7314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.147737][ T7314] RSP: 002b:00007f829d619028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.147754][ T7314] RAX: ffffffffffffffda RBX: 00007f829ca15fa0 RCX: 00007f829c79ce59 [ 286.147765][ T7314] RDX: 0000200000000140 RSI: 0000000040084146 RDI: 0000000000000005 [ 286.147774][ T7314] RBP: 00007f829d619090 R08: 0000000000000000 R09: 0000000000000000 [ 286.147783][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.147792][ T7314] R13: 00007f829ca16038 R14: 00007f829ca15fa0 R15: 00007f829cb3fa48 [ 286.147817][ T7314] [ 286.148228][ T7314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.517603][ T7312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.530008][ T7315] loop8: detected capacity change from 0 to 524287999 [ 286.826016][ T7319] fuse: Bad value for 'fd' [ 286.999531][ T7324] syzkaller1: entered promiscuous mode [ 287.014888][ T7324] syzkaller1: entered allmulticast mode [ 287.585518][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 287.679411][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 287.715499][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 287.735519][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 287.741527][ T9] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 287.750551][ T9] usb 5-1: config 6 has no interfaces? [ 287.757739][ T9] usb 5-1: config 6 has no interfaces? [ 287.764321][ T9] usb 5-1: config 6 has no interfaces? [ 287.778428][ T9] usb 5-1: config 6 has no interfaces? [ 287.786375][ T9] usb 5-1: config 6 has no interfaces? [ 287.796909][ T9] usb 5-1: config 6 has no interfaces? [ 287.808095][ T9] usb 5-1: config 6 has no interfaces? [ 287.819194][ T9] usb 5-1: config 6 has no interfaces? [ 287.831993][ T5721] usb 2-1: USB disconnect, device number 18 [ 287.847231][ T9] usb 5-1: string descriptor 0 read error: -71 [ 287.863054][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 287.888732][ T24] usb 1-1: unable to get BOS descriptor set [ 287.903051][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 287.903769][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 287.921197][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 287.935759][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 287.944615][ T9] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 287.945253][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.962835][ T24] usb 1-1: Product: 魯齶潞굸㥅孯昱㦞繏觷忊仩敓兾Ⅿ㗗ॏ䶈⻊휸ퟧ뮥ሉ⋶❉Ġ䘢ঀ [ 287.975644][ T24] usb 1-1: Manufacturer: 黰뢛詭䢒ࡋ袣菆壸뾯煰伜류璶ဓẖ財납爹ꢇי置痀ۏꍉ埗솎䥹툵젺㓴嶒쨯嗨ᬸㇻ뛠颋䋞㈁녻뭔鯩ᵳᣦ葺䱙갴㖧瓬準㼬嵊는똎蒷龌쿅釘㢫檢芀꿝虷䤹陽ౕ乚鼬꛺粩층 [ 288.001185][ T9] usb 5-1: no configuration chosen from 8 choices [ 288.004498][ T9] usb 5-1: USB disconnect, device number 26 [ 288.013069][ T24] usb 1-1: SerialNumber: К [ 288.114728][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.124785][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.150636][ T7350] netlink: 'syz.1.505': attribute type 16 has an invalid length. [ 288.158556][ T7350] netlink: 'syz.1.505': attribute type 17 has an invalid length. [ 288.220591][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.227815][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.260141][ T7342] netlink: 'syz.0.503': attribute type 5 has an invalid length. [ 288.272902][ T7342] netlink: 'syz.0.503': attribute type 5 has an invalid length. [ 288.287526][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.294857][ T7350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.479489][ T24] usb 1-1: USB disconnect, device number 19 [ 288.525603][ T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 288.624742][ T7362] usb usb7: usbfs: process 7362 (syz.2.509) did not claim interface 0 before use [ 288.691670][ T29] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.705724][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.719778][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.733845][ T29] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.736073][ T7366] kAFS: unable to lookup cell '(,cL' [ 288.777729][ T29] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.790402][ T29] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.801857][ T29] usb 2-1: Product: syz [ 288.807057][ T29] usb 2-1: Manufacturer: syz [ 288.837916][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 288.851549][ T29] cdc_wdm 2-1:1.0: skipping garbage [ 288.869444][ T29] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 288.905595][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 289.065478][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 289.076400][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.091500][ T24] usb 1-1: config 0 has no interface number 0 [ 289.103590][ T24] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 289.129237][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 289.145795][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 289.165052][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.180816][ T24] usb 1-1: Product: syz [ 289.187077][ T24] usb 1-1: Manufacturer: syz [ 289.195846][ T24] usb 1-1: SerialNumber: syz [ 289.210701][ T24] usb 1-1: config 0 descriptor?? [ 289.472400][ T7360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.508'. [ 289.526419][ T7360] syzkaller1: entered promiscuous mode [ 289.553179][ T7360] syzkaller1: entered allmulticast mode [ 289.585597][ T24] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 289.585746][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.631231][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.661099][ T24] cx231xx 1-1:0.1: Failed to read PCB config [ 289.687821][ T24] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 289.718786][ T76] net_ratelimit: 31 callbacks suppressed [ 289.718802][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 289.732171][ T24] usb 1-1: USB disconnect, device number 20 [ 289.855556][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 289.968898][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 290.076536][ T5721] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 290.085564][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 290.135569][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.195524][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 290.228126][ T5721] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 290.240158][ T5721] usb 5-1: config 0 has no interface number 0 [ 290.248042][ T5721] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 290.267383][ T5721] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 290.281483][ T5721] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 290.291127][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 290.299639][ T5721] usb 5-1: Manufacturer: syz [ 290.305055][ T5721] usb 5-1: SerialNumber: syz [ 290.305560][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 290.315581][ T7392] netlink: 172 bytes leftover after parsing attributes in process `syz.2.519'. [ 290.326128][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 290.326237][ T5721] usb 5-1: config 0 descriptor?? [ 290.344848][ T7392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'. [ 290.345031][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.365238][ T24] usb 1-1: config 0 has no interface number 0 [ 290.365281][ T24] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 290.365300][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 290.367993][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 290.368010][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.368020][ T24] usb 1-1: Product: syz [ 290.368028][ T24] usb 1-1: Manufacturer: syz [ 290.368035][ T24] usb 1-1: SerialNumber: syz [ 290.370499][ T24] usb 1-1: config 0 descriptor?? [ 290.455583][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 290.486766][ T992] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 290.543686][ T5721] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 290.556532][ T5721] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 290.583734][ T24] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 290.593791][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 290.644850][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.669790][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.706764][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 290.747195][ T24] cx231xx 1-1:0.1: Failed to read PCB config [ 290.759695][ T24] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -110 [ 290.815945][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 290.875033][ T7401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.522'. [ 290.890166][ T9] usb 1-1: USB disconnect, device number 21 [ 290.910754][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.930230][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.032147][ T5743] usb 2-1: USB disconnect, device number 19 [ 291.087285][ T7403] fuse: Bad value for 'fd' [ 291.404699][ T7412] xt_hashlimit: size too large, truncated to 1048576 [ 291.414351][ T7412] xt_hashlimit: max too large, truncated to 1048576 [ 291.470025][ T7413] loop8: detected capacity change from 0 to 524287999 [ 291.509116][ T7415] loop5: detected capacity change from 0 to 7 [ 291.530462][ T7415] Dev loop5: unable to read RDB block 7 [ 291.552830][ T7415] loop5: AHDI p2 [ 291.564045][ T7415] loop5: partition table partially beyond EOD, truncated [ 292.040595][ T7435] loop5: detected capacity change from 0 to 2640 [ 292.073451][ T7435] buffer_io_error: 328 callbacks suppressed [ 292.073468][ T7435] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.107594][ T7435] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.140742][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.534'. [ 292.167254][ T7435] Buffer I/O error on dev loop5, logical block 0, async page read [ 292.254714][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 292.328905][ T7435] loop5: unable to read partition table [ 292.335711][ T7435] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 292.360582][ T7437] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 292.379721][ T7437] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 292.404032][ T7452] fuse: Unknown parameter 'fd0x0000000000000003' [ 292.419652][ T7437] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 292.442823][ T7437] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 292.455935][ T7437] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 292.467045][ T7437] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 292.475631][ T7437] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 292.496900][ T7456] netlink: 'syz.0.538': attribute type 7 has an invalid length. [ 292.625050][ T7459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.750388][ T7465] fuse: Bad value for 'fd' [ 292.885076][ T7471] netlink: 144 bytes leftover after parsing attributes in process `syz.3.543'. [ 292.893138][ T5743] usb 5-1: USB disconnect, device number 27 [ 293.040044][ T7477] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.124611][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.546'. [ 293.323954][ T7489] fuse: Bad value for 'fd' [ 293.826358][ T5743] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 293.835864][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 294.000413][ T5743] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 294.009640][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.021699][ T5743] usb 1-1: config 0 descriptor?? [ 294.146823][ T992] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 294.232382][ T9] usb 1-1: USB