last executing test programs: 19.985782021s ago: executing program 0 (id=514): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf1388c647b42888d1930b41", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611844000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x10ae0, 0x5, 0x5, 0x3, 0xdc}, 0x18, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000b80)="bd3fcafd842c", 0x6}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.114921683s ago: executing program 0 (id=517): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x400) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x401, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x4], [0x6, 0x40a, 0x3ff, 0x5, 0x846f, 0x100, 0x4, 0x9, 0x1, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x1, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, 0x0, 0x0) 16.285044336s ago: executing program 3 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b70300000000000085", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 14.533425132s ago: executing program 3 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x13b, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x21, 0x4, 0x1, 0x0, 0x12d, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x2f, 0x0, 0x6, [0x2, 0x0, 0x80, 0x8, 0x2, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xb2, [@private=0xa010102]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="114353012008ba00000037510800", 0x22, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r4, 0x1, 0x7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a0096800800"], 0x1c}], 0x1}, 0x0) 13.742637402s ago: executing program 3 (id=524): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r6, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x4, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0xcc0, 0x0, 0x0, 0x1000, 0x1000, 0xffffffffffffffff, 0x0, 0x49}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffefff7f, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x211e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x600, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 13.452329489s ago: executing program 1 (id=525): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2, 0x24, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.763088758s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x133, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x1f, 0x4, 0x1, 0x0, 0x125, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x6, [0x0, 0x80, 0x8, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xb2, [@private=0xa010102]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) sendto$packet(r2, &(0x7f0000000000), 0x0, 0x4008015, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 10.871242943s ago: executing program 4 (id=527): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf1388c647b42888d1930b41", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611844000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x10ae0, 0x5, 0x5, 0x3, 0xdc}, 0x18, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000b80)="bd3fcafd842c", 0x6}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.713339931s ago: executing program 0 (id=528): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000000)=@in={0x2, 0x808, @loopback}, 0x10) listen(r1, 0x5) r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/ export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000700)='2056\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000c00), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r6) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) pwritev(r8, &(0x7f0000000540), 0x0, 0x7a9, 0x7fffffff) sendmmsg$unix(r5, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000d00)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) sendto(r3, &(0x7f0000000e00)="150303000202", 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000100)={'\x00', 0x800, 0x1, 0x4000003, 0x0, 0x76}) 10.536596768s ago: executing program 4 (id=529): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f0000001800)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000000)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.298579425s ago: executing program 3 (id=530): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x400) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, 0x0, 0x0) 10.170950983s ago: executing program 1 (id=531): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x2, "0e47"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f0000001800)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 9.744733805s ago: executing program 2 (id=532): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x85434d09f3f6babb, 0x1, 0x2, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, @generic={0xfa, 0x5, 0x4, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffd) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0xfffffffffffffd98, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x8d0) recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80) 9.39312837s ago: executing program 0 (id=533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b70300000000000085", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 8.471774008s ago: executing program 2 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x13b, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x21, 0x4, 0x1, 0x0, 0x12d, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x2f, 0x0, 0x6, [0x2, 0x0, 0x80, 0x8, 0x2, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xb2, [@private=0xa010102]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="114353012008ba00000037510800", 0x22, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r4, 0x1, 0x7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 7.636053402s ago: executing program 2 (id=535): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.00731465s ago: executing program 0 (id=536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc8641, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 6.617739452s ago: executing program 4 (id=537): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES8], 0x44}}, 0x2000800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x5, 0x5, 0x37, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x91, 0x5, 0x22, @loopback, @empty, 0x8, 0x7, 0x7, 0x5}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, 0x0, 0x0) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x28c, 0x0, 0x204, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x28c}}, 0x20048001) mount$overlay(0x0, 0x0, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = inotify_init1(0x80000) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000020ec130600000000000001090224000100ed863509218100030122280009058103080003be080000000000000100000200a270f67ea81aff7d75ca98364dcfbf443c079ce372ee54dec461006540c4402c388888aaec2c00"/105], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io(r12, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x29, {0x29, 0x2, "eba922135db4d6656aa0311f1fee3960a516578ab6e8a0ee86602df414848bc8bca8f7d53c351f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0) 6.610181475s ago: executing program 1 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x133, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x1f, 0x4, 0x1, 0x0, 0x125, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x6, [0x0, 0x80, 0x8, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xb2, [@private=0xa010102]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) sendto$packet(r2, &(0x7f0000000000), 0x0, 0x4008015, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 4.633334356s ago: executing program 1 (id=539): r0 = syz_clone(0x81006800, &(0x7f0000000080)="58d6492be7bf3c0ab54eb33449b8b4bc12a6c8c87d71854adb1eb3d21f8d4c156661f909812ba546a767cf82c7fb2013f5fa9c4c13f7568e74a8b684e34333cb803407191ac708f80fa521b28d52b922209aacdf44919fb4ce53698820934f7ded960f202a9604ccdb40945aac32cb3ebae14c800999b18fa9429f95b953968e3b294124f124fa3a74c02a2d18abb7f715c4bca4752cdf1388c647b42888d1930b41", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0x6, 0x1, @dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}}}}}}}}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000380)={0x9, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611844000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x10ae0, 0x5, 0x5, 0x3, 0xdc}, 0x18, 0x100) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) writev(r3, &(0x7f0000001bc0)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000b80)="bd3fcafd842c3b1304", 0x9}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.528511697s ago: executing program 0 (id=540): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x400) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x401, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x4], [0x6, 0x40a, 0x3ff, 0x5, 0x846f, 0x100, 0x4, 0x9, 0x1, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x1, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, 0x0, 0x0) 4.365337299s ago: executing program 2 (id=541): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r6, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x4, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0xcc0, 0x0, 0x0, 0x1000, 0x1000, 0xffffffffffffffff, 0x0, 0x49}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffefff7f, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x211e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x600, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.333309153s ago: executing program 3 (id=542): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.192967046s ago: executing program 1 (id=543): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000000)=@in={0x2, 0x808, @loopback}, 0x10) listen(r1, 0x5) r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/ export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000700)='2056\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000c00), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r6) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) pwritev(r8, &(0x7f0000000540), 0x0, 0x7a9, 0x7fffffff) sendmmsg$unix(r5, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000d00)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) sendto(r3, &(0x7f0000000e00)="150303000202", 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000100)={'\x00', 0x800, 0x1, 0x4000003, 0x0, 0x76}) 2.808659143s ago: executing program 4 (id=544): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES8], 0x44}}, 0x2000800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x5, 0x5, 0x37, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x91, 0x5, 0x22, @loopback, @empty, 0x8, 0x7, 0x7, 0x5}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x310, 0x0, 0x204, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5326c04ad64c0beb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x310}}, 0x20048001) mount$overlay(0x0, 0x0, 0x0, 0x800, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r11, 0x0, 0x2c, 0x6, @void}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r12 = inotify_init1(0x80000) syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil) r13 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000020ec130600000000000001090224000100ed863509218100030122280009058103080003be080000000000000100000200a270f67ea81aff7d75ca98364dcfbf443c079ce372ee54dec461006540c4402c388888aaec2c00"/105], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io(r13, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x29, {0x29, 0x2, "eba922135db4d6656aa0311f1fee3960a516578ab6e8a0ee86602df414848bc8bca8f7d53c351f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0) 2.613989956s ago: executing program 2 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x13b, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x21, 0x4, 0x1, 0x0, 0x12d, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x2f, 0x0, 0x6, [0x2, 0x0, 0x80, 0x8, 0x2, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xb2, [@private=0xa010102]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="114353012008ba00000037510800", 0x22, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r4, 0x1, 0x7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 2.040708489s ago: executing program 3 (id=546): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200029001000010902120001050000000904"], 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0x774b, 0x12) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.621869979s ago: executing program 2 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xf, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b70300000000000085", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) 1.398946089s ago: executing program 1 (id=548): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f0000001800)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000000)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x133, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x1f, 0x4, 0x1, 0x0, 0x125, 0x66, 0x0, 0x4, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x13, 0xf3, [@empty, @multicast2, @multicast1, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x6, [0x0, 0x80, 0x8, 0x8000, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8e, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0}, {@private=0xa010101, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xfffffc01}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xb2, [@private=0xa010102]}]}}, "05c5ad966ad3754e7574b0497d06a1abf9bbc831d7e7c55ce40d023eff36d3866be7425172a93798b71288bc310b67c02abc3c464d23d431681021d0696dbc86997b9ed3fa3e2ae6e72bc8b86e7ad92a793497e21ce4e23f99086450b7c6ee206fb369a2b9f9a6febf992ee4c0bcece0619d711d0aca7078ee7cc43ffebe29ca3fef112f6a7568bac68da87c06bb0e113c08e0950c8df2fae7bb1ce19ed33b0b5769d78d0687dcdc82"}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) sendto$packet(r2, &(0x7f0000000000), 0x0, 0x4008015, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000002fc0)={&(0x7f0000002940)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ec0), 0x9a}, 0x804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x4000010) socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): : 32 [ 306.598701][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.602796][ T5708] usb 3-1: New USB device found, idVendor=086a, idProduct=fff8, bcdDevice= 0.3f [ 306.604377][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.604778][ T6440] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 306.608442][ T6440] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 306.608477][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 306.608572][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 306.608599][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 306.608629][ T6440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 306.615731][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.615760][ T5708] usb 3-1: Product: syz [ 306.615897][ T5708] usb 3-1: Manufacturer: syz [ 306.615915][ T5708] usb 3-1: SerialNumber: syz [ 306.620429][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.620472][ T6440] usb 2-1: Product: syz [ 306.620489][ T6440] usb 2-1: Manufacturer: syz [ 306.620506][ T6440] usb 2-1: SerialNumber: syz [ 306.696519][ T6440] usb 2-1: config 0 descriptor?? [ 307.719236][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 307.944400][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 307.979139][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 307.980179][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 307.985037][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 307.985703][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 