last executing test programs: 10m40.558411715s ago: executing program 0 (id=396): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 10m39.510923417s ago: executing program 0 (id=400): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000140)="470f230ff00fb142438ed066bad004b000669af16b66edbf4cbf4c0569b56400000006c744240200000000c7442406000000000f011c24670fc77507420f0765f3410f0966baf80cb8d2128189ef66bafc0c66b86815450fc79800000000", 0x5e}], 0x1, 0x33, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m39.002706757s ago: executing program 0 (id=406): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x725e, &(0x7f0000000400)={0x0, 0x82a3, 0x0, 0xfffffffd, 0x64}, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xe, 0x0, 0x6, 0x8200000400000000, 0x7, 0x344}, 0x0, 0x0) 10m38.056537673s ago: executing program 0 (id=415): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 10m36.952686764s ago: executing program 0 (id=420): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19e172f08959ac7e, 0xfffe, 0xb}, 0x2c) syz_io_uring_setup(0x131, 0x0, 0x0, &(0x7f00000001c0)) 10m36.45455541s ago: executing program 0 (id=424): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 10m35.753957562s ago: executing program 32 (id=424): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 6m59.785855183s ago: executing program 3 (id=1293): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, &(0x7f0000000140)=0x7, 0x4) open(0x0, 0x64842, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x6, 0x7, 0xb, 0x0, 0x9d, 0xb, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x2, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x43, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m58.544471252s ago: executing program 3 (id=1298): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$l2tp6(0xa, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000680)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m57.519627585s ago: executing program 3 (id=1301): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x1) r2 = epoll_create1(0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000200)={0x40002019}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x240000, &(0x7f00000000c0)={[0x8]}, 0x8) 6m56.878637457s ago: executing program 3 (id=1304): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m55.691456088s ago: executing program 3 (id=1314): memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m55.351152206s ago: executing program 3 (id=1317): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m54.24689462s ago: executing program 33 (id=1317): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16.182939065s ago: executing program 6 (id=2335): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) close(r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000480)={{0x1, 0x200, 0x261, 0x1, 0xffffffff, 0x1}, 0x37a, [0x4, 0x9f, 0x6, 0x7, 0x10000, 0x7f, 0x9, 0xb, 0x17, 0x3, 0x7, 0x80000001, 0xffff0001, 0x81, 0xf24b, 0x81, 0x7, 0x5, 0xffffffff, 0xfffffffd, 0x3295, 0x8, 0x1, 0x6, 0x1, 0x20000, 0x2, 0x642c, 0x101, 0xc, 0x9, 0xff, 0x6, 0xb, 0x4, 0x6, 0x20, 0xdb, 0x943, 0x3, 0x3c, 0x9, 0xd9d3, 0x32c, 0x2, 0x0, 0x8, 0x10000, 0x0, 0x139, 0xffffffff, 0x0, 0x560, 0x7, 0x7, 0x2, 0x4, 0x6, 0x5, 0x4, 0x82bd, 0x4, 0x7f, 0x3, 0x101, 0x7, 0x4, 0x0, 0x46a5, 0x9, 0x2, 0x101, 0x2, 0x81, 0x2c4, 0x2, 0xf1, 0x3, 0x3, 0x9, 0x9, 0x7d, 0x2, 0x9, 0x6e, 0x8, 0xef46, 0x943, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xda6, 0xf360, 0x8, 0x3, 0x9c2, 0x8001, 0x5, 0x100, 0x80000000, 0xffff7fff, 0xffffffff, 0x7, 0x80000000, 0x7, 0xeb, 0x932, 0xffff, 0x0, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x3, 0x7, 0x8, 0x3, 0x10001, 0xfffffff9, 0x4, 0xd, 0x2e, 0xffff, 0x1, 0x0, 0x7, 0x2, 0x80, 0x80000001, 0x0, 0x4, 0xffff7fff, 0x9, 0x80000000, 0x2, 0xf280, 0x2, 0x57, 0x0, 0x1, 0x6, 0x0, 0x397, 0x8, 0x5, 0x9, 0x8, 0x7c4c, 0x5b, 0x2, 0xc, 0x1, 0x5, 0x20, 0x7, 0x6, 0x65d0, 0x10001, 0x6, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x6, 0x124a, 0x9, 0x1ff, 0x80, 0xc, 0x3, 0x4270000, 0x0, 0x6b994df8, 0x9, 0x6, 0x0, 0x9, 0x9, 0x1ff, 0x9, 0x1000, 0x3ff, 0xffffffff, 0x0, 0x6, 0xffffffff, 0x7ff, 0x311, 0x0, 0x7, 0xfffffdd9, 0x0, 0x79, 0x5, 0xfffffffc, 0x8, 0xd, 0x6944, 0xb, 0x2, 0x8f01, 0x10, 0x3, 0x8, 0x5, 0x40, 0x2, 0x40, 0x9, 0x8, 0x21, 0xffffffff, 0xdf6, 0x3, 0x6, 0x7, 0x9, 0x8, 0x101, 0x8, 0x0, 0x10001, 0x0, 0x81e8, 0x5, 0xa9e, 0x2, 0x9, 0x3, 0x8, 0x2, 0x1, 0x8, 0x1000, 0x80000000, 0x7, 0x7, 0x4, 0x4, 0x7, 0x5, 0xe, 0x2, 0x155, 0x3, 0x8, 0x9, 0x1000, 0xe4ec, 0x0, 0x6, 0xa, 0x0, 0x8, 0x6, 0x3ff, 0x8001, 0x9, 0xa770, 0x7, 0x3ff, 0x2, 0x5, 0xf, 0x3, 0x9, 0x8, 0x3ff, 0x6, 0x100, 0xfffffffe, 0x6, 0x10000, 0x3, 0x2, 0xffff, 0x80, 0x180, 0x1, 0x10000, 0xa672, 0x0, 0x1, 0xca6, 0x3, 0x1ff, 0x0, 0x5, 0x400, 0x6, 0x159, 0x0, 0x5, 0xff, 0x2, 0xd62, 0x77, 0x7fff, 0xbdd5, 0x7, 0x7fff, 0x7, 0x401, 0x100, 0xde87b73, 0x3, 0x5, 0x6, 0xd3d, 0x8, 0x10000000, 0x6, 0x7fffffff, 0x1, 0x3ff, 0x10000, 0xa, 0x2, 0x6, 0x6b, 0x5, 0x3, 0x46, 0x8, 0x2, 0x3, 0xfffffffd, 0x4, 0x1, 0x8, 0x8000, 0x0, 0x35d, 0xfffffffd, 0x100, 0x3, 0x2, 0x2, 0x5, 0xec59, 0x1, 0x666, 0x2, 0x10001, 0x2, 0x0, 0x0, 0x2, 0x6, 0x6, 0xb, 0x5, 0x7fffffff, 0x9b3, 0x100, 0xffc00000, 0x20000000, 0x6, 0x9, 0x0, 0x409, 0xff, 0xfffffffa, 0x6, 0x4, 0x2, 0x5, 0x7, 0x9, 0x5c69, 0x2, 0x7, 0x9, 0x3, 0x505, 0x7, 0x7f, 0x3, 0x5, 0x80, 0x2, 0x1, 0x7, 0x3, 0x9, 0x3, 0xc00000, 0x1, 0xffff, 0x7, 0x0, 0x0, 0x7, 0x6, 0x8, 0x7, 0xb, 0x5, 0x6, 0xff67, 0x3, 0x8, 0x55, 0xfff, 0xfffffffb, 0x7, 0x0, 0x30, 0x63, 0x8, 0xbc00, 0x8, 0xfffffc71, 0x3, 0xa5, 0x6, 0x0, 0xc2f, 0xd75, 0x4, 0x2, 0x9, 0xffffffc0, 0x6, 0x9, 0x8, 0x6, 0x9, 0x6, 0x2, 0x7ff, 0x0, 0x7f, 0x74d067f7, 0x8, 0x9, 0x8, 0x0, 0x7, 0x4, 0x2, 0x8, 0x6, 0x5, 0x9fd5, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x401, 0x8, 0x1b800, 0x2dd, 0x7, 0x9, 0x2, 0x4, 0x5, 0x3, 0xae, 0x8001, 0x0, 0x1ff, 0xa7, 0x800, 0x2, 0x4, 0x7, 0x6, 0x0, 0x0, 0x68, 0x1, 0x7, 0x80000000, 0x8f, 0x1ff, 0x7, 0x7f, 0x0, 0xa0, 0x8, 0x0, 0x6, 0xea, 0x9, 0x6, 0x81, 0x4, 0x8, 0x4, 0x2, 0xfffffe00, 0x9, 0x7fff, 0x0, 0x3, 0xa1, 0x7, 0x7, 0x0, 0xb, 0x8, 0xfffffffb, 0x9, 0x0, 0xc, 0x3, 0xd2, 0x200, 0x7, 0x3, 0xf, 0x3, 0x3ff, 0x42, 0xb697, 0x4, 0x80000, 0x60, 0x9, 0x6, 0x4, 0x6, 0x6, 0xd, 0x2, 0x4, 0x80000001, 0x3, 0xb, 0x5b, 0x6, 0x6, 0x74, 0x8, 0x3, 0x9, 0x0, 0x4, 0x4, 0x7f, 0x3, 0xc, 0x4, 0x8, 0x935a, 0x85, 0x6, 0x6, 0x2, 0xe, 0x3, 0x4, 0x6, 0x9, 0x1, 0x34, 0x5, 0x6, 0x8001, 0x0, 0xffffffff, 0x9, 0x6, 0xbab, 0x8, 0x5, 0x1, 0x4, 0x7, 0x400, 0x2, 0x9, 0x1ff, 0x4, 0x8, 0x7fff, 0x3, 0x7, 0x1, 0x4, 0x7fff, 0x0, 0x1, 0xa, 0x3, 0xa, 0x10000, 0x5, 0x495, 0x4, 0x101, 0x180, 0x3, 0x60d, 0xffffff00, 0x2, 0x8, 0x79f5, 0x2cbd, 0x2, 0x9, 0x6, 0x2, 0x6, 0x9, 0x0, 0xfffff6b8, 0x7, 0x5, 0x10001, 0x7, 0x9, 0x3, 0x81, 0x1, 0x0, 0x10000, 0x80000001, 0x7, 0xff, 0x7fff, 0x7b1f, 0x7, 0xb9e3, 0x5, 0x0, 0x401, 0xd, 0x8e, 0x7, 0x3, 0x80000000, 0x7, 0x8, 0x3, 0x9, 0x0, 0x1, 0xee9, 0x12, 0x100002, 0x80000000, 0x1000, 0x0, 0x6, 0x5, 0x1000000, 0x1, 0x100, 0x9, 0x7, 0x101, 0xcff7, 0x0, 0x1ff, 0x401, 0x6, 0x5ce, 0x0, 0x5, 0x0, 0x8, 0x4, 0xfffffffa, 0x80000001, 0xb7, 0x2, 0x8, 0x9, 0xfffff9ec, 0x1, 0x6, 0x4, 0x401, 0x401, 0x8, 0x4, 0x1, 0x7fff, 0x3, 0x8, 0x8, 0x9, 0x6, 0x2c, 0xa54, 0x40, 0xd634, 0x249d, 0x18, 0x4, 0xd, 0xa26c, 0x1, 0x3, 0x3ff, 0x6a, 0xffffff2a, 0x1, 0x6c, 0x3, 0xabeb, 0x0, 0x0, 0x5, 0x6, 0x4, 0x2, 0x6236, 0x1, 0x9, 0x2, 0x8000, 0x4000000, 0x180000, 0x5, 0x9, 0x3ff, 0x1000000, 0x3, 0x3ff, 0x2, 0x1, 0x9, 0x10000, 0x5, 0xb, 0x62a, 0x7, 0x5, 0xb15, 0x9, 0x2, 0x4, 0x10, 0x8000000, 0x80000001, 0x7fffffff, 0x5, 0x400, 0x7, 0x8, 0x5, 0x7fff, 0x3, 0x5, 0x7, 0x1, 0x800, 0x4, 0x8, 0xe700, 0x2, 0x4, 0x9, 0x7, 0x9, 0x6, 0x12, 0x4, 0xfffffff8, 0x7, 0x7, 0x7, 0x8, 0xfffffffc, 0x6, 0x0, 0x3, 0xcf2, 0x8, 0x7, 0x7ff, 0x7, 0x8, 0x8, 0x9, 0x5, 0x800, 0x7, 0x9f, 0x5, 0x7cd6, 0x2, 0x5e369cb1, 0x1, 0x7fffffff, 0x10, 0x2, 0x5, 0x10001, 0x8, 0x6, 0x8, 0xd4fb, 0x9, 0x6, 0x1, 0x5, 0x9, 0x5, 0xc, 0xfffffff1, 0x400, 0x5, 0x5, 0x3, 0x2, 0x5, 0x9, 0x1, 0x4b, 0x6, 0x78d, 0xc6, 0xec62, 0x4, 0x0, 0x5, 0x101, 0x2, 0x1, 0x9, 0x3365, 0x3, 0x3, 0xfffeffff, 0x3359, 0x200, 0xfffffff2, 0x7, 0x9, 0x5, 0x1, 0x9d, 0x7, 0x3ab, 0x5, 0x1, 0x7ff, 0x101, 0x8000, 0x34e0, 0x1, 0x8, 0x10000, 0x3, 0x7, 0x2, 0x1, 0x7, 0x9, 0x662, 0x6, 0x4db1, 0x3, 0x7fff, 0x6, 0xa021, 0x4, 0x3, 0x4, 0x1, 0x8, 0x40, 0x3, 0x80, 0x3, 0x7ff, 0x7, 0x4, 0x0, 0x3f00, 0xfffffff7, 0x7, 0x7, 0x2, 0x0, 0x1, 0x922c, 0x4, 0x400, 0x401, 0xfffffffe, 0x10, 0x9, 0x5, 0x2, 0x3, 0x4, 0x9, 0x6, 0xb4c, 0x8, 0x2, 0x1, 0x5000000, 0x5, 0x2, 0xf2, 0x6, 0x600d, 0xffff, 0x2, 0x0, 0xc1, 0xff, 0x8, 0xcc3, 0x400, 0x807, 0x5, 0x8, 0x1cce, 0xdb, 0x4, 0x8000, 0x1, 0x0, 0x1, 0x5, 0x1, 0x7, 0x8, 0x0, 0x7, 0x10, 0x5, 0x7f, 0x3, 0xea4, 0x5, 0x1, 0x2, 0x1, 0xf, 0x6, 0x1ff, 0x10001, 0xac73, 0x3, 0x0, 0x7fff, 0x9, 0xffffffff, 0x8, 0x8, 0x200, 0x6, 0xffffff8a, 0x1, 0x81, 0x800, 0x9, 0x8, 0x7ff, 0x101, 0x8000, 0x1, 0x7, 0x10000, 0x101, 0x8, 0x7f, 0x31aea55a, 0x0, 0x7, 0x8, 0x4, 0x1d7f, 0x1, 0x10, 0x2, 0x0, 0xcd6, 0x9, 0x10, 0x0, 0x7, 0x9, 0xfffff7db, 0x2, 0x4, 0x5, 0xc8, 0x4, 0x2, 0xb48, 0x3, 0xfffffffd, 0x2, 0x9, 0x8, 0x4, 0xb, 0x7, 0x8, 0x6, 0x0, 0x3, 0x3, 0x0, 0x4, 0x80000001, 0x1, 0x4, 0x5, 0x5, 0x189d, 0x1, 0x3ff, 0x5, 0x9, 0x9, 0x5, 0xb, 0xe9f, 0x7]}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 13.572422132s ago: executing program 2 (id=2339): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) r4 = dup(r2) r5 = accept4(r3, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x8a000) 12.551413233s ago: executing program 6 (id=2341): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[], 0xfc}}, 0x0) 10.833080901s ago: executing program 5 (id=2346): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b0174949173922f6ee103a5a4af7b3068d357d2c821f6", 0x91, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 9.603152533s ago: executing program 2 (id=2347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x10]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 9.445467798s ago: executing program 6 (id=2348): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_pts(0xffffffffffffffff, 0x80) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 7.649954932s ago: executing program 5 (id=2350): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744ca46439ef57826bb82875d02c450a2ae26f55") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x5c}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.486870846s ago: executing program 4 (id=2351): r0 = epoll_create1(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, &(0x7f0000004240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.032752811s ago: executing program 4 (id=2353): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x1, 0x8000}, 0x0) landlock_restrict_self(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000400)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="050000004a020000ae0b0000000000000f8f3756149c97fd169389af1ad63c4d045e5b7726ae982d06f877145c5f34def36eac1919a392380282e7e2d7a951c3fb61e6a016b1fd25bd28509581be9847e062caa38f291028cbbc431d8b83b5d647a80000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0200008001000000020000e000000000ec445f35e347c675"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r5 = dup(r3) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, &(0x7f0000000000)=0x3f) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) 6.909478096s ago: executing program 5 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.596872226s ago: executing program 4 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000140), 0x100000000000, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.497054417s ago: executing program 2 (id=2357): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x48417f, 0x0) request_key(&(0x7f00000001c0)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8) rename(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x9) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) 6.378424095s ago: executing program 5 (id=2358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffc, 0x0, 0xc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x0, 0x8, 0x100, "0300fe96fcb7012e493d74c975b4032d9977b861a0b1c0e2a956348df16be0d8f969d4d6023a8b48463abbb966d6625f0b6c439494cc6acdd76848798424e0aab39f489273d092598a344a20b58811afcba26919c76de355b15783dfe3aeb3647f3c4f8aff1446baec94b68d2c970829190736d2ab4b4538fc667882732667bcf123d310f8233dc1f331a593aec74e03e95add1a39a83a5b3e6bb784385ef35eba90bb9522cc4d72b6a9fe566d045a4814474bd7022fb2c06e3b4a3744d50d9fff5c023d6b64ed2c78398a559807f156e6cdcb59dcea423cea4ba09098c3d5983175070b24e77353d32b5fe66bd69f9d2cfeb983c319349973aae21e9a0c75ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = dup3(r3, r2, 0x0) accept4$unix(r4, 0xfffffffffffffffe, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) 6.289624007s ago: executing program 6 (id=2359): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x380, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98b9, 0x800000000000009, 0x0, 0x100000000000004, 0xfffe, 0x100, 0x1, 0x0, 0x5, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x300, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x6c3f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x3, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x3, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x1, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4090}, 0x40080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.101963915s ago: executing program 6 (id=2360): ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r0}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, &(0x7f0000000d00)=[0xe0b, 0x8e0, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0x0, 0xd, 0x2, 0x7, 0x9, 0x8000000000000000, 0xfffffffffffeffff, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0x8, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x3, 0x3, 0x1, 0x6, 0x5809, 0x8, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0x0, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0xd, 0x2, 0xd6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1464, 0x2, 0x9, 0x1, 0x511, 0x90, 0x9, 0x8, 0x9, 0xb, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0xffffffffffffff67, 0x67, 0x1a, 0x6, 0x1, 0x3, 0xfe6, 0xa, 0x3, 0x3, 0x1ff, 0xa79, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x100000000, 0x7, 0x5, 0x8, 0x101, 0x2, 0x1b2, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0xdc92, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x5, 0xf, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.976948355s ago: executing program 4 (id=2361): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x14, r2, 0x333, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) epoll_create(0x1) 4.449245537s ago: executing program 2 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.25793165s ago: executing program 6 (id=2363): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x20, 0xb, 0x4, "91d69eed"}, 0x0, 0x0, 0x0, 0x0}) 4.050453645s ago: executing program 1 (id=2364): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) mkdir(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) read$FUSE(r4, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 3.687953032s ago: executing program 5 (id=2365): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8cffffff, 0x0) epoll_create1(0x80000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc", 0xc8, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4891, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.57643815s ago: executing program 2 (id=2366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.509685706s ago: executing program 1 (id=2367): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 3.185014177s ago: executing program 1 (id=2368): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x4000000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x128) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7b}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r1, 0x7, 0xaf1, 0x10}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.080133467s ago: executing program 4 (id=2369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000140), 0x100000000000, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.532531842s ago: executing program 1 (id=2370): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x706, 0x75, 0x1, {0x6fb, "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"}}, 0x706) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.779785785s ago: executing program 1 (id=2371): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(0x0, 0x101) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.585721445s ago: executing