last executing test programs: 17.043616745s ago: executing program 3 (id=3923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) preadv(r5, 0x0, 0x0, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 15.292460462s ago: executing program 0 (id=3927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="a6823ac6aeb3", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004ef60ad12b1ef9b432a2903d90400000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 15.190566931s ago: executing program 3 (id=3928): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040082}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r6, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 11.8771374s ago: executing program 4 (id=3933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x0, [0x4, 0x9]}, {0x80000000, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd5, 0x0, 0x0, 0x5, 0xde, 0x67}}]}}]}}, 0x0) 11.875018329s ago: executing program 2 (id=3934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0xbba0e750fb86e36c) landlock_restrict_self(0xffffffffffffffff, 0x1) ptrace(0x10, r2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x40000c0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x801}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r5, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, &(0x7f0000001500), 0x200) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001200210300000000"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) 11.803408842s ago: executing program 3 (id=3935): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0xc, 0x9, 0x2, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000115000/0x400000)=nil, 0x400000, 0x8, 0x2, 0x1c0000) fspick(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) shutdown(r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x600, 0x0, 0x24}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000080) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x400c4152, &(0x7f0000000540)={0x0, 0x0, 0x6}) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) 11.73283951s ago: executing program 0 (id=3936): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="038000000000000024"], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 10.019345812s ago: executing program 2 (id=3937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x54, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 9.732442532s ago: executing program 1 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03008000"], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 9.710578408s ago: executing program 0 (id=3939): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x25) 8.65177749s ago: executing program 4 (id=3940): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x7c4}}, 0x1006) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) preadv(r5, 0x0, 0x0, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 8.650818539s ago: executing program 3 (id=3951): waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000400)=ANY=[@ANYRES8=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 8.122123619s ago: executing program 0 (id=3941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x7157ad36}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0xffffffffffffff4f, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb8}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) r4 = syz_open_dev$sndpcmc(0x0, 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 7.947600789s ago: executing program 2 (id=3942): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xd}) 7.401822069s ago: executing program 4 (id=3944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xda73}) r5 = inotify_init1(0x800) r6 = inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000775) inotify_rm_watch(r5, r6) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r7, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 7.143265994s ago: executing program 1 (id=3945): r0 = syz_open_dev$vim2m(0x0, 0x80000000, 0x2) socket$isdn(0x22, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) read(r2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x7) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000c0b01, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xe0ff, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) 6.433524458s ago: executing program 3 (id=3946): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x30, 0xffffffffffffffff, 0x8000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) writev(r4, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, 0x0) syz_io_uring_setup(0x4a71, &(0x7f00000000c0)={0x0, 0xa045, 0x20, 0x2, 0x298}, &(0x7f0000000000), &(0x7f0000000140)) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 5.807200148s ago: executing program 2 (id=3947): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x25) 5.174781s ago: executing program 1 (id=3948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x1f1, 0x0) socket$inet(0x2, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x337) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.17238486s ago: executing program 0 (id=3949): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001280)}], 0x2}, 0x800) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x40) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) 4.919962316s ago: executing program 4 (id=3950): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0xfffc, 0x27b6a97, @private2, 0x9}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3}) 3.275326172s ago: executing program 0 (id=3952): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x0, 0x2001) r3 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x6a000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x200}}, './file0\x00'}) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)}, 0xfffffffc}], 0x2, 0x10, 0x0) r9 = gettid() ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000001c0)=r9) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a4a50427b02b", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.211854464s ago: executing program 1 (id=3953): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff7", 0xb4, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) close_range(r0, 0xffffffffffffffff, 0x0) 3.178952343s ago: executing program 2 (id=3954): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r3 = fsopen(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44050) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 3.100799847s ago: executing program 3 (id=3955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0xa, &(0x7f00000001c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd06"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r9 = dup(r0) ioctl$HIDIOCGFIELDINFO(r9, 0xc038480a, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xc30, 0x2, 0x2, 0x2, 0x9, 0x5, 0xa8, 0x0, 0x5, 0x6, 0x7}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.796589047s ago: executing program 4 (id=3956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03008000"], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1.462946234s ago: executing program 1 (id=3957): waitid(0x2, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000400)=ANY=[@ANYRES8=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 1.097297329s ago: executing program 2 (id=3958): r0 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x1, 0x16) syz_open_dev$vbi(0x0, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = dup(r5) lseek(r6, 0x5, 0x7) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="400101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002940), 0x2, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000002c40)=0x7) read$FUSE(r8, &(0x7f0000003e00)={0x2020}, 0x2020) dup(0xffffffffffffffff) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x10000c) 693.922µs ago: executing program 1 (id=3959): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, 0x0, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r4, 0x99, 0x0, &(0x7f0000000200), &(0x7f0000000180)={r5, r6+60000000}) clock_getres(0xeaffffff, 0x0) r7 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r11, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 0s ago: executing program 4 (id=3960): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x6e28c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xda55, 0x700) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) sendfile(r2, r2, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) kernel console output (not intermixed with test programs): ][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1274.667900][ T39] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1274.846090][ T39] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1274.855678][ T39] usb 1-1: config 0 has no interface number 0 [ 1274.879085][ T39] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1274.888700][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.896756][ T39] usb 1-1: Product: syz [ 1274.901609][ T39] usb 1-1: Manufacturer: syz [ 1274.915724][ T39] usb 1-1: SerialNumber: syz [ 1274.932097][ T39] usb 1-1: config 0 descriptor?? [ 1275.147927][T14346] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1275.576611][T14346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.606531][T14346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1275.656314][T14346] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1275.682042][T14346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1275.734764][T14346] usb 5-1: SerialNumber: syz [ 1277.078766][T20814] ip6gre1: entered allmulticast mode [ 1278.047543][ T39] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1278.062535][ T39] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1278.070915][ T39] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1278.080701][ T39] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1278.102652][ T39] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1278.121715][ T39] usb 1-1: USB disconnect, device number 54 [ 1278.131833][ T39] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1278.146305][ T39] keyspan 1-1:0.133: device disconnected [ 1278.229017][T20825] netlink: 'syz.0.3504': attribute type 3 has an invalid length. [ 1278.277824][T20825] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1278.290802][T20825] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1278.308712][T20825] netlink: 988 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1278.394452][T14346] usb 5-1: 0:2 : does not exist [ 1278.436933][T14346] usb 5-1: USB disconnect, device number 98 [ 1278.457870][ T6288] net_ratelimit: 80 callbacks suppressed [ 1278.457890][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1278.524517][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1278.648432][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1278.660924][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1278.798254][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1278.806204][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1278.916072][T20838] fuse: Bad value for 'fd' [ 1278.940875][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1278.961272][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1279.078585][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1279.091073][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1280.472891][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1280.957092][T20863] netlink: 'syz.2.3506': attribute type 10 has an invalid length. [ 1281.048794][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3508'. [ 1281.113013][T20865] netlink: 'syz.1.3508': attribute type 12 has an invalid length. [ 1281.141550][T20866] netlink: 'syz.2.3506': attribute type 10 has an invalid length. [ 1281.168645][T20865] netlink: 'syz.1.3508': attribute type 13 has an invalid length. [ 1281.183155][T20863] bond0: (slave netdevsim0): Releasing backup interface [ 1281.256951][T20863] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1281.280214][T20863] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1281.379077][T20863] team0: Port device netdevsim0 added [ 1281.443299][T20866] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1281.512929][T20872] vivid-002: disconnect [ 1281.603673][T20866] team0: Port device netdevsim0 removed [ 1281.761555][T20866] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1281.824690][T20866] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1282.234249][T20865] vxlan0: entered promiscuous mode [ 1282.580652][T20868] vivid-002: reconnect [ 1282.580904][ T44] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.606690][ T44] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.618114][ T44] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.672416][ T44] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.500864][ T6301] net_ratelimit: 114 callbacks suppressed [ 1283.500879][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1283.537494][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1283.667992][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1283.668026][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1283.778314][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1283.778348][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1283.888280][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1283.888312][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1284.006737][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1284.006760][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1284.699541][T20899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1285.197855][ T5907] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1285.314109][T20911] tipc: Enabling of bearer rejected, failed to enable media [ 1285.405442][ T5907] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.439304][ T5907] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1285.486831][ T5907] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1285.511696][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.566283][ T5907] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1285.629787][ T5907] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1286.281455][T20907] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1286.562979][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3519'. [ 1287.429514][T20935] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1287.631396][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1288.274146][T20944] input: syz1 as /devices/virtual/input/input58 [ 1288.517891][ T8184] net_ratelimit: 118 callbacks suppressed [ 1288.517949][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.572201][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.633172][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.657876][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.677860][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.698065][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.717861][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.737829][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.760032][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.788103][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1288.858754][T20948] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1288.982661][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3528'. [ 