307.986352][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.083863][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.084509][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.085157][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.085797][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.086460][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.120961][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.124111][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.125525][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.126152][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.152953][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.153772][ T6440] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 308.153885][ T6440] input input9: Timeout waiting for response from device. [ 308.200912][ T6440] usb 2-1: USB disconnect, device number 17 [ 308.207226][ T49] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 308.226800][ T5725] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 308.281858][ T7186] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 308.373320][ T7186] bond4: entered promiscuous mode [ 308.373888][ T7186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.380666][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 308.389632][ T49] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.396330][ T49] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 308.396385][ T49] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 308.396481][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.398353][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 308.400349][ T5725] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 308.442080][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.442158][ T5725] usb 4-1: Product: syz [ 308.442182][ T5725] usb 4-1: Manufacturer: syz [ 308.442199][ T5725] usb 4-1: SerialNumber: syz [ 308.482531][ T5725] usb 4-1: config 0 descriptor?? [ 308.536275][ T5725] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 308.536374][ T5725] dvb-usb: bulk message failed: -22 (4/0) [ 308.536394][ T5725] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 308.536525][ T5725] dvb-usb: bulk message failed: -22 (5/0) [ 308.536541][ T5725] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 308.576349][ T5708] usb 3-1: USB disconnect, device number 22 [ 308.638427][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.640983][ T5725] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 308.641042][ T5725] usb 4-1: media controller created [ 308.646734][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 308.762458][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.798394][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 308.805403][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.805433][ T10] usb 1-1: Product: syz [ 308.805450][ T10] usb 1-1: Manufacturer: syz [ 308.805466][ T10] usb 1-1: SerialNumber: syz [ 308.885579][ T5725] usb 4-1: selecting invalid altsetting 3 [ 308.885604][ T5725] ttusb2: set interface to alts=3 failed [ 308.954518][ T5725] DVB: Unable to find symbol tda10086_attach() [ 308.954538][ T5725] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 308.955485][ T5725] dvb-usb: bulk message failed: -22 (4/0) [ 308.955501][ T5725] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 308.955638][ T5725] dvb-usb: bulk message failed: -22 (5/0) [ 308.955661][ T5725] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 308.955730][ T5725] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 308.968889][ T5725] usb 4-1: USB disconnect, device number 27 [ 309.044729][ T5725] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 309.046957][ T49] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 309.139616][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.140260][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.198973][ T49] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 309.204530][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.204563][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.204603][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.238811][ T49] usb 2-1: config 0 descriptor?? [ 309.425168][ T7186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.429963][ T7186] bond4: (slave wireguard3): The slave device specified does not support setting the MAC address [ 309.429990][ T7186] bond4: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 309.492454][ T7195] loop7: detected capacity change from 0 to 7 [ 309.743793][ T7186] bond4: (slave wireguard3): making interface the new active one [ 309.743823][ T7186] wireguard3: entered promiscuous mode [ 309.773453][ T7186] bond4: (slave wireguard3): Enslaving as an active interface with an up link [ 309.784364][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.784420][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.784452][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.784482][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.784512][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.784544][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.784574][ T49] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 309.830689][ T49] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 309.864563][ T7195] Dev loop7: unable to read RDB block 7 [ 309.864634][ T7195] loop7: unable to read partition table [ 309.865293][ T7195] loop7: partition table beyond EOD, truncated [ 309.865436][ T7195] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 309.942537][ T49] cp2112 0003:10C4:EA90.0008: error requesting version [ 309.962817][ T49] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -32 [ 309.964343][ T10] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 309.964841][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 310.117732][ T49] usb 2-1: USB disconnect, device number 18 [ 310.169038][ T7202] fido_id[7202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 310.286774][ T10] usb 1-1: USB disconnect, device number 27 [ 310.441898][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.706783][ T49] usb 5-1: USB disconnect, device number 25 [ 311.886771][ T5602] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 311.933573][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 312.057250][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 312.063529][ T5602] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 312.065050][ T5602] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 312.065078][ T5602] usb 2-1: config 0 has no interface number 0 [ 312.081166][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.081198][ T5602] usb 2-1: Product: syz [ 312.081215][ T5602] usb 2-1: Manufacturer: syz [ 312.081231][ T5602] usb 2-1: SerialNumber: syz [ 312.130315][ T5602] usb 2-1: config 0 descriptor?? [ 312.197982][ T49] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 312.252229][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.282935][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.363684][ T49] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 312.366583][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.366785][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.366874][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.417282][ T49] usb 5-1: config 0 descriptor?? [ 312.580601][ T5602] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 312.580633][ T5602] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 312.683853][ T7216] ALSA: mixer_oss: invalid OSS volume '3' [ 313.096304][ T49] usbhid 5-1:0.0: can't add hid device: -32 [ 313.096423][ T49] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 313.164901][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.166787][ T5725] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 313.226468][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.317725][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 313.318769][ T5725] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 313.322819][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 313.322849][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 313.322876][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 313.322900][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 313.322928][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 313.360042][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.360074][ T5725] usb 4-1: Product: syz [ 313.360098][ T5725] usb 4-1: Manufacturer: syz [ 313.360142][ T5725] usb 4-1: SerialNumber: syz [ 313.419785][ T5602] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 313.420122][ T5602] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 313.424263][ T5725] usb 4-1: config 0 descriptor?? [ 313.857648][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 314.080743][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.081243][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.081747][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.082299][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.082740][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.083212][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.083723][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.084195][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.084651][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.085222][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.085702][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.086290][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.088202][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.090963][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.093837][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.096363][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.098720][ T5725] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 314.098839][ T5725] input input10: Timeout waiting for response from device. [ 314.141851][ T5725] usb 4-1: USB disconnect, device number 28 [ 314.462201][ T5725] usb 2-1: USB disconnect, device number 19 [ 314.529806][ T7230] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 314.899720][ T5725] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 314.951559][ T5602] usb 5-1: USB disconnect, device number 26 [ 315.001323][ T7230] bond3: entered promiscuous mode [ 315.012349][ T7230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.060647][ T5725] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 315.083861][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.083901][ T5725] usb 2-1: Product: syz [ 315.083919][ T5725] usb 2-1: Manufacturer: syz [ 315.083943][ T5725] usb 2-1: SerialNumber: syz [ 315.177468][ T1292] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.177600][ T1292] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.177642][ T1292] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.206251][ T1292] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.235618][ T7249] loop7: detected capacity change from 0 to 7 [ 315.385674][ T7249] Dev loop7: unable to read RDB block 7 [ 315.385725][ T7249] loop7: unable to read partition table [ 315.385946][ T7249] loop7: partition table beyond EOD, truncated [ 315.385989][ T7249] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 315.416798][ T5602] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 315.475873][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.476513][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.566788][ T5602] usb 5-1: Using ep0 maxpacket: 8 [ 315.567690][ T5602] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 315.574804][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.574832][ T5602] usb 5-1: Product: syz [ 315.574849][ T5602] usb 5-1: Manufacturer: syz [ 315.574867][ T5602] usb 5-1: SerialNumber: syz [ 315.622560][ T5602] usb 5-1: config 0 descriptor?? [ 315.639430][ T5602] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 316.089366][ T5602] gspca_sonixj: reg_r err -32 [ 316.089465][ T5602] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 316.181257][ T7230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.184202][ T7230] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 316.184814][ T7230] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 316.495728][ T7230] bond3: (slave wireguard1): making interface the new active one [ 316.495812][ T7230] wireguard1: entered promiscuous mode [ 316.619213][ T7230] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 317.218473][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.218553][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414614][ T5725] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 317.416840][ T5725] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 317.766792][ T5602] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 317.768545][ T5725] usb 2-1: USB disconnect, device number 20 [ 317.895082][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.926705][ T5602] usb 4-1: Using ep0 maxpacket: 32 [ 317.928454][ T5602] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 317.931588][ T5602] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.931614][ T5602] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.931663][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.000858][ T5602] usb 4-1: config 0 descriptor?? [ 318.276039][ T1251] usb 5-1: USB disconnect, device number 27 [ 318.420656][ T5602] usb 4-1: string descriptor 0 read error: -71 [ 318.441989][ T5602] usb 4-1: USB disconnect, device number 29 [ 318.631273][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.633020][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.647329][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.826728][ T1251] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 318.871329][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.875009][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.902008][ T7270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.902039][ T7270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.929338][ T7270] veth1_vlan: left promiscuous mode [ 318.931258][ T7270] veth0_vlan: left promiscuous mode [ 318.963931][ T7270] veth0_vlan: entered promiscuous mode [ 318.970530][ T7270] veth1_vlan: entered promiscuous mode [ 318.980732][ T1251] usb 5-1: Using ep0 maxpacket: 32 [ 318.983416][ T1251] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 319.001969][ T1251] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 319.001998][ T1251] usb 5-1: config 0 has no interface number 0 [ 319.005640][ T1251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.005671][ T1251] usb 5-1: Product: syz [ 319.005688][ T1251] usb 5-1: Manufacturer: syz [ 319.005705][ T1251] usb 5-1: SerialNumber: syz [ 319.046242][ T7270] veth1_macvtap: left promiscuous mode [ 319.057569][ T7270] veth0_macvtap: left promiscuous mode [ 319.063130][ T7270] veth0_macvtap: entered promiscuous mode [ 319.064713][ T1251] usb 5-1: config 0 descriptor?? [ 319.115694][ T7270] veth1_macvtap: entered promiscuous mode [ 319.251637][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.441001][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.446363][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.448948][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.453087][ T7270] bond1: left promiscuous mode [ 319.453109][ T7270] wireguard0: left promiscuous mode [ 319.454576][ T7270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.546877][ T1251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 319.546913][ T1251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 319.611837][ T7270] bond2: left promiscuous mode [ 319.611863][ T7270] wireguard1: left promiscuous mode [ 319.613408][ T7270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.475612][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 320.489763][ T7270] bond3: left promiscuous mode [ 320.489788][ T7270] wireguard2: left promiscuous mode [ 320.492852][ T7270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.605909][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.606250][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.635600][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 