program 4 (id=2372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r2, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth0\x00', 'team0\x00', {}, {}, 0x0, 0x3, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8, '\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x100, 0xb, [0x3c, 0x3f, 0x19, 0x12, 0x33, 0x14, 0x40, 0x2e, 0x2a, 0x3c, 0x2e, 0x32, 0x9, 0xc, 0x21, 0x1b], 0x0, 0xe, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 220.126468ms ago: executing program 2 (id=2373): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4518, &(0x7f0000000300)={0x0, 0x40ae, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r6, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 74.216113ms ago: executing program 1 (id=2374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$unix(0x1, 0x1, 0x0) io_uring_setup(0x5bde, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 0s ago: executing program 5 (id=2375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): mber 24 using dummy_hcd [ 603.652000][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 603.668182][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 603.697222][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.713541][ T5925] usb 3-1: Product: syz [ 603.718097][ T5925] usb 3-1: Manufacturer: syz [ 603.725897][ T5925] usb 3-1: SerialNumber: syz [ 603.741143][ T5925] usb 3-1: config 0 descriptor?? [ 603.782061][T12810] syz.4.1851 (12810): drop_caches: 2 [ 603.971670][ T5925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 604.174552][ T30] audit: type=1804 audit(1754212812.902:234): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1858" name="/newroot/276/file1" dev="fuse" ino=1 res=1 errno=0 [ 605.430209][ T5925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 605.454208][ T5925] usb 3-1: USB disconnect, device number 24 [ 606.725281][ T5925] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 606.943941][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.974852][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 607.065830][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.070596][T12865] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 607.075985][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.114045][ T5925] usb 3-1: Product: syz [ 607.118274][ T5925] usb 3-1: Manufacturer: syz [ 607.131585][ T5925] usb 3-1: SerialNumber: syz [ 607.376492][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.443988][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.584142][ T5925] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 607.631085][ T5925] usb 3-1: USB disconnect, device number 25 [ 608.073208][ T5945] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 608.518136][ T5945] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 608.527233][ T5945] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 608.547236][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.567837][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 608.608737][ T30] audit: type=1800 audit(1754212817.312:235): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1869" name="bus" dev="ramfs" ino=51793 res=0 errno=0 [ 608.618547][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 608.645449][ T92] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 608.727961][ T5945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 608.773324][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.846939][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 608.926249][ T92] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 608.939281][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.950584][ T92] usb 5-1: config 0 descriptor?? [ 608.965953][ T92] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 608.996253][T12863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.017526][ T5945] usb 3-1: usb_control_msg returned -71 [ 609.028291][ T5945] usbtmc 3-1:16.0: can't read capabilities [ 609.073766][ T5945] usb 3-1: USB disconnect, device number 26 [ 609.350662][T12885] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[12885] [ 609.400664][T12884] batadv1: entered promiscuous mode [ 609.425675][T12884] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 609.481160][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.489859][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.497353][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.504695][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.512194][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.519606][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.526904][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.534235][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.541657][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.548875][T12883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 611.702532][ T92] gspca_sonixj: reg_w1 err -71 [ 611.709381][ T92] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 611.962120][ T92] usb 5-1: USB disconnect, device number 35 [ 612.758300][ T30] audit: type=1804 audit(1754212821.482:236): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1878" name="/newroot/393/file1" dev="fuse" ino=1 res=1 errno=0 [ 614.324550][ T92] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 614.362069][ T5925] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 614.713295][ T5925] usb 3-1: device descriptor read/64, error -71 [ 614.736386][ T92] usb 5-1: unable to get BOS descriptor or descriptor too short [ 614.750078][ T92] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 614.763240][ T92] usb 5-1: can't read configurations, error -71 [ 615.078030][ T5925] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 615.244710][ T5925] usb 3-1: device descriptor read/64, error -71 [ 615.362369][ T5925] usb usb3-port1: attempt power cycle [ 615.451274][T12942] netlink: 'syz.5.1889': attribute type 10 has an invalid length. [ 615.515647][T12942] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 615.751658][ T5925] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 615.792714][ T5925] usb 3-1: device descriptor read/8, error -71 [ 616.221849][ T5925] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 616.252431][ T5925] usb 3-1: device descriptor read/8, error -71 [ 616.381629][ T92] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 616.514391][ T5925] usb usb3-port1: unable to enumerate USB device [ 616.534279][ T92] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.696823][T12963] mmap: syz.6.1895 (12963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 616.791671][ T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.818862][ T92] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 616.828256][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 617.110559][ T92] usb 5-1: SerialNumber: syz [ 617.440941][ T92] usb 5-1: 0:2 : does not exist [ 617.528218][ T92] usb 5-1: USB disconnect, device number 38 [ 617.685278][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.376521][T12974] binder_alloc: 12973: binder_alloc_buf, no vma [ 618.821976][ T5925] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 618.899972][T12985] binder_alloc: 12984: pid 12984 spamming oneway? 1 buffers allocated for a total size of 4096 [ 619.004070][ T5925] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 619.016950][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.048275][ T5925] usb 5-1: config 0 descriptor?? [ 619.069531][ T5925] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 619.122021][ T92] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 619.277185][ T5925] gp8psk: usb in 128 operation failed. [ 619.293900][ T92] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 619.322029][ T92] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 619.398165][ T92] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 619.424617][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.454372][T12987] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 619.485370][ T92] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.988862][ T5925] gp8psk: usb in 146 operation failed. [ 620.055092][ T5925] gp8psk: failed to get FW version [ 620.078206][ T5925] gp8psk: usb in 149 operation failed. [ 620.220462][ T5925] gp8psk: failed to get FPGA version [ 620.247811][ T5925] gp8psk: usb in 138 operation failed. [ 620.270989][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 620.303233][ T5925] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 620.355825][ T5925] usb 5-1: USB disconnect, device number 39 [ 621.492007][ T5924] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 621.681635][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 621.695739][ T5924] usb 5-1: config 0 has no interfaces? [ 621.715618][ T5924] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 621.754485][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.801789][ T5924] usb 5-1: Product: syz [ 621.821617][ T5924] usb 5-1: Manufacturer: syz [ 621.826294][ T5924] usb 5-1: SerialNumber: syz [ 621.864946][ T5924] usb 5-1: config 0 descriptor?? [ 621.922141][ T92] usb 2-1: USB disconnect, device number 37 [ 622.144979][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.205540][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.663322][ T5924] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 623.711696][ T92] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 623.846902][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 623.865985][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 623.884032][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.898456][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.911588][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.927842][ T92] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 623.959033][ T92] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 623.968401][ T92] usb 3-1: Manufacturer: syz [ 623.987566][ T92] usb 3-1: config 0 descriptor?? [ 624.070670][ T5924] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 624.146236][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.160381][ T5924] usb 7-1: Product: syz [ 624.168060][ T5924] usb 7-1: Manufacturer: syz [ 624.175210][ T5924] usb 7-1: SerialNumber: syz [ 624.207132][ T5924] usb 7-1: config 0 descriptor?? [ 624.238978][ T5924] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 624.269471][ T5924] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 624.274213][T12484] usb 5-1: USB disconnect, device number 40 [ 624.419330][ T92] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 624.436044][ T92] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 624.446046][ T92] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 624.490695][ T92] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 624.502040][ T92] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 624.515115][ T92] cougar 0003:060B:700A.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 624.837706][ T92] usb 3-1: USB disconnect, device number 31 [ 624.895086][ T5924] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 624.923131][ T5924] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 625.105414][T13047] fido_id[13047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 625.542306][ T5924] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 625.563498][ T5924] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 626.196915][ T5924] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 626.231707][ T5924] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 626.249220][ T5924] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 626.289365][ T5924] usb 7-1: USB disconnect, device number 13 [ 627.411647][ T5924] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 627.952108][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.971686][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 628.003776][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 628.029457][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 628.180675][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 628.191467][ T5924] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 628.209713][ T5924] usb 2-1: Manufacturer: syz [ 628.244175][ T5924] usb 2-1: config 0 descriptor?? [ 628.311761][ T5925] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 628.430176][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 628.511779][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 628.521717][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 628.568787][ T5925] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 628.578490][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.621577][ T5925] usb 6-1: Product: syz [ 628.625816][ T5925] usb 6-1: Manufacturer: syz [ 628.630470][ T5925] usb 6-1: SerialNumber: syz [ 628.683258][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 628.684939][ T5924] usb 2-1: USB disconnect, device number 38 [ 629.351882][ T5925] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.475037][ T5925] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 629.537590][ T5925] usb 6-1: USB disconnect, device number 20 [ 629.656530][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.690501][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.697065][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.011590][T13103] GUP no longer grows the stack in syz.6.1939 (13103): 200000005000-200000008000 (200000004000) [ 630.039459][T13103] CPU: 0 UID: 0 PID: 13103 Comm: syz.6.1939 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 630.039482][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.039493][T13103] Call Trace: [ 630.039500][T13103] [ 630.039507][T13103] dump_stack_lvl+0x189/0x250 [ 630.039534][T13103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.039553][T13103] ? __pfx__printk+0x10/0x10 [ 630.039573][T13103] ? find_vma+0xe7/0x160 [ 630.039604][T13103] fixup_user_fault+0x661/0x720 [ 630.039627][T13103] fault_in_user_writeable+0x72/0xe0 [ 630.039646][T13103] futex_lock_pi+0x773/0xa90 [ 630.039675][T13103] ? __pfx_futex_lock_pi+0x10/0x10 [ 630.039702][T13103] ? fpu__restore_sig+0x978/0x1100 [ 630.039741][T13103] ? __pfx_futex_wake_mark+0x10/0x10 [ 630.039779][T13103] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 630.039807][T13103] do_futex+0x292/0x420 [ 630.039826][T13103] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 630.039853][T13103] ? __pfx_do_futex+0x10/0x10 [ 630.039879][T13103] __se_sys_futex+0x36f/0x400 [ 630.039903][T13103] ? __pfx___se_sys_futex+0x10/0x10 [ 630.039924][T13103] ? __task_pid_nr_ns+0x28/0x470 [ 630.039947][T13103] ? __x64_sys_futex+0x21/0xf0 [ 630.039969][T13103] do_syscall_64+0xfa/0x3b0 [ 630.039987][T13103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.040002][T13103] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.040018][T13103] ? clear_bhb_loop+0x60/0xb0 [ 630.040037][T13103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.040052][T13103] RIP: 0033:0x7fdbb678eb69 [ 630.040066][T13103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.040079][T13103] RSP: 002b:00007fdbb767d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.040096][T13103] RAX: ffffffffffffffda RBX: 00007fdbb69b5fa0 RCX: 00007fdbb678eb69 [ 630.040107][T13103] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 630.040118][T13103] RBP: 00007fdbb6811df1 R08: 0000000000000000 R09: 0000000000000000 [ 630.040127][T13103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.040136][T13103] R13: 0000000000000000 R14: 00007fdbb69b5fa0 R15: 00007fdbb6adfa28 [ 630.040169][T13103] [ 632.031761][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 632.205502][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.262899][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.380997][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 632.622495][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.636101][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.660985][ T10] usb 5-1: config 0 descriptor?? [ 632.971789][T13139] dvmrp0: entered allmulticast mode [ 633.108421][ T10] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 633.451814][T12484] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 633.461198][ T5925] usb 5-1: USB disconnect, device number 41 [ 633.663221][T12484] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.681456][T12484] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 633.681651][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 633.703622][T12484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.719647][T12484] usb 7-1: config 0 descriptor?? [ 