disconnect, device number 22 [ 294.298452][ T992] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.316134][ T992] usb 2-1: not running at top speed; connect to a high speed hub [ 294.325176][ T992] usb 2-1: config 2 has an invalid interface number: 77 but max is 0 [ 294.333893][ T992] usb 2-1: config 2 has no interface number 0 [ 294.343770][ T992] usb 2-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=67.12 [ 294.353446][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.361744][ T992] usb 2-1: Product: syz [ 294.366262][ T992] usb 2-1: Manufacturer: syz [ 294.370889][ T992] usb 2-1: SerialNumber: syz [ 294.595872][ T992] rndis_host 2-1:2.77: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 294.609953][ T992] usb 2-1: USB disconnect, device number 20 [ 294.736203][ T3273] net_ratelimit: 35 callbacks suppressed [ 294.736218][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 294.865554][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 294.985978][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 295.095757][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 295.155803][ T992] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 295.227463][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 295.307732][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 295.316431][ T992] usb 1-1: not running at top speed; connect to a high speed hub [ 295.325237][ T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.336016][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 295.336668][ T992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.354339][ T992] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 295.363723][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.373725][ T992] usb 1-1: Product: syz [ 295.378018][ T992] usb 1-1: Manufacturer: syz [ 295.383239][ T992] usb 1-1: SerialNumber: syz [ 295.398017][ T992] usb 1-1: 0:1 : does not exist [ 295.403031][ T992] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 295.426723][ T992] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 295.446907][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 295.455730][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 295.511636][ T992] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 295.542962][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.566036][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 295.608907][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.622130][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.633368][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.649616][ T9] usb 2-1: config 0 descriptor?? [ 295.685629][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 295.805551][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 295.858354][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 295.870929][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 295.887222][ T9] usb 2-1: USB disconnect, device number 21 [ 295.964869][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 296.101131][ T992] usb 1-1: USB disconnect, device number 23 [ 296.345513][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 296.485551][ T992] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 296.496600][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 296.505766][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 296.514971][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.523176][ T9] usb 2-1: Product: syz [ 296.528430][ T9] usb 2-1: Manufacturer: syz [ 296.533048][ T9] usb 2-1: SerialNumber: syz [ 296.541124][ T9] usb 2-1: config 0 descriptor?? [ 296.641068][ T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.661114][ T992] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.689156][ T992] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 296.706565][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.723150][ T992] usb 1-1: Product: syz [ 296.730341][ T992] usb 1-1: Manufacturer: syz [ 296.735061][ T992] usb 1-1: SerialNumber: syz [ 296.752016][ T992] usb 1-1: config 0 descriptor?? [ 296.762258][ T9] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 296.774198][ T992] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 296.784517][ T9] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 296.825648][ T9] usb 2-1: USB disconnect, device number 22 [ 296.991307][ T7561] netlink: 'syz.0.575': attribute type 21 has an invalid length. [ 297.008206][ T7561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.575'. [ 297.030228][ T9] usb 1-1: USB disconnect, device number 24 [ 297.254007][ T7574] xt_ecn: cannot match TCP bits for non-tcp packets [ 298.155780][ T992] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 298.236179][ T5743] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 298.313624][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.325828][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 298.333647][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.347252][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.365350][ T992] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 298.378980][ T992] usb 1-1: config 174 has no interface number 0 [ 298.385780][ T992] usb 1-1: config 174 interface 197 altsetting 12 bulk endpoint 0xF has invalid maxpacket 1023 [ 298.396471][ T992] usb 1-1: config 174 interface 197 has no altsetting 0 [ 298.428704][ T992] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 298.449739][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.478611][ T992] usb 1-1: Product: syz [ 298.490776][ T992] usb 1-1: Manufacturer: syz [ 298.496533][ T992] usb 1-1: SerialNumber: syz [ 298.521275][ T7588] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 298.531718][ T5743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.547017][ T5743] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 298.566043][ T5743] usb 2-1: can't read configurations, error -71 [ 298.756100][ T992] usb 1-1: USB disconnect, device number 25 [ 298.922301][ T7605] fuse: Bad value for 'fd' [ 299.129519][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 299.152229][ T7611] netlink: 120 bytes leftover after parsing attributes in process `syz.4.595'. [ 299.159424][ T7609] ip6tnl1: entered allmulticast mode [ 299.407933][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 299.427566][ T7623] netlink: 'syz.0.599': attribute type 15 has an invalid length. [ 299.459230][ T7623] vxlan0: entered promiscuous mode [ 299.479810][ T3273] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 64767 - 0 [ 299.496408][ T3273] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 64767 - 0 [ 299.506168][ T3273] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 64767 - 0 [ 299.515194][ T3273] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 64767 - 0 [ 299.563627][ T7627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.724269][ T7632] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.604'. [ 300.005858][ T76] net_ratelimit: 34 callbacks suppressed [ 300.005875][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 300.042245][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'. [ 300.061180][ T7643] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 300.069125][ T7643] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 300.145508][ T5743] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 300.153282][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 300.266565][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 300.298267][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.322977][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 300.342734][ T5743] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.352244][ T7651] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 300.360259][ T5743] usb 5-1: can't read configurations, error -61 [ 300.395629][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 300.416408][ T7651] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.427586][ T7651] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 300.459802][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 300.478339][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.496921][ T5743] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 300.615257][ T7656] bond1: (slave gretap1): making interface the new active one [ 300.627906][ T7656] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 300.648379][ T7651] macvlan2: entered promiscuous mode [ 300.655299][ T7651] macvlan2: entered allmulticast mode [ 300.668383][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 300.681937][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 300.689963][ T7651] bond1: entered promiscuous mode [ 300.702324][ T5743] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.706607][ T7651] gretap1: entered promiscuous mode [ 300.722337][ T5743] usb 5-1: can't read configurations, error -61 [ 300.737064][ T7651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.745604][ T5743] usb usb5-port1: attempt power cycle [ 300.760116][ T7651] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 300.792275][ T7651] bond1: left promiscuous mode [ 300.811374][ T7651] gretap1: left promiscuous mode [ 300.986592][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 301.115575][ T5743] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 301.115735][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 301.160414][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.171864][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 301.182223][ T5743] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.190366][ T5743] usb 5-1: can't read configurations, error -61 [ 301.245728][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 301.335575][ T5743] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 301.355625][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 301.358591][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.371903][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 301.381339][ T5743] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.389125][ T5743] usb 5-1: can't read configurations, error -61 [ 301.398115][ T5743] usb usb5-port1: unable to enumerate USB device [ 301.476793][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 301.485794][ T7651] syz.1.612 (7651) used greatest stack depth: 18528 bytes left [ 301.514154][ T7671] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 301.529978][ T7671] bridge0: port 3(team0) entered disabled state [ 301.536680][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.544460][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.816004][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 302.127557][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.143061][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 302.156861][ T9] usb 2-1: can't read configurations, error -71 [ 302.168084][ T7693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.568198][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.590506][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.266078][ T24] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 303.395489][ T5743] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 303.449694][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 303.463195][ T24] usb 5-1: config 0 has no interface number 0 [ 303.472327][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.485320][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 303.496699][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 303.510660][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 