1289.038561][T20953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.048188][T20953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.190392][T14346] usb 1-1: USB disconnect, device number 55 [ 1289.290513][T20906] delete_channel: no stack [ 1289.868592][T13311] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1289.877553][T13311] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1289.890742][T20963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1290.188739][T14346] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1290.258105][ T5907] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1290.348134][T14346] usb 5-1: Using ep0 maxpacket: 32 [ 1290.355670][T14346] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 1290.364127][T14346] usb 5-1: config 0 has no interface number 0 [ 1290.370352][T14346] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1290.383407][T14346] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 1290.399013][T14346] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1290.415967][T14346] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 1290.432891][T14346] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1290.433215][ T5907] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.457929][T14346] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.459609][ T5907] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1290.496529][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1290.509388][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.533765][T14346] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 1290.535815][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1290.560866][T14346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.574755][T14346] usb 5-1: Product: syz [ 1290.582958][T14346] usb 5-1: Manufacturer: syz [ 1290.591273][T14346] usb 5-1: SerialNumber: syz [ 1290.600978][T14346] usb 5-1: config 0 descriptor?? [ 1290.609505][T20963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1290.617317][T20963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1290.648676][T14346] ipaq 5-1:0.19: PocketPC PDA converter detected [ 1290.655765][T14346] usb 5-1: active config #0 != 1 ?? [ 1290.697153][ T5907] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1290.886459][T14346] usb 5-1: USB disconnect, device number 99 [ 1291.263903][T20970] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1292.844811][T20994] netlink: 'syz.4.3535': attribute type 21 has an invalid length. [ 1292.856033][T20994] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1293.115645][T20994] netlink: 'syz.4.3535': attribute type 4 has an invalid length. [ 1293.126650][T20994] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1293.588121][ T8184] net_ratelimit: 107 callbacks suppressed [ 1293.588138][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1293.603244][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1293.717958][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1293.727839][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1293.837936][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1293.848752][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1293.967914][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1293.978482][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1294.099443][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1294.111703][T21002] macsec0: entered promiscuous mode [ 1294.124961][T21002] macvlan0: entered promiscuous mode [ 1294.151134][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1294.181751][T21002] macvlan0: left promiscuous mode [ 1295.373953][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1295.373974][ T30] audit: type=1326 audit(1770347069.781:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21010 comm="syz.1.3538" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x0 [ 1297.344390][T21037] netlink: 'syz.4.3543': attribute type 10 has an invalid length. [ 1297.380707][T20970] delete_channel: no stack [ 1297.388344][ T39] usb 3-1: USB disconnect, device number 72 [ 1297.398992][T21039] netlink: 'syz.4.3543': attribute type 10 has an invalid length. [ 1297.429690][T21039] team0: Port device netdevsim0 removed [ 1297.450987][T21039] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1298.516650][T21054] netlink: 'syz.2.3546': attribute type 13 has an invalid length. [ 1298.615167][T21054] tipc: Resetting bearer [ 1298.638061][T14346] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1298.646171][ T6288] net_ratelimit: 129 callbacks suppressed [ 1298.646189][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1298.678045][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1298.704908][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1298.715708][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1298.828167][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1298.837613][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1298.870611][T14346] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1298.879046][T14346] usb 1-1: config 0 has no interface number 0 [ 1298.885157][T14346] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1298.908301][T14346] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1298.921128][T14346] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1298.945466][T14346] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1298.949498][T21058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.958241][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1298.958271][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1298.982342][T21058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.001709][T14346] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1299.067301][T14346] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1299.094755][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1299.107927][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1299.125337][T14346] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1299.162472][T14346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.204448][T14346] usb 1-1: config 0 descriptor?? [ 1299.223113][T21051] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1299.251935][T21051] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1299.287398][T14346] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1300.105244][T21071] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1300.105244][T21071] program syz.2.3549 not setting count and/or reply_len properly [ 1300.126694][T21071] kernel profiling enabled (shift: 6) [ 1300.216188][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.223134][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.678760][T21080] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1301.344454][T19763] usb 1-1: USB disconnect, device number 56 [ 1301.355737][T19763] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 1301.536487][T21084] misc userio: Invalid payload size [ 1302.750794][T21103] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1303.748672][ T6288] net_ratelimit: 108 callbacks suppressed [ 1303.748695][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1303.802421][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1303.917978][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1303.925803][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1304.047965][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1304.057410][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1304.188036][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1304.196039][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1304.328212][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1304.350037][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1304.748009][T14346] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1304.898727][T14346] usb 1-1: Using ep0 maxpacket: 8 [ 1304.926730][T14346] usb 1-1: config 162 has an invalid interface number: 253 but max is 0 [ 1304.939159][T14346] usb 1-1: config 162 has no interface number 0 [ 1304.957228][T14346] usb 1-1: config 162 interface 253 has no altsetting 0 [ 1305.010151][T21128] input: syz1 as /devices/virtual/input/input59 [ 1305.016647][T14346] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1305.026725][T14346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.038123][T14346] usb 1-1: Product: syz [ 1305.079092][T14346] usb 1-1: Manufacturer: syz [ 1305.090504][T14346] usb 1-1: SerialNumber: syz [ 1305.388970][T14346] go7007 1-1:162.253: probe with driver go7007 failed with error -12 [ 1305.408735][T14346] usb 1-1: USB disconnect, device number 57 [ 1306.308275][T19763] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1306.492098][T19763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.504901][T19763] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1306.515083][T19763] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.525272][T19763] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1306.588903][T19763] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.598597][T19763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.606604][T19763] usb 1-1: Product: syz [ 1306.611203][T19763] usb 1-1: Manufacturer: syz [ 1306.615838][T19763] usb 1-1: SerialNumber: syz [ 1306.775604][T21147] netlink: 'syz.2.3567': attribute type 3 has an invalid length. [ 1306.854389][T21147] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3567'. [ 1306.874430][T21147] netlink: 988 bytes leftover after parsing attributes in process `syz.2.3567'. [ 1307.051878][ T39] usb 1-1: USB disconnect, device number 58 [ 1307.211641][T21151] input: syz1 as /devices/virtual/input/input60 [ 1308.218593][ T30] audit: type=1400 audit(1770347082.631:1409): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=21161 comm="syz.0.3572" [ 1308.241791][T21169] usb usb8: usbfs: process 21169 (syz.0.3572) did not claim interface 0 before use [ 1308.858317][ T6293] net_ratelimit: 78 callbacks suppressed [ 1308.858333][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1308.890579][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1309.007828][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1309.015659][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1309.121118][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1309.158178][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1309.168782][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1309.304839][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1309.320832][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1309.437871][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1309.446567][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1309.546095][T21182] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1309.579774][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1313.907969][ T6301] net_ratelimit: 86 callbacks suppressed [ 1313.907985][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1313.934775][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1314.059026][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1314.066785][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1314.197878][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1314.211262][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1314.329391][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1314.357983][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1314.506983][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1314.523124][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1314.667417][T21237] misc userio: Invalid payload size [ 1315.677900][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.713404][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.023005][T21262] fuse: Bad value for 'fd' [ 1319.017821][ T6301] net_ratelimit: 89 callbacks suppressed [ 1319.017842][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1319.049842][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1319.169125][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1319.181225][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1319.318137][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1319.329388][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1319.448037][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1319.456321][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1319.567912][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1319.576311][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1319.692979][T21297] F2FS-fs: Conflicting test_dummy_encryption options [ 1321.942776][T21317] usb usb8: usbfs: process 21317 (syz.0.3601) did not claim interface 0 before use [ 1321.964621][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1322.003979][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1322.089358][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1322.268716][ T39] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1322.422428][ T39] usb 1-1: config 255 has an invalid interface number: 175 but max is 0 [ 1322.432096][ T39] usb 1-1: config 255 has no interface number 0 [ 1322.464347][ T39] usb 1-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 1322.491151][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.526539][ T39] usb 1-1: Product: syz [ 1322.536516][ T39] usb 1-1: Manufacturer: syz [ 1322.545213][ T39] usb 1-1: SerialNumber: syz [ 1322.575616][ T39] asix 1-1:255.175: probe with driver asix failed with error -22 [ 1322.876423][T13311] usb 1-1: USB disconnect, device number 59 [ 1323.760938][T21354] usb usb8: usbfs: process 21354 (syz.0.3606) did not claim interface 0 before use [ 1324.069435][ T6301] net_ratelimit: 78 callbacks suppressed [ 1324.069456][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1324.154107][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1324.318270][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1324.326239][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1324.467899][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1324.476669][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1324.598387][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1324.616656][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1324.758621][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1324.770553][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1326.516680][T21390] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1326.523311][T21390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.558701][T21390] vhci_hcd vhci_hcd.0: Device attached [ 1326.597989][T21395] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 1326.604618][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.635014][T21395] vhci_hcd vhci_hcd.0: Device attached [ 1326.653468][T21390] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 1326.660091][T21390] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1326.676862][T21390] vhci_hcd vhci_hcd.0: Device attached [ 1326.685976][T21395] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 1326.692624][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.748052][T21395] vhci_hcd