633.728340][T12484] pwc: Askey VC010 type 2 USB webcam detected. [ 634.046689][ T10] usb 6-1: config 0 has no interfaces? [ 634.092736][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 634.160409][T12484] pwc: recv_control_msg error -32 req 02 val 2b00 [ 634.161633][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.178665][T12484] pwc: recv_control_msg error -32 req 02 val 2700 [ 634.193108][T12484] pwc: recv_control_msg error -32 req 02 val 2c00 [ 634.248001][T12484] pwc: recv_control_msg error -32 req 04 val 1000 [ 634.251592][ T10] usb 6-1: Product: syz [ 634.288326][ T10] usb 6-1: Manufacturer: syz [ 634.294077][ T10] usb 6-1: SerialNumber: syz [ 634.295547][T12484] pwc: recv_control_msg error -32 req 04 val 1300 [ 634.335518][ T10] usb 6-1: config 0 descriptor?? [ 634.341881][T12484] pwc: recv_control_msg error -32 req 04 val 1400 [ 634.359443][T12484] pwc: recv_control_msg error -32 req 02 val 2000 [ 634.393853][T12484] pwc: recv_control_msg error -32 req 02 val 2100 [ 634.440819][T12484] pwc: recv_control_msg error -32 req 04 val 1500 [ 634.457316][T12484] pwc: recv_control_msg error -32 req 02 val 2500 [ 634.666166][T12484] pwc: recv_control_msg error -71 req 02 val 2600 [ 634.721568][T12484] pwc: recv_control_msg error -71 req 02 val 2900 [ 634.741018][T12484] pwc: recv_control_msg error -71 req 02 val 2800 [ 634.748634][T12484] pwc: recv_control_msg error -71 req 04 val 1100 [ 634.756127][T12484] pwc: recv_control_msg error -71 req 04 val 1200 [ 634.766672][T12484] pwc: Registered as video103. [ 634.801773][T12484] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 634.898000][T12484] usb 7-1: USB disconnect, device number 14 [ 636.372406][T12484] usb 6-1: USB disconnect, device number 21 [ 637.042335][T13180] tipc: Started in network mode [ 637.047269][T13180] tipc: Node identity 6e1d7de0381c, cluster identity 4711 [ 637.065051][T13180] tipc: Enabled bearer , priority 0 [ 637.083198][T13180] syzkaller0: entered promiscuous mode [ 637.094651][T13180] syzkaller0: entered allmulticast mode [ 637.149295][T13180] tipc: Resetting bearer [ 637.187897][T13179] tipc: Resetting bearer [ 637.212602][T13179] tipc: Disabling bearer [ 638.292967][T12484] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 638.450026][T12484] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 638.487529][T13198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.516128][T13202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.540737][T13202] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 638.612569][ T1149] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 638.760342][T11154] bond2: (slave macvlan2): link status up again after 0 ms [ 638.921076][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 638.957052][T11154] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 639.083066][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 639.342629][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 639.457351][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 639.648293][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 640.002906][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 640.176164][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 640.311698][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 640.892163][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 640.938977][ T10] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 640.994207][ T10] usb 7-1: config 0 has no interface number 0 [ 641.222247][ T10] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 641.241407][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.270217][ T10] usb 7-1: Product: syz [ 641.290584][ T10] usb 7-1: Manufacturer: syz [ 641.307033][ T10] usb 7-1: SerialNumber: syz [ 641.413581][ T10] usb 7-1: config 0 descriptor?? [ 641.451338][ T10] usb 7-1: bad CDC descriptors [ 641.682517][ T5924] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 641.781941][ T5924] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 641.821658][ T5953] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 642.034029][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.103061][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 642.151589][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 642.222250][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 642.323753][ T5953] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 642.338175][ T5953] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 642.451692][ T5953] usb 3-1: Manufacturer: syz [ 642.466488][ T5953] usb 3-1: config 0 descriptor?? [ 642.991762][ T92] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 643.152793][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 643.173426][T12484] usb 7-1: USB disconnect, device number 15 [ 643.179652][ T92] usb 5-1: config 9 has an invalid interface number: 160 but max is 0 [ 643.191995][ T92] usb 5-1: config 9 has no interface number 0 [ 643.204061][ T92] usb 5-1: config 9 interface 160 has no altsetting 0 [ 643.396431][ T92] usb 5-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f [ 643.436435][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.484522][ T92] usb 5-1: Product: syz [ 643.495556][ T92] usb 5-1: Manufacturer: syz [ 643.516277][ T92] usb 5-1: SerialNumber: syz [ 643.672205][T11149] net_ratelimit: 23 callbacks suppressed [ 643.672228][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 644.231203][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 644.259368][ T92] ftdi_sio 5-1:9.160: FTDI USB Serial Device converter detected [ 644.282994][ T92] ftdi_sio ttyUSB0: unknown device type: 0x4e3f [ 644.293541][ T5953] rc_core: IR keymap rc-hauppauge not found [ 644.299472][ T5953] Registered IR keymap rc-empty [ 644.314147][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.336328][ T92] usb 5-1: USB disconnect, device number 42 [ 644.380933][ T92] ftdi_sio 5-1:9.160: device disconnected [ 644.391706][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 644.419518][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.473307][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 644.500123][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 644.528096][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 644.543075][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.581910][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.821113][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.877432][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 644.947608][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.972071][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 644.991704][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 645.011867][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 645.057754][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 645.072918][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 645.104935][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 645.144369][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 645.193646][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 645.240420][ T5953] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 645.256197][ T5953] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 645.303914][ T5953] usb 3-1: USB disconnect, device number 32 [ 645.331954][T11861] bond2: (slave macvlan2): failed to get link speed/duplex [ 645.452575][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 645.563054][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 645.611862][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 646.128417][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.164889][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.259081][T13273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1979'. [ 646.268439][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 646.277591][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1979'. [ 646.286780][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.294925][T13273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1979'. [ 646.333191][ T10] usb 6-1: config 0 descriptor?? [ 646.344542][T13273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1979'. [ 647.440808][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 647.440934][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 647.448432][ T10] usb 6-1: USB disconnect, device number 22 [ 648.711984][ T1149] net_ratelimit: 15 callbacks suppressed [ 648.712007][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 648.902891][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.027870][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.141752][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.473174][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.592728][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.705173][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 649.946517][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 650.246334][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 650.362553][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 651.911601][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 652.201929][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 652.219191][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 652.235588][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.271590][ T10] usb 5-1: Product: syz [ 652.306486][ T10] usb 5-1: Manufacturer: syz [ 652.316615][ T10] usb 5-1: SerialNumber: syz [ 652.356810][ T10] usb 5-1: config 0 descriptor?? [ 652.400061][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 652.541297][T13316] binder_alloc: 13315: binder_alloc_buf, no vma [ 652.982192][ T10] gspca_sonixj: reg_w1 err -110 [ 652.988561][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 653.329478][ T10] usb 5-1: USB disconnect, device number 43 [ 654.026102][T11155] net_ratelimit: 21 callbacks suppressed [ 654.026120][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 654.224026][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 654.382883][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 654.638307][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 655.063108][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 655.394764][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 655.531911][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 655.858635][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 656.036455][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 656.081794][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 656.177208][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 656.288026][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 656.380182][ T10] usb 3-1: config 0 has no interface number 0 [ 656.408219][ T10] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 656.418284][T13353] misc userio: No port type given on /dev/userio [ 656.479865][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=fc.88 [ 656.488662][T13355] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2000'. [ 656.518649][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 656.528212][ T10] usb 3-1: New USB device strings: Mfr=255, Product=1, SerialNumber=3 [ 656.584455][ T10] usb 3-1: Product: syz [ 656.598772][ T10] usb 3-1: Manufacturer: syz [ 656.621619][ T10] usb 3-1: SerialNumber: syz [ 656.632220][ T10] usb 3-1: config 0 descriptor?? [ 656.658715][T13353] syz_tun (unregistering): left allmulticast mode [ 657.242144][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 657.373162][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.577407][ T10] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 657.768175][ T10] usb 3-1: USB disconnect, device number 33 [ 657.771995][ T5945] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 658.074834][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 658.092678][ T5945] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 658.140404][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.303555][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.330544][ T5945] usb 5-1: Product: syz [ 658.347588][ T5945] usb 5-1: Manufacturer: syz [ 658.461994][ T5945] usb 5-1: SerialNumber: syz [ 658.502507][ T5945] usb 5-1: config 0 descriptor?? [ 658.718306][T13362] dummy0: entered promiscuous mode [ 659.332204][T13362] vlan3: entered promiscuous mode [ 659.533824][T11154] net_ratelimit: 14 callbacks suppressed [ 659.533871][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 659.575746][ T5945] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 659.613732][ T5945] airspy 5-1:0.0: Could not detect board [ 659.647627][ T5945] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 659.692761][ T5945] usb 5-1: USB disconnect, device number 44 [ 659.722873][T11861] bond2: (slave macvlan2): failed to get link speed/duplex [ 659.861864][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 660.011657][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 660.122655][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 660.734886][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 660.845378][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 660.965926][T11861] bond2: (slave macvlan2): failed to get link speed/duplex [ 661.093404][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 661.154559][ T5925] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 661.259505][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 661.344063][ T5925] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 661.368546][ T5925] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 661.466503][T13393] pic_ioport_write: 54 callbacks suppressed [ 661.466526][T13393] kvm: pic: level sensitive irq not supported [ 661.477062][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 661.523820][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 661.532381][T13393] picdev_read: 77 callbacks suppressed [ 661.532406][T13393] kvm: pic: non byte read [ 661.535020][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 661.605362][T13393] kvm: pic: non byte read [ 661.609761][T13393] kvm: pic: non byte read [ 661.703225][T13393] kvm: pic: non byte read [ 661.712814][T13393] kvm: pic: non byte read [ 661.718781][ T5925] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 661.728197][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.743986][ T5925] usb 5-1: Product: syz [ 661.751654][ T5925] usb 5-1: Manufacturer: syz [ 661.761749][T13393] kvm: pic: non byte read [ 661.793728][T13393] kvm: pic: non byte read [ 661.798163][T13393] kvm: pic: non byte read [ 661.816069][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 661.839511][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 661.857547][ T5925] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 661.870661][ T5925] cdc_wdm 5-1:1.0: Unknown control protocol [ 661.895612][T13393] kvm: pic: non byte read [ 661.916331][T13393] kvm: pic: non byte read [ 662.091820][ T5924] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 662.269087][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 662.297483][ T5924] usb 2-1: config 0 has no interface number 0 [ 662.315154][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 662.338210][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 662.520082][ T5924] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 662.529387][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.555071][ T5924] usb 2-1: config 0 descriptor?? [ 662.565218][T13400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 662.572725][ T5925] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 662.646640][ T5924] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 662.727679][ T5945] usb 5-1: USB disconnect, device number 45 [ 662.741619][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 662.749269][ T5925] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 662.762744][ T5925] usb 3-1: config 0 has no interface number 0 [ 662.783563][ T5925] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 662.804145][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.859210][ T5925] usb 3-1: Product: syz [ 662.875382][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.884342][ T5925] usb 3-1: Manufacturer: syz [ 662.894227][ T5925] usb 3-1: SerialNumber: syz [ 662.930942][ T5925] usb 3-1: config 0 descriptor?? [ 662.945433][ T5925] smsc95xx v2.0.0 [ 662.959482][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.040214][ T5924] usb 2-1: USB disconnect, device number 39 [ 663.350885][ T5925] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 663.387968][ T5925] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 664.195252][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 664.224774][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2022'. [ 664.592581][ T1149] net_ratelimit: 25 callbacks suppressed [ 664.592607][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 664.738622][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 664.755131][T13435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2025'. [ 664.872811][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 664.991831][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 665.194660][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 665.331866][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 665.454828][T11861] bond2: (slave macvlan2): failed to get link speed/duplex [ 665.504947][ T5925] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 665.570273][ T5925] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 665.597796][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 665.694000][ T5925] usb 3-1: USB disconnect, device number 34 [ 665.806565][T13445] loop6: detected capacity change from 0 to 524287999 [ 665.838617][T11861] bond2: (slave macvlan2): failed to get link speed/duplex [ 666.070303][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 666.599141][T13449] binder: 13448:13449 ioctl c0306201 200000000080 returned -14 [ 670.245766][T11149] net_ratelimit: 27 callbacks suppressed [ 670.245816][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 670.483668][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 670.491656][ T5945] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 670.592513][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 670.729488][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 670.735137][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 670.871911][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 670.912297][ T5945] usb 2-1: config 2 has an invalid interface number: 4 but max is 0 [ 670.930742][ T5945] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 670.989087][ T5945] usb 2-1: config 2 has no interface number 0 [ 671.002951][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 671.049638][ T5945] usb 2-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 671.169972][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 671.198652][ T5945] usb 2-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.305431][ T5945] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 671.317758][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.342381][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 671.352227][ T5945] usb 2-1: Product: syz [ 671.356760][ T5945] usb 2-1: Manufacturer: syz [ 671.388707][ T5945] usb 2-1: SerialNumber: syz [ 671.510283][ T5945] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.519804][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 672.605433][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 672.615415][ T5945] snd-usb-audio 2-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 672.737770][ T5945] usb 2-1: USB disconnect, device number 40 [ 672.840270][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.351637][ T5945] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 673.541858][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 673.572679][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 673.613027][ T5945] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.655203][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.674197][ T5945] usb 6-1: Product: syz [ 673.698925][ T5945] usb 6-1: Manufacturer: syz [ 673.728269][ T5945] usb 6-1: SerialNumber: syz [ 673.758868][ T5945] usb 6-1: config 0 descriptor?? [ 673.764738][T13527] batman_adv: batadv0: Adding interface: macsec1 [ 674.116343][T13527] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.181865][T13527] batman_adv: batadv0: Interface activated: macsec1 [ 674.322828][ T5945] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 674.340995][ T5945] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 674.853784][ T5945] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 675.331762][ T6128] net_ratelimit: 16 callbacks suppressed [ 675.331787][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 675.473265][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 675.629175][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 675.971886][ T5945] em28xx 6-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 676.019062][ T5945] em28xx 6-1:0.0: failed to read eeprom (err=-5) [ 676.051718][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 676.063573][ T5945] em28xx 6-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 676.247577][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 676.292542][ T5945] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 676.329387][ T5945] em28xx 6-1:0.0: dvb set to bulk mode. [ 676.386247][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 676.440106][ T92] em28xx 6-1:0.0: Binding DVB extension [ 676.502260][ T5945] usb 6-1: USB disconnect, device number 23 [ 676.515500][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 676.523257][ T5945] em28xx 6-1:0.0: Disconnecting em28xx [ 676.641819][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 676.642911][ T92] em28xx 6-1:0.0: Registering input extension [ 676.684392][ T5945] em28xx 6-1:0.0: Closing input extension [ 676.701695][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 676.779451][ T5945] em28xx 6-1:0.0: Freeing device [ 676.842137][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 676.845849][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.900617][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.931205][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.963457][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 677.006244][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 677.049071][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.313881][ T10] usb 3-1: config 0 descriptor?? [ 677.841371][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 677.910767][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 677.926870][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 677.943047][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 678.021746][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 678.126162][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 678.183696][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 678.236301][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 678.286515][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 678.388971][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 679.309392][ T10] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 679.662664][ T10] usb 3-1: USB disconnect, device number 35 [ 679.726292][T13572] fido_id[13572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 680.383886][T11147] net_ratelimit: 22 callbacks suppressed [ 680.383905][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 680.532420][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 680.732717][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 680.855211][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 680.863112][ T92] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 681.026117][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 681.072150][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 681.095481][ T92] usb 5-1: unable to get BOS descriptor or descriptor too short [ 681.133449][ T92] usb 5-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 681.172387][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 681.179881][ T92] usb 5-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 681.223477][ T92] usb 5-1: config 4 interface 0 has no altsetting 0 [ 681.248458][ T92] usb 5-1: string descriptor 0 read error: -22 [ 681.255445][ T92] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 681.271604][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.332567][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 681.387275][ T92] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 681.435513][ T92] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 681.452283][ T92] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 681.470545][ T92] usb 5-1: media controller created [ 681.511894][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 681.551834][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 681.664966][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 681.674252][ T92] zl10353_read_register: readreg error (reg=127, ret==0) [ 681.813280][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 682.055069][ T92] usb 5-1: USB disconnect, device number 46 [ 685.173788][T13606] use of bytesused == 0 is deprecated and will be removed in the future, [ 685.191819][T13606] use the actual size instead. [ 685.482760][T11149] net_ratelimit: 25 callbacks suppressed [ 685.482785][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 685.694075][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 685.832776][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 685.971657][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 686.102124][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 686.281814][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 686.422807][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 686.531665][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 686.643257][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 686.781657][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 687.001363][ T30] audit: type=1804 audit(1754212895.722:237): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2070" name="/newroot/324/file0" dev="tmpfs" ino=1701 res=1 errno=0 [ 687.211564][ T30] audit: type=1800 audit(1754212895.722:238): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2070" name="file0" dev="tmpfs" ino=1701 res=0 errno=0 [ 687.852921][ T5953] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 688.049624][ T5953] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.069214][ T5953] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 688.124369][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 688.164855][ T5945] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 688.181939][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 688.261518][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 688.423508][ T5953] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 688.451942][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 688.480378][ T5953] usb 2-1: Product: syz [ 688.485109][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 688.603617][ T5945] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 688.659001][ T5953] usb 2-1: Manufacturer: syz [ 688.669356][ T5945] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 688.700412][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 688.715936][ T5945] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 688.727170][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 688.748259][ T5953] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 688.763897][ T5945] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.787044][ T5953] cdc_wdm 2-1:1.0: Unknown control protocol [ 688.816132][ T5945] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 688.827073][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.921699][T12484] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 689.048619][T13664] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 689.082557][T12484] usb 3-1: Using ep0 maxpacket: 32 [ 689.095354][ T5945] usb 7-1: GET_CAPABILITIES returned 0 [ 689.125802][T12484] usb 3-1: config 0 has no interfaces? [ 689.136965][T12484] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 689.146887][T12484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.161112][ T5945] usbtmc 7-1:16.0: can't read capabilities [ 689.177515][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.184178][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.191114][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.197758][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.204561][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.211203][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.217513][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.224125][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.230688][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.237333][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.244085][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.250791][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.261894][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.268560][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.275291][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.281995][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.288393][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.295003][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.301269][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 689.307874][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 689.335267][T12484] usb 3-1: Product: syz [ 689.339660][T12484] usb 3-1: Manufacturer: syz [ 689.348403][T12484] usb 3-1: SerialNumber: syz [ 689.350367][ T10] usb 2-1: USB disconnect, device number 41 [ 689.353239][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 689.368506][T12484] usb 3-1: config 0 descriptor?? [ 689.629309][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.639770][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.861656][ T10] usb 7-1: USB disconnect, device number 16 [ 690.574817][T11147] net_ratelimit: 26 callbacks suppressed [ 690.574840][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 690.782009][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 690.907048][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.073226][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.126726][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.133569][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.202240][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.252064][ T5924] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 691.361766][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2083'. [ 691.373420][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.414369][T13686] binder_alloc: binder_alloc_mmap_handler: 13684 200000ffd000-200001000000 already mapped failed -16 [ 691.451847][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 691.469601][ T5924] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 691.482419][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.508515][ T5924] usb 6-1: config 0 has no interface number 0 [ 691.515686][T13687] binder_alloc: 13684: binder_alloc_buf, no vma [ 691.546981][ T5924] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 691.591556][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.601767][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.611379][ T5924] usb 6-1: Product: syz [ 691.650894][ T5924] usb 6-1: Manufacturer: syz [ 691.675326][ T5924] usb 6-1: SerialNumber: syz [ 691.724699][ T5924] usb 6-1: config 0 descriptor?? [ 691.744377][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 691.757829][ T5924] smsc95xx v2.0.0 [ 692.174439][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 692.221808][ T5925] usb 3-1: USB disconnect, device number 36 [ 692.261268][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.296978][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.305861][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.326379][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.336213][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.353336][ T5924] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 692.379563][ T5924] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 693.176241][T13698] chnl_net:caif_netlink_parms(): no params data found [ 694.145060][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.217447][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.367126][T13698] bridge_slave_0: entered allmulticast mode [ 694.401748][ T5871] Bluetooth: hci3: command tx timeout [ 694.430214][T13698] bridge_slave_0: entered promiscuous mode [ 694.580066][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.763044][ T5924] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 694.792332][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.841920][ T5924] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 