303.530438][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 303.544924][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.547697][ T7729] xt_hashlimit: size too large, truncated to 1048576 [ 303.560674][ T5743] usb 2-1: Using ep0 maxpacket: 16 [ 303.570987][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 303.582424][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.582551][ T5743] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.604342][ T5743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.614595][ T24] usb 5-1: config 0 descriptor?? [ 303.621746][ T7720] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 303.629742][ T7720] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 303.642890][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 303.651783][ T5743] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 303.666208][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.676877][ T5743] usb 2-1: SerialNumber: syz [ 303.690152][ T7733] netlink: 'syz.0.640': attribute type 3 has an invalid length. [ 303.714579][ T5743] usb 2-1: 0:2 : does not exist [ 303.869759][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 303.869783][ T30] audit: type=1326 audit(1779556215.697:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 303.904624][ T30] audit: type=1326 audit(1779556215.697:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 303.932007][ T30] audit: type=1326 audit(1779556215.727:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 303.987599][ T30] audit: type=1326 audit(1779556215.727:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.014972][ T30] audit: type=1326 audit(1779556215.727:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.040734][ T30] audit: type=1326 audit(1779556215.727:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.099086][ T30] audit: type=1326 audit(1779556215.727:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.128798][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.140510][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.154980][ T30] audit: type=1326 audit(1779556215.727:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.189668][ T5743] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 304.204603][ T30] audit: type=1326 audit(1779556215.757:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.249980][ T5743] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 304.262546][ T30] audit: type=1326 audit(1779556215.757:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.0.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x7ffc0000 [ 304.293780][ T5743] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 304.313268][ T5743] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 304.357383][ T5743] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 304.413101][ T5743] usb 2-1: USB disconnect, device number 27 [ 304.488852][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.075538][ T3273] net_ratelimit: 29 callbacks suppressed [ 305.075556][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 305.235569][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 305.254789][ T7762] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 305.312294][ T7762] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 305.365829][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 305.378375][ T7762] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 305.467243][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.477151][ T7767] xt_nfacct: accounting object `syz1' does not exist [ 305.485996][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 305.486252][ T7763] binder_alloc: 7761: binder_alloc_buf, no vma [ 305.578752][ T7763] netlink: 'syz.3.649': attribute type 15 has an invalid length. [ 305.640399][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 305.704638][ T7772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.805641][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 305.821578][ T7772] tipc: Started in network mode [ 305.839111][ T7772] tipc: Node identity ea61834deaa8, cluster identity 4711 [ 305.851774][ T7772] tipc: Enabled bearer , priority 0 [ 305.860507][ T7772] syzkaller0: entered promiscuous mode [ 305.878301][ T7772] syzkaller0: entered allmulticast mode [ 305.929641][ T7772] tipc: Resetting bearer [ 305.941969][ T7770] tipc: Resetting bearer [ 305.963745][ T7770] tipc: Disabling bearer [ 306.005525][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 306.125794][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 306.253887][ T7786] fuse: Bad value for 'fd' [ 306.265697][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 306.285787][ T29] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 306.452445][ T9] usb 5-1: USB disconnect, device number 32 [ 306.473999][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.479085][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 306.519229][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.548695][ T29] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 306.563682][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.575094][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.578240][ T29] usb 2-1: config 0 descriptor?? [ 306.595084][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.700053][ T7804] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 306.739725][ T7804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.762324][ T7804] bond2: (slave geneve2): making interface the new active one [ 306.771655][ T7804] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 306.808198][ T29] hid_parser_main: 45 callbacks suppressed [ 306.808220][ T29] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 306.844075][ T29] cp2112 0003:10C4:EA90.0004: report_id 1159634337 is invalid [ 306.872516][ T29] cp2112 0003:10C4:EA90.0004: item 0 4 1 8 parsing failed [ 306.894961][ T29] cp2112 0003:10C4:EA90.0004: parse failed [ 306.912383][ T29] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -22 [ 307.067757][ T29] usb 2-1: USB disconnect, device number 28 [ 307.175550][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 307.207620][ T7820] netlink: 60 bytes leftover after parsing attributes in process `syz.1.672'. [ 307.324648][ T7824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.346025][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 307.353872][ T9] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 307.383021][ T9] usb 1-1: string descriptor 0 read error: -71 [ 307.398987][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 307.416014][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.440935][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 307.458094][ T9] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 307.480048][ T9] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 307.499398][ T9] r8152-cfgselector 1-1: USB disconnect, device number 26 [ 307.675005][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 307.825550][ T992] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 307.942380][ T7840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.966527][ T7840] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 307.985939][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 308.000243][ T992] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 308.017064][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.030308][ T992] usb 2-1: Product: syz [ 308.037962][ T992] usb 2-1: Manufacturer: syz [ 308.045916][ T992] usb 2-1: SerialNumber: syz [ 308.061392][ T992] usb 2-1: config 0 descriptor?? [ 308.074446][ T992] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 308.088434][ T992] usb 2-1: Detected FT232B [ 308.274672][ T7833] xt_ecn: cannot match TCP bits for non-tcp packets [ 308.530425][ T7845] netlink: 'syz.2.678': attribute type 15 has an invalid length. [ 308.545449][ T7845] netlink: 'syz.2.678': attribute type 7 has an invalid length. [ 308.565537][ T7845] netlink: 52 bytes leftover after parsing attributes in process `syz.2.678'. [ 308.921253][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.932113][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.721886][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 309.721902][ T30] audit: type=1326 audit(1779556221.547:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.0.683" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae8699ce59 code=0x0 [ 309.924026][ T7863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.965004][ T30] audit: type=1326 audit(1779556221.787:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3318f9ce59 code=0x7ffc0000 [ 309.997643][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.006702][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.022183][ T30] audit: type=1326 audit(1779556221.817:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3318f9ce59 code=0x7ffc0000 [ 310.076427][ T30] audit: type=1326 audit(1779556221.817:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3318f9ce59 code=0x7ffc0000 [ 310.097612][ T1103] net_ratelimit: 33 callbacks suppressed [ 310.097654][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 310.137482][ T30] audit: type=1326 audit(1779556221.817:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3318f9ce59 code=0x7ffc0000 [ 310.162152][ T30] audit: type=1326 audit(1779556221.817:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3318f9ce59 code=0x7ffc0000 [ 310.186948][ T30] audit: type=1326 audit(1779556221.817:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3318f5d68e code=0x7ffc0000 [ 310.218926][ T30] audit: type=1326 audit(1779556221.817:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3318f9caeb code=0x7ffc0000 [ 310.228860][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 310.248573][ T30] audit: type=1326 audit(1779556221.817:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3318f9caeb code=0x7ffc0000 [ 310.274587][ T30] audit: type=1326 audit(1779556221.847:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3318f9ce59 code=0x7ffc0000 [ 310.345065][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 310.355233][ T7875] netlink: 5 bytes leftover after parsing attributes in process `syz.4.688'. [ 310.364465][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 310.375566][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 310.382803][ T7875] binder: 7874:7875 ioctl 40505331 200000000300 returned -22 [ 310.486434][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 310.592553][ T992] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 310.602870][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 310.635953][ T992] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 310.663170][ T992] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.679245][ T992] usb 2-1: USB disconnect, device number 29 [ 310.689390][ T992] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.690567][ T992] ftdi_sio 2-1:0.0: device disconnected [ 310.691453][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.691'. [ 310.756304][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 310.762493][ T7886] Cannot find add_set index 1 as target [ 310.868441][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 310.894719][ T7892] FAULT_INJECTION: forcing a failure. [ 310.894719][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 310.894751][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.3.694 Not tainted syzkaller #0 PREEMPT(full) [ 310.894769][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.894778][ T7892] Call Trace: [ 310.894785][ T7892] [ 310.894791][ T7892] dump_stack_lvl+0xe8/0x150 [ 310.894815][ T7892] should_fail_ex+0x412/0x560 [ 310.894840][ T7892] should_failslab+0xa8/0x100 [ 310.894864][ T7892] __kvmalloc_node_noprof+0x178/0x8a0 [ 310.894886][ T7892] ? rhashtable_init_noprof+0x52e/0xad0 [ 310.894907][ T7892] ? rhashtable_init_noprof+0x12d/0xad0 [ 310.894932][ T7892] rhashtable_init_noprof+0x52e/0xad0 [ 310.894958][ T7892] nf_flow_table_init+0x17f/0x2a0 [ 310.894982][ T7892] nf_tables_newflowtable+0x15d3/0x2590 [ 310.895020][ T7892] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 310.895040][ T7892] ? nfnl_pernet+0x23/0x240 [ 310.895071][ T7892] ? __nla_parse+0x40/0x60 [ 310.895097][ T7892] nfnetlink_rcv+0x123e/0x27b0 [ 310.895148][ T7892] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 310.895189][ T7892] ? ref_tracker_free+0x693/0x840 [ 310.895237][ T7892] ? __netlink_deliver_tap+0x807/0x850 [ 310.895268][ T7892] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.895287][ T7892] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.895313][ T7892] netlink_unicast+0x75c/0x8e0 [ 310.895344][ T7892] netlink_sendmsg+0x813/0xb40 [ 310.895374][ T7892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.895397][ T7892] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.895418][ T7892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.895440][ T7892] ____sys_sendmsg+0x972/0x9f0 [ 310.895461][ T7892] ? __might_fault+0xaf/0x130 [ 310.895484][ T7892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.895513][ T7892] ? import_iovec+0x73/0xa0 [ 310.895536][ T7892] ___sys_sendmsg+0x2a5/0x360 [ 310.895556][ T7892] ? __lock_acquire+0x6b5/0x2cf0 [ 310.895575][ T7892] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.895623][ T7892] ? __fget_files+0x2a/0x420 [ 310.895638][ T7892] ? __fget_files+0x3a0/0x420 [ 310.895662][ T7892] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.895682][ T7892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.895706][ T7892] ? __pfx_ksys_write+0x10/0x10 [ 310.895728][ T7892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.895742][ T7892] do_syscall_64+0x15f/0xf80 [ 310.895753][ T7892] ? trace_irq_disable+0x3b/0x140 [ 310.895771][ T7892] ? clear_bhb_loop+0x40/0x90 [ 310.895786][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.895797][ T7892] RIP: 0033:0x7f8ca879ce59 [ 310.895810][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.895820][ T7892] RSP: 002b:00007f8ca9614028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.895834][ T7892] RAX: ffffffffffffffda RBX: 00007f8ca8a15fa0 RCX: 00007f8ca879ce59 [ 310.895842][ T7892] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000003 [ 310.895850][ T7892] RBP: 00007f8ca9614090 R08: 0000000000000000 R09: 0000000000000000 [ 310.895857][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.895864][ T7892] R13: 00007f8ca8a16038 R14: 00007f8ca8a15fa0 R15: 00007f8ca8b3fa48 [ 310.895884][ T7892] [ 310.978126][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 311.087885][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 311.104403][ T7897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.196990][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 311.644437][ T7917] fuse: Bad value for 'user_id' [ 311.665825][ T7917] fuse: Bad value for 'user_id' [ 311.791125][ T7924] loop9: detected capacity change from 0 to 7 [ 311.803224][ T7924] buffer_io_error: 323 callbacks suppressed [ 311.803237][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.818088][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.830757][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.839208][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.847875][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.868058][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.885968][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.899102][ T7924] ldm_validate_partition_table(): Disk read failed. [ 311.919113][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.942677][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.956206][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 311.975250][ T7924] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.988160][ T7924] Dev loop9: unable to read RDB block 0 [ 311.994748][ T7924] loop9: unable to read partition table [ 312.009965][ T7924] loop9: partition table beyond EOD, truncated [ 312.016384][ T7924] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 312.016384][ T7924] ) failed (rc=-5) [ 312.066054][ T7928] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.115942][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 312.125993][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41836, setting to 1024 [ 312.138431][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.157632][ T7928] netlink: 'syz.3.707': attribute type 10 has an invalid length. [ 312.167515][ T24] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 312.177547][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.196523][ T24] usb 5-1: config 0 descriptor?? [ 312.685562][ T5743] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 312.827267][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.847485][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.860754][ T5743] usb 1-1: Using ep0 maxpacket: 32 [ 312.871318][ T7938] binder: 7937:7938 ioctl c0306201 200000000640 returned -22 [ 312.879037][ T5743] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 312.879063][ T5743] usb 1-1: config 0 has no interface number 0 [ 312.879102][ T5743] usb 1-1: config 0 interface 132 has no altsetting 0 [ 312.881850][ T5743] usb 1-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 312.961282][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.000460][ T5743] usb 1-1: Product: syz [ 313.016828][ T5743] usb 1-1: Manufacturer: syz [ 313.037350][ T5743] usb 1-1: SerialNumber: syz [ 313.059301][ T7943] binder: 7937:7943 ioctl 40087543 200000000200 returned -22 [ 313.070178][ T5743] usb 1-1: config 0 descriptor?? [ 313.093840][ T7943] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.711'. [ 313.093983][ T7945] loop9: detected capacity change from 0 to 2640 [ 313.127506][ T7945] ldm_validate_partition_table(): Disk read failed. [ 313.127721][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 313.136011][ T7945] Dev loop9: unable to read RDB block 0 [ 313.152932][ T7945] loop9: unable to read partition table [ 313.159838][ T7945] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 313.186435][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.226462][ T24] usb 5-1: USB disconnect, device number 33 [ 313.309744][ T5743] cdc_subset 1-1:0.132: probe with driver cdc_subset failed with error -71 [ 313.331702][ T5743] usb 1-1: USB disconnect, device number 27 [ 313.500947][ T7949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.780537][ T7959] overlay: Unknown parameter 'Wz!?V1|G* initial count (2850433972 ns). Using initial count to start timer. [ 315.286428][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 315.369560][ T992] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 315.395653][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 315.486893][ T992] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 315.515873][ T992] usb 5-1: USB disconnect, device number 34 [ 315.522836][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 315.549859][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.645537][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 315.775864][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 315.926181][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 316.056966][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 316.101464][ T8017] FAULT_INJECTION: forcing a failure. [ 316.101464][ T8017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.116707][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.3.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.116733][ T8017] Tainted: [L]=SOFTLOCKUP [ 316.116739][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.116749][ T8017] Call Trace: [ 316.116755][ T8017] [ 316.116762][ T8017] dump_stack_lvl+0xe8/0x150 [ 316.116794][ T8017] should_fail_ex+0x412/0x560 [ 316.116819][ T8017] _copy_to_user+0x31/0xb0 [ 316.116844][ T8017] simple_read_from_buffer+0xe1/0x170 [ 316.116867][ T8017] proc_fail_nth_read+0x1bb/0x230 [ 316.116890][ T8017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.116913][ T8017] ? rw_verify_area+0x2a6/0x4d0 [ 316.116933][ T8017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.116954][ T8017] vfs_read+0x20c/0xa70 [ 316.116980][ T8017] ? __pfx___mutex_lock+0x10/0x10 [ 316.116998][ T8017] ? __pfx_vfs_read+0x10/0x10 [ 316.117019][ T8017] ? __fget_files+0x2a/0x420 [ 316.117042][ T8017] ? __fget_files+0x3a0/0x420 [ 316.117058][ T8017] ? __fget_files+0x2a/0x420 [ 316.117084][ T8017] ksys_read+0x150/0x270 [ 316.117105][ T8017] ? __pfx_ksys_read+0x10/0x10 [ 316.117131][ T8017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.117147][ T8017] do_syscall_64+0x15f/0xf80 [ 316.117162][ T8017] ? trace_irq_disable+0x3b/0x140 [ 316.117182][ T8017] ? clear_bhb_loop+0x40/0x90 [ 316.117201][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.117217][ T8017] RIP: 0033:0x7f8ca875d68e [ 316.117232][ T8017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.117245][ T8017] RSP: 002b:00007f8ca9613fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.117262][ T8017] RAX: ffffffffffffffda RBX: 00007f8ca96146c0 RCX: 00007f8ca875d68e [ 316.117272][ T8017] RDX: 000000000000000f RSI: 00007f8ca96140a0 RDI: 0000000000000004 [ 316.117282][ T8017] RBP: 00007f8ca9614090 R08: 0000000000000000 R09: 0000000000000000 [ 316.117291][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.117300][ T8017] R13: 00007f8ca8a16038 R14: 00007f8ca8a15fa0 R15: 00007f8ca8b3fa48 [ 316.117327][ T8017] [ 316.338497][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 316.455521][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 316.530971][ T8026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.714267][ T8035] binder: BC_ATTEMPT_ACQUIRE not supported [ 316.720599][ T8035] binder: 8034:8035 ioctl c0306201 200000000540 returned -22 [ 316.786229][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 316.955748][ T5714] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 317.107140][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.117575][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.130013][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137763][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.141114][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.147561][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 317.183813][ T5714] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 317.194239][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.209639][ T5714] usb 1-1: config 0 descriptor?? [ 317.400038][ T8046] qrtr: Invalid version 0 [ 317.413888][ T8047] FAULT_INJECTION: forcing a failure. [ 317.413888][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.428292][ T8047] CPU: 0 UID: 0 PID: 8047 Comm: syz.2.