last executing test programs: 10.288602238s ago: executing program 4 (id=2157): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40000, &(0x7f0000002740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x1, 0x20000000, 0x0) 9.55542813s ago: executing program 1 (id=2158): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x4080) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x3, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', '+\x00'], 0xa}) r4 = semget(0x1, 0x4, 0x10) semtimedop(r4, &(0x7f0000000240), 0x0, &(0x7f0000000780)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x3, 0x4, 0x0, 0x7fffffff, 0x4, 0x3, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2000000080000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0xfffffffffffffffd, 0x40, 0x0, 0x1, 0x100200000, 0xe, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x10000, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x4, 0x100, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002040, 0x0, 0x4, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xb, 0x2000000000, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x6a, 0x7, 0x0, 0x1000007, 0xc0c0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0xffc, 0x0, 0xd968d5b908ac0cde, 0x2, {0x0, 0x8}, {0x350, 0x0, 0x1}, {0x781}, {0x0, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x4, 0x0, 0xc}) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f0000000200), 0x0) 9.348601967s ago: executing program 4 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000500)=""/131, 0x83) close_range(r0, r0, 0x2) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0x5, [{{0x0, 0x4, 0x2a6, 0x100000000, 0x3, 0x0, {0x5, 0x10001, 0x3, 0x101, 0x80000001, 0xf483, 0x7, 0x99a, 0x8, 0x1000, 0x5, r2, r3, 0x4, 0x4}}, {0x6, 0x1, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) 8.97639527s ago: executing program 2 (id=2160): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120121030000"], 0x1c}], 0x1}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3fd77479559653a5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x47a}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x60000000}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xf0d}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5f7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3c}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x58b}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x30, 0x6, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0xee00, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x0) socket(0x27, 0x800, 0x200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) 8.596030144s ago: executing program 0 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 8.447963372s ago: executing program 0 (id=2163): madvise(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x65) r0 = epoll_create1(0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe64, 0x4, @empty, 0x82}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13018, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x885}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000392f3e3e9d6709358c23737d67ab2da593f9118597a66a6292ed67fe3941601c9bc67b730e67db48ecc72dcff3eceeb3ce8a27ad13bfa0fd78727b80fa9e1e61762989294090e3f6464a54e8a6867d999804d986901ebcd4415f5ab2c6e6735a01ecd7b5e94a319adbc81a67e57fd41b331f25286e512b2194c4351be25a18a293ec35c43df44ada5d1e703fb3b5e7b6668ac5771826129355a14f3e1e8cfbde", @ANYRES16=r5, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x400c980) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)=0x7) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8001, 0x7, 0x8, 0x0, 0x0, 0x1000001, 0x1000003, 0x1}) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000840)={0x9f, 0x3ff, 0x4}, 0xfffffdf2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000)="9f9596572c3ddf58da413c45361b89b83a55cc0c799294bec9dbd3dfa17b7ea5153abfc9d17326f33b89ddf4f4dc4938904879b857631e479d97d9fc2d65d124780f7748f7d6b1b238acce594c30bd6bc27e", 0x52, r1}, 0x68) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 8.401352375s ago: executing program 4 (id=2164): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x84e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030429bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a42884000000000000001880040006801400030062726964676530000000000000000000"], 0x3c}}, 0x20048000) r6 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) get_robust_list(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/119, 0x77}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/253, 0xfd}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000001040)=""/187, 0xbb}], 0x7, &(0x7f0000001240)=[{&(0x7f0000001180)=""/148, 0x94}], 0x1, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 7.504123079s ago: executing program 0 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x900, 0xfffffffffffffffe, 0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b28851a6d0102030109021b21010001000b0904c8020103010203090504"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 7.268123081s ago: executing program 1 