694.923778][T13698] bridge_slave_1: entered allmulticast mode [ 695.038351][T13698] bridge_slave_1: entered promiscuous mode [ 695.052001][ T5924] usb 6-1: USB disconnect, device number 24 [ 695.317483][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2090'. [ 695.519456][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2090'. [ 695.736933][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.864780][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.419622][T13698] team0: Port device team_slave_0 added [ 696.448642][T13698] team0: Port device team_slave_1 added [ 696.499891][ T5871] Bluetooth: hci3: command tx timeout [ 697.261833][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.715489][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.803395][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.826193][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.837001][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.872866][T13748] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 697.879288][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.895956][T13747] pic_ioport_write: 21 callbacks suppressed [ 697.895977][T13747] kvm: pic: single mode not supported [ 697.902194][T13747] picdev_read: 2774 callbacks suppressed [ 697.902214][T13747] kvm: pic: non byte read [ 697.911840][T11147] net_ratelimit: 5 callbacks suppressed [ 697.911862][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 697.982281][T13747] kvm: pic: level sensitive irq not supported [ 697.982359][T13747] kvm: pic: non byte read [ 698.029779][T13698] hsr_slave_0: entered promiscuous mode [ 698.039558][T13698] hsr_slave_1: entered promiscuous mode [ 698.291920][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 698.571992][ T5871] Bluetooth: hci3: command tx timeout [ 698.951812][ T5945] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 698.958308][T13698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.974356][T13698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 699.012458][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 699.133441][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 699.146567][T13698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.191807][T13698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 699.195858][ T5945] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 699.228367][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.273733][ T5945] usb 2-1: config 0 descriptor?? [ 699.302326][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 699.342783][ T5945] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 699.517438][T13698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.902723][T13698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 700.021713][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 700.211820][ T5945] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 700.421230][T13698] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.454001][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 700.492172][T13698] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 700.517089][ T5945] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 700.533510][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 700.541554][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.565301][ T5924] usb 2-1: USB disconnect, device number 42 [ 700.567277][ T5945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 700.574529][T13781] tipc: Started in network mode [ 700.586991][T13781] tipc: Node identity f6889510e963, cluster identity 4711 [ 700.596857][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.637309][T13781] tipc: Enabled bearer , priority 0 [ 700.642092][ T5871] Bluetooth: hci3: command tx timeout [ 700.880976][ T5945] usb 3-1: Product: syz [ 700.891617][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 700.905009][T13777] tipc: Resetting bearer [ 700.919783][ T5945] usb 3-1: Manufacturer: syz [ 700.933395][ T5945] usb 3-1: SerialNumber: syz [ 700.945121][T13776] tipc: Disabling bearer [ 701.002926][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 701.233305][ T5945] usb 3-1: 0:2 : does not exist [ 701.261874][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 701.317297][ T5945] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 701.364665][T13698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 701.453207][ T5945] usb 3-1: USB disconnect, device number 37 [ 701.483243][T13698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 701.725084][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.756364][T13698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 701.797471][T13698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 701.942098][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.031663][T11145] net_ratelimit: 5 callbacks suppressed [ 703.031680][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.093246][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.158895][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.181794][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.198345][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.205554][T11145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.231576][ T5924] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 703.293279][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.330061][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.337310][T11154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.422182][ T5924] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.464263][ T5924] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 703.466987][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.515157][ T5924] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.549120][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.598438][T13821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 703.665262][ T5924] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 703.711690][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.844726][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 703.945858][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.023071][ T5924] usb 6-1: USB disconnect, device number 25 [ 704.073098][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 704.231690][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 704.295730][T13698] veth0_vlan: entered promiscuous mode [ 704.383888][T13698] veth1_vlan: entered promiscuous mode [ 704.471689][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 704.569195][T13698] veth0_macvtap: entered promiscuous mode [ 704.611872][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 704.680984][T13698] veth1_macvtap: entered promiscuous mode [ 704.808298][T13698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.834895][T13698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.874509][ T6128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.898139][ T6128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.999829][ T6128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.049875][ T6128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.883030][T13842] ptrace attach of "./syz-executor exec"[5876] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ip6_vti0  syztnl0 \x07  þ€ ª   @ €  ./file0  Ü þX  Ä   ÿÿÿÿ   "[13842] [ 706.018402][T11155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.222025][T11155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.394916][T11147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.506977][T11147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.066235][T11155] net_ratelimit: 15 callbacks suppressed [ 708.066260][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 708.271787][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 708.395483][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 708.564592][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 708.702177][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 708.935666][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 708.996017][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2117'. [ 709.182410][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2116'. [ 709.234382][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2117'. [ 709.234412][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 709.440343][T13864] team0: entered promiscuous mode [ 709.507403][T13864] bond0: entered promiscuous mode [ 709.591599][T13864] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 709.657313][T13864] bond0: left promiscuous mode [ 709.687278][T13864] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 709.819735][T13864] team0: left promiscuous mode [ 709.920953][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 710.166617][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 710.376305][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 711.193892][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 711.204568][T13870] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2118'. [ 711.263253][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 711.965486][T13893] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 712.025930][T13893] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 712.449326][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 712.550062][T13898] kvm: pic: non byte write [ 712.562338][T13898] kvm: pic: non byte write [ 712.587337][T13898] kvm: pic: single mode not supported [ 712.587355][T13898] kvm: pic: level sensitive irq not supported [ 712.642395][T13898] kvm: pic: single mode not supported [ 712.649341][T13898] kvm: pic: single mode not supported [ 712.692490][T13898] kvm: pic: non byte write [ 712.720240][T13898] kvm: pic: non byte write [ 712.767541][T13898] kvm: pic: single mode not supported [ 712.767767][T13898] kvm: pic: single mode not supported [ 712.773621][T13898] kvm: pic: level sensitive irq not supported [ 712.903924][T13909] vlan0: entered promiscuous mode [ 713.426739][ T6128] net_ratelimit: 19 callbacks suppressed [ 713.426762][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 713.631605][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 713.891931][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 714.068335][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 714.223436][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 714.536550][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 714.688348][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 714.995501][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 715.204999][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 715.331655][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 716.940534][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2138'. [ 718.443819][T11147] net_ratelimit: 16 callbacks suppressed [ 718.443841][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 718.581664][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 718.728185][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 718.871943][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 718.992337][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 719.161577][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 719.318627][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 719.442169][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 719.563459][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 719.673183][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 719.703455][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 719.717477][T13969] netlink: 'syz.2.2144': attribute type 11 has an invalid length. [ 719.799675][ T6114] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.809411][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 719.835796][ T6114] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.868474][T13969] netlink: 'syz.2.2144': attribute type 11 has an invalid length. [ 719.959122][ T6128] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.020399][ T6128] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.502375][T11155] net_ratelimit: 28 callbacks suppressed [ 723.502392][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 723.671721][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 723.832212][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 723.941624][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 724.497660][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 724.611612][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 724.739100][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 724.853390][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 725.075916][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 725.211642][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 725.822695][T14022] misc userio: No port type given on /dev/userio [ 725.902654][T14022] misc userio: No port type given on /dev/userio [ 725.909656][T14022] misc userio: Invalid payload size [ 728.609632][T11155] net_ratelimit: 17 callbacks suppressed [ 728.609655][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 728.790337][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 729.125747][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 729.270792][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 729.411938][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 729.568545][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 729.801602][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 729.991752][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 730.285766][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 730.573895][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 732.511576][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 733.074469][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.085182][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.099960][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 733.109407][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 733.126456][ T10] usb 6-1: SerialNumber: syz [ 733.352355][ T10] usb 6-1: 0:2 : does not exist [ 733.394980][ T10] usb 6-1: USB disconnect, device number 26 [ 733.541837][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.649148][ T6125] net_ratelimit: 18 callbacks suppressed [ 733.649167][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 733.903571][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 734.011766][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 734.105436][T14084] syz_tun: entered allmulticast mode [ 734.131118][T14084] lo: entered allmulticast mode [ 734.144765][T14082] syz_tun: left allmulticast mode [ 734.182038][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 734.333525][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 734.588525][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 734.882697][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 735.014759][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 735.186987][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 735.481642][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 736.109326][T12484] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 736.341577][T12484] usb 3-1: Using ep0 maxpacket: 16 [ 736.356784][T12484] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.440598][T12484] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.561314][T12484] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.595068][T12484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.621570][T12484] usb 3-1: Product: syz [ 736.636439][T12484] usb 3-1: Manufacturer: syz [ 736.774233][T12484] usb 3-1: SerialNumber: syz [ 737.076736][T12484] usb 3-1: 0:2 : does not exist [ 737.139320][T12484] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 737.185791][T12484] usb 3-1: USB disconnect, device number 38 [ 737.295368][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.253097][T14124] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 738.262247][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 738.703693][ T6125] net_ratelimit: 25 callbacks suppressed [ 738.703725][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.193518][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 739.287950][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.401549][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 739.442978][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.463265][ T5925] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.536818][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 