vhci_hcd.0: Device attached [ 1326.774062][T21390] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 1326.780711][T21390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.797972][T21395] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 1326.804592][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1326.817794][T13311] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1326.833954][T21390] vhci_hcd vhci_hcd.0: Device attached [ 1326.833997][T21395] vhci_hcd vhci_hcd.0: Device attached [ 1326.850471][T21407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.894382][T21390] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.931756][T21390] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(26) [ 1326.938390][T21390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.951617][T21390] vhci_hcd vhci_hcd.0: Device attached [ 1326.961127][T21390] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1327.000792][T21408] vhci_hcd: connection closed [ 1327.002844][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.003627][T21398] vhci_hcd: connection closed [ 1327.007587][T21400] vhci_hcd: connection closed [ 1327.008262][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.013422][T21405] vhci_hcd: connection closed [ 1327.018050][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1327.022301][T21403] vhci_hcd: connection closed [ 1327.028836][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.033413][T21392] vhci_hcd: connection reset by peer [ 1327.047758][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.048330][T21396] vhci_hcd: connection closed [ 1327.060101][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1327.071109][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.076546][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.091467][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1327.098558][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.107801][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.128815][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1327.138324][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.143690][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.150601][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1327.178790][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.193575][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.217796][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1327.225628][ T6301] vhci_hcd vhci_hcd.4: stop threads [ 1327.231092][ T6301] vhci_hcd vhci_hcd.4: release socket [ 1327.236851][ T6301] vhci_hcd vhci_hcd.4: disconnect device [ 1328.444584][T21427] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1328.451161][T21427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1328.459944][T21427] vhci_hcd vhci_hcd.0: Device attached [ 1328.484433][T21427] netdevsim netdevsim4: Direct firmware load for nel/address_bits failed with error -2 [ 1328.504558][T21427] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/address_bits [ 1329.088425][ T6293] net_ratelimit: 90 callbacks suppressed [ 1329.088446][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.161911][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.210134][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.237833][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.258574][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.280418][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.307945][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.327842][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.348715][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.368636][T21426] support for the xor transformation has been removed. [ 1329.386378][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1329.388424][T14346] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1329.598046][T14346] usb 2-1: Using ep0 maxpacket: 16 [ 1329.690351][T14346] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1329.713706][T14346] usb 2-1: config 0 has no interface number 0 [ 1329.744123][T14346] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.784596][T14346] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.814169][T14346] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1329.832805][T14346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.861458][T14346] usb 2-1: config 0 descriptor?? [ 1330.069512][T21445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.109067][T21445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.684732][T14346] usbhid 2-1:0.1: can't add hid device: -71 [ 1330.692288][T14346] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1330.755409][T14346] usb 2-1: USB disconnect, device number 90 [ 1331.852679][T21463] futex_wake_op: syz.0.3627 tries to shift op by -1; fix this program [ 1333.281157][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 1333.618118][T14346] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1333.738137][T19139] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1333.780478][T14346] usb 1-1: Using ep0 maxpacket: 8 [ 1333.809595][T14346] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1333.847349][T14346] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1333.858462][T14346] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1333.869165][T14346] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1333.879468][T14346] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.911183][T14346] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1333.920947][T19139] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1333.928978][T19139] usb 5-1: can't read configurations, error -61 [ 1333.945593][T14346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.058831][T19139] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1334.168299][ T6288] net_ratelimit: 85 callbacks suppressed [ 1334.168323][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1334.188139][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1334.207402][T14346] usb 1-1: GET_CAPABILITIES returned 0 [ 1334.213327][T14346] usbtmc 1-1:16.0: can't read capabilities [ 1334.230097][T19139] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1334.239462][T19139] usb 5-1: can't read configurations, error -61 [ 1334.267124][T19139] usb usb5-port1: attempt power cycle [ 1334.307804][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1334.317215][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1334.447828][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1334.465857][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1334.505554][T21493] fuse: Bad value for 'fd' [ 1334.588184][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1334.596640][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1334.637974][T19139] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1334.661156][T19139] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1334.718073][T19139] usb 5-1: can't read configurations, error -61 [ 1334.719950][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1334.733021][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1334.857998][T19139] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1334.899677][T19139] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1334.911700][T19139] usb 5-1: can't read configurations, error -61 [ 1334.925048][T19139] usb usb5-port1: unable to enumerate USB device [ 1335.997454][T21489] syz.1.3632 (21489): drop_caches: 2 [ 1336.053905][T14346] usb 1-1: USB disconnect, device number 60 [ 1336.485150][T21514] delete_channel: no stack [ 1336.747900][ T39] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1336.991774][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1337.026423][ T39] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1337.047086][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1337.065438][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.595999][T21514] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1337.810982][ T39] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1338.564648][T21512] veth1_to_team: entered promiscuous mode [ 1338.573532][T21512] bridge0: entered promiscuous mode [ 1338.579978][T21512] hsr2: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1338.594454][T21512] hsr2: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1338.608944][T21512] hsr2: entered allmulticast mode [ 1338.615051][T21512] veth1_to_team: entered allmulticast mode [ 1338.624269][T21512] bridge0: entered allmulticast mode [ 1339.207850][ T6301] net_ratelimit: 79 callbacks suppressed [ 1339.207866][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1339.221790][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1339.337882][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1339.346133][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1339.458814][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1339.466826][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1339.582079][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1339.590309][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1339.708414][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1339.716377][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1339.978483][T21544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1339.985133][T21544] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1340.003243][T21544] vhci_hcd vhci_hcd.0: Device attached [ 1340.029294][T21544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 1340.035936][T21544] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1340.045337][T21544] vhci_hcd vhci_hcd.0: Device attached [ 1340.075586][T21544] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 1340.082241][T21544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1340.101108][T21544] vhci_hcd vhci_hcd.0: Device attached [ 1340.121402][T21551] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1340.128044][T21551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1340.135764][T21551] vhci_hcd vhci_hcd.0: Device attached [ 1340.145838][T21544] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(21) [ 1340.152479][T21544] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1340.161164][T21544] vhci_hcd vhci_hcd.0: Device attached [ 1340.227910][ T39] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1340.306707][ T39] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 1340.482562][T19139] usb 5-1: USB disconnect, device number 104 [ 1340.640820][T21549] vhci_hcd: connection closed [ 1340.641072][ T6288] vhci_hcd vhci_hcd.0: stop threads [ 1340.651145][T21552] vhci_hcd: connection closed [ 1340.651440][T21547] vhci_hcd: connection reset by peer [ 1340.662069][T21554] vhci_hcd: connection closed [ 1340.662320][ T6288] vhci_hcd vhci_hcd.0: release socket [ 1340.662412][T21545] vhci_hcd: connection closed [ 1340.667360][ T6288] vhci_hcd vhci_hcd.0: disconnect device [ 1340.699556][ T6288] vhci_hcd vhci_hcd.0: stop threads [ 1340.706879][ T6288] vhci_hcd vhci_hcd.0: release socket [ 1340.713593][ T6288] vhci_hcd vhci_hcd.0: disconnect device [ 1340.737977][ T6288] vhci_hcd vhci_hcd.0: stop threads [ 1340.743233][ T6288] vhci_hcd vhci_hcd.0: release socket [ 1340.749207][ T6288] vhci_hcd vhci_hcd.0: disconnect device [ 1340.756637][ T6288] vhci_hcd vhci_hcd.0: stop threads [ 1340.762706][ T6288] vhci_hcd vhci_hcd.0: release socket [ 1340.768538][ T6288] vhci_hcd vhci_hcd.0: disconnect device [ 1340.774429][ T6288] vhci_hcd vhci_hcd.0: stop threads [ 1340.780757][ T6288] vhci_hcd vhci_hcd.0: release socket [ 1340.786282][ T6288] vhci_hcd vhci_hcd.0: disconnect device [ 1341.188737][T21571] delete_channel: no stack [ 1342.726533][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'. [ 1342.759620][T21584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3649'. [ 1344.065372][T21603] F2FS-fs: Conflicting test_dummy_encryption options [ 1344.238126][ T6288] net_ratelimit: 98 callbacks suppressed [ 1344.238141][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1344.268909][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1344.387816][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1344.395849][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1344.507854][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1344.516130][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1344.627843][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1344.638059][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1344.767914][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1344.780887][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1345.418446][ T39] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1346.859134][T13315] usb usb34-port1: attempt power cycle [ 1347.468616][T13315] usb usb34-port1: unable to enumerate USB device [ 1348.997404][T21655] syz.4.3664 (21655): drop_caches: 2 [ 1349.346968][ T6301] net_ratelimit: 81 callbacks suppressed [ 1349.346989][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1349.368714][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1349.497973][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1349.506336][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1349.618070][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1349.625911][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1349.749196][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1349.757393][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1349.898034][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1349.906352][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1350.207594][T21672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1350.448053][T14346] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1350.655083][T14346] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1350.671434][T14346] usb 3-1: config 0 has no interface number 0 [ 1350.702567][T14346] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1351.087947][T14346] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1351.112313][T14346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.121251][T14346] usb 3-1: Product: syz [ 1351.125494][T14346] usb 3-1: Manufacturer: syz [ 1351.132745][T14346] usb 3-1: SerialNumber: syz [ 1351.145946][T14346] usb 3-1: config 0 descriptor?? [ 1351.754464][T14346] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1354.087176][T21703] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1354.117794][T21703] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1354.129902][T21703] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1354.178691][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1354.355092][ T6288] net_ratelimit: 74 callbacks suppressed [ 1354.355113][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1354.411860][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1354.468239][T14346] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1354.583501][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1354.597895][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1354.650712][T13315] usb 3-1: USB disconnect, device number 73 [ 