last executing test programs: 6m44.546867866s ago: executing program 3 (id=57): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x0, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300), 0x0, 0xff, 0x10016, 0x3, 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6m43.832266426s ago: executing program 3 (id=59): socket(0x11, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a000000000000000800", @ANYRES64=r0], 0x20}}, 0x0) 6m43.701022696s ago: executing program 3 (id=60): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 6m43.203092366s ago: executing program 3 (id=65): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m42.066446759s ago: executing program 3 (id=69): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6m42.062893885s ago: executing program 4 (id=70): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 6m41.403365652s ago: executing program 3 (id=72): socket$inet6_udplite(0xa, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m40.755406923s ago: executing program 32 (id=72): socket$inet6_udplite(0xa, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m40.731198594s ago: executing program 4 (id=75): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) eventfd(0x10) io_submit(r1, 0x0, &(0x7f00000006c0)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x7) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000080)=0x3ff) close_range(r0, 0xffffffffffffffff, 0x0) 6m40.431472548s ago: executing program 4 (id=77): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xa0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x47f6, 0xeffd, 0x5, 0x0, 0x0) 6m38.482553667s ago: executing program 4 (id=80): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m37.429451196s ago: executing program 4 (id=83): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a380)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c6082104cfcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b29643e40ddabc200ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142d95b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec006088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14de270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32d0800452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e552566c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfbe98badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335ed1312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199983d416ae39497fcbebff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efc744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e918393296bff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a9520460f2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f145383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c13baf1338494f54aea94d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950910b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c76719eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e109dd96f4c87e23a2350574e7c6d856628dced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117eb9be58660db072ca53c4496308c75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a828f3568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 6m34.344778387s ago: executing program 4 (id=90): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b'], 0x0, 0x0, 0x0, 0x0}) 6m33.120330942s ago: executing program 33 (id=90): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b'], 0x0, 0x0, 0x0, 0x0}) 11.963286498s ago: executing program 2 (id=1460): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) unshare(0x20000400) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 8.902898271s ago: executing program 2 (id=1463): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x6, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 8.902629123s ago: executing program 5 (id=1464): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x800) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x16) 8.901874019s ago: executing program 6 (id=1465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, &(0x7f0000000340)={0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d0001000000060002404e22000008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 7.861716154s ago: executing program 0 (id=1467): unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) 7.463419345s ago: executing program 5 (id=1469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 7.383940645s ago: executing program 0 (id=1470): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) 7.117962488s ago: executing program 6 (id=1471): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x82, 0x42081) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.895349353s ago: executing program 6 (id=1475): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000000)="7510", 0x2) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x4, 0x7, {{0xe, 0x4, 0x2, 0x2a, 0x38, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@noop, @timestamp={0x44, 0x14, 0x9, 0x0, 0x7, [0xffffffff, 0x1, 0x8, 0xd]}, @end, @ssrr={0x89, 0xb, 0x8c, [@rand_addr=0x64010102, @multicast2]}]}}}}}) r8 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in6=@remote, 0x4e20, 0xc8, 0x4e22, 0x8, 0x2, 0x80, 0x40, 0x5c, r7, r8}, {0xc5b6, 0x5, 0xbd, 0xbe, 0x2, 0x2, 0xfb41, 0x1}, {0x6, 0x5, 0x101, 0x5}, 0xb, 0x6e6bb8, 0x0, 0x0, 0x3, 0x22759f423d9c70f6}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4d5, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x34ff, 0x1, 0x2, 0xfe, 0xc, 0x1b, 0x3}}, 0xe8) 5.76431952s ago: executing program 2 (id=1476): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) unshare(0x20000400) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 5.561381771s ago: executing program 0 (id=1478): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000021c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2505000000080009000200000008000c00aa0a0000060001000500000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000) 5.115308538s ago: executing program 0 (id=1479): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.98098147s ago: executing program 6 (id=1481): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x2c00000000000000, 0xb, 0x6a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000040)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.577533171s ago: executing program 6 (id=1482): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf5a1, 0x1f, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x38}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 4.497914249s ago: executing program 5 (id=1483): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="74836a608a879c0f4933e2980e3c27227b44c5f674d374f685a7252ac48df7cbdb6cb4b24ef98291b83a501c8237790fe9dd1ab86749497a19e5823d8a30793254456ddc653c653fa808d834a5eb7d4d59ffb92952f1066a00bce07815b7b6d48a1722932d00dbdee09c36353b3109cdf5e573402fe43eed02728bedac7695eecc6592553d856ef5c81f3ac1aae42258794c093e644c10232030162346daaed7eb5035eeedc50977abe7153d2a693ed4a3808361052bbbd83cdd05d314de0d22a343bc438fb7d6cf3e96986d06662f1005a21a1a92a75cc0b9e59032f9cdeccd2d0ce9961ac063991b8adade53529e42a66e71cfe2898c62fea7a35048348ed3c1558f7dccf1d57ec1e04dce785f2b7d53a725bee3285c34c39c4bcfc7e78de0e2056ee113473335dff60475785116916d1f140a093a98912ab97185763da02e09aff786dabac1ecb508f44c729831afccd8127a432236ca799e232e24d6a432401121373560729431c07d280d5ddca29f8b090ba9fb342c0472dd41254696804d890335594dc908892b5b4141817d074e3d18f60fcc88a09d01167ebc34abe1fa88ad479b255fed991086555f6715611b75281c919e08295d7dce5a94354de0d3f9ab6a0ca20a76060b23caf7c18bf50d5cc1035f292394bf1be8640588918f692827dfdc1e4095c2b468a80b722b69e350e66c88c222bf1c357b3867d162e5e1d90777223b7dac6b9bd8fca2ee2019dbe35f7eb9f4562dd0d761adf16f1c2659aea0fe284602a4c188fae98d28f6bbe8c9928ecaa3ab282e4eb4480f8d26b1e38df368d808dc037350d13fd898638c1ffb13005709a6340fa4dec43307c7a53236399d02e03280fe5b37326b4bf920770607950aa957f73b56eb42b50428b80f533d57042b8cec67548f60789e557f5e68426b7ea3c7e2ed0c68e571bbb4d14dbb1a7e32750c30a97535bc6a398204e0b4b20038a2905fa97a899c0c153b9f783e08561d6d7ce9c593b20a8c9d0342c64639db4e4a900de891f9cf418caf585a9fb1fe88cd1febb3fadc934827e10adc73668c2bec4161c6d9d8af83b94916ba183fd4319139cea73173a5a2a5a50665643a0ca3de14b989706eecdbb010c45c9826ef368fc494c468446813208021c973c933a58507bc8a51baf3b77af624c8d15fad4e2d3cc7b2092c089baed0cd1f545cd6f1646bdaab17a11a74666c24e2af78dff22c8767155c7257235e851a4d57f51cc65e14f51c4a2afe1af92cdc25e5e71bdd3dde36ed40cb6393cc9696d7235e47929dbdb6a5d9d9059e19cd5e2e55ee1c25408f7deae259db7da26b81aa60365da1694085cfcda459930e6cc31501ece761aa36c12027a297f9e8b7da2b8149b251519a805ba3d5d850221e50ccc97b93281753193943d23b50be93fe957395c0ca116ebcedca7998c7f408dc938aba02b18ad9da724c2e3716981a658ce235d1723aba974c768c07dbef8678ff11cf46afae541ac5ac3a65ae67a51d201d9c8619592484afadcd4af0a4b0ea4af052a551e61bca70f2fac665e2e4d974ae3ee76f71ed58fc2e4194d9fd94b1a627cc7e116f11d67683144308947f4707422d31d4485a573e760963c74085dec9ed551d63c802d57e1633b82711b514a5b873b2be89660d84a188dbf1b97d7a23cb8b364f6ea031077718b19d01a6ed5942564525cb749e21c9a68ce245489db7e4fd383ed3e93ee006ff10a58c2fe3c91d97f790b8a271180c69589c21a0c72e68d84eddde3e01d5eb034e77a5a27cb80e34fa36f0fa4125a22944f60590e1b9b0f1c836d64217322286e3d24af8e991458af3a542ea8354fbe83a4d513893a39539523eef23802bff8019a5de324cbf39ec1e913fbb3cacbf7c7cf15ebfffbdd11c24543845d87e8b401671d2ae8d5db07d7e929248e1a348a17d80aff99ef1b3836f79a93f958a70d4e33a7f04fa15e1336f5c26289b46e470eff41958dce02e3163c199dd1ec083df1c8447624e529320fba36b848d27390aeb331d357de60465c2e0fb501916b1aa238ac1869dce80a17d9bba484c48a8928c170925889c", 0x5c1}], 0x1}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffbe, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) 3.981256854s ago: executing program 5 (id=1484): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.281267508s ago: executing program 1 (id=1485): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/72, 0x3a000, 0x1000}, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r1}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b5028133874c8f658efc5f55374d4db81c9dc04dc9adc9b68442ce2905d0d53eaf", 0x21, 0x4008841, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) modify_ldt$write2(0x11, &(0x7f0000000080)={0x5, 0x0, 0x4000, 0x0, 0x1}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 2.767431603s ago: executing program 1 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x4008800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001fc0)=""/4088, 0xff8}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000002fc0)=""/116, 0x74}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}, 0xff}], 0x4, 0x100, 0x0) sendmmsg$unix(r1, &(0x7f0000004680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10, 0x20000000}}], 0x1, 0x20000010) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3a486de04f47038a}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x204, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff1460}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2.560375624s ago: executing program 1 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(0x0, 0x42202, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r2, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e00000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 2.540046037s ago: executing program 2 (id=1488): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = io_uring_setup(0x73cf, &(0x7f0000000080)={0x0, 0x23ad, 0x800, 0x8000002, 0x217}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.277122332s ago: executing program 1 (id=1489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x3b) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r2, 0x1) 2.138295841s ago: executing program 2 (id=1490): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000780)={0x1, 0x6}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.949735054s ago: executing program 0 (id=1491): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_secret(0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)) r2 = epoll_create1(0x0) socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r1, 0xfffffffffffffa6f, 0xfffffffc}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r3, 0x0, 0x0, 0x24000014) 1.819148104s ago: executing program 2 (id=1492): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') writev(r3, &(0x7f0000000680)=[{&(0x7f0000000c40)='0', 0x1}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x344, 0xffffffff, 0x190, 0x0, 0x190, 0xffffffff, 0xffffffff, 0x27c, 0x27c, 0x27c, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@hl={{0x24}, {0x3, 0x65}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r4, r5, r6, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, r7, 0x5, 0xffffffff, 0x2, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r4, r5, r6, 0xce, 0x1d042000, 0xfffffeff, 0x0, 0x0, 0x0, 0xb, 0x20041d, 0x7fd}) 1.031771736s ago: executing program 6 (id=1493): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0xe, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xbb8) 889.563518ms ago: executing program 1 (id=1494): openat$tun(0xffffff9c, &(0x7f0000000080), 0x280200, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x2c00000000000000, 0xb, 0x6a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 815.236179ms ago: executing program 0 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x11c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xea}, {0x6, 0x11, 0x9e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xf801}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xba8}, {0x6, 0x11, 0x6}}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x24}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000a00)=""/126, 0x7e, 0x7) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 739.100313ms ago: executing program 5 (id=1496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xa}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x65, 0x0, 0x0, 0x8001, &(0x7f0000000080)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 82.865918ms ago: executing program 1 (id=1497): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="050006ee020000000500070001"], 0x50}}, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000005c0)='./file0/file0\x00', 0x808, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x651, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r5, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x97c6, {0x4, 0x2, 0x4, 0x28580000000, 0x5, 0x8, {0x5, 0x8000000000000000, 0xfffffffffffffff9, 0xa90, 0x8, 0x3, 0x0, 0x0, 0x8, 0x1000, 0x72, 0x0, r5, 0x9, 0x4c2d}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 0s ago: executing program 5 (id=1498): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) unshare(0x20000400) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) kernel console output (not intermixed with test programs): rt_wifi0: entered allmulticast mode [ 355.390391][ T9831] veth1_vlan: entered allmulticast mode [ 355.399242][ T9831] veth0_vlan: entered allmulticast mode [ 355.420497][ T9831] vlan0: entered allmulticast mode [ 355.427313][ T9831] vlan1: entered allmulticast mode [ 355.437019][ T9831] macvlan0: entered allmulticast mode [ 355.448894][ T9831] macvlan1: entered allmulticast mode [ 355.473590][ T9831] ipvlan0: entered allmulticast mode [ 355.497348][ T9831] ipvlan1: entered allmulticast mode [ 355.518272][ T9831] veth1_macvtap: entered allmulticast mode [ 355.530443][ T9831] veth0_macvtap: entered allmulticast mode [ 355.555830][ T9831] macvtap0: entered allmulticast mode [ 355.575809][ T9831] macsec0: entered allmulticast mode [ 355.578397][ T9831] geneve0: entered allmulticast mode [ 355.582080][ T9831] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.582141][ T9831] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.582179][ T9831] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.582207][ T9831] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.586908][ T9831] geneve1: entered allmulticast mode [ 355.600155][ T9831] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 355.610038][ T9831] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 355.689448][ T9831] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 355.691437][ T9831] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 355.697033][ T9831] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 355.754994][ T9831] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 355.777352][ T9831] bridge1: entered allmulticast mode [ 355.783221][ T9831] veth2: entered allmulticast mode [ 355.820552][ T9831] veth3: entered allmulticast mode [ 355.837321][ T9831] veth4: entered allmulticast mode [ 356.020974][ T9831] veth5: entered allmulticast mode [ 356.046060][ T9831] gre1: entered