739.561533][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.586475][ T5925] usb 3-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 739.607217][ T30] audit: type=1326 audit(1754212948.332:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 739.661716][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.674740][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.708744][ T5925] usb 3-1: config 0 descriptor?? [ 739.740930][ T30] audit: type=1326 audit(1754212948.362:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 739.821694][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.890643][ T30] audit: type=1326 audit(1754212948.362:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 739.953127][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 739.986991][ T30] audit: type=1326 audit(1754212948.372:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 740.062945][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 740.130966][ T30] audit: type=1326 audit(1754212948.372:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 740.163965][ T30] audit: type=1326 audit(1754212948.382:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 740.195295][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 740.285004][ T30] audit: type=1326 audit(1754212948.382:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 740.363471][ T30] audit: type=1326 audit(1754212948.382:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 740.460210][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 740.489580][ T30] audit: type=1326 audit(1754212948.382:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 740.512561][ T30] audit: type=1326 audit(1754212948.382:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093dd8eb69 code=0x7ffc0000 [ 742.255266][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 742.261536][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 742.301261][ T5925] usb 3-1: USB disconnect, device number 39 [ 743.731882][T11145] net_ratelimit: 21 callbacks suppressed [ 743.731905][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 743.916996][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 743.932952][T14185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.801090][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 744.931651][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 745.115438][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 745.287299][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 745.404826][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 745.645305][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 745.807058][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 745.941847][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 748.618037][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 748.667840][T14231] syz_tun: entered allmulticast mode [ 748.689936][T14230] syz_tun: left allmulticast mode [ 748.908198][T11155] net_ratelimit: 17 callbacks suppressed [ 748.908223][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 748.967309][T14234] kvm: pic: non byte write [ 748.998686][T14234] kvm: pic: non byte write [ 749.008004][T14234] kvm: pic: single mode not supported [ 749.008162][T14234] kvm: pic: non byte write [ 749.037490][T14234] kvm: pic: non byte write [ 749.046195][T14234] kvm: pic: single mode not supported [ 749.046312][T14234] kvm: pic: non byte write [ 749.069414][T14234] kvm: pic: non byte write [ 749.179413][T14234] kvm: pic: single mode not supported [ 749.179535][T14234] kvm: pic: non byte write [ 749.212309][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 749.289936][T14234] kvm: pic: non byte write [ 749.349476][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 749.363541][T14234] kvm: pic: single mode not supported [ 749.363567][T14234] kvm: pic: level sensitive irq not supported [ 749.514907][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 749.552069][T14234] kvm: pic: single mode not supported [ 749.552188][T14234] kvm: pic: non byte write [ 749.628463][T14234] kvm: pic: non byte write [ 749.665832][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 749.694358][T14234] kvm: pic: level sensitive irq not supported [ 749.702486][T14234] kvm: pic: single mode not supported [ 749.709270][T14234] kvm: pic: level sensitive irq not supported [ 749.895379][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 750.117748][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 750.269864][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 750.875389][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.883344][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.116679][ T5953] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 751.575065][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 751.591901][ T5953] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 751.621229][ T5953] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 751.642954][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 751.661583][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 751.919805][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 751.946198][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 751.963559][ T5953] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 751.977001][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.999453][ T5953] usb 2-1: config 0 descriptor?? [ 752.179366][T14252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.249420][ T5953] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 752.297126][T14252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.325080][ T5953] usb 2-1: USB disconnect, device number 43 [ 752.368535][ T5953] usblp0: removed [ 752.717344][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.724487][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.781866][T12484] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 752.875658][T14270] tipc: Enabled bearer , priority 0 [ 752.922976][T14271] syzkaller0: entered promiscuous mode [ 752.928959][T14271] syzkaller0: entered allmulticast mode [ 752.940781][T14274] tipc: Resetting bearer [ 752.950344][T11155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.961010][T11155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.973276][T12484] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 752.985866][T12484] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.997391][ T5953] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 753.014909][T12484] usb 7-1: config 0 has no interface number 0 [ 753.021384][T14266] tipc: Resetting bearer [ 753.040900][T14266] tipc: Disabling bearer [ 753.048013][T12484] usb 7-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 753.058399][T12484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.070841][T12484] usb 7-1: config 0 descriptor?? [ 753.078921][T11155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.210360][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 753.257744][ T5953] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 753.260498][T11155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.267378][ T5953] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 753.287484][T12484] usb 7-1: bad CDC descriptors [ 753.294959][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 753.312790][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 753.320233][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 753.332549][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 753.343499][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 753.357729][ T5953] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 753.391605][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.410436][ T5953] usb 2-1: config 0 descriptor?? [ 753.431905][T11145] bond2: (slave macvlan2): failed to get link speed/duplex [ 753.695513][ T5862] Bluetooth: hci3: command 0x0405 tx timeout [ 753.750218][ T5953] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 753.983454][T11154] net_ratelimit: 3 callbacks suppressed [ 753.983504][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 754.005423][ C0] usblp0: nonzero read bulk status received: -71 [ 754.007200][ T5953] usb 2-1: USB disconnect, device number 44 [ 754.014505][T14257] usblp0: error -71 reading from printer [ 754.100587][ T5953] usblp0: removed [ 754.151808][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 754.402711][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 754.532983][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 754.673923][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 754.993506][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 755.106056][T14300] tipc: Enabled bearer , priority 0 [ 755.117382][T14300] syzkaller0: entered promiscuous mode [ 755.133044][T14300] syzkaller0: entered allmulticast mode [ 755.162037][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 755.261845][T14301] tipc: Resetting bearer [ 755.313051][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 755.337647][T14297] tipc: Resetting bearer [ 755.482474][T14297] tipc: Disabling bearer [ 755.501654][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 755.624297][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 755.771615][ T5862] Bluetooth: hci3: command 0x0405 tx timeout [ 756.921568][ T5925] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 756.983854][T14340] loop6: detected capacity change from 0 to 524287999 [ 757.098503][ T92] usb 7-1: USB disconnect, device number 17 [ 757.150777][ T6005] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 757.161652][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 757.180961][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 757.225916][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 757.358239][ T5925] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 757.393062][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.428624][ T5925] usb 6-1: Product: syz [ 757.447647][ T5925] usb 6-1: Manufacturer: syz [ 757.464517][ T5925] usb 6-1: SerialNumber: syz [ 757.475690][T14343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 757.513228][ T5925] usb 6-1: config 0 descriptor?? [ 757.530537][ T5925] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 757.555380][ T5925] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 758.138465][ T5925] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 758.146409][ T5925] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 758.974414][ T5925] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 758.994062][ T5925] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 759.002987][ T5925] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 759.102629][T11155] net_ratelimit: 16 callbacks suppressed [ 759.102651][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 759.311901][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 759.842288][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 759.871536][ T5925] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 759.883417][ T5925] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 759.997603][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.077708][ T5925] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 760.106005][ T5925] usb 6-1: USB disconnect, device number 27 [ 760.112123][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.232122][ T92] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 760.239945][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.364477][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.448599][ T92] usb 7-1: Using ep0 maxpacket: 16 [ 760.461042][ T92] usb 7-1: unable to get BOS descriptor or descriptor too short [ 760.472535][ T92] usb 7-1: config 255 has an invalid interface number: 190 but max is 1 [ 760.481335][ T92] usb 7-1: config 255 has an invalid interface number: 137 but max is 1 [ 760.494067][ T92] usb 7-1: config 255 has no interface number 0 [ 760.501799][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.549008][ T92] usb 7-1: config 255 has no interface number 1 [ 760.562979][ T92] usb 7-1: config 255 interface 190 has no altsetting 0 [ 760.635946][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.695183][ T92] usb 7-1: config 255 interface 137 has no altsetting 0 [ 760.753489][ T92] usb 7-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 760.773718][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.814928][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 760.844102][ T92] usb 7-1: Product: syz [ 760.855907][ T92] usb 7-1: Manufacturer: syz [ 760.883840][ T92] usb 7-1: SerialNumber: syz [ 762.881801][ T5953] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 763.031654][ T24] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 763.061771][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 763.090572][ T5953] usb 3-1: config 0 has no interfaces? [ 763.110555][ T5953] usb 3-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 763.150652][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.191289][ T5953] usb 3-1: Product: syz [ 763.211829][ T5953] usb 3-1: Manufacturer: syz [ 763.217724][ T5953] usb 3-1: SerialNumber: syz [ 763.264691][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 763.284342][ T5953] usb 3-1: config 0 descriptor?? [ 763.369025][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 763.445584][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 763.495080][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 763.524040][ T24] usb 2-1: SerialNumber: syz [ 763.556740][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 763.589962][ T24] usb-storage 2-1:1.0: USB Mass Storage device detected [ 763.642601][ T24] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 763.783248][ T24] scsi host1: usb-storage 2-1:1.0 [ 763.807625][ T92] usb 7-1: USB disconnect, device number 18 [ 764.125067][T14412] netlink: 'syz.4.2244': attribute type 10 has an invalid length. [ 764.157564][T14412] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.218972][T14414] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 764.269485][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2242'. [ 764.459326][T14412] bond0: (slave team0): Enslaving as an active interface with an up link [ 764.570381][T14414] team0: Port device geneve0 added [ 764.610667][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.641983][T11155] net_ratelimit: 24 callbacks suppressed [ 764.642005][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 764.698543][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.740510][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.770603][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.813290][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 764.931704][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.074004][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.195969][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.404652][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.552635][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.667963][T14414] syz.1.2242 (14414) used greatest stack depth: 18904 bytes left [ 765.711870][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.821869][T12484] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 765.830593][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 765.946320][ T24] usb 2-1: USB disconnect, device number 45 [ 766.032946][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 766.073422][T12484] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.102407][T12484] usb 5-1: config 0 has no interfaces? [ 766.125075][T12484] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 766.182369][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.201312][T12484] usb 5-1: Product: syz [ 766.231495][T12484] usb 5-1: Manufacturer: syz [ 766.257101][T12484] usb 5-1: SerialNumber: syz [ 766.302334][T12484] usb 5-1: config 0 descriptor?? [ 766.322459][ T92] usb 3-1: USB disconnect, device number 40 [ 766.546851][T14433] kvm: kvm [14432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 766.618673][ T92] usb 5-1: USB disconnect, device number 47 [ 767.108478][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 769.643218][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 769.643237][ T30] audit: type=1800 audit(1754212978.372:268): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2259" name="bus" dev="ramfs" ino=60921 res=0 errno=0 [ 769.694355][T11147] net_ratelimit: 21 callbacks suppressed [ 769.694380][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 770.022318][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 