320.636524][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 320.662329][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 320.662427][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 320.662456][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 320.662482][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 320.662511][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 320.749736][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.749768][ T10] usb 4-1: Product: syz [ 320.749784][ T10] usb 4-1: Manufacturer: syz [ 320.749801][ T10] usb 4-1: SerialNumber: syz [ 320.803332][ T10] usb 4-1: config 0 descriptor?? [ 320.887418][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.887993][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.891852][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 321.146155][ T1251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 321.146896][ T1251] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 321.172687][ T7283] ALSA: mixer_oss: invalid OSS volume '3' [ 321.406548][ T10] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 321.498473][ T1296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.498527][ T1296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.637234][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.641811][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.643860][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.644348][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.644912][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.645368][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.646019][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.648673][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.675853][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.682810][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.686870][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.687672][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.690839][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.694374][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.705198][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.710321][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.712701][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 321.712827][ T10] input input11: Timeout waiting for response from device. [ 321.783002][ T10] usb 4-1: USB disconnect, device number 30 [ 321.856755][ T157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.857209][ T157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.247724][ T7300] loop7: detected capacity change from 0 to 7 [ 322.372388][ T10] usb 5-1: USB disconnect, device number 28 [ 322.609093][ T7307] No source specified [ 324.143934][ T7312] No source specified [ 324.715851][ T7300] Dev loop7: unable to read RDB block 7 [ 324.715910][ T7300] loop7: unable to read partition table [ 324.718150][ T7300] loop7: partition table beyond EOD, truncated [ 324.719706][ T7300] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 325.012258][ T7319] syzkaller0: entered promiscuous mode [ 325.012287][ T7319] syzkaller0: entered allmulticast mode [ 325.186833][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 325.362199][ T7330] binder: BINDER_SET_CONTEXT_MGR already set [ 325.362216][ T7330] binder: 7329:7330 ioctl 4018620d 200000004a80 returned -16 [ 325.366783][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 325.367751][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.369421][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.369447][ T10] usb 2-1: config 0 has no interface number 0 [ 325.424172][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.424194][ T10] usb 2-1: Product: syz [ 325.424205][ T10] usb 2-1: Manufacturer: syz [ 325.424217][ T10] usb 2-1: SerialNumber: syz [ 325.477901][ T10] usb 2-1: config 0 descriptor?? [ 325.911912][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 325.915971][ T7333] ALSA: mixer_oss: invalid OSS volume '3' [ 325.927761][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 325.927796][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 326.372836][ T7346] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 326.392256][ T5602] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 326.536740][ T5602] usb 5-1: Using ep0 maxpacket: 32 [ 326.537825][ T5602] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 326.539905][ T5602] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.539932][ T5602] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.540037][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.552029][ T5602] usb 5-1: config 0 descriptor?? [ 326.644778][ T1251] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 327.846916][ T1251] usb 4-1: Using ep0 maxpacket: 32 [ 327.847956][ T1251] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 327.849855][ T1251] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 327.849882][ T1251] usb 4-1: config 0 has no interface number 0 [ 327.853600][ T1251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.853628][ T1251] usb 4-1: Product: syz [ 327.853646][ T1251] usb 4-1: Manufacturer: syz [ 327.853663][ T1251] usb 4-1: SerialNumber: syz [ 327.931243][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 327.932673][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 327.981757][ T5602] usb 5-1: string descriptor 0 read error: -71 [ 328.003692][ T1251] usb 4-1: config 0 descriptor?? [ 328.024846][ T10] usb 2-1: USB disconnect, device number 21 [ 328.033855][ T5602] usb 5-1: USB disconnect, device number 29 [ 328.480148][ T1251] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 328.480183][ T1251] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 328.534166][ T7357] loop7: detected capacity change from 0 to 7 [ 328.647712][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 328.691128][ T7357] Dev loop7: unable to read RDB block 7 [ 328.691161][ T7357] loop7: unable to read partition table [ 328.691420][ T7357] loop7: partition table beyond EOD, truncated [ 328.691479][ T7357] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 328.816809][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 328.818048][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 328.822221][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.822248][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.822387][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.824354][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.959162][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 328.959208][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 328.960990][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 328.961010][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 328.961026][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 328.961064][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 329.108492][ T999] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 329.276768][ T999] usb 5-1: Using ep0 maxpacket: 32 [ 329.278293][ T999] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 329.280946][ T999] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 329.280996][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 329.281026][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 329.281052][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 329.281081][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 329.288012][ T999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.288078][ T999] usb 5-1: Product: syz [ 329.288132][ T999] usb 5-1: Manufacturer: syz [ 329.288157][ T999] usb 5-1: SerialNumber: syz [ 329.325155][ T10] usb 2-1: USB disconnect, device number 22 [ 329.325528][ T999] usb 5-1: config 0 descriptor?? [ 329.366520][ T1251] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 329.376925][ T1251] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 329.776771][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 329.843374][ T999] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 329.926949][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 329.927982][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 329.930034][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.930059][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.930124][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.930167][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.971483][ T5593] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 330.022803][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 330.022847][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 330.023898][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 330.023917][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 330.023954][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 330.070690][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.072675][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.076499][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.079166][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.080168][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.081863][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.101064][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.102590][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.106813][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.108222][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.109649][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.112161][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.120163][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.125418][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.128152][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.134946][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.145971][ T999] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 330.146107][ T999] input input12: Timeout waiting for response from device. [ 330.194422][ T5593] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 330.220327][ T5593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.220358][ T5593] usb 1-1: Product: syz [ 330.220375][ T5593] usb 1-1: Manufacturer: syz [ 330.220392][ T5593] usb 1-1: SerialNumber: syz [ 330.262356][ T999] usb 5-1: USB disconnect, device number 30 [ 330.367115][ T1251] usb 2-1: USB disconnect, device number 23 [ 330.442801][ T49] usb 4-1: USB disconnect, device number 31 [ 330.502502][ T7368] syzkaller0: entered promiscuous mode [ 330.502535][ T7368] syzkaller0: entered allmulticast mode [ 330.536845][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.537615][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.916913][ T1251] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 331.070438][ T1251] usb 3-1: Using ep0 maxpacket: 8 [ 331.071865][ T1251] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 331.078875][ T1251] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 331.078908][ T1251] usb 3-1: config 2 has no interface number 0 [ 331.078960][ T1251] usb 3-1: config 2 interface 31 has no altsetting 0 [ 331.081350][ T1251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.081380][ T1251] usb 3-1: SerialNumber: syz [ 331.227660][ T49] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 331.284293][ T5593] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 331.284845][ T5593] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 331.390009][ T49] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 331.390094][ T49] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 331.391694][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.391722][ T49] usb 2-1: config 1 has no interface number 0 [ 331.393280][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.393306][ T49] usb 2-1: config 1 has no interface number 0 [ 331.446297][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.446331][ T49] usb 2-1: config 1 has no interface number 0 [ 331.474047][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.474081][ T49] usb 2-1: config 1 has no interface number 0 [ 331.475700][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.475727][ T49] usb 2-1: config 1 has no interface number 0 [ 331.508363][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.508394][ T49] usb 2-1: config 1 has no interface number 0 [ 331.510274][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.510302][ T49] usb 2-1: config 1 has no interface number 0 [ 331.512916][ T49] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 331.512940][ T49] usb 2-1: config 1 has no interface number 0 [ 331.524670][ T49] usb 2-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 331.524700][ T49] usb 2-1: Product: syz [ 331.524718][ T49] usb 2-1: Manufacturer: syz [ 331.524735][ T49] usb 2-1: SerialNumber: syz [ 331.610382][ T1251] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71 [ 331.699842][ T1251] usb 3-1: USB disconnect, device number 23 [ 331.731821][ T49] usb 2-1: 3:0 : does not exist [ 331.731840][ T49] usb 2-1: 3:0 : does not exist [ 331.796525][ T5593] usb 1-1: USB disconnect, device number 28 [ 332.215432][ T49] usb 2-1: USB disconnect, device number 24 [ 333.003075][ T7394] random: crng reseeded on system resumption [ 333.396830][ T5602] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 333.548137][ T5602] usb 4-1: not running at top speed; connect to a high speed hub [ 333.548170][ T5602] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 333.549173][ T5602] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.550830][ T5602] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 333.550857][ T5602] usb 4-1: Product: syz [ 333.550868][ T5602] usb 4-1: Manufacturer: syz [ 333.621984][ T5602] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 333.828083][ T5602] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 333.828541][ T5602] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 333.828598][ T5602] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 333.829185][ T5602] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 333.949850][ T5602] usb 4-1: USB disconnect, device number 32 [ 335.246732][ T5593] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 335.416779][ T5593] usb 1-1: Using ep0 maxpacket: 8 [ 335.417917][ T5593] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 335.425437][ T5593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.425839][ T5593] usb 1-1: Product: syz [ 335.425857][ T5593] usb 1-1: Manufacturer: syz [ 335.425874][ T5593] usb 1-1: SerialNumber: syz [ 335.500979][ T5593] usb 1-1: config 0 descriptor?? [ 335.546746][ T5593] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 335.971236][ T5593] gspca_sonixj: reg_r err -32 [ 335.971340][ T5593] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 336.736870][ T7415] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 336.864293][ T7415] bond2: entered promiscuous mode [ 336.873297][ T7415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.176805][ T1251] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 337.337663][ T1251] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 337.341216][ T1251] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 337.341247][ T1251] usb 4-1: Product: syz [ 337.393054][ T1251] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 337.396153][ T1251] usb 4-1: Detected FT4233HP [ 337.436788][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 337.543923][ T7423] syz.1.447 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 337.543962][ T7423] CPU: 0 UID: 0 PID: 7423 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.543986][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.543997][ T7423] Call Trace: [ 337.544005][ T7423] [ 337.544012][ T7423] dump_stack_lvl+0xe8/0x150 [ 337.544044][ T7423] dump_header+0xd3/0x4b0 [ 337.544070][ T7423] oom_kill_process+0x3ab/0x9e0 [ 337.544092][ T7423] out_of_memory+0x1064/0x1480 [ 337.544119][ T7423] ? __pfx_out_of_memory+0x10/0x10 [ 337.544136][ T7423] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 337.544155][ T7423] ? _mutex_lock_killable+0x152/0x1d0 [ 337.544179][ T7423] ? try_charge_memcg+0xcc3/0x16f0 [ 337.544198][ T7423] try_charge_memcg+0xd82/0x16f0 [ 337.544230][ T7423] ? __pfx_try_charge_memcg+0x10/0x10 [ 337.544251][ T7423] ? percpu_ref_tryget+0x15/0x180 [ 337.544278][ T7423] ? __obj_cgroup_charge+0x36/0x2c0 [ 337.544306][ T7423] __obj_cgroup_charge+0x1fd/0x2c0 [ 337.544330][ T7423] ? __obj_cgroup_charge+0x36/0x2c0 [ 337.544357][ T7423] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 337.544398][ T7423] __kmalloc_node_track_caller_noprof+0x5e5/0x7b0 [ 337.544427][ T7423] ? __addrconf_sysctl_register+0xa7/0x4b0 [ 337.544449][ T7423] ? __addrconf_sysctl_register+0xa7/0x4b0 [ 337.544476][ T7423] kmemdup_noprof+0x2b/0x70 [ 337.544495][ T7423] __addrconf_sysctl_register+0xa7/0x4b0 [ 337.544517][ T7423] ? rcu_is_watching+0x16/0xb0 [ 337.544550][ T7423] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 337.544571][ T7423] ? addrconf_init_net+0x1cf/0x790 [ 337.544590][ T7423] ? addrconf_init_net+0x1cf/0x790 [ 337.544609][ T7423] ? kmemdup_noprof+0x55/0x70 [ 337.544627][ T7423] ? __asan_memcpy+0x40/0x70 [ 337.544653][ T7423] addrconf_init_net+0x4d6/0x790 [ 337.544679][ T7423] ops_init+0x35d/0x5d0 [ 337.544704][ T7423] setup_net+0x118/0x350 [ 337.544732][ T7423] ? __pfx_setup_net+0x10/0x10 [ 337.544761][ T7423] ? __ns_common_init+0x2fc/0x4a0 [ 337.544790][ T7423] copy_net_ns+0x53b/0x780 [ 337.544819][ T7423] create_new_namespaces+0x3f0/0x6b0 [ 337.544846][ T7423] ? security_capable+0x7e/0x2c0 [ 337.544878][ T7423] unshare_nsproxy_namespaces+0x149/0x190 [ 337.544904][ T7423] ksys_unshare+0x5a7/0x950 [ 337.544959][ T7423] ? __pfx_ksys_unshare+0x10/0x10 [ 337.544997][ T7423] ? rcu_is_watching+0x16/0xb0 [ 337.545046][ T7423] __x64_sys_unshare+0x38/0x50 [ 337.545084][ T7423] do_syscall_64+0x166/0x520 [ 337.545102][ T7423] ? trace_irq_disable+0x3b/0x140 [ 337.545126][ T7423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.545143][ T7423] ? clear_bhb_loop+0x70/0xc0 [ 337.545164][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.545182][ T7423] RIP: 0033:0x7f7b9f66e159 [ 337.545198][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.545212][ T7423] RSP: 002b:00007f7b9d8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 337.545230][ T7423] RAX: ffffffffffffffda RBX: 00007f7b9f8f5fa0 RCX: 00007f7b9f66e159 [ 337.545243][ T7423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 337.545254][ T7423] RBP: 00007f7b9f70506b R08: 0000000000000000 R09: 0000000000000000 [ 337.545264][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.545275][ T7423] R13: 00007f7b9f8f6038 R14: 00007f7b9f8f5fa0 R15: 00007ffc5a8f42f8 [ 337.545301][ T7423] [ 337.547629][ T7423] memory: usage 184kB, limit 192kB, failcnt 111 [ 337.547650][ T7423] memory+swap: usage 184kB, limit 9007199254740988kB, failcnt 0 [ 337.547667][ T7423] kmem: usage 184kB, limit 9007199254740988kB, failcnt 0 [ 337.547682][ T7423] Memory cgroup stats for /syz1/test: [ 337.549721][ T7423] cache 0 [ 337.550336][ T7423] rss 0 [ 337.550358][ T7423] shmem 0 [ 337.550379][ T7423] mapped_file 0 [ 337.550769][ T7423] dirty 0 [ 337.550798][ T7423] writeback 0 [ 337.550820][ T7423] workingset_refault_anon 0 [ 337.551178][ T7423] workingset_refault_file 0 [ 337.551189][ T7423] swap 0 [ 337.551197][ T7423] swapcached 0 [ 337.551205][ T7423] pgpgin 0 [ 337.551214][ T7423] pgpgout 0 [ 337.551222][ T7423] pgfault 73 [ 337.551240][ T7423] pgmajfault 0 [ 337.551249][ T7423] inactive_anon 0 [ 337.551258][ T7423] active_anon 0 [ 337.551266][ T7423] inactive_file 0 [ 337.551275][ T7423] active_file 0 [ 337.551648][ T7423] unevictable 0 [ 337.551671][ T7423] hierarchical_memory_limit 196608 [ 337.551703][ T7423] hierarchical_memsw_limit 9223372036854771712 [ 337.552155][ T7423] total_cache 0 [ 337.552177][ T7423] total_rss 0 [ 337.552206][ T7423] total_shmem 0 [ 337.552572][ T7423] total_mapped_file 0 [ 337.552602][ T7423] total_dirty 0 [ 337.552623][ T7423] total_writeback 0 [ 337.553017][ T7423] total_workingset_refault_anon 0 [ 337.553047][ T7423] total_workingset_refault_file 0 [ 337.553486][ T7423] total_swap 0 [ 337.553516][ T7423] total_swapcached 0 [ 337.553915][ T7423] total_pgpgin 0 [ 337.553947][ T7423] total_pgpgout 0 [ 337.553969][ T7423] total_pgfault 73 [ 337.554558][ T7423] total_pgmajfault 0 [ 337.554581][ T7423] total_inactive_anon 0 [ 337.554609][ T7423] total_active_anon 0 [ 337.554633][ T7423] total_inactive_file 0 [ 337.555074][ T7423] total_active_file 0 [ 337.555434][ T7423] total_unevictable 0 [ 337.555458][ T7423] anon_cost 0 [ 337.555480][ T7423] file_cost 0 [ 337.555501][ T7423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.447,pid=7422,uid=0 [ 337.649782][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 337.701656][ T7423] Memory cgroup out of memory: Killed process 7422 (syz.1.447) total-vm:102252kB, anon-rss:1428kB, file-rss:23332kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 337.730013][ T31] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 337.774588][ T31] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 337.774618][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.774674][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.774720][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.206078][ T31] hub 3-1:1.0: bad descriptor, ignoring hub [ 338.206122][ T31] hub 3-1:1.0: probe with driver hub failed with error -5 [ 338.207789][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 338.207807][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 338.207835][ T31] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.497588][ T7415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.498096][ T7415] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 338.498122][ T7415] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 338.537755][ T5593] usb 3-1: USB disconnect, device number 24 [ 338.580115][ T5602] usb 1-1: USB disconnect, device number 29 [ 338.631637][ T7415] bond2: (slave wireguard0): making interface the new active one [ 338.631867][ T7415] wireguard0: entered promiscuous mode [ 338.689647][ T7415] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 338.834947][ T1251] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 338.849807][ T1251] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 338.883014][ T1251] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 338.918260][ T1251] usb 4-1: USB disconnect, device number 33 [ 338.953856][ T1251] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 338.968738][ T1251] ftdi_sio 4-1:5.0: device disconnected [ 339.230607][ T5602] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 339.326761][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 339.376750][ T5602] usb 1-1: Using ep0 maxpacket: 16 [ 339.377829][ T5602] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 339.379377][ T5602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 339.379438][ T5602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.439205][ T5602] usb 1-1: config 0 descriptor?? [ 339.440399][ T7427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.507861][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 339.508874][ T31] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.511774][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.511801][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.511855][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.511915][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.535199][ T7431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 339.567852][ T31] hub 3-1:1.0: bad descriptor, ignoring hub [ 339.567943][ T31] hub 3-1:1.0: probe with driver hub failed with error -5 [ 339.578752][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 339.578795][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 339.578834][ T31] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 339.611257][ T7430] ALSA: mixer_oss: invalid OSS volume '3' [ 339.617113][ T49] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 339.686333][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.693761][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.789750][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 339.791893][ T49] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 339.794873][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.794910][ T49] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.794953][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.848186][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 339.849474][ T49] usb 5-1: config 0 descriptor?? [ 339.927823][ T5602] usbhid 1-1:0.0: can't add hid device: -71 [ 339.928142][ T5602] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 339.936216][ T5602] usb 1-1: USB disconnect, device number 30 [ 339.956753][ T31] usb 3-1: USB disconnect, device number 25 [ 340.085553][ T7433] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 340.362355][ T49] usb 5-1: string descriptor 0 read error: -71 [ 341.469534][ T49] usb 5-1: USB disconnect, device number 31 [ 342.689924][ T7451] random: crng reseeded on system resumption [ 342.716725][ T5602] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 342.783077][ T7454] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 342.906824][ T5602] usb 3-1: Using ep0 maxpacket: 32 [ 342.907933][ T5602] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 342.909727][ T5602] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 342.909755][ T5602] usb 3-1: config 0 has no interface number 0 [ 342.913361][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.913393][ T5602] usb 3-1: Product: syz [ 342.913410][ T5602] usb 3-1: Manufacturer: syz [ 342.913427][ T5602] usb 3-1: SerialNumber: syz [ 342.980687][ T5602] usb 3-1: config 0 descriptor?? [ 343.092466][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 343.096285][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 343.119401][ T5708] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 343.274682][ T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 343.275239][ T5708] usb 2-1: not running at top speed; connect to a high speed hub [ 343.275282][ T5708] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 343.278939][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.278974][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.279018][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.292575][ T31] usb 1-1: config 0 descriptor?? [ 343.339325][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.486761][ T49] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 343.515160][ T5602] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 343.515195][ T5602] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 343.537829][ T5708] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 343.537861][ T5708] usb 2-1: Product: syz [ 343.537879][ T5708] usb 2-1: Manufacturer: syz [ 343.609115][ T5708] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 343.657156][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 343.659956][ T49] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 343.663408][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.663714][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.723861][ T49] usb 4-1: config 0 descriptor?? [ 343.763167][ T49] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 343.810559][ T5708] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 343.812058][ T5708] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 343.812199][ T5708] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 343.874138][ T5708] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 343.990248][ T5708] usb 2-1: USB disconnect, device number 25 [ 343.993599][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.993643][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.993673][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.993704][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.993735][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.993765][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.993794][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 344.170673][ T31] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 344.239131][ T31] cp2112 0003:10C4:EA90.0009: error requesting version [ 344.283150][ T31] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -5 [ 344.446125][ T5708] usb 1-1: USB disconnect, device number 31 [ 345.443505][ T7466] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 345.479311][ T5602] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 345.479651][ T5602] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 345.610659][ T7466] bond4: entered promiscuous mode [ 345.611442][ T7466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.705369][ T49] gspca_vc032x: reg_r err -110 [ 345.705466][ T49] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 345.826762][ T5602] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 345.895878][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'. [ 345.905987][ T7475] ALSA: mixer_oss: invalid OSS volume '3' [ 345.988104][ T5602] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 345.993341][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 345.993372][ T5602] usb 2-1: Product: syz [ 346.027569][ T7473] syz.4.462 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 346.030675][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.4.462 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.030709][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.030725][ T7473] Call Trace: [ 346.030735][ T7473] [ 346.030746][ T7473] dump_stack_lvl+0xe8/0x150 [ 346.030788][ T7473] dump_header+0xd3/0x4b0 [ 346.030824][ T7473] oom_kill_process+0x3ab/0x9e0 [ 346.030855][ T7473] out_of_memory+0x1064/0x1480 [ 346.030894][ T7473] ? __pfx_out_of_memory+0x10/0x10 [ 346.030919][ T7473] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 346.030946][ T7473] ? _mutex_lock_killable+0x152/0x1d0 [ 346.030980][ T7473] ? try_charge_memcg+0xcc3/0x16f0 [ 346.031008][ T7473] try_charge_memcg+0xd82/0x16f0 [ 346.031050][ T7473] ? __pfx_try_charge_memcg+0x10/0x10 [ 346.031083][ T7473] ? percpu_ref_tryget+0x15/0x180 [ 346.031121][ T7473] ? __obj_cgroup_charge+0x36/0x2c0 [ 346.031160][ T7473] __obj_cgroup_charge+0x1fd/0x2c0 [ 346.031193][ T7473] ? __obj_cgroup_charge+0x36/0x2c0 [ 346.031230][ T7473] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 346.031285][ T7473] ? sk_prot_alloc+0x57/0x210 [ 346.031322][ T7473] kmem_cache_alloc_noprof+0x421/0x690 [ 346.031354][ T7473] ? sk_prot_alloc+0x57/0x210 [ 346.031379][ T7473] ? sk_prot_alloc+0x57/0x210 [ 346.031413][ T7473] sk_prot_alloc+0x57/0x210 [ 346.031437][ T7473] ? sk_alloc+0x27/0x390 [ 346.031466][ T7473] sk_alloc+0x3a/0x390 [ 346.031496][ T7473] inet6_create+0x81a/0x1280 [ 346.031520][ T7473] ? inet6_create+0x80/0x1280 [ 346.031547][ T7473] __sock_create+0x4b3/0x9d0 [ 346.031593][ T7473] inet_ctl_sock_create+0xa2/0x220 [ 346.031628][ T7473] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 346.031676][ T7473] tcpv6_net_init+0x34/0xb0 [ 346.031695][ T7473] ops_init+0x35d/0x5d0 [ 346.031720][ T7473] setup_net+0x118/0x350 [ 346.031751][ T7473] ? __pfx_setup_net+0x10/0x10 [ 346.031780][ T7473] ? __ns_common_init+0x2fc/0x4a0 [ 346.031811][ T7473] copy_net_ns+0x53b/0x780 [ 346.031842][ T7473] create_new_namespaces+0x3f0/0x6b0 [ 346.031868][ T7473] ? security_capable+0x7e/0x2c0 [ 346.031901][ T7473] unshare_nsproxy_namespaces+0x149/0x190 [ 346.031928][ T7473] ksys_unshare+0x5a7/0x950 [ 346.031960][ T7473] ? __pfx_ksys_unshare+0x10/0x10 [ 346.031988][ T7473] ? rcu_is_watching+0x16/0xb0 [ 346.032024][ T7473] __x64_sys_unshare+0x38/0x50 [ 346.032050][ T7473] do_syscall_64+0x166/0x520 [ 346.032067][ T7473] ? trace_irq_disable+0x3b/0x140 [ 346.032120][ T7473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.032145][ T7473] ? clear_bhb_loop+0x70/0xc0 [ 346.032177][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.032195][ T7473] RIP: 0033:0x7fdfe93ee159 [ 346.032211][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.032226][ T7473] RSP: 002b:00007fdfe7646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 346.032244][ T7473] RAX: ffffffffffffffda RBX: 00007fdfe9675fa0 RCX: 00007fdfe93ee159 [ 346.032257][ T7473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 346.032268][ T7473] RBP: 00007fdfe948506b R08: 0000000000000000 R09: 0000000000000000 [ 346.032279][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.032290][ T7473] R13: 00007fdfe9676038 R14: 00007fdfe9675fa0 R15: 00007ffeb70c4678 [ 346.032322][ T7473] [ 346.036047][ T5602] ftdi_sio 2-1:5.0: FTDI USB Serial Device converter detected [ 346.040441][ T7473] memory: usage 192kB, limit 192kB, failcnt 424 [ 346.040502][ T7473] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 346.040532][ T7473] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 346.040573][ T7473] Memory cgroup stats for /syz4/test: [ 346.040779][ T7473] cache 0 [ 346.040805][ T7473] rss 0 [ 346.040819][ T7473] shmem 0 [ 346.040847][ T7473] mapped_file 0 [ 346.040868][ T7473] dirty 0 [ 346.040890][ T7473] writeback 0 [ 346.040912][ T7473] workingset_refault_anon 0 [ 346.040935][ T7473] workingset_refault_file 0 [ 346.040957][ T7473] swap 0 [ 346.040986][ T7473] swapcached 4096 [ 346.041007][ T7473] pgpgin 1 [ 346.041029][ T7473] pgpgout 1 [ 346.041052][ T7473] pgfault 20 [ 346.041073][ T7473] pgmajfault 0 [ 346.041095][ T7473] inactive_anon 0 [ 346.041117][ T7473] active_anon 0 [ 346.041139][ T7473] inactive_file 0 [ 346.041163][ T7473] active_file 0 [ 346.041184][ T7473] unevictable 0 [ 346.041219][ T7473] hierarchical_memory_limit 196608 [ 346.041242][ T7473] hierarchical_memsw_limit 9223372036854771712 [ 346.041272][ T7473] total_cache 0 [ 346.041293][ T7473] total_rss 0 [ 346.041307][ T7473] total_shmem 0 [ 346.041329][ T7473] total_mapped_file 0 [ 346.041359][ T7473] total_dirty 0 [ 346.041388][ T7473] total_writeback 0 [ 346.041417][ T7473] total_workingset_refault_anon 0 [ 346.041447][ T7473] total_workingset_refault_file 0 [ 346.041476][ T7473] total_swap 0 [ 346.041507][ T7473] total_swapcached 4096 [ 346.041529][ T7473] total_pgpgin 1 [ 346.041551][ T7473] total_pgpgout 1 [ 346.041572][ T7473] total_pgfault 20 [ 346.041596][ T7473] total_pgmajfault 0 [ 346.041625][ T7473] total_inactive_anon 0 [ 346.041640][ T7473] total_active_anon 0 [ 346.041668][ T7473] total_inactive_file 0 [ 346.041708][ T7473] total_active_file 0 [ 346.041731][ T7473] total_unevictable 0 [ 346.041747][ T7473] anon_cost 0 [ 346.041754][ T7473] file_cost 0 [ 346.041763][ T7473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test [ 346.152017][ T5602] usb 2-1: Detected FT4233HP [ 346.155153][ T7473] ,task_memcg=/syz4/test,task=syz.4.462,pid=7472,uid=0 [ 346.168786][ T7473] Memory cgroup out of memory: Killed process 7472 (syz.4.462) total-vm:104300kB, anon-rss:1428kB, file-rss:23392kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 346.753112][ T49] usb 3-1: USB disconnect, device number 26 [ 346.842624][ T7466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.874785][ T7466] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 346.874815][ T7466] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 346.924987][ T1251] usb 4-1: USB disconnect, device number 34 [ 347.027169][ T7466] bond4: (slave wireguard2): making interface the new active one [ 347.027202][ T7466] wireguard2: entered promiscuous mode [ 347.159783][ T7466] bond4: (slave wireguard2): Enslaving as an active interface with an up link [ 347.209087][ T7490] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 348.482711][ T39] oom_reaper: reaped process 7472 (syz.4.462), now anon-rss:0kB, file-rss:22292kB, shmem-rss:0kB [ 348.728000][ T5602] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 348.729113][ T5602] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 348.785932][ T5602] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 348.993820][ T5602] usb 2-1: USB disconnect, device number 26 [ 349.079331][ T5602] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 349.132191][ T5602] ftdi_sio 2-1:5.0: device disconnected [ 349.307563][ T7500] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 349.508986][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 349.878315][ T5602] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 349.947242][ T49] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 350.027216][ T5602] usb 4-1: Using ep0 maxpacket: 32 [ 350.028409][ T5602] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 350.033064][ T5602] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.033090][ T5602] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.033131][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.099900][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 350.102664][ T49] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 350.126520][ T5602] usb 4-1: config 0 descriptor?? [ 350.134515][ T49] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 350.134540][ T49] usb 5-1: config 0 has no interface number 0 [ 350.167685][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.167719][ T49] usb 5-1: Product: syz [ 350.167738][ T49] usb 5-1: Manufacturer: syz [ 350.167757][ T49] usb 5-1: SerialNumber: syz [ 350.255729][ T49] usb 5-1: config 0 descriptor?? [ 350.590353][ T5602] usb 4-1: string descriptor 0 read error: -71 [ 350.639388][ T5602] usb 4-1: USB disconnect, device number 35 [ 350.740310][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 350.740352][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 351.499269][ T5602] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 351.556945][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 351.623905][ T7514] loop7: detected capacity change from 0 to 7 [ 351.626220][ T49] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 351.697361][ T5602] usb 2-1: Using ep0 maxpacket: 8 [ 351.701174][ T5602] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 351.727122][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.727148][ T5602] usb 2-1: Product: syz [ 351.727162][ T5602] usb 2-1: Manufacturer: syz [ 351.727180][ T5602] usb 2-1: SerialNumber: syz [ 351.777553][ T5602] usb 2-1: config 0 descriptor?? [ 351.814538][ T5602] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 352.074774][ T7514] Dev loop7: unable to read RDB block 7 [ 352.074835][ T7514] loop7: unable to read partition table [ 352.075065][ T7514] loop7: partition table beyond EOD, truncated [ 352.075105][ T7514] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 352.232002][ T5602] gspca_sonixj: reg_r err -32 [ 352.232075][ T5602] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 352.497918][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.474'. [ 352.520002][ T7517] ALSA: mixer_oss: invalid OSS volume '3' [ 352.838114][ T5708] usb 5-1: USB disconnect, device number 32 [ 352.906762][ T1251] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 353.036962][ T5602] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 353.066763][ T1251] usb 1-1: Using ep0 maxpacket: 32 [ 353.068549][ T1251] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 353.069916][ T1251] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 353.069945][ T1251] usb 1-1: config 0 has no interface number 0 [ 353.072426][ T1251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.072459][ T1251] usb 1-1: Product: syz [ 353.072471][ T1251] usb 1-1: Manufacturer: syz [ 353.072483][ T1251] usb 1-1: SerialNumber: syz [ 353.129542][ T1251] usb 1-1: config 0 descriptor?? [ 353.166825][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 353.217858][ T5602] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 353.219812][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.219836][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.219864][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.226297][ T5602] usb 4-1: config 0 descriptor?? [ 353.278207][ T5708] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 353.376721][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 353.378635][ T10] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 353.380018][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 353.380123][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 353.380152][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 353.380178][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 353.380198][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 353.382865][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.382946][ T10] usb 3-1: Product: syz [ 353.382958][ T10] usb 3-1: Manufacturer: syz [ 353.382970][ T10] usb 3-1: SerialNumber: syz [ 353.476764][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 353.483042][ T5708] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.484491][ T5708] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 353.484765][ T5708] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.484784][ T5708] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.484803][ T5708] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.484821][ T5708] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.485052][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.559466][ T10] usb 3-1: config 0 descriptor?? [ 353.589972][ T1251] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 353.590049][ T1251] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 353.656257][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.656381][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.656415][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.656517][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.656549][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.670528][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.672278][ T5602] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 353.801010][ T5602] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 353.830245][ T5708] usb 5-1: GET_CAPABILITIES returned 0 [ 353.830296][ T5708] usbtmc 5-1:16.0: can't read capabilities [ 353.860506][ T5602] cp2112 0003:10C4:EA90.000A: error requesting version [ 353.960552][ T5602] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -5 [ 353.983803][ T10] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 353.983983][ T10] input input13: Device does not respond to id packet M [ 353.984975][ T10] input input13: Device does not respond to id packet P [ 354.059850][ T999] usb 5-1: USB disconnect, device number 33 [ 354.093052][ T5602] usb 4-1: USB disconnect, device number 36 [ 354.194784][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 354.194909][ T10] input input13: Device does not respond to id packet B [ 354.195565][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 354.195614][ T10] input input13: Device does not respond to id packet N [ 354.197270][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 354.204251][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 354.213727][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 354.234516][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 354.268997][ T49] usb 2-1: USB disconnect, device number 27 [ 354.478712][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 354.877741][ T1251] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 354.877978][ T1251] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 355.209140][ T10] usb 3-1: USB disconnect, device number 27 [ 355.891004][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'. [ 356.173975][ T7543] syzkaller0: entered promiscuous mode [ 356.174008][ T7543] syzkaller0: entered allmulticast mode [ 356.357001][ T49] usb 1-1: USB disconnect, device number 32 [ 356.598395][ T999] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 356.697034][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 356.767423][ T999] usb 5-1: Using ep0 maxpacket: 8 [ 356.768888][ T999] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 356.770927][ T999] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 356.770952][ T999] usb 5-1: config 2 has no interface number 0 [ 356.770993][ T999] usb 5-1: config 2 interface 31 has no altsetting 0 [ 356.776405][ T999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.776434][ T999] usb 5-1: SerialNumber: syz [ 356.857658][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 356.865531][ T31] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 356.919592][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.919625][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.919974][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.963181][ T31] usb 4-1: config 0 descriptor?? [ 357.129136][ T999] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71 [ 357.199822][ T999] usb 5-1: USB disconnect, device number 34 [ 357.396325][ T31] usb 4-1: string descriptor 0 read error: -71 [ 357.450881][ T31] usb 4-1: USB disconnect, device number 37 [ 357.796913][ T49] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 357.826761][ T999] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 357.946699][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 357.947675][ T49] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 357.949663][ T49] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 357.949692][ T49] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 357.949755][ T49] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.949788][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.026755][ T999] usb 2-1: Using ep0 maxpacket: 32 [ 358.027655][ T999] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 358.029767][ T999] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 358.029803][ T999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 358.029832][ T999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 358.029858][ T999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 358.029887][ T999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 358.030822][ T49] usbtmc 3-1:16.0: bulk endpoints not found [ 358.035416][ T999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.035444][ T999] usb 2-1: Product: syz [ 358.035462][ T999] usb 2-1: Manufacturer: syz [ 358.035478][ T999] usb 2-1: SerialNumber: syz [ 358.162990][ T999] usb 2-1: config 0 descriptor?? [ 358.467559][ T7563] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 358.626775][ T49] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 358.748393][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 358.781229][ T999] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 358.781268][ T999] input input14: Device does not respond to id packet M [ 358.782750][ T999] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 358.782861][ T999] input input14: Device does not respond to id packet P [ 358.786299][ T999] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 358.786335][ T999] input input14: Device does not respond to id packet B [ 358.829411][ T999] input input14: Device does not respond to id packet N [ 359.046778][ T999] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 359.049220][ T999] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 359.052827][ T999] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 359.055507][ T999] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 359.103214][ T999] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 359.137445][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 359.141557][ T49] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 359.162447][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.162479][ T49] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.162520][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.212208][ T49] usb 4-1: config 0 descriptor?? [ 359.335533][ T999] usb 2-1: USB disconnect, device number 28 [ 359.529280][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 