allmulticast mode [ 356.239227][ T9831] syz.6.963 (9831) used greatest stack depth: 19832 bytes left [ 356.314208][ T2996] net_ratelimit: 14 callbacks suppressed [ 356.314225][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.502913][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.615637][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.779214][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.913450][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.058742][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.232939][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.424625][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.544483][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.784108][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 359.416852][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.994'. [ 360.282843][ T5885] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 360.496208][ T5885] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.523069][ T5885] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 360.532369][ T5885] usb 7-1: config 1 has no interface number 1 [ 360.539039][ T5885] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 360.630946][ T5885] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 360.710011][ T5885] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.719431][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.762833][ T5885] usb 7-1: Product: syz [ 360.771143][ T5885] usb 7-1: Manufacturer: syz [ 360.785372][ T5885] usb 7-1: SerialNumber: syz [ 360.794312][ T9939] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 361.050465][ T5885] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 361.062843][ T5839] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 361.071574][ T5885] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 361.200544][ T5885] usb 7-1: USB disconnect, device number 23 [ 361.244663][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.262968][ T5839] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.290275][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.317952][ T5839] usb 1-1: config 0 descriptor?? [ 361.412274][ T9640] net_ratelimit: 22 callbacks suppressed [ 361.412456][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 361.509882][ T6235] udevd[6235]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.526243][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 361.623996][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 361.757256][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.775022][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 361.829254][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.891325][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 361.946352][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.016189][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 362.061331][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 362.096029][ T9976] bridge0: port 4(vxlan0) entered blocking state [ 362.106140][ T9976] bridge0: port 4(vxlan0) entered disabled state [ 362.114536][ T9976] vxlan0: entered allmulticast mode [ 362.122187][ T9976] vxlan0: entered promiscuous mode [ 362.144059][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.202010][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 362.213261][ T5839] pwc: recv_control_msg error -32 req 02 val 2700 [ 362.221870][ T5839] pwc: recv_control_msg error -32 req 02 val 2c00 [ 362.238637][ T5839] pwc: recv_control_msg error -32 req 04 val 1000 [ 362.252370][ T5839] pwc: recv_control_msg error -32 req 04 val 1300 [ 362.267447][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.267781][ T5839] pwc: recv_control_msg error -32 req 04 val 1400 [ 362.291732][ T5839] pwc: recv_control_msg error -32 req 02 val 2000 [ 362.495852][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.584500][ T5839] pwc: recv_control_msg error -71 req 04 val 1500 [ 362.602778][ T5839] pwc: recv_control_msg error -71 req 02 val 2500 [ 362.613240][ T5839] pwc: recv_control_msg error -71 req 02 val 2400 [ 362.620121][ T5839] pwc: recv_control_msg error -71 req 02 val 2600 [ 362.707073][ T9987] input: syz1 as /devices/virtual/input/input22 [ 362.809546][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.828459][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 362.840712][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 362.859673][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 362.902270][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 362.934627][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.970460][ T5839] pwc: Registered as video103. [ 363.005399][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 363.078523][ T5839] usb 1-1: USB disconnect, device number 23 [ 363.367404][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.529349][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 364.963767][ T5885] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 365.164864][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.179934][ T5885] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.189705][ T5885] usb 3-1: config 1 has no interface number 1 [ 365.203140][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 365.217539][ T5885] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 365.233148][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.242318][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.250803][ T5885] usb 3-1: Product: syz [ 365.255878][ T5885] usb 3-1: Manufacturer: syz [ 365.260515][ T5885] usb 3-1: SerialNumber: syz [ 365.297510][T10016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.614604][ T5885] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 365.700621][ T5885] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 365.808196][ T5885] usb 3-1: USB disconnect, device number 23 [ 366.513032][ T12] net_ratelimit: 14 callbacks suppressed [ 366.513054][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.703226][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.833295][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.943639][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.250057][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.424383][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.512758][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 367.512777][ T30] audit: type=1804 audit(1748503701.764:140): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1032" name="/newroot/174/bus" dev="tmpfs" ino=926 res=1 errno=0 [ 367.543257][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.693005][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.983235][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.383361][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.805363][ T5885] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 368.992921][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 369.020850][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 369.038816][ T5885] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 369.048595][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.066980][ T5885] usb 7-1: Product: syz [ 369.077571][ T5885] usb 7-1: Manufacturer: syz [ 369.085793][ T5885] usb 7-1: SerialNumber: syz [ 369.103745][ T5885] usb 7-1: config 0 descriptor?? [ 369.144033][T10067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 369.152366][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub [ 369.163017][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5 [ 369.184495][ T5885] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 369.587775][ T5839] usb 7-1: USB disconnect, device number 24 [ 369.587835][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 370.179061][ T6515] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 370.359476][ T6515] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 370.399152][ T6515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.425018][ T6515] usb 1-1: config 0 descriptor?? [ 370.434593][ T6515] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 371.556756][ T9636] net_ratelimit: 25 callbacks suppressed [ 371.556772][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.752810][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.983097][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.105979][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.232888][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.345646][ T6515] usb 1-1: USB disconnect, device number 24 [ 372.384697][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.522185][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.673283][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.782894][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.952729][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 372.968355][T10123] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 373.002109][T10123] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 373.053679][T10123] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 373.486750][ T30] audit: type=1804 audit(1748503707.564:141): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1050" name="/newroot/226/bus" dev="tmpfs" ino=1193 res=1 errno=0 [ 373.757076][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.155554][ T5931] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 375.222946][ T5839] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 375.422777][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 375.440847][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 375.444482][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 375.472950][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 375.502788][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.526305][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 375.549747][ T5839] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 375.569472][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.572771][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.592898][ T5839] usb 7-1: Product: syz [ 375.602958][ T5839] usb 7-1: Manufacturer: syz [ 375.607589][ T5839] usb 7-1: SerialNumber: syz [ 375.642721][ T5931] usb 2-1: Product: syz [ 375.645465][ T5839] usb 7-1: config 0 descriptor?? [ 375.652871][T10147] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 375.657232][ T5931] usb 2-1: Manufacturer: syz [ 375.678728][ T5839] usb 7-1: ucan: probing device on interface #0 [ 375.682716][ T5931] usb 2-1: SerialNumber: syz [ 375.705970][ T5839] usb 7-1: ucan: invalid EP count (1) [ 375.711387][ T5839] usb 7-1: ucan: probe failed; try to update the device firmware [ 375.720762][ T5931] usb 2-1: config 0 descriptor?? [ 375.757779][ T5931] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 375.816469][ T5931] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 376.393911][ T5931] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 376.409502][ T5931] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 376.442816][ T5839] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 376.653961][ T2996] net_ratelimit: 25 callbacks suppressed [ 376.654000][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.763048][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 376.796374][ T5839] usb 3-1: config 0 has no interfaces? [ 376.823338][ T5839] usb 3-1: config 0 has no interfaces? [ 376.832523][ T5839] usb 3-1: config 0 has no interfaces? [ 376.848310][ T43] usb 7-1: USB disconnect, device number 25 [ 376.856652][ T5839] usb 3-1: config 0 has no interfaces? [ 376.868900][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 376.909786][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.922882][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.939440][ T5839] usb 3-1: config 0 descriptor?? [ 377.153143][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.307635][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.512792][ T5931] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 377.601858][T10163] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 377.615415][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.743265][ T5931] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 377.751912][ T5931] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 377.752888][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.876002][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.911768][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 377.925315][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 378.009605][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.133341][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.156267][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 378.187328][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 378.312955][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.330675][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 378.533142][ T5931] usb 2-1: USB disconnect, device number 23 [ 378.533285][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.554861][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.364863][ T5931] usb 3-1: USB disconnect, device number 24 [ 379.802943][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 379.810636][T10187] Cannot find del_set index 3 as target [ 379.984015][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 379.991201][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.002188][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.020171][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.029513][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.042296][ T43] usb 2-1: Product: syz [ 380.051843][ T43] usb 2-1: Manufacturer: syz [ 380.061898][ T43] usb 2-1: SerialNumber: syz [ 380.119026][T10197] kvm: kvm [10196]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0xff01 [ 380.293371][ T43] usb 2-1: 0:2 : does not exist [ 380.338972][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 380.392582][ T43] usb 2-1: USB disconnect, device number 24 [ 380.910930][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.552301][T10208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.687901][ T9640] net_ratelimit: 21 callbacks suppressed [ 381.687922][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.803300][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.923502][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.053572][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.182786][ T43] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 382.213984][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.368154][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.402771][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 382.443397][ T43] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 382.452861][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.460861][ T43] usb 6-1: Product: syz [ 382.494485][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.559646][ T43] usb 6-1: Manufacturer: syz [ 382.579188][ T43] usb 6-1: SerialNumber: syz [ 382.677985][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.788619][ T43] usb 6-1: config 0 descriptor?? [ 382.940890][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.024691][ T43] usb 6-1: ignoring: not an USB2CAN converter [ 383.082767][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.240902][ T43] usb 6-1: USB disconnect, device number 25 [ 383.492453][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 383.768042][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 383.781629][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 383.794349][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.809508][ T30] audit: type=1800 audit(1748503718.074:142): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1088" name="/" dev="fuse" ino=1 res=0 errno=0 [ 383.934228][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.034506][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.085585][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.226315][ T9] usb 1-1: Product: syz [ 384.402737][ T9] usb 1-1: Manufacturer: syz [ 384.407792][ T9] usb 1-1: SerialNumber: syz [ 384.924211][ T9] usb 1-1: 0:2 : does not exist [ 385.072111][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 386.062972][ T5931] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 386.225947][ T5931] usb 7-1: unable to get BOS descriptor or descriptor too short [ 386.234828][ T5931] usb 7-1: config 6 has an invalid interface number: 200 but max is 0 [ 386.243101][ T5931] usb 7-1: config 6 has no interface number 0 [ 386.250131][ T5931] usb 7-1: config 6 interface 200 has no altsetting 0 [ 386.261897][ T5931] usb 