1354.709095][T21714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1354.718327][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1354.727233][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1354.812748][T14346] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1354.823248][T14346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1354.837627][T14346] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1354.847842][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1354.855781][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1354.866324][T14346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1354.878763][T14346] usb 5-1: SerialNumber: syz [ 1354.971643][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1354.981107][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1356.267085][T21726] could not allocate digest TFM handle crc32-pclmul [ 1356.439497][T19139] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1356.615415][T19139] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.625710][T19139] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1356.669752][T19139] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1356.701984][T19139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.738969][T19139] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1356.842559][T19139] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1357.305274][T21734] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1357.428040][ T5907] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 1357.548355][T21748] support for the xor transformation has been removed. [ 1357.682728][ T5907] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1357.691376][ T5907] usb 3-1: config 0 has no interface number 0 [ 1357.697515][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.780346][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1357.870396][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1357.911289][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1357.940526][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1357.961530][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1357.997810][ T5907] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1358.025489][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.057411][ T5907] usb 3-1: config 0 descriptor?? [ 1358.127222][T21743] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1358.174241][T21743] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1358.192576][T14346] usb 5-1: 0:2 : does not exist [ 1358.273874][T14346] usb 5-1: unit 5: unexpected type 0x0e [ 1358.356672][T14346] usb 5-1: USB disconnect, device number 105 [ 1358.427105][T20558] udevd[20558]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.610182][ T5907] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1359.367779][ T12] net_ratelimit: 85 callbacks suppressed [ 1359.367800][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.397909][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.426594][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.467839][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.487865][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.507892][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.537816][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.557787][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.578084][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.600421][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1359.628107][T14346] usb 2-1: USB disconnect, device number 91 [ 1359.634861][T21728] delete_channel: no stack [ 1360.615517][ T5907] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1360.882908][ T5907] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1360.918008][ T5907] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1360.949077][ T5907] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1360.958447][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.974778][T21776] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1361.020328][ T5907] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1361.210638][ T5907] usb 3-1: USB disconnect, device number 74 [ 1361.225480][ T5907] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 1361.279083][T21776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.310501][T21776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.583693][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.590234][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.911161][ T30] audit: type=1326 audit(1770347136.331:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1361.959127][T19139] usb 1-1: USB disconnect, device number 61 [ 1361.981781][ T30] audit: type=1326 audit(1770347136.331:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.007510][ T30] audit: type=1326 audit(1770347136.371:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.048724][ T30] audit: type=1326 audit(1770347136.371:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.078030][ T30] audit: type=1326 audit(1770347136.371:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.104245][ T30] audit: type=1326 audit(1770347136.371:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.108222][T14346] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1362.137527][ T30] audit: type=1326 audit(1770347136.371:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.200608][ T30] audit: type=1326 audit(1770347136.371:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.232976][ T30] audit: type=1326 audit(1770347136.371:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.258239][ T30] audit: type=1326 audit(1770347136.371:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21771 comm="syz.0.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1362.336119][T21789] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1362.342741][T21789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1362.357306][T21789] vhci_hcd vhci_hcd.0: Device attached [ 1362.374251][T21789] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 1362.380904][T21789] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1362.398653][T21789] vhci_hcd vhci_hcd.0: Device attached [ 1362.405486][T14346] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1362.415414][T14346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.424796][T14346] usb 5-1: Product: syz [ 1362.430525][T14346] usb 5-1: Manufacturer: syz [ 1362.435142][T14346] usb 5-1: SerialNumber: syz [ 1362.450151][T14346] usb 5-1: config 0 descriptor?? [ 1362.456159][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 1362.462752][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1362.484467][T21796] vhci_hcd vhci_hcd.0: Device attached [ 1362.484789][T21789] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1362.546077][T21801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.567006][T21801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.588091][T21789] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 1362.594785][T21789] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1362.602617][ T39] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 1362.624711][T21789] vhci_hcd vhci_hcd.0: Device attached [ 1362.640443][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(24) [ 1362.647084][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1362.666642][T14346] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1362.693680][T21807] macsec0: entered promiscuous mode [ 1362.701727][T21796] vhci_hcd vhci_hcd.0: Device attached [ 1362.705092][T21789] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1362.720131][T21807] macsec0: left promiscuous mode [ 1362.773164][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(26) [ 1362.779787][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1362.824035][T21796] vhci_hcd vhci_hcd.0: Device attached [ 1362.837226][T21789] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1362.909431][T21805] vhci_hcd: connection closed [ 1362.909748][ T8184] vhci_hcd vhci_hcd.1: stop threads [ 1362.919839][T21808] vhci_hcd: connection closed [ 1362.920500][ T8184] vhci_hcd vhci_hcd.1: release socket [ 1362.932398][T21792] vhci_hcd: connection closed [ 1362.933271][T21798] vhci_hcd: connection closed [ 1362.933338][T21790] vhci_hcd: connection reset by peer [ 1362.949239][ T8184] vhci_hcd vhci_hcd.1: disconnect device [ 1362.955180][T21802] vhci_hcd: connection closed [ 1362.959984][ T8184] vhci_hcd vhci_hcd.1: stop threads [ 1362.971616][ T8184] vhci_hcd vhci_hcd.1: release socket [ 1362.978007][ T8184] vhci_hcd vhci_hcd.1: disconnect device [ 1362.987190][ T8184] vhci_hcd vhci_hcd.1: stop threads [ 1362.994035][ T8184] vhci_hcd vhci_hcd.1: release socket [ 1363.003068][ T8184] vhci_hcd vhci_hcd.1: disconnect device [ 1363.009777][ T8184] vhci_hcd vhci_hcd.1: stop threads [ 1363.015171][ T8184] vhci_hcd vhci_hcd.1: release socket [ 1363.021001][ T8184] vhci_hcd vhci_hcd.1: disconnect device [ 1363.027528][ T8184] vhci_hcd vhci_hcd.1: stop threads [ 1363.035254][ T8184] vhci_hcd vhci_hcd.1: release socket [ 1363.041692][ T8184] vhci_hcd vhci_hcd.1: disconnect device [ 1363.088352][ T8184] vhci_hcd vhci_hcd.1: stop threads [ 1363.099608][ T8184] vhci_hcd vhci_hcd.1: release socket [ 1363.105395][ T8184] vhci_hcd vhci_hcd.1: disconnect device [ 1364.468290][ T8184] net_ratelimit: 101 callbacks suppressed [ 1364.468306][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1364.483591][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1364.597847][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1364.605806][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1364.718076][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1364.724078][T14346] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1364.725991][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1364.754445][T14346] usb 5-1: USB disconnect, device number 106 [ 1364.848007][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1364.855803][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1364.967798][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1364.975904][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1365.315478][T21821] usb usb8: usbfs: process 21821 (syz.1.3696) did not claim interface 0 before use [ 1365.441193][T21836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3698'. [ 1365.489836][T21836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3698'. [ 1365.771957][T21837] support for the xor transformation has been removed. [ 1366.952843][T21797] delete_channel: no stack [ 1367.747914][ T39] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1368.572434][T21866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.652497][T21866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.966481][T21881] macsec0: entered promiscuous mode [ 1368.993579][T21881] macsec0: left promiscuous mode [ 1369.038760][ T5907] usb usb36-port1: attempt power cycle [ 1369.517953][ T12] net_ratelimit: 101 callbacks suppressed [ 1369.517975][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1369.544032][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1369.645512][ T5907] usb usb36-port1: unable to enumerate USB device [ 1369.658538][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1369.718167][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1369.749105][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 1369.830011][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1369.841681][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1369.965990][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1369.992984][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1370.017837][ T5907] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1370.107965][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1370.189342][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1370.218340][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 1370.227373][ T5907] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1370.236061][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1370.248487][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1370.311824][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1370.404546][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.430904][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1370.458277][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.833518][ T5907] usb 5-1: GET_CAPABILITIES returned 0 [ 1370.862084][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 1371.899606][T21921] support for the xor transformation has been removed. [ 1372.007808][ T5907] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1372.203084][ T5907] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.213609][ T5907] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1372.232571][ T5907] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1372.262380][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.308633][ T5907] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1372.366415][ T5907] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1372.485243][ T5907] usb 5-1: USB disconnect, device number 107 [ 1374.548021][ T12] net_ratelimit: 76 callbacks suppressed [ 1374.548037][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1374.591208][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1374.728153][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1374.736039][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1374.887959][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1374.895877][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1374.959349][ T39] usb 1-1: USB disconnect, device number 62 [ 1374.992074][T21916] delete_channel: no stack [ 1375.018719][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1375.047841][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1375.055741][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1375.167836][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1376.245771][T21973] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1376.314132][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.359375][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.362045][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1379.658126][ T12] net_ratelimit: 79 callbacks suppressed [ 1379.658142][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1379.676965][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1379.684574][ T5907] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1379.797850][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1379.805683][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1379.928223][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1379.936181][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1380.067880][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1380.079080][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1380.222781][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1380.233219][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1380.503553][ T5907] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1380.521693][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1380.567872][ T5907] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1380.591968][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1380.611671][ T5907] usb 