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000200)={0x800, 0x20, 0x1000, 0x258, 0x2, 0x6, 0x8, 0x0, {0xffff0001, 0x8, 0x1}, {0x16, 0x8}, {0x1, 0x7ff, 0x1}, {0x6, 0x9}, 0x1, 0x40, 0x6, 0xb3, 0x1, 0x8001, 0x6, 0x8, 0x4, 0x200, 0x7, 0x800, 0x0, 0x100, 0x2}) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000200)={0x800, 0x20, 0x1000, 0x258, 0x2, 0x6, 0x8, 0x0, {0xffff0001, 0x8, 0x1}, {0x16, 0x8}, {0x1, 0x7ff, 0x1}, {0x6, 0x9}, 0x1, 0x40, 0x6, 0xb3, 0x1, 0x8001, 0x6, 0x8, 0x4, 0x200, 0x7, 0x800, 0x0, 0x100, 0x2}) (async) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) (async) 6.97439424s ago: executing program 2 (id=2168): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) 6.796328317s ago: executing program 1 (id=2169): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='autogroup\x00') sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x20001000) pread64(r1, &(0x7f0000000080)=""/248, 0xf8, 0x6c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_genetlink_get_family_id$SEG6(0x0, r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="303163001f64158d42aea7076ae2e5e1b9d32c85fc96360ac6bfbc4c58408121d2927ad835c2f11f596dec46ac7400"/57, @ANYRES16=r3, @ANYBLOB="000229bd7000fbdbdf250200000008000200cb00000014000100ff0100"/41], 0x30}, 0x1, 0x0, 0x0, 0x4040806}, 0x801) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x300, 0x70bd2c, 0x1, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x54}}, 0x24008810) 6.755123941s ago: executing program 2 (id=2170): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x100000e0, 0x7, 0x7, 0x4, 0x2, 0x5, 0x2ca, 0x5}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$TCGETA(r3, 0x5405, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2b8}}], 0x1, 0x810) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r7, 0x0, 0x0, 0x800) 6.622205905s ago: executing program 1 (id=2171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) pipe2$9p(&(0x7f0000000140), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x83, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000040)=0x3ff) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 5.847497942s ago: executing program 0 (id=2172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9f, @mcast2, 0xfffffff9}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x20000}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.546188446s ago: executing program 3 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (fail_nth: 1) 4.659326128s ago: executing program 3 (id=2174): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000002200", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 4.363655522s ago: executing program 4 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a000100000000000000000081800000000000000000000114000200"], 0x30}, 0x1, 0x0, 0x0, 0x20001}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000000000000000000000000000000a1fd485f1b2a9fab38163a6b732d5626d7c71d2325d121d1355c90d34ccbd5f695953824bd56275968d25717113a21a7", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080014000000000005001600fc00000004001200"], 0x48}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f00000017c0), 0x0, 0x0) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0xc91, 0x3, "3e1a0448e5be"}}) syz_usb_control_io(r1, 0x0, 0x0) 4.050316199s ago: executing program 3 (id=2176): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x10000065}]}}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 3.869492877s ago: executing program 3 (id=2177): syz_emit_ethernet(0x1b9, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x183, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1b, 0x9, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f80889"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) (async) syz_mount_image$fuse(0x0, 0x0, 0x80084, 0x0, 0x4, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r4], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x4}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) socket$igmp(0x2, 0x3, 0x2) 3.668006358s ago: executing program 3 (id=2178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/time\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.416353583s ago: executing program 3 (id=2179): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) wait4(0x0, 0x0, 0x8, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x13, 0x2, 'H\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x20, 0x82, 0x2, '\"g'}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000380)={0x0, 0x13, 0x2, 'i\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000200)={0x20, 0x14, 0x2, "b005"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0x84, &(0x7f0000001300)={0x0, 0x14, 0x2, "6783"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.304661915s ago: executing program 2 (id=2180): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x10004, 0x40502) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) getgid() (async) r2 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000740)={0xa0, 0x982f1aeb3b5d4265, 0x0, {{0x5, 0x1, 0x40f, 0x5, 0x6, 0x4, {0x3, 0xf2d, 0x9, 0x1, 0xd13d, 0x67, 0x3, 