770.062791][T14486] syzkaller0: entered promiscuous mode [ 770.103324][T14486] syzkaller0: entered allmulticast mode [ 770.204102][T14489] tipc: Enabled bearer , priority 0 [ 770.222384][T14488] tipc: Resetting bearer [ 770.239688][T14484] tipc: Resetting bearer [ 770.281860][T14484] tipc: Disabling bearer [ 770.352128][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 770.400872][ T92] hid_parser_main: 3 callbacks suppressed [ 770.400894][ T92] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 770.469638][ T92] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 770.522169][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 770.538800][T14497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.630691][T14499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.687417][T14499] netlink: 'syz.5.2269': attribute type 10 has an invalid length. [ 770.697601][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 770.861710][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 771.303476][T14503] tipc: Started in network mode [ 771.309159][T14503] tipc: Node identity 0a6e0a3fd5aa, cluster identity 4711 [ 771.317201][T14503] tipc: Enabled bearer , priority 0 [ 771.325451][T14510] syzkaller0: entered promiscuous mode [ 771.331259][T14510] syzkaller0: entered allmulticast mode [ 771.343747][ T5925] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 771.441667][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 771.468978][T14503] tipc: Resetting bearer [ 771.484347][T14502] tipc: Resetting bearer [ 771.571763][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 771.592016][T14502] tipc: Disabling bearer [ 771.693865][ T5925] usb 2-1: config 0 has no interfaces? [ 771.758208][ T5925] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 771.796035][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.877000][ T5925] usb 2-1: Product: syz [ 771.889839][ T5925] usb 2-1: Manufacturer: syz [ 771.894879][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 771.916885][ T5925] usb 2-1: SerialNumber: syz [ 771.980064][ T5925] usb 2-1: config 0 descriptor?? [ 772.051806][T11147] bond2: (slave macvlan2): failed to get link speed/duplex [ 772.260183][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 772.271675][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 772.605887][ T5925] usb 2-1: USB disconnect, device number 46 [ 774.816568][T11143] net_ratelimit: 12 callbacks suppressed [ 774.816594][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 775.111535][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 775.287421][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 775.445958][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 775.522981][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 775.641716][ T6114] bond2: (slave macvlan2): failed to get link speed/duplex [ 775.831590][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 775.953046][T11143] bond2: (slave macvlan2): failed to get link speed/duplex [ 776.106137][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 776.446925][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 776.896311][T11155] bond2: (slave macvlan2): failed to get link speed/duplex [ 779.206952][T14590] tipc: Enabled bearer , priority 0 [ 779.215538][T14590] syzkaller0: entered promiscuous mode [ 779.227987][T14590] syzkaller0: entered allmulticast mode [ 779.298902][T14590] tipc: Resetting bearer [ 779.308455][T14588] tipc: Resetting bearer [ 779.602101][T14588] tipc: Disabling bearer [ 779.901605][ T1149] net_ratelimit: 18 callbacks suppressed [ 779.905421][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 780.056449][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 780.276669][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 780.471709][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 780.661643][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 780.892181][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 781.037096][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 781.131128][T14600] tipc: Enabled bearer , priority 0 [ 781.152042][T14600] syzkaller0: entered promiscuous mode [ 781.193270][T14600] syzkaller0: entered allmulticast mode [ 781.347742][T14600] tipc: Resetting bearer [ 781.399779][T14599] tipc: Resetting bearer [ 781.463384][T14599] tipc: Disabling bearer [ 781.528935][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 781.629132][T14612] tipc: Enabled bearer , priority 0 [ 781.647981][T14616] syzkaller0: entered promiscuous mode [ 781.666320][T14616] syzkaller0: entered allmulticast mode [ 781.732763][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 781.749658][T14620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.774391][T14612] tipc: Resetting bearer [ 781.825191][T14610] tipc: Resetting bearer [ 781.869834][T14610] tipc: Disabling bearer [ 781.902074][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 783.801869][T14632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2296'. [ 783.863511][T14634] bond0: (slave bridge0): Releasing backup interface [ 783.872033][T14634] bridge_slave_0: left allmulticast mode [ 783.897286][T14634] bridge_slave_0: left promiscuous mode [ 783.936614][T14634] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.005815][T14634] bridge_slave_1: left allmulticast mode [ 784.025102][T14634] bridge_slave_1: left promiscuous mode [ 784.062053][T14634] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.219069][T14634] bond0: (slave bond_slave_0): Releasing backup interface [ 784.274660][T14634] bond0: (slave bond_slave_1): Releasing backup interface [ 784.358023][T14634] team0: Port device team_slave_0 removed [ 784.398523][T14634] team0: Port device team_slave_1 removed [ 784.552206][T14634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.822566][T14634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.903611][T14634] team0: Port device geneve0 removed [ 784.963457][T14634] bond0: (slave wlan1): Releasing backup interface [ 785.022335][ T1149] net_ratelimit: 15 callbacks suppressed [ 785.022353][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 785.120744][T11154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.212235][T11154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.264534][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 785.281279][T11154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.286050][T14645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.309053][T11154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.471793][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 785.611648][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 785.721668][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 785.907174][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 786.458721][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 786.877064][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 787.095121][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 787.361783][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 789.442580][T14675] bond0: (slave team0): Releasing backup interface [ 789.491903][T14678] netlink: 'syz.4.2306': attribute type 10 has an invalid length. [ 789.543738][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 789.597877][T14675] bridge_slave_0: left allmulticast mode [ 789.607158][T14675] bridge_slave_0: left promiscuous mode [ 789.721826][T14675] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.788348][T14675] bridge_slave_1: left allmulticast mode [ 789.794243][T14675] bridge_slave_1: left promiscuous mode [ 789.800430][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.860715][T14675] bond0: (slave bond_slave_0): Releasing backup interface [ 789.874399][T14675] bond0: (slave bond_slave_1): Releasing backup interface [ 789.894181][T14675] team0: Port device team_slave_0 removed [ 790.194300][T14675] team0: Port device team_slave_1 removed [ 790.207028][T14675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.245710][T14675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.372621][T14678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.381315][T14678] team0: Port device bond0 added [ 791.051844][ T5925] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 791.212356][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 791.282701][ T5925] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 791.361718][ T5925] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 791.408279][ T5925] usb 2-1: config 135 has no interface number 0 [ 791.431580][ T5925] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.553701][ T5925] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 791.571015][T14680] team0 (unregistering): Port device bond0 removed [ 791.621546][T11133] net_ratelimit: 8 callbacks suppressed [ 791.621569][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 791.639956][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.754238][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 791.784340][ T5925] usb 2-1: Product: syz [ 791.857915][ T5925] usb 2-1: Manufacturer: syz [ 791.895073][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 791.918105][ T5925] usb 2-1: SerialNumber: syz [ 791.975332][ T5925] uvcvideo 2-1:135.230: probe with driver uvcvideo failed with error -22 [ 792.031698][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.211954][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.332489][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.481972][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.596604][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 792.613450][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.767360][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.774746][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 792.800415][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 792.847284][ T24] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 792.911680][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 792.930094][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.941157][ T24] usb 7-1: Product: syz [ 792.950641][ T24] usb 7-1: Manufacturer: syz [ 792.956119][ T24] usb 7-1: SerialNumber: syz [ 793.104867][T14714] netlink: 'syz.2.2315': attribute type 13 has an invalid length. [ 793.119374][T14715] netlink: 'syz.4.2314': attribute type 2 has an invalid length. [ 793.391932][T12484] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 793.552177][T12484] usb 5-1: Using ep0 maxpacket: 8 [ 793.565064][T12484] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 793.576577][T12484] usb 5-1: config 1 interface 0 has no altsetting 0 [ 793.593477][T12484] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 793.603401][T12484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.616707][T12484] usb 5-1: Product: syz [ 793.655801][T12484] usb 5-1: Manufacturer: syz [ 793.684434][T12484] usb 5-1: SerialNumber: syz [ 795.290378][ T5925] usb 2-1: USB disconnect, device number 47 [ 795.734275][T14714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.814167][T14714] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.847431][T14714] tipc: Resetting bearer [ 795.879023][T14715] $Hÿ: renamed from bond0 [ 795.896147][T14715] $Hÿ: entered promiscuous mode [ 795.951886][T14724] batman_adv: batadv0: Adding interface: dummy0 [ 795.958480][T14724] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem. [ 796.113431][T14724] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 796.642312][ T6125] net_ratelimit: 5 callbacks suppressed [ 796.642344][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 796.778735][ T30] audit: type=1326 audit(1754213005.492:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.2321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f756fd8eb69 code=0x0 [ 796.812594][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 796.868199][ T24] usbhid 7-1:1.0: can't add hid device: -71 [ 796.886133][ T24] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 796.921741][ T6128] bond2: (slave macvlan2): failed to get link speed/duplex [ 797.009982][ T24] usb 7-1: USB disconnect, device number 19 [ 797.091658][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 797.404212][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 797.521749][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 797.529718][T14737] could not allocate digest TFM handle sha384-generic [ 797.701603][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 797.859412][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 798.148947][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 798.287288][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 798.601543][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 798.851659][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 798.886891][ T5925] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 798.896282][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.941604][ T5925] usb 3-1: Product: syz [ 798.962032][ T5925] usb 3-1: Manufacturer: syz [ 798.984320][ T5925] usb 3-1: SerialNumber: syz [ 799.013326][ T5925] r8152-cfgselector 3-1: Unknown version 0x0000 [ 799.019803][ T5925] r8152-cfgselector 3-1: config 0 descriptor?? [ 799.043141][T12484] usbhid 5-1:1.0: can't add hid device: -32 [ 799.049181][T12484] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 799.247291][ T10] usb 5-1: USB disconnect, device number 48 [ 799.455732][ T5925] r8152-cfgselector 3-1: Unknown version 0x0000 [ 799.466498][ T5925] r8152-cfgselector 3-1: bad CDC descriptors [ 799.481196][ T5925] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 800.445164][T14766] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 801.933047][ T6125] net_ratelimit: 22 callbacks suppressed [ 801.933065][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 802.101585][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 802.222452][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 802.382900][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 802.539234][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 802.904796][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 803.101610][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 803.395846][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 803.615135][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 803.745640][T14812] cgroup: fork rejected by pids controller in /syz2 [ 803.859337][T14810] macvlan2: entered allmulticast mode [ 804.083264][T14810] bond0: entered allmulticast mode [ 804.102060][T14810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 804.122248][T14810] bridge0: port 1(macvlan2) entered blocking state [ 804.190349][T14810] bridge0: port 1(macvlan2) entered disabled state [ 804.812649][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 805.507236][T15074] tipc: Enabled bearer , priority 0 [ 805.558965][T15074] syzkaller0: entered promiscuous mode [ 805.608568][T15074] syzkaller0: entered allmulticast mode [ 805.799643][T15074] tipc: Resetting bearer [ 805.819965][T15073] tipc: Resetting bearer [ 805.982942][T15073] tipc: Disabling bearer [ 806.941631][T11133] net_ratelimit: 13 callbacks suppressed [ 806.941656][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 807.121604][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 807.725654][T11154] bond2: (slave macvlan2): failed to get link speed/duplex [ 807.862016][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 808.012058][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 808.170165][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 808.346148][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 808.669478][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 808.788249][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 808.901919][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 808.971700][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 809.432936][ T5925] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 809.459228][ T10] usb 5-1: config 0 has no interfaces? [ 809.515517][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 809.683879][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.716908][ T10] usb 5-1: Product: syz [ 809.727841][ T10] usb 5-1: Manufacturer: syz [ 809.769843][ T10] usb 5-1: SerialNumber: syz [ 809.789431][ T10] usb 5-1: config 0 descriptor?? [ 810.048832][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 810.066464][ T5925] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 810.076857][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 