2-1: SerialNumber: syz [ 1380.778008][T14346] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1380.970095][T14346] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1381.002480][T14346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.021498][T14346] usb 5-1: Product: syz [ 1381.029170][T14346] usb 5-1: Manufacturer: syz [ 1381.041669][T14346] usb 5-1: SerialNumber: syz [ 1381.054979][T14346] usb 5-1: config 0 descriptor?? [ 1381.074609][T14346] hub 5-1:0.0: bad descriptor, ignoring hub [ 1381.091698][T14346] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1381.236951][T22022] tipc: Enabling of bearer rejected, failed to enable media [ 1381.297042][T14346] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1381.370147][T14346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1381.395643][T14346] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1381.415992][T14346] usb 5-1: media controller created [ 1381.456765][T14346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1381.577341][T14346] DVB: Unable to find symbol dib7000p_attach() [ 1381.593634][T14346] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1381.727843][T14346] rc_core: IR keymap rc-dib0700-rc5 not found [ 1381.735915][T14346] Registered IR keymap rc-empty [ 1381.752402][T14346] dvb-usb: could not initialize remote control. [ 1381.765054][T14346] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1382.445850][T22032] fuse: Bad value for 'fd' [ 1382.471953][ T5907] usb 2-1: 0:2 : does not exist [ 1382.483300][ T5907] usb 2-1: unit 5: unexpected type 0x0e [ 1382.514151][ T5907] usb 2-1: USB disconnect, device number 92 [ 1382.738826][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1382.738837][ T30] audit: type=1326 audit(1770347157.161:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1382.778183][ T30] audit: type=1326 audit(1770347157.191:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1382.831165][ T30] audit: type=1326 audit(1770347157.251:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1382.878740][ T30] audit: type=1326 audit(1770347157.251:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1382.929415][ T30] audit: type=1326 audit(1770347157.251:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1382.984080][ T30] audit: type=1326 audit(1770347157.251:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1383.128525][ T30] audit: type=1326 audit(1770347157.541:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1383.152032][ T30] audit: type=1326 audit(1770347157.541:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1383.337561][T14346] usb 5-1: USB disconnect, device number 108 [ 1383.394897][T14346] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1383.447904][ T30] audit: type=1326 audit(1770347157.861:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1383.478321][ T30] audit: type=1326 audit(1770347157.871:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22033 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1383.902328][T22052] : renamed from bridge_slave_0 [ 1384.730263][ T12] net_ratelimit: 89 callbacks suppressed [ 1384.730282][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1384.778488][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1384.907895][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1384.915713][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1385.029665][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1385.038099][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1385.157849][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1385.165690][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1385.277855][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1385.285820][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1386.152298][T22079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3749'. [ 1386.502183][T22070] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.3747'. [ 1388.028066][T14346] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1388.218291][T14346] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1388.226522][T14346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.245534][T14346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.277738][T14346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1388.317860][T14346] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1388.328067][T14346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.363771][T14346] usb 3-1: config 0 descriptor?? [ 1388.814087][T14346] plantronics 0003:047F:FFFF.002E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1389.147798][ T5907] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1389.317255][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.350757][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1389.376233][ T5907] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1389.386756][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.422674][ T5907] usb 5-1: config 0 descriptor?? [ 1389.444757][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1389.455140][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 1389.469959][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1389.486786][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1389.497901][ T5907] usb 5-1: media controller created [ 1389.504308][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1389.562925][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 1389.574961][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1389.607224][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 1389.637905][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 1389.662797][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1389.768368][ T6301] net_ratelimit: 100 callbacks suppressed [ 1389.768390][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1389.795592][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1389.817836][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1389.827854][ T5907] dvb-usb: error while querying for an remote control event. [ 1389.927788][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1389.937441][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1390.008704][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1390.014459][ T5907] dvb-usb: error while querying for an remote control event. [ 1390.069581][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1390.119563][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1390.207865][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1390.217043][ T5907] dvb-usb: error while querying for an remote control event. [ 1390.228305][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1390.236460][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1390.358053][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1390.365991][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1390.397835][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1390.411497][ T5907] dvb-usb: error while querying for an remote control event. [ 1390.472971][ T5907] usb 3-1: USB disconnect, device number 75 [ 1390.597935][T13315] dvb-usb: bulk message failed: -22 (1/0) [ 1390.603714][T13315] dvb-usb: error while querying for an remote control event. [ 1390.767822][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1390.773713][ T5907] dvb-usb: error while querying for an remote control event. [ 1390.938067][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1390.945678][ T5907] dvb-usb: error while querying for an remote control event. [ 1391.118060][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1391.124001][ T5907] dvb-usb: error while querying for an remote control event. [ 1391.299446][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1391.309587][ T5907] dvb-usb: error while querying for an remote control event. [ 1391.467783][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1391.475932][ T5907] dvb-usb: error while querying for an remote control event. [ 1391.586204][ T5907] usb 5-1: USB disconnect, device number 109 [ 1391.645254][ T5907] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1393.412754][T22179] fuse: Unknown parameter 'group_i00000000000000000000' [ 1393.504055][T22176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.523753][T22176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.829882][ T6293] net_ratelimit: 87 callbacks suppressed [ 1394.829904][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1394.844194][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1394.957900][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1394.966927][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1395.078457][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1395.086477][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1395.198171][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1395.206659][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1395.257953][T14346] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1395.327776][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1395.339932][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1395.426618][T14346] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1395.476208][T14346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.495538][T14346] usb 3-1: Product: syz [ 1395.505330][T14346] usb 3-1: Manufacturer: syz [ 1395.530065][T14346] usb 3-1: SerialNumber: syz [ 1395.553107][T14346] usb 3-1: config 0 descriptor?? [ 1395.589022][T14346] hub 3-1:0.0: bad descriptor, ignoring hub [ 1395.600522][T14346] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1395.815016][T14346] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1395.857461][T14346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1395.876817][T14346] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1395.890486][T14346] usb 3-1: media controller created [ 1395.972682][T14346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1396.044962][T14346] DVB: Unable to find symbol dib7000p_attach() [ 1396.052085][T14346] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1396.168073][T14346] rc_core: IR keymap rc-dib0700-rc5 not found [ 1396.182554][T14346] Registered IR keymap rc-empty [ 1396.192958][T14346] dvb-usb: could not initialize remote control. [ 1396.202888][T14346] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1396.324305][T22209] netlink: 'syz.4.3776': attribute type 2 has an invalid length. [ 1396.360003][T22209] !: entered promiscuous mode [ 1396.426375][T22209] netlink: 'syz.4.3776': attribute type 2 has an invalid length. [ 1396.439684][T22209] !: left promiscuous mode [ 1398.239285][ T5907] usb 3-1: USB disconnect, device number 76 [ 1398.287148][ T5907] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1399.871623][ T44] net_ratelimit: 88 callbacks suppressed [ 1399.871639][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1399.888258][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1400.017840][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1400.025937][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1400.061854][T22247] sctp: [Deprecated]: syz.0.3784 (pid 22247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1400.061854][T22247] Use struct sctp_sack_info instead [ 1400.157861][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1400.187824][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1400.207765][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1400.215542][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1400.341124][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1400.352606][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1401.385489][T22257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1401.829960][T22267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1401.837241][T22267] IPv6: NLM_F_CREATE should be set when creating new route [ 1401.844531][T22267] IPv6: NLM_F_CREATE should be set when creating new route [ 1401.851761][T22267] IPv6: NLM_F_CREATE should be set when creating new route [ 1403.877404][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1403.907497][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1404.209315][T22287] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1404.252886][T22287] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1404.468242][T22287] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1404.898449][ T44] net_ratelimit: 84 callbacks suppressed [ 1404.898471][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.912667][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1405.027928][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1405.039723][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1405.157826][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1405.169413][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1405.288035][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1405.297756][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1405.418139][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1405.426116][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1406.661085][T22336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3798'. [ 1407.523516][T22340] bridge2: entered promiscuous mode [ 1408.590035][T22361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1409.907956][ T12] net_ratelimit: 95 callbacks suppressed [ 1409.907986][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1409.952944][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1410.077982][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1410.085875][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1410.207767][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1410.215542][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1410.357878][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1410.367052][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1410.507818][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1410.552895][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1410.584464][T22382] netlink: 'syz.2.3809': attribute type 4 has an invalid length. [ 1410.623221][T22382] netlink: 'syz.2.3809': attribute type 4 has an invalid length. [ 1410.818022][ T39] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1410.888188][T14346] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1410.968452][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 1410.975223][ T39] usb 5-1: config 5 has an invalid interface number: 141 but max is 0 [ 1410.987793][ T39] usb 5-1: config 5 has no interface number 0 [ 1410.993916][ T39] usb 5-1: config 5 interface 141 has no altsetting 0 [ 1411.004102][ T39] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.e1 [ 1411.013600][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.023750][ T39] usb 5-1: Product: syz [ 1411.028120][ T39] usb 5-1: Manufacturer: syz [ 1411.032724][ T39] usb 5-1: SerialNumber: syz [ 1411.039425][T14346] usb 3-1: Using ep0 maxpacket: 8 [ 1411.047622][T14346] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1411.056785][T14346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.096513][T14346] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1411.105978][T14346] pvrusb2: ********** [ 