0x0, 0x3, 0xc000, 0xfeed, 0x0, r2, 0x0, 0x4}}, {0x0, 0x8}}}, 0xa0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0xffffffff) (async) r4 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000040)={'ip_vti0\x00', @ifru_settings={0x2, 0x0, @fr=0x0}}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x101b}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x101b}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c01000048311dbd6086d0ec0e51503c75ff8113f31d3a117e2d8a0b7877200206d27453b83cc86166b8b407de5ae44deb6cb0f68aae90fa3e44218ab232ce8ff039381cdb8ec567cfec8d7ee15d5a7f78cc7825e8e1646e4c485b81f6eaf85ceeeeff7628d67a2072959de1be3a68", @ANYRES16=r7, @ANYBLOB="000128bd7000fcdbdf252a0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000007f00a8007c859e0a83e8375d2856dc6f8a3f2f6dc523bd08252ff2d800f26a6ea6ed4c019f2c98d6d3c8d2d4ccde4e99a3e29776501fbb57873d3758648e964af1ddd933813e7a5ec68ec75629e5862fa263e4ac3ef5b589d359ea35cfb8d23af6db84c24d9a3d0d7791b2b862b0bb752605ec0f07c4d4061e1e4b660651bf00080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800030001000000"], 0x12c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r8 = gettid() syz_open_procfs(r8, &(0x7f00000000c0)='net/snmp6\x00') 3.195524599s ago: executing program 1 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f23f835c00000a00f23f8660f2263b9f30b00000f323666420f3a428ce80c000000003e3e6767450f01cf6536d0260f68f8f822d1b7900000c0fe", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 2.757775159s ago: executing program 2 (id=2182): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x10010, r1, 0x8000000) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x80000204}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10}) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x34, 0x2004, @fd_index=0x3, 0x8000, &(0x7f0000000500)=[{&(0x7f0000000000)="926c6d7da9e58f69c557f71aa9c018e3118e8f82d8b98eb8b79f373eb0fbd52f5a518dacdaf3b35f18d28139a6b129840bec0f00f367c0ea9d90e7a1f9793f6a", 0x40}, {&(0x7f0000000040)="88437a8e2f05f956947d7498df5d4052ab3f74b41912e7265a478c15b8836208c959238a3e73ac057ef1120afbed30955fba1c1d17b5f344aea7e8901ac86611dd0abe9faadc3bf3b9934e406657e261b87a371e84440db7ec5daeb607d4fee50c395043c9e57de25b10074d26a9b83ccfbba16c671af2c937c2eafe60f58ad29a54e194a4d1f9a32968d59568cfa72b21ac403a2ef9a95998ce155db7a51bdf15256ebca0696272d0aff4be74", 0xad}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000180)="8457fb4fb8cb3ea872b5ab3376513c57f9b47ecb89500a037d3e7c1d6064009b4c8861af963e70156372a3bcdf38f0e219b172f5c297ee6c5c13cda4715121fd5793710075b62240fc6f4f27b2d428a57abc", 0x52}, {&(0x7f0000000200)="7c327f97f21fa81b2daaf65873960c8335b514917d5252a50ea8b4979960f42f4c91405314ddb1c417b9c89b95df61df8693a833a8d4c0a216534106bb9fd17be906ab5cc1a53e1160642eb0b0bbb505b100c6bd85681a1ab1b60c146200005125d495a1ceac222ac62c7d942ed16012a7e45f74d590682923b765e0f6f8cf500653357fae26d32b19e6ac2a66e977947680b4f106fb4acdde8fe6e03f7b86e9264db7033fe2d57f996e453907e3e74fa86ddcd9948af32454fcb2ecad7b2b905dab226ca8bbd1b6a29afd340a93962c0e367384b787b512f7dddc8baa2f551d", 0xe0}, {&(0x7f0000000100)}, {&(0x7f0000000300)="81a191e4e3f0de1b17c76655e7d83fdf5c7c4be23858746013ca2156645b1cb86f856bc618580dccc271dc4e65384ba30a17f639cc3d64f9c35a6fbc483b394698f3884f5e0afb4e48b050ca5b54c1810f5a628fac6b4e80d1f34a9a4d50aa88c89ce3aaf9ca7b5f090884bcf5176d67f5e0a9edafbe0dc6becd1493a59f17fd2c141bbd8eadcc9e02e2a7e8ba7c1ddc5ac74b7d1937c2df3743b6fe3bf37ac38c59446949ba555af7838f772256d05766578bba5b40a095ece1489e8a81b8354509859b40b1ed55", 0xc8}, {&(0x7f0000000480)="5a368835475a8419fbef18f59fc76b83f082993b781fd0e4e5934744c834b497c34bbbc65b6502f6e0f280ebefc2544fa1ae2ab3317d0762e6d67e03bd80066612b1982d7543f630d447406dda464e67e82fe1c9f53a516e9e668f54c418de08c9c81906502ec0c1c2c0cdd7d856127be0cca4b568036e179286549f148f", 0x7e}], 0x8, 0xc, 0x0, {0x1}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-p'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.31435023s ago: executing program 0 (id=2183): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffcb}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0}, 0x94) 2.227876678s ago: executing program 0 (id=2184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}}, 0x24}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x133001, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xffffffffffffffff) 1.968247505s ago: executing program 2 (id=2185): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x84e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030429bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a42884000000000000001880040006801400030062726964676530000000000000000000"], 0x3c}}, 0x20048000) r6 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) get_robust_list(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/119, 0x77}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/253, 0xfd}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000001040)=""/187, 0xbb}], 0x7, &(0x7f0000001240)=[{&(0x7f0000001180)=""/148, 0x94}], 0x1, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1.178348807s ago: executing program 4 (id=2186): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000524500", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 731.042589ms ago: executing program 4 (id=2187): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xa, 0xe, 0x3, 0x10}, 0x4c, [0xffffffff, 0x140000, 0x9, 0x400, 0x2, 0x4, 0x9, 0x5, 0x4, 0x6, 0x5, 0x8, 0x7, 0x0, 0x8, 0x4, 0x4, 0xc, 0x0, 0x7e01, 0x42, 0xb, 0x9, 0x4, 0x1, 0x7, 0x28b, 0x3, 0x5, 0x5, 0x8, 0x4, 0x80000001, 0x7, 0x7, 0x4, 0x3, 0xf64c, 0x0, 0x4, 0x9, 0x8, 0x5, 0x19, 0xfffffffd, 0x0, 0x2, 0x2000, 0x0, 0x3, 0x7fffffff, 0x7fff, 0xb9d, 0xb9c, 0x3, 0x8, 0xfffffff8, 0x4, 0x4000005, 0x7a23, 0x2, 0x400, 0x85, 0x6e], [0x8000, 0x4, 0x6, 0x4, 0x3, 0x57bb, 0xd71a, 0xb, 0x12, 0x4, 0x8, 0x4, 0x5, 0x7, 0x4, 0x10001, 0x7, 0x1, 0x0, 0x0, 0xf, 0x9, 0xfffffff7, 0x0, 0x4, 0xbc4e, 0x9, 0x5, 0xddc6, 0x4, 0x7ff, 0x9c, 0xb8f, 0xc, 0xfffffbd6, 0x0, 0x9, 0xfffffff4, 0x5, 0x9, 0x0, 0x1, 0xfffffff7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x7, 0x10000, 0x101, 0x5, 0xfee, 0x8, 0x6, 0xfffffff7, 0x4, 0x9, 0x5, 0x8, 0x4, 0x1, 0x3, 0x2], [0xffffffff, 0x3, 0x8, 0x7, 0x26a, 0x0, 0x10000, 0x9ae, 0x81, 0x1, 0x9, 0x0, 0x1, 0x6, 0xe83a, 0x1, 0x8, 0x0, 0x3, 0x2, 0x1000, 0xa, 0x1ea7, 0x3, 0x218, 0xe, 0x10, 0x0, 0x1, 0x1a0, 0x40, 0x6, 0xa, 0x5, 0xa, 0x7, 0x4, 0x80, 0x1, 0x2adb, 0xf, 0x7, 0x7, 0x9, 0xfffffff3, 0x5, 0x3, 0x7, 0x1000, 0xd, 0x1, 0x80000002, 0x3, 0x0, 0x3, 0x7ff, 0x8, 0xfffffffe, 0x9, 0x10000, 0x2, 0x4c, 0x1800, 0x2], [0x21, 0x1, 0x6, 0xcbdc, 0x7, 0xc, 0x3b0, 0xe, 0x8621, 0x3, 0x2, 0x4, 0x5, 0x9, 0xb, 0x400, 0x2, 0x7ff, 0x2, 0x400, 0x9, 0x1, 0x80000000, 0x1ff, 0xfffffffd, 0x7, 0xffff, 0x3, 0x40, 0x1, 0x6, 0x6, 0x2a, 0x6, 0x8, 0x10007, 0x2, 0xffff7aaf, 0x6, 0xf, 0x0, 0x0, 0x7, 0x10001, 0xdd17, 0x6, 0x7, 0xa9, 0x1, 0x4, 0x10, 0x8, 0x800, 0x4, 0x2, 0x3, 0x0, 0x0, 0xfffffff7, 0xa, 0x3, 0x5, 0x2, 0x9]}, 0x45c) 0s ago: executing program 1 (id=2188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9f, @mcast2, 0xfffffff9}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x20000}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): 6gretap2): failed to get link speed/duplex [ 836.463389][ T5987] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 836.533924][T13071] syzkaller0: entered promiscuous mode [ 836.539435][T13071] syzkaller0: entered allmulticast mode [ 836.549386][T13071] ip_vti0: Caught tx_queue_len zero misconfig [ 836.557366][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 836.566803][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1816'. [ 836.613415][ T5987] usb 3-1: device descriptor read/64, error -71 [ 836.874013][ T5987] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 837.013667][ T5987] usb 3-1: device descriptor read/64, error -71 [ 837.053324][ T6174] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 837.124395][ T5971] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 837.132492][ T5987] usb usb3-port1: attempt power cycle [ 837.223714][ T6174] usb 1-1: Using ep0 maxpacket: 8 [ 837.235567][ T6174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 837.251680][ T6174] usb 1-1: config 0 has no interfaces? [ 837.265933][ T6174] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 837.280149][ T6174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.289221][ T5971] usb 4-1: device descriptor read/64, error -71 [ 837.296631][ T6174] usb 1-1: Product: syz [ 837.300939][ T6174] usb 1-1: Manufacturer: syz [ 837.305940][ T6174] usb 1-1: SerialNumber: syz [ 837.314379][ T6174] usb 1-1: config 0 descriptor?? [ 837.473701][ T5987] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 837.514203][ T5987] usb 3-1: device descriptor read/8, error -71 [ 837.533260][ T5971] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 837.544063][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.585839][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.683251][ T5971] usb 4-1: device descriptor read/64, error -71 [ 837.773481][ T5987] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 837.782450][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 837.793612][ T5971] usb usb4-port1: attempt power cycle [ 837.801748][ T5987] usb 3-1: device descriptor read/8, error -71 [ 837.914597][ T5987] usb usb3-port1: unable to enumerate USB device [ 838.163231][ T5971] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 838.354514][ T5971] usb 4-1: device descriptor read/8, error -71 [ 838.435757][ T5945] usb 1-1: USB disconnect, device number 101 [ 838.603224][ T5971] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 838.624270][ T5971] usb 4-1: device descriptor read/8, error -71 [ 838.733853][ T5971] usb usb4-port1: unable to enumerate USB device [ 838.893217][ T5945] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 839.063927][ T5945] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 839.091946][ T5945] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 839.104157][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.112275][ T5945] usb 1-1: Product: syz [ 839.117246][ T5945] usb 1-1: Manufacturer: syz [ 839.128588][ T5945] usb 1-1: SerialNumber: syz [ 