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.428319][ T8047] Tainted: [L]=SOFTLOCKUP [ 317.428325][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.428335][ T8047] Call Trace: [ 317.428341][ T8047] [ 317.428348][ T8047] dump_stack_lvl+0xe8/0x150 [ 317.428371][ T8047] should_fail_ex+0x412/0x560 [ 317.428400][ T8047] _copy_from_user+0x2d/0xb0 [ 317.428422][ T8047] do_ip_getsockopt+0x292/0x1d40 [ 317.428451][ T8047] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 317.428475][ T8047] ? aa_file_perm+0x192/0x15e0 [ 317.428500][ T8047] ? aa_label_sk_perm+0x532/0x6e0 [ 317.428527][ T8047] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 317.428547][ T8047] ? _parse_integer_limit+0x1ae/0x1f0 [ 317.428572][ T8047] ? __lock_acquire+0x6b5/0x2cf0 [ 317.428599][ T8047] ip_getsockopt+0xbb/0x230 [ 317.428636][ T8047] ? __pfx_ip_getsockopt+0x10/0x10 [ 317.428656][ T8047] ? __might_fault+0xaf/0x130 [ 317.428676][ T8047] ? __might_fault+0xaf/0x130 [ 317.428697][ T8047] ipv6_getsockopt+0x182/0x2b0 [ 317.428717][ T8047] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 317.428737][ T8047] ? sctp_getsockopt+0x9b/0xb90 [ 317.428755][ T8047] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 317.428776][ T8047] do_sock_getsockopt+0x51d/0x7e0 [ 317.428802][ T8047] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 317.428833][ T8047] ? __fget_files+0x3a0/0x420 [ 317.428849][ T8047] ? __fget_files+0x2a/0x420 [ 317.428869][ T8047] __x64_sys_getsockopt+0x1a4/0x240 [ 317.428894][ T8047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.428909][ T8047] do_syscall_64+0x15f/0xf80 [ 317.428923][ T8047] ? trace_irq_disable+0x3b/0x140 [ 317.428943][ T8047] ? clear_bhb_loop+0x40/0x90 [ 317.428959][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.428973][ T8047] RIP: 0033:0x7f3318f9ce59 [ 317.428988][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.429000][ T8047] RSP: 002b:00007f3319dd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 317.429018][ T8047] RAX: ffffffffffffffda RBX: 00007f3319216090 RCX: 00007f3318f9ce59 [ 317.429029][ T8047] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000003 [ 317.429038][ T8047] RBP: 00007f3319dd3090 R08: 0000200000000300 R09: 0000000000000000 [ 317.429048][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.429056][ T8047] R13: 00007f3319216128 R14: 00007f3319216090 R15: 00007f331933fa48 [ 317.429081][ T8047] [ 317.696925][ T5714] usbhid 1-1:0.0: can't add hid device: -71 [ 317.702978][ T5714] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 317.716699][ T5714] usb 1-1: USB disconnect, device number 28 [ 317.846698][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.857864][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.035569][ T5714] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 318.205509][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 318.212176][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.222456][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.225520][ T5713] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 318.233476][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.254178][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 318.267160][ T5714] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 318.276252][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.286192][ T5714] usb 1-1: config 0 descriptor?? [ 318.387303][ T5713] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 318.395859][ T5713] usb 2-1: config 0 has no interface number 0 [ 318.401999][ T5713] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 318.416089][ T5713] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 318.425462][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 318.433588][ T5713] usb 2-1: Manufacturer: syz [ 318.438706][ T5713] usb 2-1: SerialNumber: syz [ 318.447802][ T5713] usb 2-1: config 0 descriptor?? [ 318.521986][ T8064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.554768][ T8037] nvme_fabrics: missing parameter 'transport=%s' [ 318.561720][ T8037] nvme_fabrics: missing parameter 'nqn=%s' [ 318.730300][ T8073] fuse: Bad value for 'fd' [ 318.791478][ T5714] betop 0003:20BC:5500.0005: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.0-1/input0 [ 318.822988][ T5714] betop 0003:20BC:5500.0005: no inputs found [ 318.973333][ T5713] usb 1-1: USB disconnect, device number 29 [ 319.259911][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 319.270190][ T8083] netlink: 5 bytes leftover after parsing attributes in process `syz.4.756'. [ 319.287692][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 319.302314][ T8083] binder: 8082:8083 ioctl 40505331 200000000300 returned -22 [ 319.813911][ T8099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.835516][ T5714] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 320.017916][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 320.038437][ T5714] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 320.073402][ T5714] usb 5-1: config 0 has no interface number 0 [ 320.108420][ T5714] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.153774][ T5714] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 320.180339][ T5714] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 320.195510][ T1103] net_ratelimit: 30 callbacks suppressed [ 320.195529][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 320.198113][ T5714] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 320.219066][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 320.227364][ T5714] usb 5-1: Product: syz [ 320.258041][ T5714] usb 5-1: config 0 descriptor?? [ 320.285334][ T8094] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 320.307875][ T5714] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 320.365137][ T8111] netlink: 'syz.0.764': attribute type 62 has an invalid length. [ 320.435060][ T8112] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 320.525532][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 320.645512][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 320.735549][ T5713] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 320.758476][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 320.786100][ T8120] loop9: detected capacity change from 0 to 2640 [ 320.796695][ T8120] buffer_io_error: 360 callbacks suppressed [ 320.796710][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.814969][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.825259][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.836129][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.862497][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.896416][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 320.903581][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.912222][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 320.921555][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.945922][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.953781][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.975736][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 320.989625][ T5713] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 321.024533][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.025529][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 321.041395][ T8124] netlink: 92 bytes leftover after parsing attributes in process `syz.2.768'. [ 321.042503][ T24] usb 5-1: USB disconnect, device number 35 [ 321.064614][ T5714] usb 2-1: USB disconnect, device number 30 [ 321.083553][ T8120] ldm_validate_partition_table(): Disk read failed. [ 321.084415][ T5713] usb 1-1: config 0 descriptor?? [ 321.106828][ T8126] x_tables: unsorted entry at hook 2 [ 321.144891][ T5713] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 321.167800][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 321.198631][ T5713] usbhid 1-1:0.0: can't add hid device: -22 [ 321.225638][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 321.232821][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 321.252141][ T8120] Buffer I/O error on dev loop9, logical block 0, async page read [ 321.282631][ T8120] Dev loop9: unable to read RDB block 0 [ 321.300907][ T8120] loop9: unable to read partition table [ 321.316811][ T8120] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 321.355946][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 321.476410][ T76] bond1: (slave bond0): failed to get link speed/duplex [ 321.596996][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 321.828459][ T5713] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 321.952806][ T8142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.007640][ T5713] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 322.048609][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 322.048751][ T8145] FAULT_INJECTION: forcing a failure. [ 322.048751][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 322.085645][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.085672][ T8145] Tainted: [L]=SOFTLOCKUP [ 322.085678][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.085688][ T8145] Call Trace: [ 322.085694][ T8145] [ 322.085702][ T8145] dump_stack_lvl+0xe8/0x150 [ 322.085726][ T8145] should_fail_ex+0x412/0x560 [ 322.085752][ T8145] should_failslab+0xa8/0x100 [ 322.085776][ T8145] __kmalloc_noprof+0xe8/0x760 [ 322.085796][ T8145] ? is_dynamic_key+0xd6/0x1c0 [ 322.085813][ T8145] ? __alloc_workqueue+0x100/0x1f50 [ 322.085838][ T8145] __alloc_workqueue+0x100/0x1f50 [ 322.085859][ T8145] ? vsnprintf+0xdf1/0xee0 [ 322.085888][ T8145] alloc_workqueue_noprof+0xe3/0x210 [ 322.085913][ T8145] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 322.085939][ T8145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 322.085962][ T8145] nci_register_device+0x3ff/0xa00 [ 322.085986][ T8145] ? __pfx_nci_register_device+0x10/0x10 [ 322.086005][ T8145] ? __raw_spin_lock_init+0x45/0x100 [ 322.086027][ T8145] ? __init_waitqueue_head+0xa9/0x150 [ 322.086053][ T8145] virtual_ncidev_open+0x129/0x1a0 [ 322.086076][ T8145] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 322.086103][ T8145] misc_open+0x2d5/0x350 [ 322.086128][ T8145] chrdev_open+0x4cd/0x5e0 [ 322.086147][ T8145] ? __pfx_chrdev_open+0x10/0x10 [ 322.086162][ T8145] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 322.086189][ T8145] ? __pfx_chrdev_open+0x10/0x10 [ 322.086204][ T8145] do_dentry_open+0x785/0x14e0 [ 322.086235][ T8145] vfs_open+0x3b/0x340 [ 322.086251][ T8145] ? path_openat+0x2df0/0x3860 [ 322.086274][ T8145] path_openat+0x2e08/0x3860 [ 322.086309][ T8145] ? __pfx_stack_trace_save+0x10/0x10 [ 322.086334][ T8145] ? stack_depot_save_flags+0x33/0x810 [ 322.086362][ T8145] ? __pfx_path_openat+0x10/0x10 [ 322.086380][ T8145] ? __x64_sys_openat+0x138/0x170 [ 322.086403][ T8145] ? __lock_acquire+0x6b5/0x2cf0 [ 322.086429][ T8145] do_file_open+0x23e/0x4a0 [ 322.086454][ T8145] ? __pfx_do_file_open+0x10/0x10 [ 322.086490][ T8145] ? _raw_spin_unlock+0x28/0x50 [ 322.086508][ T8145] ? alloc_fd+0x64b/0x6c0 [ 322.086533][ T8145] do_sys_openat2+0x113/0x200 [ 322.086553][ T8145] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.086570][ T8145] ? ksys_write+0x242/0x270 [ 322.086590][ T8145] ? __pfx_ksys_write+0x10/0x10 [ 322.086614][ T8145] __x64_sys_openat+0x138/0x170 [ 322.086634][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.086650][ T8145] do_syscall_64+0x15f/0xf80 [ 322.086662][ T8145] ? trace_irq_disable+0x3b/0x140 [ 322.086683][ T8145] ? clear_bhb_loop+0x40/0x90 [ 322.086703][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.086716][ T8145] RIP: 0033:0x7f3318f9ce59 [ 322.086731][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.086743][ T8145] RSP: 002b:00007f3319df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 322.086759][ T8145] RAX: ffffffffffffffda RBX: 00007f3319215fa0 RCX: 00007f3318f9ce59 [ 322.086770][ T8145] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 322.086780][ T8145] RBP: 00007f3319df4090 R08: 0000000000000000 R09: 0000000000000000 [ 322.086790][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.086798][ T8145] R13: 00007f3319216038 R14: 00007f3319215fa0 R15: 00007f331933fa48 [ 322.086823][ T8145] [ 322.436324][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 322.449342][ T5713] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 322.459398][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.478745][ T5713] usb 2-1: config 0 descriptor?? [ 322.499542][ T8140] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 322.950450][ T8158] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 323.092120][ T8168] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 323.137961][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 323.260323][ T5713] usbhid 2-1:0.0: can't add hid device: -71 [ 323.266424][ T5713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 323.281536][ T5713] usb 2-1: USB disconnect, device number 31 [ 323.825898][ T5721] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 323.989748][ T5721] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.998696][ T5721] usb 5-1: config 0 has no interface number 0 [ 324.010465][ T5721] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.033423][ T5721] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.073403][ T5721] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 324.094298][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.114553][ T5721] usb 5-1: config 0 descriptor?? [ 324.187096][ T8181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.590690][ T5721] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0006/input/input20 [ 324.763430][ T24] usb 1-1: USB disconnect, device number 30 [ 324.859867][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 324.914862][ T8194] netlink: 'syz.4.783': attribute type 13 has an invalid length. [ 325.058126][ T5721] holtek_kbd 0003:04D9:A055.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 325.147433][ T24] usb 5-1: USB disconnect, device number 36 [ 326.719574][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 326.745610][ T13] net_ratelimit: 8 callbacks suppressed [ 326.745629][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 326.966845][ T8214] syzkaller0: entered promiscuous mode [ 326.972746][ T8214] syzkaller0: entered allmulticast mode [ 326.995563][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 327.119619][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 327.141851][ T8223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.258250][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 328.175636][ T5780] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 328.365549][ T5780] usb 5-1: Using ep0 maxpacket: 32 [ 328.372184][ T5780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.394063][ T5780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.415655][ T5780] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 328.436821][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.475961][ T5780] usb 5-1: config 0 descriptor?? [ 328.491276][ T5780] hub 5-1:0.0: USB hub found [ 329.279629][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.301930][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.334612][ T5780] hub 5-1:0.0: 1 port detected [ 331.049891][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 331.060837][ T5780] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 331.222492][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 331.376361][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 331.482568][ T5780] usb 5-1: USB disconnect, device number 37 [ 331.525612][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 331.635570][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 331.747169][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 331.841839][ T8278] vivid-004: disconnect [ 331.855524][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 331.878961][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 331.895307][ T8278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.996258][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 332.015484][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 332.024165][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 332.035538][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.035661][ T5780] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 332.063000][ T24] usb 5-1: config 0 descriptor?? [ 332.125557][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 332.229070][ T5780] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.248485][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 332.248761][ T5780] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 332.276717][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 332.284183][ T8277] vivid-004: reconnect [ 332.288438][ T5780] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.288463][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.288476][ T5780] usb 2-1: Product: syz [ 332.288485][ T5780] usb 2-1: Manufacturer: syz [ 332.288504][ T5780] usb 2-1: SerialNumber: syz [ 332.293547][ T5780] cdc_mbim 2-1:1.0: skipping garbage [ 332.327537][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.362953][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 332.376937][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 332.389748][ T24] usb 5-1: media controller created [ 332.452895][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.504099][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 332.530474][ T8293] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 332.615551][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 332.635832][ T24] DVB: Unable to find symbol dib7000p_attach() [ 332.679454][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 332.735514][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 332.868094][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 332.869409][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 332.892257][ T24] Registered IR keymap rc-empty [ 332.927133][ T24] dvb-usb: could not initialize remote control. [ 332.952260][ T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 333.006396][ T24] usb 5-1: USB disconnect, device number 38 [ 333.022645][ T8306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.030732][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 333.058096][ T8306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.147209][ T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 333.149157][ T8306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.202276][ T8306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.218018][ T8306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.241999][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.290373][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.341746][ T8293] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 333.400028][ T5780] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 333.620963][ T5780] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 333.654429][ T5780] wwan wwan0: port wwan0mbim0 attached [ 333.683455][ T5780] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b6:3f:13:9d:95:76 [ 333.724900][ T5780] usb 2-1: USB disconnect, device number 32 [ 333.761979][ T5780] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 333.848549][ T5780] wwan wwan0: port wwan0mbim0 disconnected [ 334.662773][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 334.680248][ T8342] netlink: 5 bytes leftover after parsing attributes in process `syz.1.831'. [ 334.711987][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 334.743747][ T8345] binder: 8341:8345 ioctl 40505331 200000000300 returned -22 [ 334.994066][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.019858][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.046519][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 335.126096][ T4945] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.205545][ T4945] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.205556][ T5666] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.285501][ T4945] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.518744][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 335.518761][ T30] audit: type=1326 audit(1779556247.347:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.595507][ T30] audit: type=1326 audit(1779556247.347:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.641721][ T8376] syzkaller0: entered promiscuous mode [ 335.665963][ T8376] syzkaller0: entered allmulticast mode [ 335.707752][ T30] audit: type=1326 audit(1779556247.397:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.754405][ T30] audit: type=1326 audit(1779556247.397:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.831074][ T30] audit: type=1326 audit(1779556247.397:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.887180][ T30] audit: type=1326 audit(1779556247.397:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.945009][ T30] audit: type=1326 audit(1779556247.397:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 335.982888][ T30] audit: type=1326 audit(1779556247.397:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 336.030688][ T30] audit: type=1326 audit(1779556247.397:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 336.105384][ T30] audit: type=1326 audit(1779556247.397:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.4.841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f829c79ce59 code=0x7ffc0000 [ 336.253015][ T8401] input: syz1 as /devices/virtual/input/input23 [ 336.655533][ T5721] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 336.808545][ T5721] usb 5-1: not running at top speed; connect to a high speed hub [ 336.827697][ T5721] usb 5-1: config 1 interface 0 altsetting 150 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 336.851116][ T5721] usb 5-1: config 1 interface 0 has no altsetting 0 [ 336.861213][ T5721] usb 5-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.40 [ 336.871000][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.879267][ T5721] usb 5-1: Product: ࡚ [ 336.883570][ T5721] usb 5-1: Manufacturer: 繖䌫㛬몃鬃篔崿鏕㠶쭄㑽蠑⢰⪑霴㧆dz㴿䑃票떢꜀㒁亊ᓉ璸仍䅿መ㐺䃸軐ℎﬢ랯垰拉⢝怽줚ᳰ伸ᙇꝇʷ抢橷螸趦瀧啦向Ꭓ湝촙療誻ݜﻶ䘰䪺볭앻㫏肢氘槾࿨뤋暉苵 [ 336.909919][ T5721] usb 5-1: SerialNumber: syz [ 336.953138][ T8405] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 336.977108][ T3273] net_ratelimit: 30 callbacks suppressed [ 336.977125][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 337.018486][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.048555][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.087585][ T8418] netlink: 144 bytes leftover after parsing attributes in process `syz.2.855'. [ 337.267315][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 337.387209][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 337.408493][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.851'. [ 337.445349][ T5721] usbhid 5-1:1.0: can't add hid device: -71 [ 337.469693][ T5721] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 337.508109][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 337.520076][ T5721] usb 5-1: USB disconnect, device number 39 [ 337.530182][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 337.605247][ T8422] vlan2: entered promiscuous mode [ 337.663925][ T8422] syz_tun: entered promiscuous mode [ 337.747196][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 337.866450][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 337.995598][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 338.006569][ T29] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 338.061853][ T8435] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.125608][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 338.175552][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 338.193465][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 338.220847][ T29] usb 1-1: config index 0 descriptor too short (expected 89, got 58) [ 338.247257][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 338.249322][ T29] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 338.277990][ T29] usb 1-1: config 13 has an invalid descriptor of length 231, skipping remainder of the config [ 338.297501][ T29] usb 1-1: config 13 has no interface number 0 [ 338.312643][ T29] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 338.331001][ T29] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.357931][ T29] usb 1-1: config 13 interface 50 has no altsetting 0 [ 338.376911][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 338.393080][ T29] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 338.421931][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.454265][ T29] usb 1-1: Product: syz [ 338.468907][ T29] usb 1-1: Manufacturer: syz [ 338.484896][ T29] usb 1-1: SerialNumber: syz [ 338.506464][ T8428] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 338.546744][ T8449] fuse: Bad value for 'fd' [ 338.804153][ T8447] ipt_rpfilter: unknown options [ 339.446674][ T8432] syz.1.861 (8432): drop_caches: 2 [ 339.526420][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 339.707943][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.727594][ T24] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 339.750933][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 339.772834][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.800687][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 339.836813][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 339.870360][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.881940][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.895046][ T24] usb 5-1: Product: syz [ 339.901924][ T24] usb 5-1: Manufacturer: syz [ 339.909529][ T8471] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 339.924431][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 339.950704][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 339.982896][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 340.000401][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 340.145412][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.152051][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.158465][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.165044][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.171576][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.178156][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.184541][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.191157][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.197494][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.204098][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.210424][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.217030][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.224013][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.230599][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.236840][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.243419][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.249665][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.256257][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.264095][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 340.270716][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 340.414719][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 340.424974][ T24] usb 5-1: USB disconnect, device number 40 [ 340.837147][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.861107][ T29] usb 1-1: MIDIStreaming interface descriptor not found [ 340.868361][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 341.045663][ T24] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 341.076351][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.112109][ T24] usb 5-1: config 1 has no interface number 0 [ 341.135103][ T24] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.169819][ T29] usb 1-1: USB disconnect, device number 31 [ 341.185500][ T24] usb 5-1: config 1 interface 188 has no altsetting 0 [ 341.208107][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 341.226950][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.253922][ T24] usb 5-1: Product: syz [ 341.260712][ T24] usb 5-1: Manufacturer: syz [ 341.279960][ T24] usb 5-1: SerialNumber: syz [ 341.282593][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.346321][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 341.346336][ T30] audit: type=1326 audit(1779556253.177:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.2.882" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3318f9ce59 code=0x0 [ 341.545612][ T29] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 341.586767][ T24] usb 5-1: unknown interface protocol 0xc1, assuming v1 [ 341.616983][ T24] usb 5-1: 188:0 : does not exist [ 341.676660][ T24] usb 5-1: USB disconnect, device number 41 [ 341.711434][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 341.720937][ T29] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.737352][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 341.744015][ T29] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 341.768697][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.801417][ T29] usb 1-1: config 0 descriptor?? [ 342.007776][ T1103] net_ratelimit: 28 callbacks suppressed [ 342.007796][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 342.126169][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 342.217209][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 342.227038][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 342.262908][ T29] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 342.295593][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 342.423409][ T8520] fuse: Bad value for 'fd' [ 342.428487][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 342.438917][ T8520] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.555539][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 342.662031][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 342.671015][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 342.743760][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 342.745124][ T5714] usb 1-1: USB disconnect, device number 32 [ 342.763405][ T2365] pvrusb2: Failure uploading firmware1 [ 342.775793][ T2365] pvrusb2: Device initialization was not successful. [ 342.784142][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 342.801064][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 342.808571][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 342.834981][ T807] pvrusb2: Device being rendered inoperable [ 342.925871][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 343.035546][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 343.175510][ T807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 343.215561][ T5780] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 343.347182][ T807] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 343.366905][ T807] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 343.387128][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.412602][ T807] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 343.435477][ T807] usb 4-1: config 0 has no interface number 0 [ 343.447122][ T807] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 343.477213][ T807] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 343.492983][ T807] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.512824][ T807] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.528880][ T807] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 343.540127][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.558256][ T807] usb 4-1: config 0 descriptor?? [ 343.577782][ T807] gspca_main: spca561-2.14.0 probing abcd:cdee [ 343.768108][ T8493] netlink: 'syz.3.879': attribute type 62 has an invalid length. [ 343.828961][ T807] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 343.839631][ T5780] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.868376][ T5780] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 343.886449][ T807] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.890600][ T5780] usb 2-1: can't read configurations, error -71 [ 343.910474][ T807] usb 4-1: MIDIStreaming interface descriptor not found [ 343.911683][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.964074][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.160307][ T807] usb 4-1: USB disconnect, device number 7 [ 344.361993][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.382463][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 64767 - 0 [ 344.404821][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.441835][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.470220][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 64767 - 0 [ 344.493830][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.503104][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.512631][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 64767 - 0 [ 344.523646][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.549702][ T8579] fuse: Bad value for 'fd' [ 344.562611][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.583622][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 64767 - 0 [ 344.618281][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.812355][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 345.061451][ T8594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.126216][ T8597] netlink: 388 bytes leftover after parsing attributes in process `syz.3.907'. [ 345.279889][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 345.305360][ T8606] netlink: 5 bytes leftover after parsing attributes in process `syz.0.910'. [ 345.318810][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 345.331369][ T8609] binder: 8605:8609 ioctl 40505331 200000000300 returned -22 [ 345.452899][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.466079][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.519199][ T8610] fuse: Unknown parameter 'group_i00000000000000000000' [ 345.586009][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 345.654131][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 345.940822][ T8638] trusted_key: encrypted_key: master key parameter '' is invalid [ 346.090398][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.140753][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.695515][ T8562] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 346.861155][ T8562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.878438][ T8562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.891010][ T8562] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 346.908957][ T8562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.925169][ T8562] usb 2-1: config 0 descriptor?? [ 347.016640][ T3273] net_ratelimit: 27 callbacks suppressed [ 347.016660][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 347.135601][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 347.246017][ T3273] bond1: (slave bond0): failed to get link speed/duplex [ 347.355893][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 