7-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 386.272758][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.280981][ T5931] usb 7-1: Product: syz [ 386.289552][ T5931] usb 7-1: Manufacturer: syz [ 386.296250][ T5931] usb 7-1: SerialNumber: syz [ 386.437541][ T9] usb 1-1: USB disconnect, device number 25 [ 386.470530][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.765128][ T13] net_ratelimit: 29 callbacks suppressed [ 386.765150][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.903529][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.031860][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.164550][ T5931] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 387.179608][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.303313][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 387.433636][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.498555][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.554004][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 387.565875][ T9] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 387.576803][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.633058][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.782901][ T5885] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 387.809170][ T5931] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 387.831968][ T9] usb 1-1: Product: syz [ 387.841347][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.859857][ T9] usb 1-1: Manufacturer: syz [ 387.868393][ T5931] usb 7-1: media controller created [ 387.886189][ T9] usb 1-1: SerialNumber: syz [ 387.939611][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.952996][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.971520][ T9] usb 1-1: config 0 descriptor?? [ 387.992742][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 388.028640][ T5885] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 388.043096][ T9] as10x_usb: device has been detected [ 388.058703][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.078903][ T5931] dvb-usb: bulk message failed: -71 (6/0) [ 388.086526][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 388.094605][ T5885] usb 2-1: config 0 has no interface number 0 [ 388.100717][ T5885] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 388.135599][ T5931] dvb-usb: bulk message failed: -71 (6/0) [ 388.141497][ T5931] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 388.142800][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.162184][ T9] usb 1-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 388.174008][ T5885] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 388.193714][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 388.218671][ T5885] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 388.288963][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 388.297543][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.306124][ T5885] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.328948][ T5931] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 388.346386][ T5885] usb 2-1: config 0 interface 52 has no altsetting 0 [ 388.360788][ T9] as10x_usb: error during firmware upload part1 [ 388.457380][ T5931] usb 7-1: USB disconnect, device number 26 [ 388.466555][ T5885] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 388.478257][ T9] Registered device Abilis Systems DVB-Titan [ 388.480512][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.502048][ T5885] usb 2-1: config 0 descriptor?? [ 388.716441][ T5839] usb 1-1: USB disconnect, device number 26 [ 388.749156][T10302] pic_ioport_write: 13 callbacks suppressed [ 388.749174][T10302] kvm: pic: single mode not supported [ 388.755255][T10302] kvm: pic: level sensitive irq not supported [ 388.779525][ T5931] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 388.780720][ T5839] Unregistered device Abilis Systems DVB-Titan [ 388.796115][T10302] kvm: pic: level sensitive irq not supported [ 388.831592][T10302] kvm: pic: single mode not supported [ 388.838462][T10302] kvm: pic: level sensitive irq not supported [ 388.856859][T10302] kvm: pic: single mode not supported [ 388.863400][T10302] kvm: pic: level sensitive irq not supported [ 388.869499][ T5937] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 388.985033][ T5839] as10x_usb: device has been disconnected [ 389.001625][ T5885] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input26 [ 389.142800][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 389.150521][ T5937] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 389.180890][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.216353][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.226365][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.239174][ T5839] usb 2-1: USB disconnect, device number 25 [ 389.290562][ T5937] usb 3-1: Product: syz [ 389.299956][ T5937] usb 3-1: Manufacturer: syz [ 389.320917][ T5937] usb 3-1: SerialNumber: syz [ 389.560021][ T5937] usb 3-1: 0:2 : does not exist [ 389.583597][ T5937] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 389.636379][T10307] kvm: kvm [10306]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 389.676492][ T5937] usb 3-1: USB disconnect, device number 25 [ 389.728043][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.722112][ T5931] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 390.902800][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 390.932975][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 390.975219][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 391.420679][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 391.434952][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.469279][ T5931] usb 2-1: Product: syz [ 391.473626][ T5931] usb 2-1: Manufacturer: syz [ 391.483750][ T5931] usb 2-1: SerialNumber: syz [ 391.538355][ T5931] usb 2-1: config 0 descriptor?? [ 391.572122][ T5931] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 391.603728][ T5931] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 391.864882][ T13] net_ratelimit: 16 callbacks suppressed [ 391.864902][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.045737][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.204098][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.267747][ T5931] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 392.274863][ T5931] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 392.323330][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.609093][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.684346][ T30] audit: type=1800 audit(1748503726.954:143): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1119" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 392.763561][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.906859][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.332823][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 393.467849][ T5931] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 393.616749][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.718629][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.878162][ T5931] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 393.879882][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.906241][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 393.943354][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 393.980665][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 394.002108][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 394.022187][ T5931] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 394.084078][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 394.104937][ T5931] usb 2-1: USB disconnect, device number 26 [ 394.294764][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.393549][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 394.673572][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 394.943549][T10362] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.023991][T10361] kvm: pic: non byte read [ 395.043549][ T13] bridge_slave_1: left allmulticast mode [ 395.049265][ T13] bridge_slave_1: left promiscuous mode [ 395.059567][T10361] kvm: pic: level sensitive irq not supported [ 395.059634][T10361] kvm: pic: non byte read [ 395.095249][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.137972][T10361] kvm: pic: level sensitive irq not supported [ 395.138043][T10361] kvm: pic: non byte read [ 395.177755][ T13] bridge_slave_0: left allmulticast mode [ 395.199243][T10361] kvm: pic: level sensitive irq not supported [ 395.199749][T10361] kvm: pic: non byte read [ 395.221116][ T13] bridge_slave_0: left promiscuous mode [ 395.250896][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.273353][T10361] kvm: pic: level sensitive irq not supported [ 395.273424][T10361] kvm: pic: non byte read [ 395.323282][T10361] kvm: pic: level sensitive irq not supported [ 395.323362][T10361] kvm: pic: non byte read [ 395.334922][T10375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.349386][T10375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.358698][T10375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.367530][T10361] kvm: pic: level sensitive irq not supported [ 395.367582][T10361] kvm: pic: non byte read [ 395.384544][T10375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.392004][T10361] kvm: pic: level sensitive irq not supported [ 395.392074][T10361] kvm: pic: non byte read [ 395.413423][T10361] kvm: pic: level sensitive irq not supported [ 395.413524][T10361] kvm: pic: non byte read [ 395.425466][T10361] kvm: pic: level sensitive irq not supported [ 395.425531][T10361] kvm: pic: non byte read [ 395.436553][T10375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.444113][T10361] kvm: pic: level sensitive irq not supported [ 395.493030][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.511793][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.542926][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.563365][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.572355][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.183890][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 397.425454][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 397.482785][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 397.514733][ T5839] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.662779][ T5837] Bluetooth: hci2: command tx timeout [ 397.680303][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.690136][ T5839] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.700250][ T5839] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.714738][ T5839] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.725253][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.004735][ T5839] usb 1-1: GET_CAPABILITIES returned 0 [ 398.014329][ T5839] usbtmc 1-1:16.0: can't read capabilities [ 398.041931][ T13] team0: Port device bridge0 removed [ 398.221989][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.232515][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.241587][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.250648][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.259697][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.268742][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.366206][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.460169][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.469292][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.478372][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.534274][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.543416][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.552513][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.561597][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.628032][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.637121][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 399.095401][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.111296][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.125101][ T13] bond0 (unregistering): Released all slaves [ 399.147651][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 399.157139][ T13] bond1 (unregistering): Released all slaves [ 399.449555][ T13] bond2 (unregistering): Released all slaves [ 399.559241][ T12] net_ratelimit: 2 callbacks suppressed [ 399.559259][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.607901][ T13] tipc: Left network mode [ 399.672820][ T5885] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 399.733107][ T5837] Bluetooth: hci2: command tx timeout [ 399.834532][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 399.869940][ T5885] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.890408][ T5885] usb 2-1: config 0 has no interface number 0 [ 399.901072][ T43] usb 1-1: USB disconnect, device number 27 [ 399.911982][ T5885] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.960452][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.001958][ T5885] usb 2-1: Product: syz [ 400.032781][ T5885] usb 2-1: Manufacturer: syz [ 400.037510][ T5885] usb 2-1: SerialNumber: syz [ 400.075192][ T5885] usb 2-1: config 0 descriptor?? [ 400.083461][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.120051][ T5885] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 400.292424][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.338383][ T5885] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 400.382750][ T43] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 400.418722][ T5885] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 400.433063][ T6515] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 400.561343][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 400.598866][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.629162][ T43] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 400.654415][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.663858][ T6515] usb 7-1: Using ep0 maxpacket: 32 [ 400.679994][ T43] usb 1-1: Product: syz [ 400.684864][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.695750][ T6515] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 400.706294][ T43] usb 1-1: Manufacturer: syz [ 400.710965][ T43] usb 1-1: SerialNumber: syz [ 400.732755][ T6515] usb 7-1: config 0 has no interface number 0 [ 400.746373][ T43] usb 1-1: config 0 descriptor?? [ 400.752595][T10438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.760944][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 400.783608][ T6515] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.795779][ T5839] usb 2-1: USB disconnect, device number 27 [ 400.803766][ T43] usb 1-1: ucan: probing device on interface #0 [ 400.810046][ T43] usb 1-1: ucan: invalid EP count (1) [ 400.824237][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 400.839807][ T6515] usb 7-1: config 0 interface 85 has no altsetting 0 [ 400.858120][ T43] usb 1-1: ucan: probe failed; try to update the device firmware [ 400.869288][ T6515] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 400.888721][ T13] hsr_slave_0: left promiscuous mode [ 400.897834][ T6515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.910857][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 400.928021][ T13] hsr_slave_1: left promiscuous mode [ 400.934721][ T6515] usb 7-1: Product: syz [ 400.938935][ T6515] usb 7-1: Manufacturer: syz [ 400.944759][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 400.951504][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 400.959804][ T5839] quatech2 2-1:0.51: device disconnected [ 400.968850][ T6515] usb 7-1: SerialNumber: syz [ 400.981758][ T6515] usb 7-1: config 0 descriptor?? [ 401.005276][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.028422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.057414][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.065672][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.111274][ T13] veth1_macvtap: left promiscuous mode [ 401.128129][ T13] veth0_macvtap: left promiscuous mode [ 401.137778][ T13] veth1_vlan: left promiscuous mode [ 401.157566][ T13] veth0_vlan: left promiscuous mode [ 401.178113][ T5937] usb 1-1: USB disconnect, device number 28 [ 401.765849][ T6515] appletouch 7-1:0.85: Geyser mode initialized. [ 401.776520][ T6515] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input27 [ 401.805596][ C0] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 401.818230][ T5837] Bluetooth: hci2: command tx timeout [ 402.044220][ T13] team0 (unregistering): Port device team_slave_1 removed [ 402.097413][ T13] team0 (unregistering): Port device team_slave_0 removed [ 402.238245][ T6515] usb 7-1: USB