839.417685][T13108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1826'. [ 839.451150][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1826'. [ 839.551486][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 840.203533][ T9696] net_ratelimit: 32 callbacks suppressed [ 840.203588][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 840.464038][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 840.613882][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 840.723582][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 840.974253][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 841.145057][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 841.153511][ T30] audit: type=1326 audit(1765168895.164:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 841.253307][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 841.506806][T13135] pim6reg: entered allmulticast mode [ 841.575172][ T30] audit: type=1326 audit(1765168895.174:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 841.603486][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 841.619922][T13138] tipc: Enabling of bearer rejected, failed to enable media [ 841.640822][ T30] audit: type=1326 audit(1765168895.174:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 841.730063][ T30] audit: type=1326 audit(1765168895.174:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 841.791715][ T30] audit: type=1326 audit(1765168895.174:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 841.863539][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 841.919652][ T30] audit: type=1326 audit(1765168895.174:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 841.958854][ T30] audit: type=1326 audit(1765168895.174:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 842.017886][ T30] audit: type=1326 audit(1765168895.174:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 842.040855][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 842.059320][ T30] audit: type=1326 audit(1765168895.174:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 842.098379][ T30] audit: type=1326 audit(1765168895.174:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f2118f749 code=0x7ffc0000 [ 842.131820][ T5987] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 842.307329][T13150] fuse: Bad value for 'user_id' [ 842.312280][T13150] fuse: Bad value for 'user_id' [ 842.319188][ T5987] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 842.345239][ T5987] usb 2-1: config 0 has no interface number 1 [ 842.353036][T13148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1837'. [ 842.371861][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 842.371901][ T5987] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 842.371931][ T5987] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 842.371967][ T5987] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 842.483231][ T5987] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 842.543216][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 842.546196][ T5987] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 842.546239][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.546264][ T5987] usb 2-1: Product: syz [ 842.546283][ T5987] usb 2-1: Manufacturer: syz [ 842.546302][ T5987] usb 2-1: SerialNumber: syz [ 842.549401][ T5987] usb 2-1: config 0 descriptor?? [ 842.550846][T13145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 842.558564][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 842.560732][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 842.568954][T13154] binder: 13146:13154 ioctl c0306201 200000000100 returned -14 [ 842.592571][ T5987] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.599822][ T5945] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 842.626893][ T5987] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.649466][ T5945] usb 1-1: USB disconnect, device number 102 [ 842.770460][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.771354][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.774434][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.774944][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.800370][ T5987] usb 2-1: USB disconnect, device number 89 [ 842.823228][ T5966] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 842.953272][ T5966] usb 3-1: device descriptor read/64, error -71 [ 842.988099][T13160] udevd[13160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.203690][ T5966] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 843.223734][ T7834] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 843.363669][ T5966] usb 3-1: device descriptor read/64, error -71 [ 843.484218][ T5966] usb usb3-port1: attempt power cycle [ 843.523229][ T7834] usb 5-1: Using ep0 maxpacket: 16 [ 843.530526][ T7834] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 843.556001][ T7834] usb 5-1: config 0 has no interface number 0 [ 843.594398][ T7834] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 843.610441][ T7834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.628068][ T7834] usb 5-1: Product: syz [ 843.635351][ T7834] usb 5-1: Manufacturer: syz [ 843.640013][ T7834] usb 5-1: SerialNumber: syz [ 843.656756][ T7834] usb 5-1: config 0 descriptor?? [ 843.677714][ T7834] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 843.843300][ T5966] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 843.864153][ T5966] usb 3-1: device descriptor read/8, error -71 [ 843.983422][ T7833] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 844.113923][ T5966] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 844.135320][ T5966] usb 3-1: device descriptor read/8, error -71 [ 844.146028][T13178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.160749][T13178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.176134][ T7833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 844.188189][ T7833] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 844.201975][ T7833] usb 4-1: can't read configurations, error -71 [ 844.245694][ T5966] usb usb3-port1: unable to enumerate USB device [ 844.834429][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 845.105560][T13189] fuse: Bad value for 'user_id' [ 845.117664][T13189] fuse: Bad value for 'user_id' [ 845.144926][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1850'. [ 845.225643][ T6887] net_ratelimit: 27 callbacks suppressed [ 845.225690][ T6887] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 845.311469][T13203] loop9: detected capacity change from 0 to 7 [ 845.336969][ T6561] Dev loop9: unable to read RDB block 7 [ 845.342947][ T7833] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 845.350910][ T6561] loop9: unable to read partition table [ 845.359238][ T6561] loop9: partition table beyond EOD, truncated [ 845.367530][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 845.454255][T13203] Dev loop9: unable to read RDB block 7 [ 845.481346][T13203] loop9: unable to read partition table [ 845.493607][T13203] loop9: partition table beyond EOD, truncated [ 845.503294][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 845.512486][ T7833] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 845.521058][T13203] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 845.534269][ T6561] Dev loop9: unable to read RDB block 7 [ 845.539917][ T6561] loop9: unable to read partition table [ 845.554872][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.565767][ T6561] loop9: partition table beyond EOD, truncated [ 845.574190][T13207] Dev loop9: unable to read RDB block 7 [ 845.574327][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.590437][T13207] loop9: unable to read partition table [ 845.605471][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.614224][T13207] loop9: partition table beyond EOD, truncated [ 845.622024][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.624555][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.636103][ T6887] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 845.646719][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.670177][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 845.682520][T13207] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 845.697177][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 845.747866][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.778421][ T7833] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.811399][T13218] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 845.821151][ T7833] usb 4-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 845.830766][ T7833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.867423][ T6887] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 845.874146][ T7833] pwc: Logitech QuickCam detected (reserved ID). [ 845.881566][ T7833] pwc: Warning: more than 1 configuration available. [ 845.983278][ T6887] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 846.007799][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 846.019984][T13222] veth0_macvtap: left promiscuous mode [ 846.071506][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.081453][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.096834][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.108551][ T7833] pwc: Failed to set LED on/off time (-71) [ 846.127971][ T7833] pwc: send_video_command error -71 [ 846.129616][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.179315][ T7833] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 846.208080][ T5966] usb 5-1: USB disconnect, device number 16 [ 846.231440][ T7833] Philips webcam 4-1:250.0: probe with driver Philips webcam failed with error -71 [ 846.273601][ T7833] usb 4-1: USB disconnect, device number 119 [ 846.373311][ T7834] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 846.443194][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 846.523208][ T7834] usb 1-1: Using ep0 maxpacket: 16 [ 846.546233][ T7834] usb 1-1: config 0 has no interfaces? [ 846.553901][ T7834] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 846.563686][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 846.577021][ T7834] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 846.661544][ T7834] usb 