810.088830][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 810.098056][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.117609][ T5925] usb 2-1: Product: syz [ 810.136736][ T5925] usb 2-1: Manufacturer: syz [ 810.144488][ T5925] usb 2-1: SerialNumber: syz [ 810.406732][ T5925] usb 2-1: 0:2 : does not exist [ 810.626383][ T5925] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 811.633090][ T5925] usb 2-1: USB disconnect, device number 48 [ 812.048627][ T1149] net_ratelimit: 16 callbacks suppressed [ 812.048648][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 812.191976][T12484] usb 5-1: USB disconnect, device number 49 [ 812.192759][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 812.351849][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 812.466677][T15128] input: syz0 as /devices/virtual/input/input39 [ 812.826908][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 812.977709][T15140] tipc: Enabled bearer , priority 0 [ 812.998479][T15140] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 813.018966][T15140] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 813.066212][T15145] capability: warning: `syz.1.2355' uses 32-bit capabilities (legacy support in use) [ 813.153887][T15140] tipc: Resetting bearer [ 813.193899][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 813.331867][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 813.354059][ T5924] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 813.477703][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 813.591803][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 813.602998][ T5924] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 813.671216][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 813.674483][ T5924] usb 2-1: config 0 has no interface number 0 [ 813.726133][ T5924] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 814.104889][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 814.105624][T15161] tipc: Node number set to 1442938336 [ 814.120860][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.127378][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.147753][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.231646][ T5867] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 814.537158][ T5924] usb 2-1: Product: syz [ 814.552272][T11133] bond2: (slave macvlan2): failed to get link speed/duplex [ 814.573216][ T5924] usb 2-1: Manufacturer: syz [ 814.577881][ T5924] usb 2-1: SerialNumber: syz [ 814.602142][ T5924] usb 2-1: config 0 descriptor?? [ 814.729340][ T5867] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 814.761209][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.781593][ T5867] usb 6-1: Product: syz [ 814.790265][ T5867] usb 6-1: Manufacturer: syz [ 814.804522][ T5867] usb 6-1: SerialNumber: syz [ 814.847559][ T5867] usb 6-1: config 0 descriptor?? [ 814.881525][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 814.890010][ T5925] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 814.896735][ T5925] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 815.027575][ T5924] mos7840 2-1:0.225: required endpoints missing [ 815.039324][ T5924] usb 2-1: USB disconnect, device number 49 [ 815.067545][T15159] netlink: 'syz.5.2358': attribute type 32 has an invalid length. [ 815.095488][ T5867] hso 6-1:0.0: Failed to find BULK IN ep [ 815.283572][ T5867] usb-storage 6-1:0.0: USB Mass Storage device detected [ 815.428064][ T5867] usb 6-1: USB disconnect, device number 28 [ 815.629798][T15186] tipc: Enabled bearer , priority 0 [ 815.779108][T15186] syzkaller0: entered promiscuous mode [ 815.793747][T15186] syzkaller0: entered allmulticast mode [ 815.830812][T15186] tipc: Resetting bearer [ 815.855765][T15183] tipc: Resetting bearer [ 815.882014][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 815.900522][T15183] tipc: Disabling bearer [ 815.934073][T15190] sit0: entered promiscuous mode [ 815.957581][T15190] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 816.001974][T15190] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2364'. [ 816.043074][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 816.084589][ T24] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 816.113549][ T24] usb 7-1: config 0 has no interface number 0 [ 816.147262][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 816.161667][ T5862] Bluetooth: hci3: command 0x0405 tx timeout [ 816.168481][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.231865][ T24] usb 7-1: Product: syz [ 816.242869][ T24] usb 7-1: Manufacturer: syz [ 816.247544][ T24] usb 7-1: SerialNumber: syz [ 816.256622][ T24] usb 7-1: config 0 descriptor?? [ 816.265306][ T24] smsc95xx v2.0.0 [ 816.451824][T12484] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 816.676007][T12484] usb 6-1: Using ep0 maxpacket: 8 [ 816.704687][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 816.726965][T12484] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 816.766242][T12484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.799875][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 816.834304][T12484] usb 6-1: Product: syz [ 816.850867][T12484] usb 6-1: Manufacturer: syz [ 816.866831][T12484] usb 6-1: SerialNumber: syz [ 816.887355][T12484] usb 6-1: config 0 descriptor?? [ 817.057588][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 817.063761][T11149] net_ratelimit: 17 callbacks suppressed [ 817.063782][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 817.141553][ T5925] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 817.147798][ T5925] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 817.181644][T12484] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 817.432329][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 817.542297][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 817.741769][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 817.889243][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 818.022527][ T1149] bond2: (slave macvlan2): failed to get link speed/duplex [ 818.177877][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 818.966487][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 819.092008][T12484] usb write operation failed. (-71) [ 819.101331][T12484] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 819.173040][T11149] bond2: (slave macvlan2): failed to get link speed/duplex [ 819.302998][T12484] dvbdev: DVB: registering new adapter (Terratec H7) [ 819.309868][T12484] usb 6-1: media controller created [ 819.315914][ T6125] bond2: (slave macvlan2): failed to get link speed/duplex [ 819.338509][T12484] usb read operation failed. (-71) [ 819.378662][T12484] usb write operation failed. (-71) [ 819.407901][T12484] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 819.506690][T12484] usb 6-1: USB disconnect, device number 29 [ 819.532231][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 819.549965][ T5925] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 819.631102][ T5925] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 819.762177][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 819.763439][ T5925] ------------[ cut here ]------------ [ 819.777545][ T24] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 819.779662][ T5925] WARNING: CPU: 0 PID: 5925 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 819.801771][ T5925] Modules linked in: [ 819.806713][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 819.818972][ T24] usb 7-1: USB disconnect, device number 20 [ 819.825740][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.836046][ T5925] Workqueue: events rfkill_op_handler [ 819.841591][ T5925] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 819.848834][ T5925] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0b 98 27 f7 4d 8b 36 4d 39 fe 74 22 e8 de 44 c4 f6 e9 ef f8 ff ff e8 d4 44 c4 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 c6 44 c4 f6 e9 39 07 00 00 48 83 7c 24 [ 819.868973][ T5925] RSP: 0018:ffffc900043ff0a0 EFLAGS: 00010293 [ 819.875378][ T5925] RAX: ffffffff8afb6262 RBX: 0000000000000000 RCX: ffff88802d729e00 [ 819.884097][ T5925] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880687b2980 [ 819.892438][ T5925] RBP: ffffc900043ff260 R08: ffff8880687b1737 R09: 1ffff1100d0f62e6 [ 819.900458][ T5925] R10: dffffc0000000000 R11: ffffed100d0f62e7 R12: dffffc0000000000 [ 819.908552][ T5925] R13: 0000000000000070 R14: ffff8880117828c0 R15: ffff8880117828c0 [ 819.916662][ T5925] FS: 0000000000000000(0000) GS:ffff888125c2a000(0000) knlGS:0000000000000000 [ 819.925709][ T5925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.932394][ T5925] CR2: 000000110c263afd CR3: 0000000079266000 CR4: 00000000003526f0 [ 819.940408][ T5925] Call Trace: [ 819.943816][ T5925] [ 819.946800][ T5925] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 819.953760][ T5925] ? __pfx___might_resched+0x10/0x10 [ 819.959103][ T5925] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 819.965227][ T5925] __ieee80211_link_release_channel+0x33b/0x4a0 [ 819.971547][ T5925] ieee80211_leave_mesh+0xc5/0x130 [ 819.976717][ T5925] cfg80211_leave_mesh+0x293/0x800 [ 819.981930][ T5925] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 819.988052][ T5925] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 819.994652][ T5925] ? __lock_acquire+0xab9/0xd20 [ 819.999574][ T5925] ? do_raw_spin_lock+0x121/0x290 [ 820.004923][ T5925] ? inetdev_event+0x464/0x15b0 [ 820.009920][ T5925] ? igmp_netdev_event+0x7c/0x770 [ 820.015072][ T5925] notifier_call_chain+0x1b3/0x3e0 [ 820.020238][ T5925] __dev_close_many+0x106/0x6f0 [ 820.025333][ T5925] ? __pfx___dev_close_many+0x10/0x10 [ 820.030754][ T5925] ? __mutex_trylock_common+0x153/0x260 [ 820.036450][ T5925] ? __pfx___mutex_trylock_common+0x10/0x10 [ 820.042875][ T5925] netif_close_many+0x225/0x410 [ 820.047801][ T5925] ? __pfx_netif_close_many+0x10/0x10 [ 820.053309][ T5925] netif_close+0x158/0x210 [ 820.057748][ T5925] ? __pfx_netif_close+0x10/0x10 [ 820.062793][ T5925] ? __pfx___mutex_lock+0x10/0x10 [ 820.067871][ T5925] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 820.073877][ T5925] dev_close+0x10a/0x220 [ 820.078167][ T5925] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 820.084998][ T5925] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 820.091194][ T5925] cfg80211_rfkill_set_block+0x2d/0x50 [ 820.096773][ T5925] rfkill_set_block+0x1cf/0x440 [ 820.101757][ T5925] rfkill_epo+0x7e/0x180 [ 820.106066][ T5925] rfkill_op_handler+0x84/0x240 [ 820.110961][ T5925] ? process_scheduled_works+0x9ef/0x17b0 [ 820.116882][ T5925] process_scheduled_works+0xade/0x17b0 [ 820.122587][ T5925] ? __pfx_process_scheduled_works+0x10/0x10 [ 820.128651][ T5925] worker_thread+0x8a0/0xda0 [ 820.133392][ T5925] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 820.139801][ T5925] ? __kthread_parkme+0x7b/0x200 [ 820.144908][ T5925] kthread+0x711/0x8a0 [ 820.149030][ T5925] ? __pfx_worker_thread+0x10/0x10 [ 820.154257][ T5925] ? __pfx_kthread+0x10/0x10 [ 820.158904][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.164414][ T5925] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.169644][ T5925] ? __pfx_kthread+0x10/0x10 [ 820.174389][ T5925] ret_from_fork+0x3f9/0x770 [ 820.179040][ T5925] ? __pfx_ret_from_fork+0x10/0x10 [ 820.184279][ T5925] ? __switch_to_asm+0x39/0x70 [ 820.189087][ T5925] ? __switch_to_asm+0x33/0x70 [ 820.194004][ T5925] ? __pfx_kthread+0x10/0x10 [ 820.198655][ T5925] ret_from_fork_asm+0x1a/0x30 [ 820.203584][ T5925] [ 820.206658][ T5925] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 820.213972][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 820.225761][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.235862][ T5925] Workqueue: events rfkill_op_handler [ 820.241296][ T5925] Call Trace: [ 820.244604][ T5925] [ 820.247564][ T5925] dump_stack_lvl+0x99/0x250 [ 820.252198][ T5925] ? __asan_memcpy+0x40/0x70 [ 820.256841][ T5925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.262081][ T5925] ? __pfx__printk+0x10/0x10 [ 820.266760][ T5925] vpanic+0x27a/0x730 [ 820.270804][ T5925] ? __pfx__printk+0x10/0x10 [ 820.275449][ T5925] ? __pfx_vpanic+0x10/0x10 [ 820.279993][ T5925] ? is_bpf_text_address+0x26/0x2b0 [ 820.285255][ T5925] panic+0xb9/0xc0 [ 820.289026][ T5925] ? __pfx_panic+0x10/0x10 [ 820.293521][ T5925] __warn+0x31b/0x4b0 [ 820.297531][ T5925] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 820.304158][ T5925] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 820.310766][ T5925] report_bug+0x2be/0x4f0 [ 820.315125][ T5925] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 820.321728][ T5925] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 820.328340][ T5925] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 820.334955][ T5925] handle_bug+0x84/0x160 [ 820.339229][ T5925] exc_invalid_op+0x1a/0x50 [ 820.343755][ T5925] asm_exc_invalid_op+0x1a/0x20 [ 820.348626][ T5925] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 820.355854][ T5925] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0b 98 27 f7 4d 8b 36 4d 39 fe 74 22 e8 de 44 c4 f6 e9 ef f8 ff ff e8 d4 44 c4 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 c6 44 c4 f6 e9 39 07 00 00 48 83 7c 24 [ 820.375490][ T5925] RSP: 0018:ffffc900043ff0a0 EFLAGS: 00010293 [ 820.381583][ T5925] RAX: ffffffff8afb6262 RBX: 0000000000000000 RCX: ffff88802d729e00 [ 820.389564][ T5925] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880687b2980 [ 820.397636][ T5925] RBP: ffffc900043ff260 R08: ffff8880687b1737 R09: 1ffff1100d0f62e6 [ 820.405640][ T5925] R10: dffffc0000000000 R11: ffffed100d0f62e7 R12: dffffc0000000000 [ 820.413633][ T5925] R13: 0000000000000070 R14: ffff8880117828c0 R15: ffff8880117828c0 [ 820.421723][ T5925] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 820.428439][ T5925] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 820.435319][ T5925] ? __pfx___might_resched+0x10/0x10 [ 820.440635][ T5925] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 820.446642][ T5925] __ieee80211_link_release_channel+0x33b/0x4a0 [ 820.452920][ T5925] ieee80211_leave_mesh+0xc5/0x130 [ 820.458076][ T5925] cfg80211_leave_mesh+0x293/0x800 [ 820.463206][ T5925] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 820.469299][ T5925] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 820.475832][ T5925] ? __lock_acquire+0xab9/0xd20 [ 820.480737][ T5925] ? do_raw_spin_lock+0x121/0x290 [ 820.485837][ T5925] ? inetdev_event+0x464/0x15b0 [ 820.490723][ T5925] ? igmp_netdev_event+0x7c/0x770 [ 820.495780][ T5925] notifier_call_chain+0x1b3/0x3e0 [ 820.500943][ T5925] __dev_close_many+0x106/0x6f0 [ 820.505849][ T5925] ? __pfx___dev_close_many+0x10/0x10 [ 820.511232][ T5925] ? __mutex_trylock_common+0x153/0x260 [ 820.516805][ T5925] ? __pfx___mutex_trylock_common+0x10/0x10 [ 820.522730][ T5925] netif_close_many+0x225/0x410 [ 820.527613][ T5925] ? __pfx_netif_close_many+0x10/0x10 [ 820.533010][ T5925] netif_close+0x158/0x210 [ 820.537445][ T5925] ? __pfx_netif_close+0x10/0x10 [ 820.542418][ T5925] ? __pfx___mutex_lock+0x10/0x10 [ 820.547454][ T5925] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 820.553372][ T5925] dev_close+0x10a/0x220 [ 820.557647][ T5925] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 820.563878][ T5925] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 820.570074][ T5925] cfg80211_rfkill_set_block+0x2d/0x50 [ 820.575556][ T5925] rfkill_set_block+0x1cf/0x440 [ 820.580442][ T5925] rfkill_epo+0x7e/0x180 [ 820.584715][ T5925] rfkill_op_handler+0x84/0x240 [ 820.589588][ T5925] ? process_scheduled_works+0x9ef/0x17b0 [ 820.595330][ T5925] process_scheduled_works+0xade/0x17b0 [ 820.600952][ T5925] ? __pfx_process_scheduled_works+0x10/0x10 [ 820.606977][ T5925] worker_thread+0x8a0/0xda0 [ 820.611593][ T5925] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 820.617958][ T5925] ? __kthread_parkme+0x7b/0x200 [ 820.622915][ T5925] kthread+0x711/0x8a0 [ 820.627011][ T5925] ? __pfx_worker_thread+0x10/0x10 [ 820.632133][ T5925] ? __pfx_kthread+0x10/0x10 [ 820.636740][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.641954][ T5925] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.647181][ T5925] ? __pfx_kthread+0x10/0x10 [ 820.651791][ T5925] ret_from_fork+0x3f9/0x770 [ 820.656394][ T5925] ? __pfx_ret_from_fork+0x10/0x10 [ 820.661540][ T5925] ? __switch_to_asm+0x39/0x70 [ 820.666414][ T5925] ? __switch_to_asm+0x33/0x70 [ 820.671213][ T5925] ? __pfx_kthread+0x10/0x10 [ 820.675910][ T5925] ret_from_fork_asm+0x1a/0x30 [ 820.680712][ T5925] [ 820.683898][ T5925] Kernel Offset: disabled [ 820.688252][ T5925] Rebooting in 86400 seconds..