disconnect, device number 27 [ 402.277660][ T6515] appletouch 7-1:0.85: input: appletouch disconnected [ 402.299592][ T5937] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 402.487136][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 402.496893][ T5937] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 402.508902][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.517854][ T5937] usb 3-1: Product: syz [ 402.522536][ T5937] usb 3-1: Manufacturer: syz [ 402.546682][ T5937] usb 3-1: SerialNumber: syz [ 402.606356][ T5937] usb 3-1: config 0 descriptor?? [ 402.620967][ T5937] as10x_usb: device has been detected [ 402.631157][ T5937] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 402.805117][ T5937] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 402.935395][ T5937] as10x_usb: error during firmware upload part1 [ 402.953586][ T5937] Registered device Abilis Systems DVB-Titan [ 402.988862][ T5937] usb 3-1: USB disconnect, device number 26 [ 403.096302][ T5937] Unregistered device Abilis Systems DVB-Titan [ 403.104413][ T5937] as10x_usb: device has been disconnected [ 403.415130][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.449612][T10463] syzkaller0: entered allmulticast mode [ 403.498307][T10379] chnl_net:caif_netlink_parms(): no params data found [ 403.534819][ T30] audit: type=1804 audit(1748503737.794:144): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1145" name="/newroot/241/file1" dev="fuse" ino=1 res=1 errno=0 [ 403.555377][ T5931] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 403.613491][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.712933][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 403.754346][ T5931] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 403.804786][ T5931] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 403.843493][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.849331][ T5931] usb 7-1: config 1 interface 0 has no altsetting 0 [ 403.863297][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.883147][ T5931] usb 7-1: string descriptor 0 read error: -22 [ 403.892761][ T5837] Bluetooth: hci2: command tx timeout [ 403.908697][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.920416][ T5931] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 403.960738][T10379] bridge_slave_0: entered allmulticast mode [ 403.986204][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.005626][T10379] bridge_slave_0: entered promiscuous mode [ 404.019199][T10474] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 404.054305][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.062884][T10474] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 404.078687][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.095419][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.125979][T10379] bridge_slave_1: entered allmulticast mode [ 404.154802][T10379] bridge_slave_1: entered promiscuous mode [ 404.295737][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.307445][T10502] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1150'. [ 404.339951][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.349613][ T5931] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 404.577324][T10510] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 404.631047][T10511] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 404.859991][ T5839] usb 7-1: USB disconnect, device number 28 [ 404.878044][ T5839] usblp0: removed [ 404.985214][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.007687][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.015591][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.044955][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.052155][T10510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.059694][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.066841][T10510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.124701][T10510] bridge0: entered allmulticast mode [ 405.144173][T10510] bridge0: entered promiscuous mode [ 405.150981][T10510] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 405.308467][T10511] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 405.318938][T10511] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 405.333653][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.487126][T10379] team0: Port device team_slave_0 added [ 405.505922][T10379] team0: Port device team_slave_1 added [ 405.633968][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.188973][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.273753][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.341741][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.382966][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.385286][T10530] ALSA: seq fatal error: cannot create timer (-19) [ 406.422827][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.457965][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.576399][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 406.665106][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.725442][ T30] audit: type=1804 audit(1748503740.994:145): pid=10539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1158" name="/newroot/231/file1" dev="fuse" ino=1 res=1 errno=0 [ 406.976980][T10379] hsr_slave_0: entered promiscuous mode [ 406.981644][T10379] hsr_slave_1: entered promiscuous mode [ 406.988350][T10379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.988476][T10379] Cannot create hsr debugfs directory [ 407.583743][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.621651][ T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 407.726046][ T5937] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 407.808457][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.846477][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 407.967055][ T5937] usb 7-1: config 0 has no interfaces? [ 407.983687][ T6515] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 408.000745][ T5937] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 408.042504][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.091704][ T5937] usb 7-1: Product: syz [ 408.094137][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.102772][ T5937] usb 7-1: Manufacturer: syz [ 408.115100][ T5937] usb 7-1: SerialNumber: syz [ 408.125892][ T5937] usb 7-1: config 0 descriptor?? [ 408.146394][ T6515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 408.178859][ T6515] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 408.217767][ T6515] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 408.256293][ T6515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.280755][ T6515] usb 2-1: Product: syz [ 408.293364][ T6515] usb 2-1: Manufacturer: syz [ 408.301121][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.304810][ T6515] usb 2-1: SerialNumber: syz [ 408.343513][ T6515] usb 2-1: config 0 descriptor?? [ 408.364771][T10561] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 408.385662][ T6515] usb 2-1: ucan: probing device on interface #0 [ 408.408391][ T6515] usb 2-1: ucan: invalid EP count (1) [ 408.435474][ T6515] usb 2-1: ucan: probe failed; try to update the device firmware [ 408.491222][ T5937] usb 7-1: USB disconnect, device number 29 [ 408.523790][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.617479][ T6515] usb 2-1: USB disconnect, device number 28 [ 408.706209][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.859263][T10379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.883623][T10379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.915287][T10379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.945360][T10379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 409.258641][T10569] xt_policy: neither incoming nor outgoing policy selected [ 409.571671][T10575] IPVS: Error connecting to the multicast addr [ 409.629052][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.710818][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.761440][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.768628][ T9630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.772754][ T6515] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 409.843191][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.851479][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.954844][ T6515] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 409.986294][ T6515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.030236][ T6515] usb 2-1: config 0 descriptor?? [ 410.086515][ T13] net_ratelimit: 4 callbacks suppressed [ 410.086534][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.280980][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 410.298353][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.307706][ T6515] kaweth 2-1:0.0: Firmware present in device. [ 410.325136][ T43] usb 3-1: no configurations [ 410.329768][ T43] usb 3-1: can't read configurations, error -22 [ 410.514425][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.559610][T10379] veth0_vlan: entered promiscuous mode [ 410.589959][T10379] veth1_vlan: entered promiscuous mode [ 410.658680][T10576] netlink: 'syz.1.1164': attribute type 9 has an invalid length. [ 410.668849][T10576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1164'. [ 410.713993][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.727665][T10379] veth0_macvtap: entered promiscuous mode [ 410.745235][ T6515] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 410.755098][ T6515] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 410.768300][T10379] veth1_macvtap: entered promiscuous mode [ 410.794762][ T6515] usb 2-1: USB disconnect, device number 29 [ 410.829839][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.852149][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.899319][T10379] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.929510][T10379] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.953446][T10379] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.977444][T10379] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.024333][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.233277][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.341410][ T9634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.368995][ T9634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.778731][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.826667][ T9634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.853495][ T9634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.920344][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.021643][T10608] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 412.083358][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.268052][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.432056][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.492801][ T6515] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 413.674875][ T6515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 413.689655][ T6515] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.759283][ T6515] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 413.792739][ T6515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.812735][ T6515] usb 3-1: Product: syz [ 413.817128][ T6515] usb 3-1: Manufacturer: syz [ 413.841145][ T6515] usb 3-1: SerialNumber: syz [ 413.857887][ T6515] usb 3-1: config 0 descriptor?? [ 413.899153][T10638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.908297][ T6515] usb 3-1: ucan: probing device on interface #0 [ 413.959068][ T6515] usb 3-1: ucan: invalid EP count (1) [ 413.978846][ T6515] usb 3-1: ucan: probe failed; try to update the device firmware [ 414.005368][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1178'. [ 414.033275][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1178'. [ 414.078226][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1178'. [ 414.135733][ T5931] usb 3-1: USB disconnect, device number 29 [ 414.210689][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1178'. [ 414.246546][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1178'. [ 414.481883][T10668] bridge4: entered allmulticast mode [ 415.138501][ T2980] net_ratelimit: 15 callbacks suppressed [ 415.138521][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.635433][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.782817][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.037739][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.201335][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.496171][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.572871][ T6515] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 416.653713][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.731106][ T6515] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 416.752718][ T6515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.763427][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.782758][ T6515] usb 7-1: Product: syz [ 416.808274][ T6515] usb 7-1: Manufacturer: syz [ 416.813975][ T6515] usb 7-1: SerialNumber: syz [ 416.843653][ T6515] usb 7-1: config 0 descriptor?? [ 416.871777][ T6515] usb 7-1: selecting invalid altsetting 1 [ 416.877677][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.889647][ T6515] technisat-usb2: could not set alternate setting to 0 [ 417.054659][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.080236][ T6515] technisat-usb2: firmware version: 0.0 [ 417.112813][ T6515] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 417.339179][T10703] fuse: root generation should be zero [ 417.358340][ T6515] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 417.444777][ T6515] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 417.486624][ T6515] usb 7-1: USB disconnect, device number 30 [ 417.808156][ T2152] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 418.066733][ T2152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.081233][ T2152] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.131407][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.169943][ T2152] usb 3-1: config 0 descriptor?? [ 418.340133][ T2152] pwc: Askey VC010 type 2 USB webcam detected. [ 418.562733][ T2152] pwc: send_video_command error -71 [ 418.578385][ T2152] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 418.608548][ T2152] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 418.685184][ T2152] usb 3-1: USB disconnect, device number 30 [ 418.952727][ T5931] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 419.104412][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 419.115635][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.133150][ T2152] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 419.133436][ T5931] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 419.308301][ T2152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.331109][ T2152] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 419.443110][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.451273][ T5931] usb 2-1: Product: syz [ 419.455859][ T5931] usb 2-1: Manufacturer: syz [ 419.460520][ T5931] usb 2-1: SerialNumber: syz [ 419.563740][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.622380][ T5931] usb 2-1: config 0 descriptor?? [ 419.641546][T10745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.658254][ T5931] usb 2-1: ucan: probing device on interface #0 [ 419.676097][ T5931] usb 2-1: ucan: invalid EP count (1) [ 419.683954][ T5931] usb 2-1: ucan: probe failed; try to update the device firmware [ 419.800005][ T2152] usb 3-1: config 0 descriptor?? [ 419.833307][ T2152] pwc: Askey VC010 type 2 USB webcam detected. [ 420.018544][ T5885] usb 2-1: USB disconnect, device number 30 [ 420.182927][ T2980] net_ratelimit: 21 callbacks suppressed [ 420.182947][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.216916][ T2152] pwc: recv_control_msg error -32 req 02 val 2b00 [ 420.249580][ T2152] pwc: recv_control_msg error -32 req 02 val 2700 [ 420.268810][ T2152] pwc: recv_control_msg error -32 req 02 val 2c00 [ 420.280608][ T2152] pwc: recv_control_msg error -32 req 04 val 1000 [ 420.288517][ T2152] pwc: recv_control_msg error -32 req 04 val 1300 [ 420.298323][ T2152] pwc: recv_control_msg error -32 req 04 val 1400 [ 420.311348][ T2152] pwc: recv_control_msg error -32 req 02 val 2000 [ 420.323467][ T2152] pwc: recv_control_msg error -32 req 02 val 2100 [ 420.390378][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.602666][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.617126][ T2152] pwc: recv_control_msg error -71 req 02 val 2500 [ 420.631620][ T2152] pwc: recv_control_msg error -71 req 02 val 2400 [ 420.664294][ T2152] pwc: recv_control_msg error -71 req 02 val 2600 [ 420.691196][ T2152] pwc: recv_control_msg error -71 req 02 val 2900 [ 420.716911][ T2152] pwc: recv_control_msg error -71 req 02 val 2800 [ 420.737141][T10769] vlan2: entered promiscuous mode [ 420.743477][ T2152] pwc: recv_control_msg error -71 req 04 val 1100 [ 420.755486][T10769] bridge0: entered promiscuous mode [ 420.761061][ T2152] pwc: recv_control_msg error -71 req 04 val 1200 [ 420.788530][ T2152] pwc: Registered as video103. [ 420.835894][ T2152] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 420.883282][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.927621][ T2152] usb 3-1: USB disconnect, device number 31 [ 421.075344][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.240625][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.415050][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.522747][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.759489][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.052729][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.451546][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 423.501551][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1204'. [ 423.531716][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 423.562960][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 423.576836][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 423.599561][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 423.657815][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 423.867358][T10810] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 424.033029][ T5885] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 424.204634][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.213782][ T5885] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 424.224533][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.234056][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 424.244930][T10810] picdev_read: 14 callbacks suppressed [ 424.244948][T10810] kvm: pic: non byte read [ 424.245333][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 424.273364][T10810] pic_ioport_write: 13 callbacks suppressed [ 424.273400][T10810] kvm: pic: level sensitive irq not supported [ 424.274870][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.289842][T10810] kvm: pic: non byte read [ 424.297664][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.308326][ T5885] usb 2-1: Product: syz [ 424.312506][ T5885] usb 2-1: Manufacturer: syz [ 424.333311][T10810] kvm: pic: level sensitive irq not supported [ 424.333368][T10810] kvm: pic: non byte read [ 424.346272][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 424.351596][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 424.402294][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 424.504252][T10810] kvm: pic: level sensitive irq not supported [ 424.504609][T10810] kvm: pic: non byte read [ 424.550859][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 424.623806][T10810] kvm: pic: level sensitive irq not supported [ 424.623876][T10810] kvm: pic: non byte read [ 424.647997][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 424.812754][ T6515] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 425.019644][ T6515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 425.031298][ T6515] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.047470][ T6515] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 425.059824][ T6515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.093050][ T6515] usb 1-1: Product: syz [ 425.097305][ T6515] usb 1-1: Manufacturer: syz [ 425.315713][ T12] net_ratelimit: 18 callbacks suppressed [ 425.315827][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.541100][ T2152] usb 2-1: USB disconnect, device number 31 [ 425.551622][ T6515] usb 1-1: SerialNumber: syz [ 425.562341][ T6515] usb 1-1: config 0 descriptor?? [ 425.568129][T10818] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 425.576897][ T6515] usb 1-1: ucan: probing device on interface #0 [ 425.583428][ T6515] usb 1-1: ucan: invalid EP count (1) [ 425.592562][ T6515] usb 1-1: ucan: probe failed; try to update the device firmware [ 425.677743][T10823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1210'. [ 425.723070][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.873017][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.992846][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.116257][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.237374][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.246998][ T5885] usb 1-1: USB disconnect, device number 29 [ 426.414940][T10840] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 426.533434][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.647962][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.792743][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.876395][T10842] bridge2: entered allmulticast mode [ 426.913640][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.044585][T10844] loop8: detected capacity change from 0 to 7 [ 427.062337][T10844] loop8: [POWERTEC] p1 p2 p3 p4 [ 427.069459][T10844] loop8: p1 size 8519680 extends beyond EOD, truncated [ 427.111064][T10844] loop8: p2 start 1048576 is beyond EOD, truncated [ 427.123095][T10844] loop8: p3 start 3932160 is beyond EOD, truncated [ 427.129654][T10844] loop8: p4 start 524288 is beyond EOD, truncated [ 427.193718][ T5882] loop8: [POWERTEC] p1 p2 p3 p4 [ 427.200292][ T5882] loop8: p1 size 8519680 extends beyond EOD, truncated [ 427.222164][ T5882] loop8: p2 start 1048576 is beyond EOD, truncated [ 427.240102][ T5882] loop8: p3 start 3932160 is beyond EOD, truncated [ 427.254564][ T5882] loop8: p4 start 524288 is beyond EOD, truncated [ 427.280585][T10848] loop8: [POWERTEC] p1 p2 p3 p4 [ 427.285768][T10848] loop8: p1 size 8519680 extends beyond EOD, truncated [ 427.296404][T10848] loop8: p2 start 1048576 is beyond EOD, truncated [ 427.304522][T10848] loop8: p3 start 3932160 is beyond EOD, truncated [ 427.326749][T10848] loop8: p4 start 524288 is beyond EOD, truncated [ 427.727195][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 427.819402][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 429.275438][ T30] audit: type=1804 audit(1748503763.514:146): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1227" name="/newroot/11/file1" dev="fuse" ino=1 res=1 errno=0 [ 429.862864][ T5937] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 430.265550][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 430.310614][ T5937] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 430.329680][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.353111][ T5937] usb 6-1: Product: syz [ 430.374249][ T5937] usb 6-1: Manufacturer: syz [ 430.378975][ T5937] usb 6-1: SerialNumber: syz [ 430.389737][ T5937] usb 6-1: config 0 descriptor?? [ 430.419327][ T9630] net_ratelimit: 21 callbacks suppressed [ 430.419353][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 430.554300][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 430.602199][ T5937] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 430.786732][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 430.903425][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.032476][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.215226][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.462069][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.607144][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.725834][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.853644][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.288657][ T5937] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 432.300519][ T5937] usb 6-1: USB disconnect, device number 26 [ 434.063331][T10935] fuse: Bad value for 'fd' [ 434.070044][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 434.245441][T10935] bond1: entered allmulticast mode [ 434.303362][T10935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.362782][ T5839] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 434.522750][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 434.529390][ T5839] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 434.542761][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.553060][ T5839] usb 3-1: config 0 has no interface number 0 [ 434.565887][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 434.587051][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.644905][ T5839] usb 3-1: Product: syz [ 434.656878][ T5839] usb 3-1: Manufacturer: syz [ 434.661592][ T5839] usb 3-1: SerialNumber: syz [ 434.680190][ T5839] usb 3-1: config 0 descriptor?? [ 435.243442][ T5937] usb 3-1: USB disconnect, device number 32 [ 435.452990][ T9630] net_ratelimit: 20 callbacks suppressed [ 435.453013][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 435.583498][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 435.702862][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 436.161786][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 436.586297][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 436.757007][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 436.965262][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.094003][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.361914][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.502797][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.983073][ T6515] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 439.192885][ T6515] usb 1-1: Using ep0 maxpacket: 32 [ 439.199805][ T6515] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 439.208128][ T6515] usb 1-1: config 0 has no interface number 0 [ 439.214393][ T6515] usb 1-1: config 0 interface 12 has no altsetting 0 [ 439.223480][ T6515] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 439.232797][ T6515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.240816][ T6515] usb 1-1: Product: syz [ 439.245460][ T6515] usb 1-1: Manufacturer: syz [ 439.250368][ T6515] usb 1-1: SerialNumber: syz [ 439.650246][ T6515] usb 1-1: config 0 descriptor?? [ 439.897111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.903595][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.463116][ T12] net_ratelimit: 21 callbacks suppressed [ 440.463138][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 440.597851][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.002143][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.672447][T11030] team0: Port device team_slave_1 removed [ 441.703239][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.815736][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.933493][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.073550][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.214181][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.292312][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 442.347063][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.473045][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.890841][ T6515] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 442.899348][ T6515] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 442.954495][ T6515] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 442.990859][ T6515] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 443.025708][ T6515] usb 1-1: USB disconnect, device number 30 [ 443.073079][ T5937] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 443.253295][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 443.262113][ T5937] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 443.271678][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.288164][ T5937] usb 2-1: config 0 descriptor?? [ 443.299524][ T5937] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 444.882874][ T6515] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 445.022005][T11084] bridge5: entered allmulticast mode [ 445.164999][ T6515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 445.196703][ T5937] gspca_vc032x: reg_r err -71 [ 445.201508][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.207467][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.214175][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.220199][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.225910][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.231336][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.236889][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.238656][ T6515] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.242294][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.259678][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.266430][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.271927][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.280520][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.286315][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.291701][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.299549][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.305907][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.311328][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.375451][ T6515] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 445.388020][ T6515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.423471][ T6515] usb 6-1: Product: syz [ 445.431797][ T6515] usb 6-1: Manufacturer: syz [ 445.436950][ T6515] usb 6-1: SerialNumber: syz [ 445.452386][ T5937] gspca_vc032x: I2c Bus Busy Wait 00 [ 445.500901][ T6515] usb 6-1: config 0 descriptor?? [ 445.513095][ T2996] net_ratelimit: 23 callbacks suppressed [ 445.513114][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.549338][ T5937] gspca_vc032x: Unknown sensor... [ 445.555473][T11077] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 445.568994][ T5937] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 445.573875][ T6515] usb 6-1: ucan: probing device on interface #0 [ 445.583075][ T6515] usb 6-1: ucan: invalid EP count (1) [ 445.588465][ T6515] usb 6-1: ucan: probe failed; try to update the device firmware [ 445.720702][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.733385][ T5937] usb 2-1: USB disconnect, device number 32 [ 445.857139][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.983506][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.113843][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.253169][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.382759][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.638194][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.833430][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.962771][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.966938][ T5937] usb 6-1: USB disconnect, device number 27 [ 449.161261][ T6515] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 449.365604][ T6515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.376837][ T6515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.387283][ T6515] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.400915][ T6515] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.552775][ T6515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.563899][ T6515] usb 3-1: config 0 descriptor?? [ 449.988193][ T6515] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 450.031282][ T6515] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 450.366140][ T6515] usb 3-1: USB disconnect, device number 33 [ 450.466811][T11178] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 450.509433][T11178] bond2: (slave gretap1): making interface the new active one [ 450.521775][T11178] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 450.533803][ T9634] net_ratelimit: 25 callbacks suppressed [ 450.533821][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.575102][T11178] vlan3: entered allmulticast mode [ 450.580465][T11178] bond2: entered allmulticast mode [ 450.586374][T11178] gretap1: entered allmulticast mode [ 450.593509][T11178] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 450.665533][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.675449][ T5839] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 450.832863][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.842104][ T5839] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.858191][ T5839] usb 7-1: config 0 has no interface number 0 [ 450.870883][ T5839] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 450.893963][ T5839] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 450.905482][ T5839] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.914969][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.952773][ T5839] usb 7-1: config 0 