1411.110604][T14346] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1411.123752][T14346] pvrusb2: Important functionality might not be entirely working. [ 1411.133039][T14346] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1411.146704][T14346] pvrusb2: ********** [ 1411.273841][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3810'. [ 1411.283228][T22396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1411.300387][T22385] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1411.326393][ T2345] pvrusb2: Invalid write control endpoint [ 1411.332390][ T39] as10x_usb: device has been detected [ 1411.333206][ T39] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1411.389393][ T2345] pvrusb2: Invalid write control endpoint [ 1411.395315][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1411.405157][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1411.418158][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1411.432265][ T39] usb 5-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1411.443580][ T2345] pvrusb2: Device being rendered inoperable [ 1411.473920][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1411.487029][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1411.489785][ T39] as10x_usb: error during firmware upload part1 [ 1411.502679][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1411.515218][ T39] Registered device Abilis Systems DVB-Titan [ 1411.515475][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1411.538869][ T39] usb 5-1: USB disconnect, device number 110 [ 1411.564566][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1411.600523][ T39] Unregistered device Abilis Systems DVB-Titan [ 1411.606454][ T39] as10x_usb: device has been disconnected [ 1413.426042][T14346] usb 3-1: USB disconnect, device number 77 [ 1414.696437][T22441] libceph: resolve '0..' (ret=-3): failed [ 1414.702488][ T39] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1414.853082][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.863101][ T39] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1414.886686][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.904010][ T39] usb 2-1: config 0 descriptor?? [ 1414.949720][ T39] usbhid 2-1:0.0: can't add hid device: -22 [ 1414.957831][ T39] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1414.988095][ T6301] net_ratelimit: 95 callbacks suppressed [ 1414.988115][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1415.007568][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1415.140584][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1415.148654][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1415.259992][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1415.267975][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1415.389190][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1415.397057][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1415.509070][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1415.516870][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1416.077791][ T5907] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1416.157338][T22455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3823'. [ 1416.230211][ T5907] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1416.239527][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.251973][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.264960][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1416.282266][ T5907] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1416.310665][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.329262][ T5907] usb 1-1: config 0 descriptor?? [ 1416.769334][ T5907] plantronics 0003:047F:FFFF.002F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1417.067539][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1417.067569][ T30] audit: type=1800 audit(1770347191.471:1448): pid=22447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3822" name="nullb0" dev="devtmpfs" ino=3881 res=0 errno=0 [ 1417.100487][ T5907] usb 1-1: USB disconnect, device number 63 [ 1417.579924][T22467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1417.726427][T22474] random: crng reseeded on system resumption [ 1418.925092][ T39] usb 2-1: USB disconnect, device number 93 [ 1418.944626][T22500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3829'. [ 1420.057804][ T12] net_ratelimit: 99 callbacks suppressed [ 1420.057827][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1420.092845][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1420.244216][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1420.264465][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1420.388305][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1420.397788][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1420.518352][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1420.526392][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1420.641629][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1420.657855][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1421.043128][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1421.301026][T22541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1421.536002][T22530] netlink: 'syz.2.3835': attribute type 10 has an invalid length. [ 1421.662963][T22530] bridge0: entered promiscuous mode [ 1421.670683][T22530] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1421.798148][ T5907] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1421.971402][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.989791][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1422.019083][ T5907] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1422.037867][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.056637][ T5907] usb 1-1: config 0 descriptor?? [ 1422.083926][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1422.101396][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 1422.119057][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1422.139288][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1422.146382][ T5907] usb 1-1: media controller created [ 1422.170445][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1422.206867][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 1422.221816][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1422.244633][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 1422.275044][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 1422.318089][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1422.481750][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1422.487942][ T5907] dvb-usb: error while querying for an remote control event. [ 1422.647753][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1422.653556][ T5907] dvb-usb: error while querying for an remote control event. [ 1422.817905][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1422.823845][ T5907] dvb-usb: error while querying for an remote control event. [ 1422.885702][T22555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1422.987806][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1423.021074][ T5907] dvb-usb: error while querying for an remote control event. [ 1423.027005][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.041470][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.188141][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1423.197287][ T5907] dvb-usb: error while querying for an remote control event. [ 1423.370700][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1423.376558][ T5907] dvb-usb: error while querying for an remote control event. [ 1423.547760][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1423.560971][ T5907] dvb-usb: error while querying for an remote control event. [ 1423.737847][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1423.743844][ T5907] dvb-usb: error while querying for an remote control event. [ 1423.784441][T22569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3841'. [ 1423.908047][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1423.913889][ T5907] dvb-usb: error while querying for an remote control event. [ 1424.048936][T22568] vlan3: entered promiscuous mode [ 1424.077843][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1424.098094][ T5907] dvb-usb: error while querying for an remote control event. [ 1424.109749][T22569] bridge_slave_1: left allmulticast mode [ 1424.116009][T22569] bridge_slave_1: left promiscuous mode [ 1424.225227][T22569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.257792][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1424.265845][ T5907] dvb-usb: error while querying for an remote control event. [ 1424.291823][T22569] bridge_slave_0: left allmulticast mode [ 1424.315459][T22569] bridge_slave_0: left promiscuous mode [ 1424.341326][T22569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.447971][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1424.454051][ T5907] dvb-usb: error while querying for an remote control event. [ 1424.468994][T14346] usb 1-1: USB disconnect, device number 64 [ 1424.495112][T14346] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1424.657410][T22569] bond0: (slave bridge0): Releasing backup interface [ 1424.899876][T22579] input: syz0 as /devices/virtual/input/input68 [ 1425.064967][T22583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1425.157893][ T8184] net_ratelimit: 123 callbacks suppressed [ 1425.157912][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1425.172521][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1425.205169][T22584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.284438][T22584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.298596][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1425.308955][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1425.427824][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1425.439282][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1425.559357][ T30] audit: type=1326 audit(1770347199.981:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22573 comm="syz.1.3843" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7fc00000 [ 1425.582926][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1425.607902][ T12] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1425.628060][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1425.636769][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1426.216195][T22596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3846'. [ 1427.234606][T22605] tipc: Enabled bearer , priority 0 [ 1427.246154][T22605] syzkaller0: entered promiscuous mode [ 1427.256202][T22605] syzkaller0: entered allmulticast mode [ 1427.296369][T22605] tipc: Resetting bearer [ 1427.324384][T22604] tipc: Resetting bearer [ 1427.380114][T22604] tipc: Disabling bearer [ 1429.018160][ T5907] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1429.250404][ T5907] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1429.266089][ T5907] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1429.288827][T22624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.307489][ T5907] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1429.347881][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.363397][T22624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.558033][ T5907] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1429.576562][ T5907] usb 2-1: invalid MIDI out EP 0 [ 1429.695007][ T5907] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1429.949069][T22629] libceph: resolve '0..' (ret=-3): failed [ 1430.108791][T22635] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1430.182120][ T6288] net_ratelimit: 84 callbacks suppressed [ 1430.182134][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1430.205451][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1430.317868][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1430.325634][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1430.364129][T22645] create_pit_timer: 3 callbacks suppressed [ 1430.364148][T22645] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1430.437906][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1430.451302][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1430.567019][T22648] netlink: 'syz.3.3858': attribute type 2 has an invalid length. [ 1430.577802][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1430.585720][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1430.671892][ T30] audit: type=1326 audit(1770347205.041:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22633 comm="syz.2.3857" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67539 code=0x0 [ 1430.699774][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1430.727908][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1430.791813][T22648] !: entered promiscuous mode [ 1431.168182][T22646] netlink: 'syz.3.3858': attribute type 2 has an invalid length. [ 1431.181992][T22646] !: left promiscuous mode [ 1431.859286][ T5907] usb 2-1: USB disconnect, device number 94 [ 1432.867855][ T5907] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1433.108816][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 1433.212492][ T5907] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 1433.221681][ T5907] usb 2-1: config 0 has no interface number 0 [ 1433.288333][ T5907] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1433.309057][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.327172][ T5907] usb 2-1: Product: syz [ 1433.339258][ T5907] usb 2-1: Manufacturer: syz [ 1433.361419][ T5907] usb 2-1: SerialNumber: syz [ 1433.382403][ T5907] usb 2-1: config 0 descriptor?? [ 1433.759985][T22680] loop8: detected capacity change from 0 to 7 [ 1433.807252][T22680] Dev loop8: unable to read RDB block 7 [ 1433.817284][T22680] loop8: AHDI p1 p2 p3 [ 1433.850521][T22680] loop8: partition table partially beyond EOD, truncated [ 1433.857935][T22680] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1433.879642][T22680] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1433.991549][T21780] Dev loop8: unable to read RDB block 7 [ 1433.997229][T21780] loop8: AHDI p1 p2 p3 [ 1434.001665][T21780] loop8: partition table partially beyond EOD, truncated [ 1434.012321][T21780] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1434.053901][T21780] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1434.064638][T22687] Dev loop8: unable to read RDB block 7 [ 1434.093157][T22687] loop8: AHDI p1 p2 p3 [ 1434.102384][T22687] loop8: partition table partially beyond EOD, truncated [ 1434.112895][T22687] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1434.140445][T22687] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1434.648628][T22692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.689253][T22692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.086191][ T5907] usb 2-1: USB disconnect, device number 95 [ 1435.249852][ T44] net_ratelimit: 83 callbacks suppressed [ 1435.249873][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1435.265176][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1435.378712][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1435.386566][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1435.508233][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1435.516557][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1435.638075][ T8184] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1435.645936][ T8184] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1435.758027][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1435.766289][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1436.063732][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1436.650492][ T30] audit: type=1326 audit(1770347211.071:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1436.708319][ T30] audit: type=1326 audit(1770347211.101:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1436.768366][ T30] audit: type=1326 audit(1770347211.101:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1436.839488][ T30] audit: type=1326 audit(1770347211.111:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1436.915334][ T30] audit: type=1326 audit(1770347211.111:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1436.960732][ T30] audit: type=1326 audit(1770347211.131:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1437.603159][ T30] audit: type=1326 audit(1770347212.021:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1437.625903][ T30] audit: type=1326 audit(1770347212.041:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1437.881386][ T30] audit: type=1326 audit(1770347212.301:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1437.911278][ T30] audit: type=1326 audit(1770347212.301:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.0.3870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 1438.027735][ T5907] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1438.192567][ T5907] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1438.202232][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.219188][ T5907] usb 2-1: Product: syz [ 1438.237693][ T5907] usb 2-1: Manufacturer: syz [ 1438.245704][ T5907] usb 2-1: SerialNumber: syz [ 1438.273403][ T5907] usb 2-1: config 0 descriptor?? [ 1438.553160][T14346] usb 2-1: USB disconnect, device number 96 [ 1438.659808][T22732] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1440.348125][ T6301] net_ratelimit: 97 callbacks suppressed [ 1440.348145][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1440.365548][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1440.487769][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1440.495620][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1440.618998][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1440.628063][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1440.670468][T22759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.738655][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1440.757240][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1440.786086][T22759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.868195][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1440.876069][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1440.944664][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1441.016992][T22759] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1442.158550][ T5907] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1442.166339][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1442.308340][ T5907] usb 3-1: device descriptor read/64, error -32 [ 1442.547823][ T5907] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1442.558869][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1442.689806][ T5907] usb 3-1: device descriptor read/64, error -32 [ 1442.820566][ T5907] usb usb3-port1: attempt power cycle [ 1443.173813][ T5907] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1443.219105][ T5907] usb 3-1: config 0 has no interfaces? [ 1443.267979][ T5907] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1443.277101][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.285260][ T5907] usb 3-1: Product: syz [ 1443.289495][ T5907] usb 3-1: Manufacturer: syz [ 1443.294127][ T5907] usb 3-1: SerialNumber: syz [ 1443.320486][ T5907] usb 3-1: config 0 descriptor?? [ 1443.998459][T22776] pimreg: entered allmulticast mode [ 1444.087537][T22796] pimreg: left allmulticast mode [ 1444.213565][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1444.213584][ T30] audit: type=1326 audit(1770347218.631:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1444.278737][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1444.298498][ T30] audit: type=1326 audit(1770347218.631:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1444.321834][ T30] audit: type=1326 audit(1770347218.661:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1444.357317][ T30] audit: type=1326 audit(1770347218.661:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1444.391911][ T30] audit: type=1326 audit(1770347218.661:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1444.441130][ T30] audit: type=1326 audit(1770347218.661:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1444.648813][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3886'. [ 1445.119685][ T30] audit: type=1326 audit(1770347219.541:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1445.176507][ T30] audit: type=1326 audit(1770347219.541:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1445.378479][ T30] audit: type=1326 audit(1770347219.801:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1445.404728][ T30] audit: type=1326 audit(1770347219.801:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22793 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1445.443189][ T6301] net_ratelimit: 106 callbacks suppressed [ 1445.443203][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1445.458019][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1445.577809][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1445.585774][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1445.697780][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1445.705653][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1445.819244][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1445.840506][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1445.958012][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1445.967814][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1446.175088][T13315] usb 3-1: USB disconnect, device number 80 [ 1446.967828][ T39] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1447.117825][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 1447.136493][ T39] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1447.152569][ T39] usb 2-1: config 179 has no interface number 0 [ 1447.168324][ T39] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1447.195566][ T39] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1447.230168][ T39] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1447.260672][ T39] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1447.285444][ T39] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1447.330183][ T39] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1447.337148][ T39] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1447.346658][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.402665][ T39] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input69 [ 1447.470493][ T5181] input input69: unable to receive magic message: -110 [ 1447.482448][ T5181] input input69: unable to receive magic message: -32 [ 1447.493094][ T5181] input input69: unable to receive magic message: -32 [ 1447.505070][ T5181] input input69: unable to receive magic message: -32 [ 1447.524342][ T5181] input input69: unable to receive magic message: -32 [ 1447.539176][T21780] input input69: unable to receive magic message: -32 [ 1447.562060][ T5181] input input69: unable to receive magic message: -32 [ 1447.572506][ T5181] input input69: unable to receive magic message: -32 [ 1447.937950][ T39] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1447.951108][T22835] input input69: unable to receive magic message: -32 [ 1448.032810][T13315] usb 2-1: USB disconnect, device number 97 [ 1448.032827][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1448.092197][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.102655][ T39] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1448.118421][ T39] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1448.129328][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.149664][ T39] usb 3-1: config 0 descriptor?? [ 1448.163768][ T39] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1448.172981][ T39] dvb-usb: bulk message failed: -22 (3/0) [ 1448.192922][ T39] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1448.205611][ T39] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1448.214956][ T39] usb 3-1: media controller created [ 1448.226349][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1448.250736][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 1448.261253][ T39] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1448.281537][ T39] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70 [ 1448.309610][ T39] dvb-usb: schedule remote query interval to 150 msecs. [ 1448.326912][ T39] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1448.478042][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1448.483878][ T39] dvb-usb: error while querying for an remote control event. [ 1448.623587][T22848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1448.649532][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1448.655364][ T39] dvb-usb: error while querying for an remote control event. [ 1448.827830][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1448.833621][ T39] dvb-usb: error while querying for an remote control event. [ 1448.997810][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1449.003755][ T39] dvb-usb: error while querying for an remote control event. [ 1449.168282][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1449.178401][ T39] dvb-usb: error while querying for an remote control event. [ 1449.338004][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1449.354139][ T39] dvb-usb: error while querying for an remote control event. [ 1449.527917][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1449.533710][ T39] dvb-usb: error while querying for an remote control event. [ 1449.698115][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1449.711650][ T39] dvb-usb: error while querying for an remote control event. [ 1449.888566][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1449.895036][ T39] dvb-usb: error while querying for an remote control event. [ 1450.060356][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1450.066124][ T39] dvb-usb: error while querying for an remote control event. [ 1450.227811][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 1450.233698][ T39] dvb-usb: error while querying for an remote control event. [ 1450.283897][T13315] usb 3-1: USB disconnect, device number 81 [ 1450.563427][ T6293] net_ratelimit: 80 callbacks suppressed [ 1450.563440][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1450.606227][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1450.614506][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1450.710015][T13315] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1450.726393][T22857] trusted_key: encrypted_key: key user:syz not found [ 1450.743988][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1450.787975][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1450.799010][T22876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1450.909820][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1450.917589][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1451.051136][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1451.095419][ T6293] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1451.106001][ T6293] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1451.208209][ T39] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1451.373300][ T39] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1451.393666][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.412515][ T39] usb 1-1: Product: syz [ 1451.427846][ T39] usb 1-1: Manufacturer: syz [ 1451.450544][ T39] usb 1-1: SerialNumber: syz [ 1451.468552][ T39] usb 1-1: config 0 descriptor?? [ 1451.691712][ T39] hso 1-1:0.0: Failed to find INT IN ep [ 1451.698972][ T39] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1452.062724][T22879] gre0: left promiscuous mode [ 1452.121754][T22879] veth3: left promiscuous mode [ 1452.127398][T22879] bond4: left promiscuous mode [ 1452.142702][T22879] bridge1: left promiscuous mode [ 1454.460826][ T39] usb 1-1: USB disconnect, device number 65 [ 1454.834854][T13315] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1455.127839][T13315] usb 3-1: Using ep0 maxpacket: 16 [ 1455.188426][T13315] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 1455.196604][T13315] usb 3-1: config 0 has no interface number 0 [ 1455.265910][T13315] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1455.275888][T13315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.286120][T13315] usb 3-1: Product: syz [ 1455.291285][T13315] usb 3-1: Manufacturer: syz [ 1455.296596][T13315] usb 3-1: SerialNumber: syz [ 1455.323702][T13315] usb 3-1: config 0 descriptor?? [ 1455.672550][ T6301] net_ratelimit: 83 callbacks suppressed [ 1455.672565][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1455.708121][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1455.748618][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1455.778699][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1455.808555][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1455.816557][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1455.927790][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1455.935575][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1456.047800][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1456.055670][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1457.534700][T14346] usb 3-1: USB disconnect, device number 82 [ 1457.651721][T22963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3919'. [ 1459.011508][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1459.011529][ T30] audit: type=1800 audit(1770347233.431:1514): pid=22994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3925" name="nullb0" dev="devtmpfs" ino=3881 res=0 errno=0 [ 1460.129563][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1460.302109][T23007] vlan3: entered promiscuous mode [ 1460.308118][T23008] bridge_slave_1: left allmulticast mode [ 1460.308145][T23008] bridge_slave_1: left promiscuous mode [ 1460.308374][T23008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.356694][T23008] bridge_slave_0: left allmulticast mode [ 1460.356721][T23008] bridge_slave_0: left promiscuous mode [ 1460.356955][T23008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.748297][ T6288] net_ratelimit: 99 callbacks suppressed [ 1460.748316][ T6288] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1460.762458][ T6288] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1460.877848][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1460.885812][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1461.008235][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1461.015999][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1461.127783][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1461.135796][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1461.258761][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1461.276472][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1461.315357][ T30] audit: type=1326 audit(1770347235.731:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.343093][ T30] audit: type=1326 audit(1770347235.731:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.383182][ T30] audit: type=1326 audit(1770347235.761:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.426889][ T30] audit: type=1326 audit(1770347235.761:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.461871][ T30] audit: type=1326 audit(1770347235.761:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.511685][ T30] audit: type=1326 audit(1770347235.761:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.553992][ T30] audit: type=1326 audit(1770347235.761:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.601159][ T30] audit: type=1326 audit(1770347235.761:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1461.647769][ T30] audit: type=1326 audit(1770347235.761:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23023 comm="syz.1.3931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fd539 code=0x7ffc0000 [ 1463.333382][T23047] ip6t_REJECT: ECHOREPLY is not supported [ 1463.838080][ T39] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1463.997790][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 1464.008505][ T39] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 1464.024468][ T39] usb 5-1: config 0 has no interface number 0 [ 1464.053361][ T39] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1464.066201][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.107009][ T39] usb 5-1: Product: syz [ 1464.126722][ T39] usb 5-1: Manufacturer: syz [ 1464.143741][ T39] usb 5-1: SerialNumber: syz [ 1464.167533][ T39] usb 5-1: config 0 descriptor?? [ 1464.383652][T23057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1464.469914][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1465.684738][T23080] netlink: 'syz.1.3938': attribute type 2 has an invalid length. [ 1465.754124][T23080] !: entered promiscuous mode [ 1465.768397][ T6301] net_ratelimit: 103 callbacks suppressed [ 1465.768409][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1465.782278][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1465.897940][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1465.905895][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1465.938968][T23078] netlink: 'syz.1.3938': attribute type 2 has an invalid length. [ 1466.018402][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1466.027365][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1466.137875][ T6301] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1466.148217][ T6301] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1466.263612][T13315] usb 5-1: USB disconnect, device number 111 [ 1466.270059][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1466.278145][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1468.132805][T23111] binder: 23106:23111 ioctl 4018620d 0 returned -22 [ 1468.448335][T23114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1468.681154][T23111] binder: 23106:23111 ioctl c0306201 0 returned -14 [ 1469.059819][T13315] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x6 [ 1469.079750][T13315] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 1469.088988][T23121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.106060][T13315] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 1469.121255][T13315] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 1469.168395][T13315] hid-generic 00A0:0006:0003.0030: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1469.183686][T23121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.777901][T22718] net_ratelimit: 87 callbacks suppressed [ 1470.777922][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1470.791725][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1470.921279][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1470.930438][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1471.048844][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1471.056985][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1471.167820][ T44] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1471.175715][ T44] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1471.287810][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1471.296536][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1472.149573][T23162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.213351][T23162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.718362][T23169] netlink: 'syz.4.3956': attribute type 2 has an invalid length. [ 1473.755068][T23169] !: entered promiscuous mode [ 1473.790135][T23169] netlink: 'syz.4.3956': attribute type 2 has an invalid length. [ 1473.810672][T23169] !: left promiscuous mode [ 1474.368867][T13315] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1474.578069][T13315] usb 3-1: Using ep0 maxpacket: 32 [ 1474.586605][T13315] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1474.597898][T13315] usb 3-1: config 0 has no interface number 0 [ 1474.606434][T13315] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1474.663781][T13315] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1474.677748][T13315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.698177][T13315] usb 3-1: Product: syz [ 1474.702391][T13315] usb 3-1: Manufacturer: syz [ 1474.707287][T13315] usb 3-1: SerialNumber: syz [ 1474.727546][T13315] usb 3-1: config 0 descriptor?? [ 1475.556569][T13315] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1475.566868][T13315] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1475.584089][T13315] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1475.600636][T13315] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1475.626419][T13315] usb 3-1: USB disconnect, device number 83 [ 1475.858838][T22718] net_ratelimit: 79 callbacks suppressed [ 1475.858853][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1475.884951][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1476.017783][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1476.027704][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1476.147348][ T31] INFO: task kworker/0:2:19763 blocked for more than 143 seconds. [ 1476.155346][ T31] Tainted: G L syzkaller #0 [ 1476.157749][T22718] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1476.162218][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1476.178979][ T31] task:kworker/0:2 state:D stack:22592 pid:19763 tgid:19763 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1476.191358][T22718] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1476.191427][ T31] Workqueue: usb_hub_wq hub_event [ 1476.205895][ T31] Call Trace: [ 1476.219203][ T31] [ 1476.222188][ T31] __schedule+0x14ea/0x5050 [ 1476.230266][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1476.237966][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1476.244650][ T31] ? __pfx___schedule+0x10/0x10 [ 1476.252378][ T31] ? schedule+0x90/0x360 [ 1476.264687][ T31] schedule+0x164/0x360 [ 1476.271383][ T31] schedule_preempt_disabled+0x13/0x30 [ 1476.277802][ T31] __mutex_lock+0x7fe/0x1300 [ 1476.282429][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1476.287228][ T31] ? hub_event+0x21a2/0x4f30 [ 1476.295139][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1476.308916][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1476.316719][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1476.324796][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1476.362508][ T31] hub_event+0x21a2/0x4f30 [ 1476.373748][ T31] ? __pfx_hub_event+0x10/0x10 [ 1476.387018][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1476.405795][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1476.413537][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1476.420624][ T31] process_scheduled_works+0xaec/0x17a0 [ 1476.429090][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1476.435498][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1476.442149][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1476.448788][ T6306] bond6: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1476.456540][ T6306] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 1476.464136][ T31] ? schedule+0x90/0x360 [ 1476.471001][ T31] worker_thread+0xda6/0x1360 [ 1476.477774][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 1476.484421][ T31] kthread+0x726/0x8b0 [ 1476.489749][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1476.495430][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.501416][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.506654][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.511522][ T31] ret_from_fork+0x51b/0xa40 [ 1476.516466][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.521702][ T31] ? __switch_to+0xc82/0x1410 [ 1476.526448][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.531981][ T31] ret_from_fork_asm+0x1a/0x30 [ 1476.536798][ T31] [ 1476.544728][ T31] [ 1476.544728][ T31] Showing all locks held in the system: [ 1476.554102][ T31] 1 lock held by khungtaskd/31: [ 1476.559429][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1476.570768][ T31] 2 locks held by getty/5583: [ 1476.575524][ T31] #0: ffff888034b600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1476.585423][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1476.596065][ T31] 5 locks held by kworker/0:0/13311: [ 1476.601474][ T31] #0: ffff8880202b0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1476.612933][ T31] #1: ffffc9001b1e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1476.625523][ T31] #2: ffff88802a4b4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1476.634663][ T31] #3: ffff88802a4b7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1476.644696][ T31] #4: ffff88802a225f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1476.654772][ T31] 5 locks held by kworker/0:2/19763: [ 1476.660173][ T31] #0: ffff8880202b0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1476.671759][ T31] #1: ffffc9001b59fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1476.683907][ T31] #2: ffff88802a4da198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1476.692977][ T31] #3: ffff88802a4dd518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1476.703282][ T31] #4: ffff88802a225f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1476.713400][ T31] [ 1476.715731][ T31] ============================================= [ 1476.715731][ T31] [ 1476.724346][ T31] NMI backtrace for cpu 1 [ 1476.724364][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.724386][ T31] Tainted: [L]=SOFTLOCKUP [ 1476.724391][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1476.724402][ T31] Call Trace: [ 1476.724408][ T31] [ 1476.724415][ T31] dump_stack_lvl+0xe8/0x150 [ 1476.724439][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1476.724461][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1476.724487][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1476.724512][ T31] sys_info+0x135/0x170 [ 1476.724531][ T31] watchdog+0xf90/0xfe0 [ 1476.724552][ T31] ? watchdog+0x209/0xfe0 [ 1476.724576][ T31] kthread+0x726/0x8b0 [ 1476.724598][ T31] ? __pfx_watchdog+0x10/0x10 [ 1476.724615][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.724636][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.724651][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.724669][ T31] ret_from_fork+0x51b/0xa40 [ 1476.724689][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.724714][ T31] ? __switch_to+0xc82/0x1410 [ 1476.724740][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.724760][ T31] ret_from_fork_asm+0x1a/0x30 [ 1476.724795][ T31] [ 1476.724802][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1476.850981][ C0] NMI backtrace for cpu 0 [ 1476.851002][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.851023][ C0] Tainted: [L]=SOFTLOCKUP [ 1476.851029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1476.851040][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1476.851063][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1476.851076][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 1476.851091][ C0] RAX: 00000000024d9c13 RBX: ffffffff8199570d RCX: 0000000080000001 [ 1476.851103][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc98c4 RDI: ffffffff8c073a00 [ 1476.851113][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1476.851125][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 1476.851136][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 1476.851147][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 1476.851159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1476.851170][ C0] CR2: 00000000f7450250 CR3: 0000000079296000 CR4: 00000000003526f0 [ 1476.851184][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1476.851193][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1476.851204][ C0] Call Trace: [ 1476.851212][ C0] [ 1476.851219][ C0] default_idle+0x9/0x20 [ 1476.851236][ C0] default_idle_call+0x72/0xb0 [ 1476.851253][ C0] do_idle+0x1bd/0x500 [ 1476.851271][ C0] ? __pfx_do_idle+0x10/0x10 [ 1476.851286][ C0] ? do_idle+0xc/0x500 [ 1476.851300][ C0] cpu_startup_entry+0x43/0x60 [ 1476.851314][ C0] rest_init+0x2de/0x300 [ 1476.851331][ C0] start_kernel+0x380/0x3d0 [ 1476.851352][ C0] x86_64_start_reservations+0x24/0x30 [ 1476.851368][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1476.851384][ C0] common_startup_64+0x13e/0x147 [ 1476.851409][ C0] [ 1476.852159][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1476.852177][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.852201][ T31] Tainted: [L]=SOFTLOCKUP [ 1476.852208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1476.852220][ T31] Call Trace: [ 1476.852230][ T31] [ 1476.852238][ T31] vpanic+0x1e0/0x670 [ 1476.852264][ T31] panic+0xc5/0xd0 [ 1476.852284][ T31] ? __pfx_panic+0x10/0x10 [ 1476.852305][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1476.852334][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1476.852361][ T31] watchdog+0xfda/0xfe0 [ 1476.852384][ T31] ? watchdog+0x209/0xfe0 [ 1476.852408][ T31] kthread+0x726/0x8b0 [ 1476.852430][ T31] ? __pfx_watchdog+0x10/0x10 [ 1476.852448][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.852469][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.852486][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.852506][ T31] ret_from_fork+0x51b/0xa40 [ 1476.852525][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.852540][ T31] ? __switch_to+0xc82/0x1410 [ 1476.852566][ T31] ? __pfx_kthread+0x10/0x10 [ 1476.852585][ T31] ret_from_fork_asm+0x1a/0x30 [ 1476.852621][ T31] [ 1477.170236][ T31] Kernel Offset: disabled [ 1477.174542][ T31] Rebooting in 86400 seconds..