359.635497][ T7568] ALSA: mixer_oss: invalid OSS volume '3' [ 359.666287][ T49] usb 4-1: string descriptor 0 read error: -71 [ 359.687562][ T49] usb 4-1: USB disconnect, device number 38 [ 359.977106][ T7577] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 361.630000][ T999] usb 3-1: USB disconnect, device number 28 [ 361.983707][ T7589] syz.1.493 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 361.983744][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 361.983764][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.983777][ T7589] Call Trace: [ 361.983852][ T7589] [ 361.983905][ T7589] dump_stack_lvl+0xe8/0x150 [ 361.984045][ T7589] dump_header+0xd3/0x4b0 [ 361.984075][ T7589] oom_kill_process+0x3ab/0x9e0 [ 361.984148][ T7589] out_of_memory+0x1064/0x1480 [ 361.984188][ T7589] ? __pfx_out_of_memory+0x10/0x10 [ 361.984227][ T7589] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.984295][ T7589] ? _mutex_lock_killable+0x152/0x1d0 [ 361.984343][ T7589] ? try_charge_memcg+0xcc3/0x16f0 [ 361.984370][ T7589] try_charge_memcg+0xd82/0x16f0 [ 361.984402][ T7589] ? __pfx_try_charge_memcg+0x10/0x10 [ 361.984423][ T7589] ? percpu_ref_tryget+0x15/0x180 [ 361.984449][ T7589] ? __obj_cgroup_charge+0x36/0x2c0 [ 361.984477][ T7589] __obj_cgroup_charge+0x1fd/0x2c0 [ 361.984501][ T7589] ? __obj_cgroup_charge+0x36/0x2c0 [ 361.984528][ T7589] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 361.984569][ T7589] __kmalloc_node_track_caller_noprof+0x5e5/0x7b0 [ 361.984604][ T7589] ? __addrconf_sysctl_register+0xa7/0x4b0 [ 361.984670][ T7589] ? __addrconf_sysctl_register+0xa7/0x4b0 [ 361.984696][ T7589] kmemdup_noprof+0x2b/0x70 [ 361.984720][ T7589] __addrconf_sysctl_register+0xa7/0x4b0 [ 361.984742][ T7589] ? rcu_is_watching+0x16/0xb0 [ 361.984787][ T7589] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 361.984809][ T7589] ? addrconf_init_net+0x1cf/0x790 [ 361.984827][ T7589] ? addrconf_init_net+0x1cf/0x790 [ 361.984853][ T7589] ? kmemdup_noprof+0x55/0x70 [ 361.984871][ T7589] ? __asan_memcpy+0x40/0x70 [ 361.984898][ T7589] addrconf_init_net+0x4d6/0x790 [ 361.984924][ T7589] ops_init+0x35d/0x5d0 [ 361.984981][ T7589] setup_net+0x118/0x350 [ 361.985030][ T7589] ? __pfx_setup_net+0x10/0x10 [ 361.985073][ T7589] ? __ns_common_init+0x2fc/0x4a0 [ 361.985122][ T7589] copy_net_ns+0x53b/0x780 [ 361.985151][ T7589] create_new_namespaces+0x3f0/0x6b0 [ 361.985177][ T7589] ? security_capable+0x7e/0x2c0 [ 361.985233][ T7589] unshare_nsproxy_namespaces+0x149/0x190 [ 361.985261][ T7589] ksys_unshare+0x5a7/0x950 [ 361.985302][ T7589] ? __pfx_ksys_unshare+0x10/0x10 [ 361.985327][ T7589] ? rcu_is_watching+0x16/0xb0 [ 361.985366][ T7589] __x64_sys_unshare+0x38/0x50 [ 361.985392][ T7589] do_syscall_64+0x166/0x520 [ 361.985429][ T7589] ? trace_irq_disable+0x3b/0x140 [ 361.985466][ T7589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.985494][ T7589] ? clear_bhb_loop+0x70/0xc0 [ 361.985514][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.985535][ T7589] RIP: 0033:0x7f7b9f66e159 [ 361.985557][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.985573][ T7589] RSP: 002b:00007f7b9d8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 361.985595][ T7589] RAX: ffffffffffffffda RBX: 00007f7b9f8f5fa0 RCX: 00007f7b9f66e159 [ 361.985608][ T7589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 361.985619][ T7589] RBP: 00007f7b9f70506b R08: 0000000000000000 R09: 0000000000000000 [ 361.985629][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.985640][ T7589] R13: 00007f7b9f8f6038 R14: 00007f7b9f8f5fa0 R15: 00007ffc5a8f42f8 [ 361.985666][ T7589] [ 362.226387][ T49] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 362.277042][ T7589] memory: usage 192kB, limit 192kB, failcnt 163 [ 362.277109][ T7589] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 362.277160][ T7589] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 362.277205][ T7589] Memory cgroup stats for /syz1/test: [ 362.277627][ T7589] cache 0 [ 362.277657][ T7589] rss 0 [ 362.277679][ T7589] shmem 0 [ 362.277701][ T7589] mapped_file 0 [ 362.277723][ T7589] dirty 0 [ 362.277745][ T7589] writeback 0 [ 362.277760][ T7589] workingset_refault_anon 0 [ 362.277769][ T7589] workingset_refault_file 0 [ 362.277785][ T7589] swap 0 [ 362.277807][ T7589] swapcached 0 [ 362.277839][ T7589] pgpgin 0 [ 362.277860][ T7589] pgpgout 0 [ 362.277882][ T7589] pgfault 74 [ 362.277891][ T7589] pgmajfault 0 [ 362.277900][ T7589] inactive_anon 0 [ 362.277909][ T7589] active_anon 0 [ 362.277931][ T7589] inactive_file 0 [ 362.277954][ T7589] active_file 0 [ 362.277976][ T7589] unevictable 0 [ 362.277999][ T7589] hierarchical_memory_limit 196608 [ 362.278022][ T7589] hierarchical_memsw_limit 9223372036854771712 [ 362.278052][ T7589] total_cache 0 [ 362.278074][ T7589] total_rss 0 [ 362.278089][ T7589] total_shmem 0 [ 362.278110][ T7589] total_mapped_file 0 [ 362.278132][ T7589] total_dirty 0 [ 362.278155][ T7589] total_writeback 0 [ 362.278176][ T7589] total_workingset_refault_anon 0 [ 362.278209][ T7589] total_workingset_refault_file 0 [ 362.278232][ T7589] total_swap 0 [ 362.278254][ T7589] total_swapcached 0 [ 362.278275][ T7589] total_pgpgin 0 [ 362.278298][ T7589] total_pgpgout 0 [ 362.278320][ T7589] total_pgfault 74 [ 362.278335][ T7589] total_pgmajfault 0 [ 362.278351][ T7589] total_inactive_anon 0 [ 362.278373][ T7589] total_active_anon 0 [ 362.278395][ T7589] total_inactive_file 0 [ 362.278417][ T7589] total_active_file 0 [ 362.278439][ T7589] total_unevictable 0 [ 362.278463][ T7589] anon_cost 0 [ 362.278484][ T7589] file_cost 0 [ 362.278514][ T7589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.493,pid=7587,uid=0 [ 362.378357][ T7589] Memory cgroup out of memory: Killed process 7587 (syz.1.493) total-vm:102252kB, anon-rss:1428kB, file-rss:23332kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 362.512743][ T999] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 362.595301][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 362.614589][ T49] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.709023][ T49] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.709056][ T49] usb 5-1: config 0 has no interface number 0 [ 362.741312][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.741344][ T49] usb 5-1: Product: syz [ 362.741361][ T49] usb 5-1: Manufacturer: syz [ 362.741379][ T49] usb 5-1: SerialNumber: syz [ 362.776782][ T999] usb 3-1: Using ep0 maxpacket: 32 [ 362.777694][ T999] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.781221][ T999] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.781250][ T999] usb 3-1: config 0 has no interface number 0 [ 362.839747][ T49] usb 5-1: config 0 descriptor?? [ 362.845620][ T999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.845652][ T999] usb 3-1: Product: syz [ 362.845669][ T999] usb 3-1: Manufacturer: syz [ 362.845686][ T999] usb 3-1: SerialNumber: syz [ 362.889984][ T999] usb 3-1: config 0 descriptor?? [ 363.294915][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 363.294954][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.333514][ T999] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 363.333541][ T999] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 364.126950][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 364.146554][ T49] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 364.147703][ T49] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 364.286979][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 364.289180][ T10] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 364.291673][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.291699][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.291738][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.322161][ T10] usb 1-1: config 0 descriptor?? [ 364.724123][ T999] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 364.724469][ T999] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 364.792763][ T10] usb 1-1: string descriptor 0 read error: -71 [ 364.823007][ T10] usb 1-1: USB disconnect, device number 33 [ 365.442047][ T31] usb 5-1: USB disconnect, device number 35 [ 365.613683][ T7607] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 365.616691][ T1251] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 365.671414][ T7610] loop7: detected capacity change from 0 to 7 [ 365.838295][ T1251] usb 2-1: Using ep0 maxpacket: 8 [ 365.840228][ T1251] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 365.871798][ T1251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.871822][ T1251] usb 2-1: Product: syz [ 365.871833][ T1251] usb 2-1: Manufacturer: syz [ 365.871845][ T1251] usb 2-1: SerialNumber: syz [ 365.915855][ T1251] usb 2-1: config 0 descriptor?? [ 366.047234][ T7610] Dev loop7: unable to read RDB block 7 [ 366.047295][ T7610] loop7: unable to read partition table [ 366.047520][ T7610] loop7: partition table beyond EOD, truncated [ 366.047558][ T7610] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 366.148179][ T1251] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 366.214603][ T31] usb 3-1: USB disconnect, device number 29 [ 366.498000][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 366.523606][ T7613] ALSA: mixer_oss: invalid OSS volume '3?,' [ 366.676907][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 366.826710][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 366.827705][ T31] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 366.832463][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 366.832498][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 366.832529][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 366.832556][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 366.832585][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 366.851163][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.851194][ T31] usb 3-1: Product: syz [ 366.851211][ T31] usb 3-1: Manufacturer: syz [ 366.851228][ T31] usb 3-1: SerialNumber: syz [ 366.943666][ T31] usb 3-1: config 0 descriptor?? [ 366.955274][ T1251] gspca_sonixj: reg_r err -32 [ 366.955399][ T1251] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 366.989619][ T7620] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 368.095593][ T31] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 368.095936][ T31] input input15: Device does not respond to id packet M [ 368.151684][ T31] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 368.152333][ T31] input input15: Device does not respond to id packet P [ 368.241622][ T31] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 368.241661][ T31] input input15: Device does not respond to id packet B [ 368.242324][ T31] input input15: Device does not respond to id packet N [ 368.443829][ T31] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 368.444212][ T31] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 368.444568][ T31] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 368.446099][ T31] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 368.495477][ T31] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 368.498474][ T5708] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 368.552347][ T5602] usb 2-1: USB disconnect, device number 29 [ 368.724248][ T31] usb 3-1: USB disconnect, device number 30 [ 368.776950][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 368.778407][ T5708] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 368.781230][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.781778][ T5708] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.781847][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.854010][ T5708] usb 5-1: config 0 descriptor?? [ 369.129426][ T7632] syz.1.506 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 369.129472][ T7632] CPU: 1 UID: 0 PID: 7632 Comm: syz.1.506 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.129491][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.129516][ T7632] Call Trace: [ 369.129525][ T7632] [ 369.129537][ T7632] dump_stack_lvl+0xe8/0x150 [ 369.129581][ T7632] dump_header+0xd3/0x4b0 [ 369.129616][ T7632] oom_kill_process+0x3ab/0x9e0 [ 369.129647][ T7632] out_of_memory+0x1064/0x1480 [ 369.129675][ T7632] ? __pfx_out_of_memory+0x10/0x10 [ 369.129712][ T7632] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 369.129750][ T7632] ? _mutex_lock_killable+0x152/0x1d0 [ 369.129787][ T7632] ? try_charge_memcg+0xcc3/0x16f0 [ 369.129816][ T7632] try_charge_memcg+0xd82/0x16f0 [ 369.129863][ T7632] ? __pfx_try_charge_memcg+0x10/0x10 [ 369.129895][ T7632] ? percpu_ref_tryget+0x15/0x180 [ 369.129935][ T7632] ? __obj_cgroup_charge+0x36/0x2c0 [ 369.129975][ T7632] __obj_cgroup_charge+0x1fd/0x2c0 [ 369.130009][ T7632] ? __obj_cgroup_charge+0x36/0x2c0 [ 369.130048][ T7632] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 369.130109][ T7632] __kmalloc_cache_noprof+0x42e/0x680 [ 369.130146][ T7632] ? mr_table_alloc+0x65/0x310 [ 369.130271][ T7632] ? mr_table_alloc+0x65/0x310 [ 369.130309][ T7632] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 369.130403][ T7632] mr_table_alloc+0x65/0x310 [ 369.130434][ T7632] ? __pfx_ipmr_expire_process+0x10/0x10 [ 369.130474][ T7632] ip6mr_net_init+0x382/0x6b0 [ 369.130503][ T7632] ? inet6_net_init+0x4ff/0x8c0 [ 369.130551][ T7632] ? __pfx_ip6mr_net_init+0x10/0x10 [ 369.130585][ T7632] ? ac6_proc_init+0x59/0x70 [ 369.130620][ T7632] ops_init+0x35d/0x5d0 [ 369.130656][ T7632] setup_net+0x118/0x350 [ 369.130695][ T7632] ? __pfx_setup_net+0x10/0x10 [ 369.130745][ T7632] ? __ns_common_init+0x2fc/0x4a0 [ 369.130789][ T7632] copy_net_ns+0x53b/0x780 [ 369.130833][ T7632] create_new_namespaces+0x3f0/0x6b0 [ 369.130883][ T7632] unshare_nsproxy_namespaces+0x149/0x190 [ 369.130922][ T7632] ksys_unshare+0x5a7/0x950 [ 369.130967][ T7632] ? __pfx_ksys_unshare+0x10/0x10 [ 369.131003][ T7632] ? rcu_is_watching+0x16/0xb0 [ 369.131053][ T7632] __x64_sys_unshare+0x38/0x50 [ 369.131090][ T7632] do_syscall_64+0x166/0x520 [ 369.131116][ T7632] ? trace_irq_disable+0x3b/0x140 [ 369.131149][ T7632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.131174][ T7632] ? clear_bhb_loop+0x70/0xc0 [ 369.131204][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.131228][ T7632] RIP: 0033:0x7f7b9f66e159 [ 369.131259][ T7632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.131280][ T7632] RSP: 002b:00007f7b9d8a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 369.131308][ T7632] RAX: ffffffffffffffda RBX: 00007f7b9f8f6090 RCX: 00007f7b9f66e159 [ 369.131325][ T7632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 369.131340][ T7632] RBP: 00007f7b9f70506b R08: 0000000000000000 R09: 0000000000000000 [ 369.131355][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.131374][ T7632] R13: 00007f7b9f8f6128 R14: 00007f7b9f8f6090 R15: 00007ffc5a8f42f8 [ 369.131424][ T7632] [ 369.178935][ T7632] memory: usage 176kB, limit 192kB, failcnt 214 [ 369.178958][ T7632] memory+swap: usage 176kB, limit 9007199254740988kB, failcnt 0 [ 369.178974][ T7632] kmem: usage 176kB, limit 9007199254740988kB, failcnt 0 [ 369.178989][ T7632] Memory cgroup stats for /syz1/test: [ 369.179128][ T7632] cache 0 [ 369.179138][ T7632] rss 0 [ 369.179147][ T7632] shmem 0 [ 369.179155][ T7632] mapped_file 0 [ 369.179164][ T7632] dirty 0 [ 369.179171][ T7632] writeback 0 [ 369.179180][ T7632] workingset_refault_anon 0 [ 369.244528][ T7632] workingset_refault_file 0 [ 369.244545][ T7632] swap 0 [ 369.244554][ T7632] swapcached 0 [ 369.244563][ T7632] pgpgin 0 [ 369.244572][ T7632] pgpgout 0 [ 369.244581][ T7632] pgfault 75 [ 369.244590][ T7632] pgmajfault 0 [ 369.244598][ T7632] inactive_anon 0 [ 369.244606][ T7632] active_anon 0 [ 369.244615][ T7632] inactive_file 0 [ 369.244623][ T7632] active_file 0 [ 369.244632][ T7632] unevictable 0 [ 369.244641][ T7632] hierarchical_memory_limit 196608 [ 369.286309][ T7632] hierarchical_memsw_limit 9223372036854771712 [ 369.286326][ T7632] total_cache 0 [ 369.286335][ T7632] total_rss 