descriptor?? [ 450.968999][T11175] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 450.990610][ T5839] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 451.050001][T11186] binder: 11185:11186 ioctl 4018620d 0 returned -22 [ 451.103165][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.207513][T11175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.210129][T11186] binder: 11185:11186 ioctl c00c6211 0 returned -14 [ 451.217318][T11175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.233381][ T5931] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 451.241663][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.305660][ T5839] usb 7-1: USB disconnect, device number 31 [ 451.311690][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 451.373341][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.422988][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 451.436240][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 451.452581][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 451.468746][ T5931] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 451.486853][ T5931] usb 2-1: Product: syz [ 451.491230][ T5931] usb 2-1: Manufacturer: syz [ 451.496501][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.504264][ T5931] usb 2-1: SerialNumber: syz [ 451.513054][ T5931] usb 2-1: config 0 descriptor?? [ 451.522291][ T5931] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 451.613266][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.656748][ T30] audit: type=1326 audit(1748503785.924:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.683577][ T30] audit: type=1326 audit(1748503785.944:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.725732][ T30] audit: type=1326 audit(1748503785.944:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.763156][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.779856][ T30] audit: type=1326 audit(1748503785.944:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.840545][ T30] audit: type=1326 audit(1748503785.944:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.867727][ T30] audit: type=1326 audit(1748503785.944:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.889949][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.902420][ T30] audit: type=1326 audit(1748503785.944:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 451.930001][ T30] audit: type=1326 audit(1748503785.944:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 452.027040][ T30] audit: type=1326 audit(1748503785.944:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 452.110680][ T30] audit: type=1326 audit(1748503785.944:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 452.133506][ T2152] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 452.274357][ T5931] gspca_zc3xx: reg_w_i err -71 [ 452.353281][ T2152] usb 1-1: Using ep0 maxpacket: 16 [ 452.401712][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 452.432829][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.450538][ T2152] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 452.460094][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.470153][ T2152] usb 1-1: Product: syz [ 452.474599][ T2152] usb 1-1: Manufacturer: syz [ 452.480149][ T2152] usb 1-1: SerialNumber: syz [ 452.511702][ T2152] usb 1-1: config 0 descriptor?? [ 452.527740][ T2152] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 452.545099][ T2152] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 452.901031][ T5931] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 452.917627][ T5931] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 452.975263][ T5931] usb 2-1: USB disconnect, device number 33 [ 453.131315][ T2152] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 453.139433][ T2152] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 453.142944][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1316'. [ 453.196581][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1316'. [ 453.250363][T11210] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 453.275790][T11210] bridge0: entered promiscuous mode [ 453.779035][ T2152] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 453.806114][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 453.820709][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 453.827957][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 454.183994][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 454.197683][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 454.228787][ T2152] usb 1-1: USB disconnect, device number 31 [ 454.689992][T11237] tipc: Started in network mode [ 454.695345][T11237] tipc: Node identity 1efb9120117, cluster identity 4711 [ 454.713838][T11237] tipc: Enabled bearer , priority 0 [ 454.722103][T11237] syzkaller0: entered promiscuous mode [ 454.732353][T11237] syzkaller0: entered allmulticast mode [ 454.758911][T11237] tipc: Resetting bearer [ 454.883472][T11236] tipc: Resetting bearer [ 454.951369][T11236] tipc: Disabling bearer [ 455.632787][ T2152] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 455.648864][ T12] net_ratelimit: 17 callbacks suppressed [ 455.648884][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.814133][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 455.837072][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 455.865475][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.905614][ T2152] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 455.935275][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.962736][ T6515] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 455.980517][ T2152] usb 1-1: Product: syz [ 455.986818][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.012381][ T2152] usb 1-1: Manufacturer: syz [ 456.022674][ T2152] usb 1-1: SerialNumber: syz [ 456.042933][ T2152] usb 1-1: config 0 descriptor?? [ 456.063367][T11243] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.071769][ T2152] usb 1-1: ucan: probing device on interface #0 [ 456.092842][ T2152] usb 1-1: ucan: invalid EP count (1) [ 456.107663][ T2152] usb 1-1: ucan: probe failed; try to update the device firmware [ 456.124618][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.135025][ T6515] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.169984][ T6515] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.182921][ T5931] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 456.221016][ T6515] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.260489][ T6515] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 456.283334][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.322842][ T6515] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 456.364884][ T5931] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.393492][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.412685][ T5931] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 456.416103][ T6515] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.451627][ T6515] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.464106][ T5931] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.492697][ T6515] usb 6-1: Product: syz [ 456.496903][ T6515] usb 6-1: Manufacturer: syz [ 456.513057][ T5931] usb 2-1: config 1 interface 0 has no altsetting 0 [ 456.536106][ T5931] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 456.540813][ T6515] cdc_wdm 6-1:1.0: skipping garbage [ 456.562865][ T6515] cdc_wdm 6-1:1.0: skipping garbage [ 456.563185][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.578451][ T6515] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 456.596089][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.604508][ T6515] cdc_wdm 6-1:1.0: Unknown control protocol [ 456.619209][ T5931] usb 2-1: Product: syz [ 456.623659][ T5931] usb 2-1: Manufacturer: syz [ 456.629009][ T5931] usb 2-1: SerialNumber: syz [ 456.660857][T11249] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 456.723586][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.906404][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 456.933955][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.959432][ T5931] usbhid 2-1:1.0: can't add hid device: -71 [ 457.010107][ T5931] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 457.073655][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.609827][ T5931] usb 2-1: USB disconnect, device number 34 [ 457.923236][ T5937] usb 1-1: USB disconnect, device number 32 [ 458.099904][T11263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1332'. [ 458.147585][ T43] usb 6-1: USB disconnect, device number 28 [ 458.287716][T11266] netlink: 'syz.0.1333': attribute type 1 has an invalid length. [ 458.388703][T11266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.448661][T11274] ip6erspan0: entered promiscuous mode [ 458.457586][T11274] bond2: (slave ip6erspan0): making interface the new active one [ 458.482286][T11274] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 458.968029][T11276] cgroup: fork rejected by pids controller in /syz1 [ 458.977078][ T5937] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 459.080394][T11266] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 459.132724][ T5931] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 459.163702][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 459.192587][ T5937] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 459.211252][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.286158][ T5937] usb 3-1: config 0 descriptor?? [ 459.372995][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 459.381472][ T5931] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 459.415204][ T5931] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 459.449159][ T5931] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 459.485435][ T5931] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 459.513131][ T5931] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.539681][ T5937] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 459.569146][ T5937] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 459.584427][ T5931] usb 7-1: config 0 has no interface number 0 [ 459.593068][ T5931] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 459.618564][ T5937] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 459.633177][ T5931] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 459.681441][ T5931] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 459.691611][ T5931] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.756366][ T5931] usb 7-1: config 0 interface 125 has no altsetting 0 [ 459.812656][ T5931] usb 7-1: config 0 interface 125 has no altsetting 2 [ 460.197973][ T5931] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 460.211929][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.226747][ T5931] usb 7-1: Product: syz [ 460.235601][ T5931] usb 7-1: Manufacturer: syz [ 460.366972][ T5931] usb 7-1: SerialNumber: syz [ 460.418257][ T5931] usb 7-1: config 0 descriptor?? [ 460.445944][ T5931] usb 7-1: selecting invalid altsetting 2 [ 460.653362][ T2996] net_ratelimit: 18 callbacks suppressed [ 460.653377][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 460.713499][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 460.855238][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.007295][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.133564][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.166953][ T5897] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 461.243470][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.342694][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 461.349506][ T5897] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 461.359260][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.363668][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.403023][ T5897] usb 6-1: config 0 descriptor?? [ 461.418685][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 461.496094][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.529727][ T43] usb 7-1: USB disconnect, device number 32 [ 461.623528][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.831792][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.849565][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1344'. [ 461.881278][T11333] netlink: 'syz.1.1344': attribute type 7 has an invalid length. [ 461.990498][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.992814][T11333] netlink: 'syz.1.1344': attribute type 8 has an invalid length. [ 462.190285][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 462.221307][T11335] netlink: 'syz.2.1345': attribute type 12 has an invalid length. [ 463.624758][T11355] netlink: 'syz.1.1352': attribute type 13 has an invalid length. [ 464.064532][ T5897] gspca_sonixj: reg_w1 err -71 [ 464.069417][ T5897] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 464.084625][ T5897] usb 6-1: USB disconnect, device number 29 [ 464.091599][T11362] Cannot find del_set index 3 as target [ 465.019736][T11383] bridge6: entered allmulticast mode [ 465.586381][ T5931] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 465.803100][ T12] net_ratelimit: 22 callbacks suppressed [ 465.803122][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.224050][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.235264][ T5931] usb 1-1: config 0 has no interfaces? [ 466.267657][ T5931] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 466.314848][T11400] binder_alloc: 11399: binder_alloc_buf, no vma [ 466.318527][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.358123][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.377662][ T5931] usb 1-1: Product: syz [ 466.381871][ T5931] usb 1-1: Manufacturer: syz [ 466.440843][ T5931] usb 1-1: SerialNumber: syz [ 466.509537][ T5931] usb 1-1: config 0 descriptor?? [ 466.523150][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.535019][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.785426][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.933064][T11414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.941132][T11414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 468.033586][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.153055][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.161301][T11414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 468.283040][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.420187][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 468.988362][ T6515] usb 1-1: USB disconnect, device number 33 [ 469.976058][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 470.322976][ T5897] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 470.474722][ T5897] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.499316][ T5897] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 470.522866][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.536469][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 470.560268][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 470.578669][ T5897] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.588378][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.596781][ T5897] usb 1-1: Product: syz [ 470.601168][ T5897] usb 1-1: Manufacturer: syz [ 470.615295][ T5897] cdc_wdm 1-1:1.0: skipping garbage [ 470.620531][ T5897] cdc_wdm 1-1:1.0: skipping garbage [ 470.645906][ T5897] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 470.651845][ T5897] cdc_wdm 1-1:1.0: Unknown control protocol [ 470.909819][ T9634] net_ratelimit: 18 callbacks suppressed [ 470.909835][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 470.934064][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 471.083806][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.193150][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.303982][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.592834][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.640221][ T6515] usb 1-1: USB disconnect, device number 34 [ 471.743348][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.762171][T11464] tipc: Started in network mode [ 471.767362][T11464] tipc: Node identity 9e2fe342b0c7, cluster identity 4711 [ 471.775057][T11464] tipc: Enabled bearer , priority 0 [ 471.787339][T11464] syzkaller0: entered promiscuous mode [ 471.795435][T11464] syzkaller0: entered allmulticast mode [ 471.806721][T11464] tipc: Resetting bearer [ 471.834884][T11463] tipc: Resetting bearer [ 471.954846][T11463] tipc: Disabling bearer [ 471.972730][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.052749][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.082903][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.203128][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.365616][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.561204][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1389'. [ 