347.382183][ T8562] arvo 0003:1E7D:30D4.0008: unbalanced collection at end of report description [ 347.418768][ T8562] arvo 0003:1E7D:30D4.0008: parse failed [ 347.432087][ T8562] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -22 [ 347.485634][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 347.582492][ T8573] usb 2-1: USB disconnect, device number 35 [ 347.606070][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 347.670478][ T8662] __nla_validate_parse: 3 callbacks suppressed [ 347.670492][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.930'. [ 347.725653][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 347.835582][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 347.955540][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 348.065535][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 348.313662][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 348.382325][ T8692] tipc: Started in network mode [ 348.390587][ T8692] tipc: Node identity 00000000000000000000ffff7f000001, cluster identity 4711 [ 348.401226][ T8692] tipc: Enabling of bearer rejected, failed to enable media [ 348.657383][ T5780] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 348.826648][ T5780] usb 2-1: device descriptor read/64, error -71 [ 348.966874][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.004604][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.076982][ T5780] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 349.160803][ T8708] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 349.215886][ T5780] usb 2-1: device descriptor read/64, error -71 [ 349.328320][ T5780] usb usb2-port1: attempt power cycle [ 349.675533][ T5780] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 349.706710][ T5780] usb 2-1: device descriptor read/8, error -71 [ 349.741056][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 349.798417][ T8724] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 349.955531][ T5780] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 349.976750][ T5780] usb 2-1: device descriptor read/8, error -71 [ 350.055624][ T8563] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 350.105958][ T5780] usb usb2-port1: unable to enumerate USB device [ 350.157971][ T8732] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.955'. [ 350.196939][ T8732] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.215551][ T8563] usb 5-1: Using ep0 maxpacket: 8 [ 350.223481][ T8563] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.247126][ T8563] usb 5-1: config 1 interface 0 has no altsetting 0 [ 350.258596][ T8563] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40 [ 350.269025][ T8563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.277467][ T8563] usb 5-1: Product: syz [ 350.281763][ T8563] usb 5-1: Manufacturer: syz [ 350.286787][ T8563] usb 5-1: SerialNumber: syz [ 350.612035][ T8738] [ 350.614377][ T8738] ====================================================== [ 350.621369][ T8738] WARNING: possible circular locking dependency detected [ 350.628377][ T8738] syzkaller #0 Tainted: G L [ 350.634330][ T8738] ------------------------------------------------------ [ 350.641325][ T8738] syz.0.958/8738 is trying to acquire lock: [ 350.647192][ T8738] ffffffff8ea85420 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 350.656309][ T8738] [ 350.656309][ T8738] but task is already holding lock: [ 350.663666][ T8738] ffffffff8ea5f7c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 350.673230][ T8738] [ 350.673230][ T8738] which lock already depends on the new lock. [ 350.673230][ T8738] [ 350.683616][ T8738] [ 350.683616][ T8738] the existing dependency chain (in reverse order) is: [ 350.692607][ T8738] [ 350.692607][ T8738] -> #2 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 350.700318][ T8738] __mutex_lock+0x1a3/0x1550 [ 350.705423][ T8738] pcpu_alloc_noprof+0x261/0x19c0 [ 350.710982][ T8738] __percpu_counter_init_many+0x43/0x380 [ 350.717138][ T8738] blkg_rwstat_init+0x2c/0x170 [ 350.722412][ T8738] throtl_pd_alloc+0xb6/0x460 [ 350.727685][ T8738] blkcg_activate_policy+0x692/0xb40 [ 350.733472][ T8738] blk_throtl_init+0x2f6/0x410 [ 350.738734][ T8738] tg_set_conf+0x1d6/0x4c0 [ 350.743649][ T8738] cgroup_file_write+0x331/0x8f0 [ 350.749103][ T8738] kernfs_fop_write_iter+0x3af/0x540 [ 350.754906][ T8738] vfs_write+0x61d/0xb90 [ 350.759659][ T8738] ksys_write+0x150/0x270 [ 350.764597][ T8738] do_syscall_64+0x15f/0xf80 [ 350.769705][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.776115][ T8738] [ 350.776115][ T8738] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 350.784702][ T8738] blk_alloc_queue+0x546/0x680 [ 350.789977][ T8738] __blk_mq_alloc_disk+0x197/0x390 [ 350.795588][ T8738] loop_add+0x482/0xb40 [ 350.800246][ T8738] loop_init+0xd9/0x170 [ 350.804901][ T8738] do_one_initcall+0x250/0x870 [ 350.810172][ T8738] do_initcall_level+0x104/0x190 [ 350.815614][ T8738] do_initcalls+0x59/0xa0 [ 350.820446][ T8738] kernel_init_freeable+0x2a6/0x3e0 [ 350.826155][ T8738] kernel_init+0x1d/0x1d0 [ 350.831073][ T8738] ret_from_fork+0x514/0xb70 [ 350.836163][ T8738] ret_from_fork_asm+0x1a/0x30 [ 350.841426][ T8738] [ 350.841426][ T8738] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 350.848631][ T8738] __lock_acquire+0x15a5/0x2cf0 [ 350.853981][ T8738] lock_acquire+0x106/0x350 [ 350.859074][ T8738] fs_reclaim_acquire+0x71/0x100 [ 350.864522][ T8738] prepare_alloc_pages+0x152/0x650 [ 350.870136][ T8738] __alloc_frozen_pages_noprof+0x12f/0x380 [ 350.876445][ T8738] __alloc_pages_noprof+0x10/0x100 [ 350.882149][ T8738] pcpu_populate_chunk+0x182/0xb30 [ 350.887763][ T8738] pcpu_alloc_noprof+0xcc2/0x19c0 [ 350.893291][ T8738] __alloc+0x80/0x180 [ 350.897777][ T8738] alloc_bulk+0x33a/0x530 [ 350.903400][ T8738] bpf_mem_alloc_init+0x45c/0xc60 [ 350.908939][ T8738] htab_map_alloc+0x8bc/0xc90 [ 350.914130][ T8738] map_create+0xafd/0x16a0 [ 350.919057][ T8738] __sys_bpf+0x6e1/0x950 [ 350.923808][ T8738] __x64_sys_bpf+0x7c/0x90 [ 350.928730][ T8738] do_syscall_64+0x15f/0xf80 [ 350.933819][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.940210][ T8738] [ 350.940210][ T8738] other info that might help us debug this: [ 350.940210][ T8738] [ 350.950502][ T8738] Chain exists of: [ 350.950502][ T8738] fs_reclaim --> &q->q_usage_counter(io)#17 --> pcpu_alloc_mutex [ 350.950502][ T8738] [ 350.964133][ T8738] Possible unsafe locking scenario: [ 350.964133][ T8738] [ 350.971648][ T8738] CPU0 CPU1 [ 350.976992][ T8738] ---- ---- [ 350.982338][ T8738] lock(pcpu_alloc_mutex); [ 350.986822][ T8738] lock(&q->q_usage_counter(io)#17); [ 350.994699][ T8738] lock(pcpu_alloc_mutex); [ 351.001708][ T8738] lock(fs_reclaim); [ 351.005671][ T8738] [ 351.005671][ T8738] *** DEADLOCK *** [ 351.005671][ T8738] [ 351.013790][ T8738] 1 lock held by syz.0.958/8738: [ 351.018701][ T8738] #0: ffffffff8ea5f7c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 351.028777][ T8738] [ 351.028777][ T8738] stack backtrace: [ 351.034658][ T8738] CPU: 1 UID: 0 PID: 8738 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.034675][ T8738] Tainted: [L]=SOFTLOCKUP [ 351.034679][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.034687][ T8738] Call Trace: [ 351.034693][ T8738] [ 351.034699][ T8738] dump_stack_lvl+0xe8/0x150 [ 351.034713][ T8738] print_circular_bug+0x2e1/0x300 [ 351.034730][ T8738] check_noncircular+0x12e/0x150 [ 351.034746][ T8738] __lock_acquire+0x15a5/0x2cf0 [ 351.034759][ T8738] ? is_bpf_text_address+0x26/0x2b0 [ 351.034773][ T8738] ? __lock_acquire+0x6b5/0x2cf0 [ 351.034785][ T8738] ? try_charge_memcg+0x254/0x1570 [ 351.034801][ T8738] ? prepare_alloc_pages+0x152/0x650 [ 351.034817][ T8738] lock_acquire+0x106/0x350 [ 351.034828][ T8738] ? prepare_alloc_pages+0x152/0x650 [ 351.034844][ T8738] ? try_charge_memcg+0x254/0x1570 [ 351.034861][ T8738] fs_reclaim_acquire+0x71/0x100 [ 351.034876][ T8738] ? prepare_alloc_pages+0x152/0x650 [ 351.034891][ T8738] prepare_alloc_pages+0x152/0x650 [ 351.034908][ T8738] __alloc_frozen_pages_noprof+0x12f/0x380 [ 351.034925][ T8738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.034942][ T8738] ? pcpu_chunk_refresh_hint+0x80b/0x950 [ 351.034961][ T8738] __alloc_pages_noprof+0x10/0x100 [ 351.034977][ T8738] pcpu_populate_chunk+0x182/0xb30 [ 351.034993][ T8738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 351.035011][ T8738] pcpu_alloc_noprof+0xcc2/0x19c0 [ 351.035030][ T8738] __alloc+0x80/0x180 [ 351.035044][ T8738] alloc_bulk+0x33a/0x530 [ 351.035061][ T8738] bpf_mem_alloc_init+0x45c/0xc60 [ 351.035077][ T8738] htab_map_alloc+0x8bc/0xc90 [ 351.035091][ T8738] map_create+0xafd/0x16a0 [ 351.035108][ T8738] ? security_bpf+0x7e/0x2d0 [ 351.035128][ T8738] __sys_bpf+0x6e1/0x950 [ 351.035143][ T8738] ? __pfx___sys_bpf+0x10/0x10 [ 351.035162][ T8738] ? __pfx___se_sys_rt_sigprocmask+0x10/0x10 [ 351.035174][ T8738] ? exc_page_fault+0x6a/0xc0 [ 351.035193][ T8738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.035205][ T8738] __x64_sys_bpf+0x7c/0x90 [ 351.035219][ T8738] do_syscall_64+0x15f/0xf80 [ 351.035230][ T8738] ? trace_irq_disable+0x3b/0x140 [ 351.035246][ T8738] ? clear_bhb_loop+0x40/0x90 [ 351.035259][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.035270][ T8738] RIP: 0033:0x7fae8699ce59 [ 351.035282][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.035292][ T8738] RSP: 002b:00007fae84bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.035305][ T8738] RAX: ffffffffffffffda RBX: 00007fae86c15fa0 RCX: 00007fae8699ce59 [ 351.035313][ T8738] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 0000000000000000 [ 351.035321][ T8738] RBP: 00007fae86a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 351.035328][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.035335][ T8738] R13: 00007fae86c16038 R14: 00007fae86c15fa0 R15: 00007fae86d3fa48 [ 351.035348][ T8738] [ 351.529590][ T8563] usbhid 5-1:1.0: can't add hid device: -71 [ 351.535626][ T8563] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 351.546702][ T8563] usb 5-1: USB disconnect, device number 42 [ 352.107515][ T1103] net_ratelimit: 30 callbacks suppressed [ 352.107535][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 352.225546][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 352.335486][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 352.445493][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 352.565523][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 352.675508][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 352.785521][ T1162] bond1: (slave bond0): failed to get link speed/duplex [ 352.895517][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 353.005640][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 353.125742][ T1103] bond1: (slave bond0): failed to get link speed/duplex [ 357.125730][ T36] net_ratelimit: 35 callbacks suppressed [ 357.125746][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 357.245560][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 357.355516][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 357.465521][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 357.585537][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 357.695557][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 357.805557][ T36] bond1: (slave bond0): failed to get link speed/duplex [ 357.915521][ T1179] bond1: (slave bond0): failed to get link speed/duplex [ 358.025507][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 358.135558][ T12] bond1: (slave bond0): failed to get link speed/duplex