0 [ 369.286344][ T7632] total_shmem 0 [ 369.286353][ T7632] total_mapped_file 0 [ 369.286362][ T7632] total_dirty 0 [ 369.286370][ T7632] total_writeback 0 [ 369.286379][ T7632] total_workingset_refault_anon 0 [ 369.286390][ T7632] total_workingset_refault_file 0 [ 369.286399][ T7632] total_swap 0 [ 369.286407][ T7632] total_swapcached 0 [ 369.286416][ T7632] total_pgpgin 0 [ 369.286424][ T7632] total_pgpgout 0 [ 369.286433][ T7632] total_pgfault 75 [ 369.286442][ T7632] total_pgmajfault 0 [ 369.286450][ T7632] total_inactive_anon 0 [ 369.286460][ T7632] total_active_anon 0 [ 369.286468][ T7632] total_inactive_file 0 [ 369.286477][ T7632] total_active_file 0 [ 369.286486][ T7632] total_unevictable 0 [ 369.286495][ T7632] anon_cost 0 [ 369.286503][ T7632] file_cost 0 [ 369.286512][ T7632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.506,pid=7627,uid=0 [ 369.656931][ T7632] Memory cgroup out of memory: Killed process 7627 (syz.1.506) total-vm:102384kB, anon-rss:1436kB, file-rss:23584kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 369.751937][ T5708] usb 5-1: string descriptor 0 read error: -71 [ 369.780936][ T5708] usb 5-1: USB disconnect, device number 36 [ 370.576895][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 370.671861][ T7649] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 370.877409][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 370.903512][ T31] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 370.920260][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 370.920287][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 370.920307][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 370.920324][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 370.920344][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 370.957797][ T49] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 371.010750][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.010784][ T31] usb 1-1: Product: syz [ 371.010800][ T31] usb 1-1: Manufacturer: syz [ 371.010817][ T31] usb 1-1: SerialNumber: syz [ 371.087680][ T31] usb 1-1: config 0 descriptor?? [ 371.166701][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 371.284432][ T49] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 371.302667][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.302695][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.302733][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.352820][ T49] usb 2-1: config 0 descriptor?? [ 371.579516][ T31] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 371.579640][ T31] input input16: Device does not respond to id packet M [ 371.580737][ T31] input input16: Device does not respond to id packet P [ 371.781725][ T31] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 371.782229][ T31] input input16: Device does not respond to id packet B [ 371.802612][ T31] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 371.802754][ T31] input input16: Device does not respond to id packet N [ 371.833353][ T49] usb 2-1: string descriptor 0 read error: -71 [ 371.845142][ T31] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 371.845633][ T31] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 371.846269][ T31] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 371.846814][ T31] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 371.874345][ T49] usb 2-1: USB disconnect, device number 30 [ 371.886768][ T999] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 371.895451][ T31] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 371.992189][ T31] usb 1-1: USB disconnect, device number 34 [ 372.046719][ T999] usb 5-1: Using ep0 maxpacket: 32 [ 372.047728][ T999] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 372.049715][ T999] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 372.049742][ T999] usb 5-1: config 0 has no interface number 0 [ 372.096744][ T999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.096776][ T999] usb 5-1: Product: syz [ 372.096794][ T999] usb 5-1: Manufacturer: syz [ 372.096809][ T999] usb 5-1: SerialNumber: syz [ 372.105511][ T999] usb 5-1: config 0 descriptor?? [ 372.486734][ T5708] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 372.546975][ T999] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 372.547011][ T999] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 372.639503][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 372.648769][ T5708] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 372.667209][ T5708] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 372.667241][ T5708] usb 3-1: config 0 has no interface number 0 [ 372.712050][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.712080][ T5708] usb 3-1: Product: syz [ 372.712096][ T5708] usb 3-1: Manufacturer: syz [ 372.712116][ T5708] usb 3-1: SerialNumber: syz [ 372.730620][ T7658] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 372.959558][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.514'. [ 372.979751][ T5708] usb 3-1: config 0 descriptor?? [ 373.972508][ T7655] ALSA: mixer_oss: invalid OSS volume '3?,' [ 374.689448][ T5708] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 374.689482][ T5708] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.798165][ T7665] loop7: detected capacity change from 0 to 7 [ 374.824956][ T999] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 374.825246][ T999] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 374.973090][ T7665] Dev loop7: unable to read RDB block 7 [ 374.973130][ T7665] loop7: unable to read partition table [ 374.974360][ T7665] loop7: partition table beyond EOD, truncated [ 374.974416][ T7665] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 375.511988][ T5708] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 375.512210][ T5708] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 376.047365][ T49] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 376.134382][ T31] usb 5-1: USB disconnect, device number 37 [ 376.217938][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 376.220672][ T49] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 376.259346][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.259380][ T49] usb 2-1: Product: syz [ 376.259397][ T49] usb 2-1: Manufacturer: syz [ 376.259413][ T49] usb 2-1: SerialNumber: syz [ 376.299791][ T49] usb 2-1: config 0 descriptor?? [ 376.322313][ T49] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 376.744478][ T7677] syz.3.520 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 376.744524][ T7677] CPU: 0 UID: 0 PID: 7677 Comm: syz.3.520 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.744554][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.744569][ T7677] Call Trace: [ 376.744579][ T7677] [ 376.744591][ T7677] dump_stack_lvl+0xe8/0x150 [ 376.744635][ T7677] dump_header+0xd3/0x4b0 [ 376.744676][ T7677] oom_kill_process+0x3ab/0x9e0 [ 376.744708][ T7677] out_of_memory+0x1064/0x1480 [ 376.744747][ T7677] ? __pfx_out_of_memory+0x10/0x10 [ 376.744773][ T7677] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.744801][ T7677] ? _mutex_lock_killable+0x152/0x1d0 [ 376.744837][ T7677] ? try_charge_memcg+0xcc3/0x16f0 [ 376.744865][ T7677] try_charge_memcg+0xd82/0x16f0 [ 376.744911][ T7677] ? __pfx_try_charge_memcg+0x10/0x10 [ 376.744944][ T7677] ? percpu_ref_tryget+0x15/0x180 [ 376.744983][ T7677] ? __obj_cgroup_charge+0x36/0x2c0 [ 376.745023][ T7677] __obj_cgroup_charge+0x1fd/0x2c0 [ 376.745057][ T7677] ? __obj_cgroup_charge+0x36/0x2c0 [ 376.745102][ T7677] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 376.745160][ T7677] __kmalloc_cache_noprof+0x42e/0x680 [ 376.745198][ T7677] ? mr_table_alloc+0x65/0x310 [ 376.745227][ T7677] ? mr_table_alloc+0x65/0x310 [ 376.745265][ T7677] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 376.745300][ T7677] mr_table_alloc+0x65/0x310 [ 376.745330][ T7677] ? __pfx_ipmr_expire_process+0x10/0x10 [ 376.745367][ T7677] ip6mr_net_init+0x382/0x6b0 [ 376.745396][ T7677] ? inet6_net_init+0x4ff/0x8c0 [ 376.745420][ T7677] ? __pfx_ip6mr_net_init+0x10/0x10 [ 376.745452][ T7677] ? ac6_proc_init+0x59/0x70 [ 376.745486][ T7677] ops_init+0x35d/0x5d0 [ 376.745522][ T7677] setup_net+0x118/0x350 [ 376.745562][ T7677] ? __pfx_setup_net+0x10/0x10 [ 376.745603][ T7677] ? __ns_common_init+0x2fc/0x4a0 [ 376.745645][ T7677] copy_net_ns+0x53b/0x780 [ 376.745687][ T7677] create_new_namespaces+0x3f0/0x6b0 [ 376.745724][ T7677] ? security_capable+0x7e/0x2c0 [ 376.745770][ T7677] unshare_nsproxy_namespaces+0x149/0x190 [ 376.745809][ T7677] ksys_unshare+0x5a7/0x950 [ 376.745854][ T7677] ? __pfx_ksys_unshare+0x10/0x10 [ 376.745891][ T7677] ? rcu_is_watching+0x16/0xb0 [ 376.745941][ T7677] __x64_sys_unshare+0x38/0x50 [ 376.745980][ T7677] do_syscall_64+0x166/0x520 [ 376.746005][ T7677] ? trace_irq_disable+0x3b/0x140 [ 376.746038][ T7677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.746063][ T7677] ? clear_bhb_loop+0x70/0xc0 [ 376.746100][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.746125][ T7677] RIP: 0033:0x7ff5775de159 [ 376.746150][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.746170][ T7677] RSP: 002b:00007ff575836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 376.746197][ T7677] RAX: ffffffffffffffda RBX: 00007ff577865fa0 RCX: 00007ff5775de159 [ 376.746215][ T7677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 376.746231][ T7677] RBP: 00007ff57767506b R08: 0000000000000000 R09: 0000000000000000 [ 376.746246][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.746261][ T7677] R13: 00007ff577866038 R14: 00007ff577865fa0 R15: 00007ffd75795548 [ 376.746301][ T7677] [ 376.752237][ T7677] memory: usage 176kB, limit 192kB, failcnt 404 [ 376.752288][ T7677] memory+swap: usage 176kB, limit 9007199254740988kB, failcnt 0 [ 376.752337][ T7677] kmem: usage 176kB, limit 9007199254740988kB, failcnt 0 [ 376.752358][ T7677] Memory cgroup stats for /syz3/test: [ 376.753153][ T7677] cache 0 [ 376.753234][ T7677] rss 0 [ 376.753244][ T7677] shmem 0 [ 376.753252][ T7677] mapped_file 0 [ 376.753261][ T7677] dirty 0 [ 376.753270][ T7677] writeback 0 [ 376.753278][ T7677] workingset_refault_anon 0 [ 376.753319][ T7677] workingset_refault_file 0 [ 376.753341][ T7677] swap 0 [ 376.753362][ T7677] swapcached 0 [ 376.753384][ T7677] pgpgin 0 [ 376.753392][ T7677] pgpgout 0 [ 376.753400][ T7677] pgfault 44 [ 376.753409][ T7677] pgmajfault 0 [ 376.753418][ T7677] inactive_anon 0 [ 376.753427][ T7677] active_anon 0 [ 376.753435][ T7677] inactive_file 0 [ 376.753451][ T7677] active_file 0 [ 376.753473][ T7677] unevictable 0 [ 376.753494][ T7677] hierarchical_memory_limit 196608 [ 376.753524][ T7677] hierarchical_memsw_limit 9223372036854771712 [ 376.753546][ T7677] total_cache 0 [ 376.753555][ T7677] total_rss 0 [ 376.753564][ T7677] total_shmem 0 [ 376.753572][ T7677] total_mapped_file 0 [ 376.753581][ T7677] total_dirty 0 [ 376.753590][ T7677] total_writeback 0 [ 376.753599][ T7677] total_workingset_refault_anon 0 [ 376.753609][ T7677] total_workingset_refault_file 0 [ 376.753631][ T7677] total_swap 0 [ 376.753653][ T7677] total_swapcached 0 [ 376.753676][ T7677] total_pgpgin 0 [ 376.753696][ T7677] total_pgpgout 0 [ 376.753718][ T7677] total_pgfault 44 [ 376.753727][ T7677] total_pgmajfault 0 [ 376.753737][ T7677] total_inactive_anon 0 [ 376.753746][ T7677] total_active_anon 0 [ 376.753755][ T7677] total_inactive_file 0 [ 376.753764][ T7677] total_active_file 0 [ 376.753773][ T7677] total_unevictable 0 [ 376.755791][ T7677] anon_cost 0 [ 376.755803][ T7677] file_cost 0 [ 376.755813][ T7677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.520,pid=7676,uid=0 [ 376.787793][ T7677] Memory cgroup out of memory: Killed process 7676 (syz.3.520) total-vm:102384kB, anon-rss:1432kB, file-rss:23332kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 377.241173][ T49] gspca_sonixj: reg_r err -32 [ 377.241274][ T49] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 377.380385][ T49] usb 3-1: USB disconnect, device number 31 [ 378.106871][ T5708] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 378.161908][ T7692] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 378.466820][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 378.467682][ T5708] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 378.469426][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.469454][ T5708] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.469495][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.534621][ T5708] usb 5-1: config 0 descriptor?? [ 378.760573][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.760741][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.029156][ T5708] usb 5-1: string descriptor 0 read error: -71 [ 379.064615][ T5602] usb 2-1: USB disconnect, device number 31 [ 379.074479][ T5708] usb 5-1: USB disconnect, device number 38 [ 379.486767][ T5602] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 379.636724][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 379.637605][ T5602] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 379.640981][ T5602] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 379.641017][ T5602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 379.641047][ T5602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 379.641073][ T5602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 379.641102][ T5602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 379.658503][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.658584][ T5602] usb 2-1: Product: syz [ 379.658627][ T5602] usb 2-1: Manufacturer: syz [ 379.658669][ T5602] usb 2-1: SerialNumber: syz [ 379.833634][ T5602] usb 2-1: config 0 descriptor?? [ 379.950727][ T7701] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 381.312143][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 381.312203][ T5602] input input17: Device does not respond to id packet M [ 381.330482][ T5602] input input17: Device does not respond to id packet P [ 381.679647][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.679706][ T5602] input input17: Device does not respond to id packet B [ 381.680184][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.680234][ T5602] input input17: Device does not respond to id packet N [ 381.680751][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.688422][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.693941][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.700678][ T5602] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.742836][ T5602] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 381.872944][ T5602] usb 2-1: USB disconnect, device number 32 [ 381.967583][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 381.971516][ T7704] ALSA: mixer_oss: invalid OSS volume '3?,' [ 382.065505][ T7708] loop7: detected capacity change from 0 to 7 [ 382.187459][ T7708] Dev loop7: unable to read RDB block 7 [ 382.187507][ T7708] loop7: unable to read partition table [ 382.187686][ T7708] loop7: partition table beyond EOD, truncated [ 382.187723][ T7708] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 382.328366][ T1251] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 382.476751][ T1251] usb 5-1: Using ep0 maxpacket: 32 [ 382.477672][ T1251] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 382.479117][ T1251] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 382.479145][ T1251] usb 5-1: config 0 has no interface number 0 [ 382.481830][ T1251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.481858][ T1251] usb 5-1: Product: syz [ 382.481875][ T1251] usb 5-1: Manufacturer: syz [ 382.481892][ T1251] usb 5-1: SerialNumber: syz [ 382.542459][ T1251] usb 5-1: config 0 descriptor?? [ 382.706832][ T49] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 382.867202][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 382.870166][ T49] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 382.872395][ T49] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 