473.589541][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 473.618407][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1389'. [ 473.682851][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1389'. [ 474.092244][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1390'. [ 474.132828][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.138322][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1390'. [ 474.939851][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 474.939866][ T30] audit: type=1800 audit(1748503809.204:179): pid=11508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1395" name="nullb0" dev="devtmpfs" ino=3362 res=0 errno=0 [ 475.954849][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 476.009985][ T2996] net_ratelimit: 26 callbacks suppressed [ 476.010038][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.245838][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 476.303556][ T43] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.332654][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.340280][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 476.356175][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.382685][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.407539][ T43] usb 1-1: config 0 descriptor?? [ 476.497338][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.635870][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.722898][ T6515] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 476.783032][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.902855][ T6515] usb 2-1: Using ep0 maxpacket: 16 [ 476.915989][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.940574][ T6515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.001428][ T6515] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 477.028274][ T6515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.057012][ T6515] usb 2-1: config 0 descriptor?? [ 477.104383][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.408094][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.409066][ T6515] usbhid 2-1:0.0: can't add hid device: -71 [ 477.458474][ T6515] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.522078][ T6515] usb 2-1: USB disconnect, device number 35 [ 477.643990][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.685837][ T43] usb 1-1: USB disconnect, device number 35 [ 477.857738][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.275733][T11551] trusted_key: syz.5.1409 sent an empty control message without MSG_MORE. [ 478.284575][T11553] bridge7: entered allmulticast mode [ 478.507454][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 478.674791][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.696823][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.745250][ T43] usb 2-1: config 0 descriptor?? [ 479.091244][ T43] cp210x 2-1:0.0: cp210x converter detected [ 479.552329][ T43] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 479.571976][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 479.796810][ T43] usb 2-1: USB disconnect, device number 36 [ 479.808310][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 479.848918][ T43] cp210x 2-1:0.0: device disconnected [ 481.089844][ T9634] net_ratelimit: 23 callbacks suppressed [ 481.089861][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.408503][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.553185][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.692717][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.823397][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.853084][ T5897] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 482.003508][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.015025][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 482.026830][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.094593][ T5897] usb 6-1: config 0 descriptor?? [ 482.152555][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.163307][ T5897] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 482.293096][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.303004][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 482.402760][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.466199][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.519506][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.532803][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.552946][ T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.589215][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 482.603712][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.608229][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 482.645496][ T43] usb 1-1: SerialNumber: syz [ 482.668138][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 482.884077][ T43] usb 1-1: 0:2 : does not exist [ 482.958444][ T43] usb 1-1: USB disconnect, device number 36 [ 483.048684][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.313380][T11611] kvm: kvm [11607]: vcpu0, guest rIP: 0x89 Unhandled WRMSR(0xc2) = 0xb207 [ 483.335433][T11611] kvm: kvm [11607]: vcpu0, guest rIP: 0x89 Unhandled WRMSR(0xc1) = 0xfbb800430000b907 [ 484.484898][ T5931] usb 6-1: USB disconnect, device number 30 [ 485.118190][T11627] netlink: 'syz.2.1431': attribute type 39 has an invalid length. [ 486.142795][ T5839] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 486.183284][ T2996] net_ratelimit: 21 callbacks suppressed [ 486.183305][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 486.467137][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 486.534124][ T5839] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.545312][ T5839] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 486.563105][ T5839] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.603008][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.045199][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.222819][ T5839] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 487.242654][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.250530][ T5839] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 487.353736][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.371915][ T5839] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 487.422675][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 487.432202][ T5839] usb 7-1: Product: syz [ 487.436554][ T5839] usb 7-1: Manufacturer: syz [ 487.448951][ T5839] cdc_wdm 7-1:1.0: skipping garbage [ 487.454806][ T5839] cdc_wdm 7-1:1.0: skipping garbage [ 487.463198][ T5839] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 487.464127][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.469187][ T5839] cdc_wdm 7-1:1.0: Unknown control protocol [ 487.623777][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.732967][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.853457][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.256240][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 488.438237][T11675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.491483][ T5897] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 488.566025][T11675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.617716][T11675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.652857][ T5897] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 488.816399][ T9636] wlan1: authenticated [ 488.844105][ T9636] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 489.083377][ T6515] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 489.084603][ T2996] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 489.475712][ T9] usb 7-1: USB disconnect, device number 33 [ 489.584235][ T2996] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 489.595976][ T6515] usb 1-1: Using ep0 maxpacket: 32 [ 489.656118][ T6515] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 489.861730][ T2996] wlan1: association with 08:02:11:00:00:00 timed out [ 489.875160][ T6515] usb 1-1: config 0 has no interface number 0 [ 489.884076][ T6515] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 489.897661][ T6515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.076238][T11690] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1451'. [ 490.092645][ T6515] usb 1-1: Product: syz [ 490.096921][ T6515] usb 1-1: Manufacturer: syz [ 490.107050][ T6515] usb 1-1: SerialNumber: syz [ 490.113041][T11690] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1451'. [ 490.125720][ T6515] usb 1-1: config 0 descriptor?? [ 490.136393][ T6515] smsc95xx v2.0.0 [ 490.214736][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.223640][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.488250][T11694] input: syz0 as /devices/virtual/input/input29 [ 490.549958][ T6515] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 490.749175][T11700] netlink: 'syz.5.1453': attribute type 10 has an invalid length. [ 490.763777][ T6515] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.781794][T11700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.920334][T11700] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 491.204151][ T9636] net_ratelimit: 17 callbacks suppressed [ 491.204170][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.372898][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.565327][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.692769][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.879064][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.023690][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.448165][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.615345][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.784687][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.913521][ T5897] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 492.921350][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.063976][ T6515] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 493.075126][ T6515] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 493.089331][ T6515] usb 1-1: USB disconnect, device number 37 [ 493.092858][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 493.112332][ T5897] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 493.123076][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.141557][ T5897] usb 2-1: config 0 descriptor?? [ 493.826024][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 493.843343][ T5897] asix 2-1:0.0: probe with driver asix failed with error -71 [ 494.013581][ T5897] usb 2-1: USB disconnect, device number 37 [ 496.243221][ T9640] net_ratelimit: 28 callbacks suppressed [ 496.243243][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 496.433628][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 496.543199][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 496.883607][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.020861][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.221906][T11765] input: syz0 as /devices/virtual/input/input30 [ 497.345221][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.467212][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.613528][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.747087][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.990837][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 499.048766][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1475'. [ 499.963111][ T6515] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 500.192693][ T6515] usb 1-1: Using ep0 maxpacket: 16 [ 500.227708][ T6515] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 500.242734][ T6515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.258822][ T6515] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 500.268433][ T6515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.282307][ T6515] usb 1-1: Product: syz [ 500.288912][ T6515] usb 1-1: Manufacturer: syz [ 500.298017][ T6515] usb 1-1: SerialNumber: syz [ 500.313302][ T6515] usb 1-1: config 0 descriptor?? [ 500.324311][ T6515] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 500.334169][ T6515] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 500.453922][T11814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1483'. [ 500.749229][T11816] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 500.853020][ T5839] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 500.936023][ T6515] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 500.966653][ T6515] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 501.037226][T11821] lo: entered promiscuous mode [ 501.042572][T11821] lo: entered allmulticast mode [ 501.053055][T11821] tunl0: entered promiscuous mode [ 501.058164][T11821] tunl0: entered allmulticast mode [ 501.067483][T11821] gre0: entered promiscuous mode [ 501.072536][T11821] gre0: entered allmulticast mode [ 501.080489][T11821] gretap0: entered promiscuous mode [ 501.085849][T11821] gretap0: entered allmulticast mode [ 501.094500][T11821] erspan0: entered promiscuous mode [ 501.099854][T11821] erspan0: entered allmulticast mode [ 501.107718][T11821] ip_vti0: entered promiscuous mode [ 501.113088][T11821] ip_vti0: entered allmulticast mode [ 501.120865][T11821] ip6_vti0: entered promiscuous mode [ 501.126332][T11821] ip6_vti0: entered allmulticast mode [ 501.134158][T11821] sit0: entered promiscuous mode [ 501.139249][T11821] sit0: entered allmulticast mode [ 501.185105][T11821] ip6tnl0: entered promiscuous mode [ 501.190485][T11821] ip6tnl0: entered allmulticast mode [ 501.198302][T11821] ip6gre0: entered promiscuous mode [ 501.203660][T11821] ip6gre0: entered allmulticast mode [ 501.211302][T11821] syz_tun: entered promiscuous mode [ 501.216640][T11821] syz_tun: entered allmulticast mode [ 501.224643][T11821] ip6gretap0: entered promiscuous mode [ 501.230251][T11821] ip6gretap0: entered allmulticast mode [ 501.238824][T11821] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.246022][T11821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.253596][T11821] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.260782][T11821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.269139][T11821] bridge0: entered allmulticast mode [ 501.277073][T11821] vcan0: entered promiscuous mode [ 501.282219][T11821] vcan0: entered allmulticast mode [ 501.288074][T11821] bond0: entered promiscuous mode [ 501.293310][T11821] bond_slave_0: entered promiscuous mode [ 501.299282][T11821] bond_slave_1: entered promiscuous mode [ 501.305907][T11821] batadv0: entered promiscuous mode [ 501.311453][T11821] bond0: entered allmulticast mode [ 501.316704][T11821] bond_slave_0: entered allmulticast mode [ 501.322568][T11821] bond_slave_1: entered allmulticast mode [ 501.328587][T11821] batadv0: entered allmulticast mode [ 501.341977][T11821] team0: entered promiscuous mode [ 501.347234][T11821] team_slave_0: entered promiscuous mode [ 501.353298][T11821] team_slave_1: entered promiscuous mode [ 501.360985][T11821] team0: entered allmulticast mode [ 501.366290][T11821] team_slave_0: entered allmulticast mode [ 501.372114][T11821] team_slave_1: entered allmulticast mode [ 501.379496][T11821] dummy0: entered promiscuous mode [ 501.384777][T11821] dummy0: entered allmulticast mode [ 501.392785][T11821] nlmon0: entered promiscuous mode [ 501.398045][T11821] nlmon0: entered allmulticast mode [ 501.418958][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.427860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.450407][T11821] caif0: entered promiscuous mode [ 501.461191][T11821] caif0: entered allmulticast mode [ 501.469809][T11821] net_ratelimit: 22 callbacks suppressed [ 501.469824][T11821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.514499][ T5839] usb 7-1: not running at top speed; connect to a high speed hub [ 501.523599][ T2980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 501.556202][ T5839] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 501.581277][ T5839] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.590581][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.598832][ T5839] usb 7-1: Product: syz [ 501.603292][ T5839] usb 7-1: Manufacturer: syz [ 501.607891][ T5839] usb 7-1: SerialNumber: syz [ 501.633605][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 501.682381][ T5839] usb 7-1: bad CDC descriptors [ 501.783513][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 501.843541][ T6515] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 501.852376][ T6515] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 501.878399][ T6515] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 501.927044][ T6515] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 501.936474][ T6515] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 501.996657][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.126217][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 502.153490][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.162792][ T6515] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 502.208797][ T6515] usb 1-1: USB disconnect, device number 38 [ 502.335180][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.404295][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 502.419168][T11830] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1488'. [ 502.466874][T11830] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1488'. [ 502.476242][ T9634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.592989][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.713491][ T9630] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.825241][T11837] tipc: Enabling of bearer rejected, already enabled [ 503.170325][ T30] audit: type=1326 audit(1748503837.434:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 503.715530][ T9] usb 7-1: USB disconnect, device number 34 [ 503.849155][ T30] audit: type=1326 audit(1748503838.114:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 503.935796][ T30] audit: type=1326 audit(1748503838.114:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 503.975491][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1493'. [ 503.989326][ T30] audit: type=1326 audit(1748503838.114:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.079787][ T30] audit: type=1326 audit(1748503838.114:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.104987][ T30] audit: type=1326 audit(1748503838.114:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.131525][ T30] audit: type=1326 audit(1748503838.114:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.160697][ T30] audit: type=1326 audit(1748503838.114:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.188877][T11853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.205969][T11853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.208901][ T30] audit: type=1326 audit(1748503838.114:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.525602][ T30] audit: type=1326 audit(1748503838.114:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 504.845718][T11860] batadv0: entered promiscuous mode [ 504.857354][T11860] team0: entered promiscuous mode [ 504.864218][T11860] team_slave_0: entered promiscuous mode [ 504.883346][T11860] macvlan2: entered promiscuous mode [ 504.890447][T11860] bond0: entered promiscuous mode [ 504.898099][T11860] [ 504.900428][T11860] ====================================================== [ 504.907429][T11860] WARNING: possible circular locking dependency detected [ 504.914443][T11860] 6.15.0-syzkaller-07774-g90b83efa6701 #0 Not tainted [ 504.921183][T11860] ------------------------------------------------------ [ 504.928180][T11860] syz.1.1497/11860 is trying to acquire lock: [ 504.934229][T11860] ffff8880314e4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 504.944668][T11860] [ 504.944668][T11860] but task is already holding lock: [ 504.952009][T11860] ffff88805cd74e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 504.962115][T11860] [ 504.962115][T11860] which lock already depends on the new lock. [ 504.962115][T11860] [ 504.972529][T11860] [ 504.972529][T11860] the existing dependency chain (in reverse order) is: [ 504.981547][T11860] [ 504.981547][T11860] -> #1 (team->team_lock_key#5){+.+.}-{4:4}: [ 504.989749][T11860] lock_acquire+0x120/0x360 [ 504.994785][T11860] __mutex_lock+0x182/0xe80 [ 504.999808][T11860] team_device_event+0x182/0xa20 [ 505.005278][T11860] notifier_call_chain+0x1b3/0x3e0 [ 505.010918][T11860] dev_close_many+0x29c/0x410 [ 505.016117][T11860] vlan_device_event+0x1748/0x1d00 [ 505.021748][T11860] notifier_call_chain+0x1b3/0x3e0 [ 505.027380][T11860] __dev_notify_flags+0x18d/0x2e0 [ 505.032923][T11860] netif_change_flags+0xe8/0x1a0 [ 505.038410][T11860] do_setlink+0xc55/0x41c0 [ 505.043349][T11860] rtnl_newlink+0x160b/0x1c70 [ 505.048541][T11860] rtnetlink_rcv_msg+0x7cf/0xb70 [ 505.054000][T11860] netlink_rcv_skb+0x205/0x470 [ 505.059294][T11860] netlink_unicast+0x758/0x8d0 [ 505.064577][T11860] netlink_sendmsg+0x805/0xb30 [ 505.069851][T11860] __sock_sendmsg+0x219/0x270 [ 505.075114][T11860] ____sys_sendmsg+0x505/0x830 [ 505.080464][T11860] ___sys_sendmsg+0x21f/0x2a0 [ 505.085673][T11860] __sys_sendmsg+0x164/0x220 [ 505.090796][T11860] __do_fast_syscall_32+0xb6/0x2b0 [ 505.096438][T11860] do_fast_syscall_32+0x34/0x80 [ 505.101813][T11860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.108676][T11860] [ 505.108676][T11860] -> #0 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 505.117215][T11860] validate_chain+0xb9b/0x2140 [ 505.122508][T11860] __lock_acquire+0xab9/0xd20 [ 505.127708][T11860] lock_acquire+0x120/0x360 [ 505.132736][T11860] __mutex_lock+0x182/0xe80 [ 505.137760][T11860] dev_set_promiscuity+0x10e/0x260 [ 505.143397][T11860] bond_change_rx_flags+0x219/0x690 [ 505.149118][T11860] __dev_set_promiscuity+0x534/0x740 [ 505.154928][T11860] netif_set_promiscuity+0x50/0xe0 [ 505.160561][T11860] dev_set_promiscuity+0x126/0x260 [ 505.166194][T11860] __dev_set_promiscuity+0x534/0x740 [ 505.172000][T11860] netif_set_promiscuity+0x50/0xe0 [ 505.177637][T11860] dev_set_promiscuity+0x126/0x260 [ 505.183274][T11860] team_change_rx_flags+0x123/0x220 [ 505.188995][T11860] __dev_set_promiscuity+0x534/0x740 [ 505.194804][T11860] netif_set_promiscuity+0x50/0xe0 [ 505.200449][T11860] dev_set_promiscuity+0x126/0x260 [ 505.206083][T11860] hsr_add_port+0x549/0x890 [ 505.211102][T11860] hsr_dev_finalize+0x6c4/0xaa0 [ 505.216465][T11860] hsr_newlink+0x7d7/0x940 [ 505.221391][T11860] rtnl_newlink_create+0x310/0xb00 [ 505.227028][T11860] rtnl_newlink+0x16d6/0x1c70 [ 505.232220][T11860] rtnetlink_rcv_msg+0x7cf/0xb70 [ 505.237685][T11860] netlink_rcv_skb+0x205/0x470 [ 505.242970][T11860] netlink_unicast+0x758/0x8d0 [ 505.248249][T11860] netlink_sendmsg+0x805/0xb30 [ 505.253523][T11860] __sock_sendmsg+0x219/0x270 [ 505.258716][T11860] ____sys_sendmsg+0x505/0x830 [ 505.263991][T11860] ___sys_sendmsg+0x21f/0x2a0 [ 505.269181][T11860] __sys_sendmsg+0x164/0x220 [ 505.274284][T11860] __do_fast_syscall_32+0xb6/0x2b0 [ 505.279912][T11860] do_fast_syscall_32+0x34/0x80 [ 505.285280][T11860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.292119][T11860] [ 505.292119][T11860] other info that might help us debug this: [ 505.292119][T11860] [ 505.302333][T11860] Possible unsafe locking scenario: [ 505.302333][T11860] [ 505.309768][T11860] CPU0 CPU1 [ 505.315122][T11860] ---- ---- [ 505.320473][T11860] lock(team->team_lock_key#5); [ 505.325414][T11860] lock(&dev_instance_lock_key#20); [ 505.333244][T11860] lock(team->team_lock_key#5); [ 505.340703][T11860] lock(&dev_instance_lock_key#20); [ 505.345986][T11860] [ 505.345986][T11860] *** DEADLOCK *** [ 505.345986][T11860] [ 505.354124][T11860] 3 locks held by syz.1.1497/11860: [ 505.359306][T11860] #0: ffffffff8fa2cd70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 505.368805][T11860] #1: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 505.377861][T11860] #2: ffff88805cd74e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 505.388401][T11860] [ 505.388401][T11860] stack backtrace: [ 505.394292][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.1.1497 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 505.394328][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.394342][T11860] Call Trace: [ 505.394349][T11860] [ 505.394357][T11860] dump_stack_lvl+0x189/0x250 [ 505.394385][T11860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.394411][T11860] ? __pfx__printk+0x10/0x10 [ 505.394428][T11860] ? print_lock_name+0xde/0x100 [ 505.394444][T11860] print_circular_bug+0x2ee/0x310 [ 505.394471][T11860] check_noncircular+0x134/0x160 [ 505.394498][T11860] validate_chain+0xb9b/0x2140 [ 505.394524][T11860] ? __wake_up_common_lock+0x190/0x1f0 [ 505.394546][T11860] __lock_acquire+0xab9/0xd20 [ 505.394569][T11860] ? dev_set_promiscuity+0x10e/0x260 [ 505.394593][T11860] lock_acquire+0x120/0x360 [ 505.394612][T11860] ? dev_set_promiscuity+0x10e/0x260 [ 505.394637][T11860] ? nlmsg_notify+0x14a/0x1a0 [ 505.394664][T11860] __mutex_lock+0x182/0xe80 [ 505.394684][T11860] ? dev_set_promiscuity+0x10e/0x260 [ 505.394710][T11860] ? irq_work_queue+0xbc/0x140 [ 505.394731][T11860] ? dev_set_promiscuity+0x10e/0x260 [ 505.394756][T11860] ? __pfx___mutex_lock+0x10/0x10 [ 505.394781][T11860] ? netif_set_promiscuity+0x81/0xe0 [ 505.394807][T11860] dev_set_promiscuity+0x10e/0x260 [ 505.394833][T11860] bond_change_rx_flags+0x219/0x690 [ 505.394861][T11860] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 505.394887][T11860] ? __netdev_printk+0x365/0x4d0 [ 505.394919][T11860] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 505.394942][T11860] __dev_set_promiscuity+0x534/0x740 [ 505.394965][T11860] ? __pfx_netdev_info+0x10/0x10 [ 505.394985][T11860] netif_set_promiscuity+0x50/0xe0 [ 505.395013][T11860] dev_set_promiscuity+0x126/0x260 [ 505.395037][T11860] ? __pfx_macvlan_change_rx_flags+0x10/0x10 [ 505.395054][T11860] __dev_set_promiscuity+0x534/0x740 [ 505.395078][T11860] ? do_raw_spin_unlock+0x122/0x240 [ 505.395094][T11860] netif_set_promiscuity+0x50/0xe0 [ 505.395119][T11860] dev_set_promiscuity+0x126/0x260 [ 505.395143][T11860] team_change_rx_flags+0x123/0x220 [ 505.395168][T11860] ? __pfx_team_change_rx_flags+0x10/0x10 [ 505.395192][T11860] __dev_set_promiscuity+0x534/0x740 [ 505.395217][T11860] netif_set_promiscuity+0x50/0xe0 [ 505.395240][T11860] dev_set_promiscuity+0x126/0x260 [ 505.395266][T11860] hsr_add_port+0x549/0x890 [ 505.395285][T11860] hsr_dev_finalize+0x6c4/0xaa0 [ 505.395303][T11860] hsr_newlink+0x7d7/0x940 [ 505.395317][T11860] ? validate_linkmsg+0x765/0x950 [ 505.395335][T11860] ? __pfx_hsr_newlink+0x10/0x10 [ 505.395352][T11860] ? __pfx_hsr_newlink+0x10/0x10 [ 505.395367][T11860] rtnl_newlink_create+0x310/0xb00 [ 505.395392][T11860] ? __pfx_aa_get_newest_label+0x10/0x10 [ 505.395412][T11860] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 505.395435][T11860] ? rtnl_newlink+0x8db/0x1c70 [ 505.395456][T11860] ? __pfx___mutex_lock+0x10/0x10 [ 505.395477][T11860] ? ns_capable+0x8a/0xf0 [ 505.395500][T11860] rtnl_newlink+0x16d6/0x1c70 [ 505.395521][T11860] ? netlink_sendmsg+0x805/0xb30 [ 505.395537][T11860] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.395566][T11860] ? kasan_quarantine_put+0xdd/0x220 [ 505.395584][T11860] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.395603][T11860] ? nlmon_xmit+0xb0/0x100 [ 505.395625][T11860] ? kmem_cache_free+0x18f/0x400 [ 505.395649][T11860] ? __local_bh_enable_ip+0x12d/0x1c0 [ 505.395671][T11860] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.395688][T11860] ? __local_bh_enable_ip+0x12d/0x1c0 [ 505.395709][T11860] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 505.395731][T11860] ? __dev_queue_xmit+0x27e/0x3a70 [ 505.395752][T11860] ? __lock_acquire+0xab9/0xd20 [ 505.395778][T11860] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.395798][T11860] rtnetlink_rcv_msg+0x7cf/0xb70 [ 505.395820][T11860] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 505.395840][T11860] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.395860][T11860] ? ref_tracker_free+0x63a/0x7d0 [ 505.395879][T11860] ? __copy_skb_header+0xa7/0x550 [ 505.395895][T11860] ? __pfx_ref_tracker_free+0x10/0x10 [ 505.395918][T11860] netlink_rcv_skb+0x205/0x470 [ 505.395941][T11860] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.395962][T11860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.395988][T11860] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.396016][T11860] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.396040][T11860] netlink_unicast+0x758/0x8d0 [ 505.396064][T11860] netlink_sendmsg+0x805/0xb30 [ 505.396080][T11860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.396094][T11860] ? __import_iovec+0x5d4/0x7f0 [ 505.396107][T11860] ? aa_sock_msg_perm+0x94/0x160 [ 505.396125][T11860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.396143][T11860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.396156][T11860] __sock_sendmsg+0x219/0x270 [ 505.396176][T11860] ____sys_sendmsg+0x505/0x830 [ 505.396191][T11860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.396208][T11860] ? __pfx_futex_wake_mark+0x10/0x10 [ 505.396228][T11860] ___sys_sendmsg+0x21f/0x2a0 [ 505.396242][T11860] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.396269][T11860] ? __fget_files+0x2a/0x420 [ 505.396291][T11860] ? __fget_files+0x3a0/0x420 [ 505.396316][T11860] __sys_sendmsg+0x164/0x220 [ 505.396330][T11860] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.396347][T11860] ? rcu_is_watching+0x15/0xb0 [ 505.396369][T11860] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 505.396388][T11860] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.396406][T11860] __do_fast_syscall_32+0xb6/0x2b0 [ 505.396429][T11860] do_fast_syscall_32+0x34/0x80 [ 505.396449][T11860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.396470][T11860] RIP: 0023:0xf705e539 [ 505.396487][T11860] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.396501][T11860] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 505.396517][T11860] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 505.396528][T11860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.396537][T11860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.396546][T11860] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.396555][T11860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.396569][T11860] [ 506.003824][T11860] vlan2: entered promiscuous mode [ 506.057331][T11860] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 506.076751][T11860] Cannot create hsr debugfs directory [ 506.082686][T11860] hsr1: entered promiscuous mode [ 506.087752][T11860] hsr1: entered allmulticast mode [ 506.096959][T11860] batadv0: entered allmulticast mode [ 506.102298][T11860] team0: entered allmulticast mode [ 506.107625][T11860] team_slave_0: entered allmulticast mode [ 506.132697][ T6515] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 506.153793][T11860] syz.1.1497 (11860) used greatest stack depth: 19568 bytes left [ 506.284049][ T6515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 506.295029][ T6515] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.307383][ T6515] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 506.316474][ T6515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.324582][ T6515] usb 6-1: Product: syz [ 506.328744][ T6515] usb 6-1: Manufacturer: syz [ 506.333467][ T6515] usb 6-1: SerialNumber: syz [ 506.339238][ T6515] usb 6-1: config 0 descriptor?? [ 506.344877][T11862] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 506.353004][ T6515] usb 6-1: ucan: probing device on interface #0 [ 506.359276][ T6515] usb 6-1: ucan: invalid EP count (1) [ 506.364685][ T6515] usb 6-1: ucan: probe failed; try to update the device firmware [ 506.583524][ T9640] net_ratelimit: 19 callbacks suppressed [ 506.583545][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.702697][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.813027][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.922689][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 507.043100][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 507.162671][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 507.171683][ T5897] usb 6-1: USB disconnect, device number 31 [ 507.272855][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 507.392719][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 507.502763][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 507.612802][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 511.662702][ T9640] net_ratelimit: 35 callbacks suppressed [ 511.662723][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 511.782713][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 511.892776][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.002955][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.112725][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.222684][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.332949][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.442691][ T9636] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.552766][ T2996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 512.662677][ T9640] bond1: (slave ip6gretap1): failed to get link speed/duplex