1-1: Manufacturer: syz [ 846.684353][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 846.711596][ T7834] usb 1-1: config 0 descriptor?? [ 846.800013][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 846.887724][T13237] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 847.182537][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1862'. [ 847.476900][T13249] fuse: Bad value for 'fd' [ 847.514739][ T7834] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 847.653274][ T7834] usb 2-1: device descriptor read/64, error -71 [ 847.913500][ T7834] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 848.070837][ T7834] usb 2-1: device descriptor read/64, error -71 [ 848.193880][ T7834] usb usb2-port1: attempt power cycle [ 848.384203][ T6174] usb 1-1: USB disconnect, device number 103 [ 848.393401][ T7833] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 848.512458][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 848.563436][ T7834] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 848.592025][ T7833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.613704][ T7834] usb 2-1: device descriptor read/8, error -71 [ 848.637016][ T7833] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 848.659594][ T7833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.744713][ T7833] usb 3-1: config 0 descriptor?? [ 848.853484][ T7834] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 848.889212][ T7834] usb 2-1: device descriptor read/8, error -71 [ 849.015013][ T7834] usb usb2-port1: unable to enumerate USB device [ 849.172691][ T7833] holtek 0003:1241:5015.0027: unknown main item tag 0x0 [ 849.205978][ T7833] holtek 0003:1241:5015.0027: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 849.228773][ T7833] holtek 0003:1241:5015.0027: no inputs found [ 849.409692][T13290] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 850.264462][ T5922] net_ratelimit: 26 callbacks suppressed [ 850.264486][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 850.393329][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 850.513513][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 850.633520][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 850.764367][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 850.803202][ T6174] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 850.911317][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 850.936349][ T6174] usb 4-1: device descriptor read/64, error -71 [ 851.103198][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 851.223604][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 851.253247][ T6174] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 851.262487][T13327] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 851.931869][ T6174] usb 4-1: device descriptor read/64, error -71 [ 852.110603][ T6174] usb usb4-port1: attempt power cycle [ 852.124498][T13327] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 852.133411][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 852.177955][ T5987] usb 3-1: USB disconnect, device number 115 [ 852.270011][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 852.514244][ T6174] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 852.544569][ T6174] usb 4-1: device descriptor read/8, error -71 [ 852.643272][ T5987] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 852.803290][ T6174] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 852.853669][ T5987] usb 3-1: config index 0 descriptor too short (expected 62498, got 34) [ 852.865933][ T5987] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 852.893838][ T6174] usb 4-1: device descriptor read/8, error -71 [ 852.903152][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 852.912086][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.974152][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 853.023609][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 853.023660][ T7833] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 853.043727][ T6174] usb usb4-port1: unable to enumerate USB device [ 853.102087][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.135113][ T5987] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 853.158293][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.176516][ T5987] usb 3-1: Product: syz [ 853.187590][ T5987] usb 3-1: Manufacturer: syz [ 853.192220][ T5987] usb 3-1: SerialNumber: syz [ 853.203196][ T7833] usb 2-1: Using ep0 maxpacket: 32 [ 853.208122][ T5987] usb 3-1: config 0 descriptor?? [ 853.218746][ T7833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.247677][ T7833] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 853.263545][ T7833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.292053][ T7833] usb 2-1: Product: syz [ 853.297544][ T7833] usb 2-1: Manufacturer: syz [ 853.302359][ T7833] usb 2-1: SerialNumber: syz [ 853.339526][ T7833] usb 2-1: config 0 descriptor?? [ 853.348471][ T7833] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 853.546613][ T7833] gspca_sunplus: reg_r err -32 [ 853.590411][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 