382.872425][ T49] usb 2-1: config 0 has no interface number 0 [ 382.916172][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.916204][ T49] usb 2-1: Product: syz [ 382.916222][ T49] usb 2-1: Manufacturer: syz [ 382.916238][ T49] usb 2-1: SerialNumber: syz [ 382.968603][ T49] usb 2-1: config 0 descriptor?? [ 382.986227][ T1251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 382.986261][ T1251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 383.515020][ T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 383.515074][ T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 384.235782][ T1251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 384.236121][ T1251] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 384.350638][ T49] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 384.353563][ T49] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 384.449299][ T7728] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 385.216757][ T5593] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 385.376853][ T5593] usb 3-1: Using ep0 maxpacket: 8 [ 385.377739][ T5593] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 385.405419][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.405450][ T5593] usb 3-1: Product: syz [ 385.405475][ T5593] usb 3-1: Manufacturer: syz [ 385.405492][ T5593] usb 3-1: SerialNumber: syz [ 385.436378][ T5593] usb 3-1: config 0 descriptor?? [ 385.469582][ T5593] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 385.832796][ T49] usb 5-1: USB disconnect, device number 39 [ 385.862073][ T1251] usb 2-1: USB disconnect, device number 33 [ 386.217420][ T7739] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 386.483049][ T5593] gspca_sonixj: reg_r err -32 [ 386.483146][ T5593] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 387.986830][ T49] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 388.152453][ T1251] usb 3-1: USB disconnect, device number 32 [ 388.186732][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 388.187450][ T49] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 388.191229][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.191259][ T49] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.191300][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.249994][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 388.347386][ T49] usb 5-1: config 0 descriptor?? [ 388.622684][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 388.769680][ T49] usb 5-1: string descriptor 0 read error: -71 [ 388.776692][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 388.783863][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 388.820728][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 388.820756][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 388.820777][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 388.820795][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 388.820828][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 388.837290][ T49] usb 5-1: USB disconnect, device number 40 [ 388.917133][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.917156][ T10] usb 4-1: Product: syz [ 388.917168][ T10] usb 4-1: Manufacturer: syz [ 388.917179][ T10] usb 4-1: SerialNumber: syz [ 388.929556][ T7749] ALSA: mixer_oss: invalid OSS volume '3?,;' [ 389.032349][ T10] usb 4-1: config 0 descriptor?? [ 389.482710][ T10] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 389.482770][ T10] input input18: Device does not respond to id packet M [ 389.555793][ T10] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 389.555852][ T10] input input18: Device does not respond to id packet P [ 389.619187][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 389.619260][ T10] input input18: Device does not respond to id packet B [ 389.619752][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 389.619812][ T10] input input18: Device does not respond to id packet N [ 389.635796][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 389.645315][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 389.664797][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 389.666103][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 389.833179][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 389.995213][ T10] usb 4-1: USB disconnect, device number 39 [ 390.053446][ T7766] loop7: detected capacity change from 0 to 7 [ 390.213831][ T7771] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 390.621272][ T7766] Dev loop7: unable to read RDB block 7 [ 390.621314][ T7766] loop7: unable to read partition table [ 390.621471][ T7766] loop7: partition table beyond EOD, truncated [ 390.621527][ T7766] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 390.787430][ T7776] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 390.804607][ T5708] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 390.840585][ T7776] bond3: entered promiscuous mode [ 390.841195][ T7776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.946736][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 390.947826][ T5708] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 390.949531][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.949549][ T5708] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.949577][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.048026][ T5708] usb 5-1: config 0 descriptor?? [ 391.297807][ T49] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 391.448952][ T49] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 391.456239][ T49] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 391.456271][ T49] usb 4-1: Product: syz [ 391.487916][ T5708] usb 5-1: string descriptor 0 read error: -71 [ 391.512662][ T5708] usb 5-1: USB disconnect, device number 41 [ 391.541347][ T7780] syz.2.547 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 391.541388][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.2.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 391.541419][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.541434][ T7780] Call Trace: [ 391.541443][ T7780] [ 391.541454][ T7780] dump_stack_lvl+0xe8/0x150 [ 391.541501][ T7780] dump_header+0xd3/0x4b0 [ 391.541537][ T7780] oom_kill_process+0x3ab/0x9e0 [ 391.541569][ T7780] out_of_memory+0x1064/0x1480 [ 391.541609][ T7780] ? __pfx_out_of_memory+0x10/0x10 [ 391.541635][ T7780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.541665][ T7780] ? _mutex_lock_killable+0x152/0x1d0 [ 391.541698][ T7780] ? try_charge_memcg+0xcc3/0x16f0 [ 391.541727][ T7780] try_charge_memcg+0xd82/0x16f0 [ 391.541772][ T7780] ? __pfx_try_charge_memcg+0x10/0x10 [ 391.541804][ T7780] ? percpu_ref_tryget+0x15/0x180 [ 391.541843][ T7780] ? __obj_cgroup_charge+0x36/0x2c0 [ 391.541881][ T7780] __obj_cgroup_charge+0x1fd/0x2c0 [ 391.541917][ T7780] ? __obj_cgroup_charge+0x36/0x2c0 [ 391.541955][ T7780] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 391.542010][ T7780] ? sk_prot_alloc+0x57/0x210 [ 391.542133][ T7780] kmem_cache_alloc_noprof+0x421/0x690 [ 391.542166][ T7780] ? sk_prot_alloc+0x57/0x210 [ 391.542191][ T7780] ? sk_prot_alloc+0x57/0x210 [ 391.542224][ T7780] sk_prot_alloc+0x57/0x210 [ 391.542248][ T7780] ? sk_alloc+0x27/0x390 [ 391.542277][ T7780] sk_alloc+0x3a/0x390 [ 391.542306][ T7780] inet6_create+0x81a/0x1280 [ 391.542333][ T7780] ? inet6_create+0x80/0x1280 [ 391.542362][ T7780] __sock_create+0x4b3/0x9d0 [ 391.542465][ T7780] inet_ctl_sock_create+0xa2/0x220 [ 391.542532][ T7780] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 391.542581][ T7780] sctp_ctrlsock_init+0x47/0x170 [ 391.542673][ T7780] ops_init+0x35d/0x5d0 [ 391.542710][ T7780] setup_net+0x118/0x350 [ 391.542750][ T7780] ? __pfx_setup_net+0x10/0x10 [ 391.542792][ T7780] ? __ns_common_init+0x2fc/0x4a0 [ 391.542835][ T7780] copy_net_ns+0x53b/0x780 [ 391.542877][ T7780] create_new_namespaces+0x3f0/0x6b0 [ 391.542913][ T7780] ? security_capable+0x7e/0x2c0 [ 391.542960][ T7780] unshare_nsproxy_namespaces+0x149/0x190 [ 391.542998][ T7780] ksys_unshare+0x5a7/0x950 [ 391.543043][ T7780] ? __pfx_ksys_unshare+0x10/0x10 [ 391.543080][ T7780] ? rcu_is_watching+0x16/0xb0 [ 391.543140][ T7780] __x64_sys_unshare+0x38/0x50 [ 391.543176][ T7780] do_syscall_64+0x166/0x520 [ 391.543203][ T7780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.543228][ T7780] ? clear_bhb_loop+0x70/0xc0 [ 391.543258][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.543283][ T7780] RIP: 0033:0x7fec6884e159 [ 391.543306][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.543328][ T7780] RSP: 002b:00007fec66aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 391.543354][ T7780] RAX: ffffffffffffffda RBX: 00007fec68ad5fa0 RCX: 00007fec6884e159 [ 391.543373][ T7780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 391.543389][ T7780] RBP: 00007fec688e506b R08: 0000000000000000 R09: 0000000000000000 [ 391.543404][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.543419][ T7780] R13: 00007fec68ad6038 R14: 00007fec68ad5fa0 R15: 00007ffc2fa7b5d8 [ 391.543459][ T7780] [ 391.544207][ T7780] memory: usage 192kB, limit 192kB, failcnt 135 [ 391.544226][ T7780] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 391.544243][ T7780] kmem: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 391.544259][ T7780] Memory cgroup stats for /syz2/test: [ 391.544395][ T7780] cache 0 [ 391.544406][ T7780] rss 0 [ 391.544415][ T7780] shmem 0 [ 391.544424][ T7780] mapped_file 0 [ 391.544432][ T7780] dirty 0 [ 391.544440][ T7780] writeback 0 [ 391.544449][ T7780] workingset_refault_anon 0 [ 391.544458][ T7780] workingset_refault_file 0 [ 391.544467][ T7780] swap 0 [ 391.544475][ T7780] swapcached 0 [ 391.544484][ T7780] pgpgin 0 [ 391.544492][ T7780] pgpgout 0 [ 391.544500][ T7780] pgfault 41 [ 391.544509][ T7780] pgmajfault 0 [ 391.544518][ T7780] inactive_anon 0 [ 391.544526][ T7780] active_anon 0 [ 391.544535][ T7780] inactive_file 0 [ 391.544544][ T7780] active_file 0 [ 391.544553][ T7780] unevictable 0 [ 391.544562][ T7780] hierarchical_memory_limit 196608 [ 391.544572][ T7780] hierarchical_memsw_limit 9223372036854771712 [ 391.544582][ T7780] total_cache 0 [ 391.544591][ T7780] total_rss 0 [ 391.544599][ T7780] total_shmem 0 [ 391.544608][ T7780] total_mapped_file 0 [ 391.544617][ T7780] total_dirty 0 [ 391.544625][ T7780] total_writeback 0 [ 391.544634][ T7780] total_workingset_refault_anon 0 [ 391.544644][ T7780] total_workingset_refault_file 0 [ 391.544653][ T7780] total_swap 0 [ 391.544662][ T7780] total_swapcached 0 [ 391.544671][ T7780] total_pgpgin 0 [ 391.544679][ T7780] total_pgpgout 0 [ 391.544688][ T7780] total_pgfault 41 [ 391.544697][ T7780] total_pgmajfault 0 [ 391.544706][ T7780] total_inactive_anon 0 [ 391.544715][ T7780] total_active_anon 0 [ 391.544724][ T7780] total_inactive_file 0 [ 391.544733][ T7780] total_active_file 0 [ 391.544742][ T7780] total_unevictable 0 [ 391.544751][ T7780] anon_cost 0 [ 391.544760][ T7780] file_cost 0 [ 391.544768][ T7780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.547,pid=7779,uid=0 [ 391.545024][ T7780] Memory cgroup out of memory: Killed process 7779 (syz.2.547) total-vm:102384kB, anon-rss:1436kB, file-rss:23332kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 391.596728][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 391.781280][ T49] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 391.808820][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 391.846886][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 392.179043][ T49] usb 4-1: Detected FT4233HP [ 392.182110][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 392.182140][ T10] usb 2-1: config 0 has no interface number 0 [ 392.206534][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.208210][ T10] usb 2-1: Product: syz [ 392.208228][ T10] usb 2-1: Manufacturer: syz [ 392.208242][ T10] usb 2-1: SerialNumber: syz [ 392.244018][ T10] usb 2-1: config 0 descriptor?? [ 392.629992][ T7780] socket: no more sockets [ 392.630026][ T7780] sctp: Failed to create the SCTP control socket [ 392.630037][ T7780] sctp: Failed to initialize the SCTP control sock [ 392.718757][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 392.718792][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 392.824096][ T7776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.824633][ T7776] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 392.824659][ T7776] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 392.848246][ T7776] bond3: (slave wireguard1): making interface the new active one [ 392.848302][ T7776] wireguard1: entered promiscuous mode [ 392.851535][ T7776] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 392.907606][ T7787] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 394.191537][ T39] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 394.191565][ T39] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 39, name: oom_reaper [ 394.191584][ T39] preempt_count: 0, expected: 0 [ 394.191596][ T39] RCU nest depth: 0, expected: 0 [ 394.191620][ T39] locks held by oom_reaper/39: 4, last CPU#1: [ 394.191814][ T39] #0: ffff8880398c10b8 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 [ 394.192031][ T39] #1: ffffffff8e30b240 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 394.192096][ T39] #2: ffffffff8e30b298 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 394.192233][ T39] #3: ffff88805fae9560 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 394.192409][ T39] CPU: 1 UID: 0 PID: 39 Comm: oom_reaper Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 394.192440][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.192454][ T39] Call Trace: [ 394.192463][ T39] [ 394.192474][ T39] dump_stack_lvl+0xe8/0x150 [ 394.192512][ T39] __might_resched+0x31b/0x470 [ 394.192548][ T39] ? preempt_schedule_irq+0x3b/0x90 [ 394.192577][ T39] rt_spin_lock+0xc2/0x400 [ 394.192610][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.192645][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 394.192680][ T39] ? __lock_acquire+0x747/0x2de0 [ 394.192717][ T39] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 394.192770][ T39] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 394.192820][ T39] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 394.192864][ T39] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 394.192901][ T39] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 394.192954][ T39] ? zap_vma_for_reaping+0x193/0x380 [ 394.192980][ T39] zap_vma_for_reaping+0x1f7/0x380 [ 394.193008][ T39] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 394.193071][ T39] oom_reaper+0x519/0xc10 [ 394.193097][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.193135][ T39] ? __pfx_oom_reaper+0x10/0x10 [ 394.193173][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 394.193199][ T39] ? __kthread_parkme+0x71/0x1f0 [ 394.193237][ T39] ? __kthread_parkme+0x199/0x1f0 [ 394.193278][ T39] kthread+0x38b/0x470 [ 394.193305][ T39] ? __pfx_oom_reaper+0x10/0x10 [ 394.193334][ T39] ? __pfx_kthread+0x10/0x10 [ 394.193359][ T39] ret_from_fork+0x514/0xb70 [ 394.193402][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 394.193427][ T39] ? __switch_to+0xc89/0x1420 [ 394.193472][ T39] ? __pfx_kthread+0x10/0x10 [ 394.193506][ T39] ret_from_fork_asm+0x1a/0x30 [ 394.193549][ T39] [ 394.588095][ T39] oom_reaper: reaped process 7779 (syz.2.547), now anon-rss:0kB, file-rss:22152kB, shmem-rss:0kB [ 394.996793][ T49] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 394.997266][ T49] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 395.064484][ T49] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 395.089621][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 395.089875][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 395.146351][ T49] usb 4-1: USB disconnect, device number 40 [ 395.181966][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 395.186496][ T49] ftdi_sio 4-1:5.0: device disconnected [ 396.335436][ T1251] usb 2-1: USB disconnect, device number 34