853.717380][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.757895][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.944862][ T5987] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 854.106767][ T5987] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 854.116115][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.454726][ T5987] usb 5-1: config 0 descriptor?? [ 854.488221][ T5987] cp210x 5-1:0.0: cp210x converter detected [ 854.579683][T13370] ptrace attach of "./syz-executor exec"[5883] was attempted by ""[13370] [ 854.632592][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.651746][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.668842][ T5987] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 854.690515][ T5987] cp210x 5-1:0.0: querying part number failed [ 854.703578][ T5987] usb 5-1: cp210x converter now attached to ttyUSB0 [ 854.718815][ T5987] usb 5-1: USB disconnect, device number 17 [ 854.723600][ T7833] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 854.729615][ T5987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 854.744186][ T7833] usb 2-1: USB disconnect, device number 94 [ 854.757620][ T5987] cp210x 5-1:0.0: device disconnected [ 854.850046][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 855.063365][ T7833] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 855.213220][ T7833] usb 2-1: Using ep0 maxpacket: 16 [ 855.233724][ T7833] usb 2-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 855.256721][ T7833] usb 2-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.282694][ T7833] usb 2-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 855.323467][ T9696] net_ratelimit: 25 callbacks suppressed [ 855.323467][ T7833] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.323554][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 855.329181][ T7833] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 855.329209][ T7833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.395825][ T7833] usb 2-1: config 0 descriptor?? [ 855.493236][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 855.522442][T13395] netlink: 'syz.3.1903': attribute type 27 has an invalid length. [ 855.650515][ T7833] usbhid 2-1:0.0: can't add hid device: -71 [ 855.656825][ T7833] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 855.674140][ T7833] usb 2-1: USB disconnect, device number 95 [ 856.183288][ T5966] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 856.315811][T13413] fuse: Bad value for 'fd' [ 856.363469][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 856.376648][ T5966] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 856.411159][ T5966] usb 4-1: config 0 has no interface number 0 [ 856.475299][ T5966] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 856.519863][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.550438][ T5966] usb 4-1: Product: syz [ 856.561648][ T5966] usb 4-1: Manufacturer: syz [ 856.571775][ T5966] usb 4-1: SerialNumber: syz [ 856.603299][ T5966] usb 4-1: config 0 descriptor?? [ 856.655277][ T5966] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 857.125464][T13395] bond0: left promiscuous mode [ 857.169272][T13395] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 857.180708][ T5966] gspca_spca1528: reg_w err -110 [ 857.345812][ T5966] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 857.686948][T13395] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 857.879861][T13395] bond1: left allmulticast mode [ 857.903992][T13395] gretap1: left allmulticast mode [ 857.993998][T13395] bridge0: left promiscuous mode [ 858.001350][ T5971] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 858.173349][ T5971] usb 5-1: Using ep0 maxpacket: 8 [ 858.183383][ T5971] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 858.219059][ T5971] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 858.243295][ T5971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 858.280325][ T5971] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 858.302799][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.332078][ T5971] usb 5-1: Product: syz [ 858.349931][ T5971] usb 5-1: Manufacturer: syz [ 858.384489][ T5971] usb 5-1: SerialNumber: syz [ 858.473740][ T5971] usb 5-1: config 0 descriptor?? [ 858.521161][ T5971] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 858.555509][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 858.653461][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1911'. [ 858.696446][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.707861][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.720324][ T6887] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 858.751139][ T5971] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 858.768381][ T5971] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 858.798985][ T5971] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 858.843315][ T7833] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 858.845729][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 858.938408][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.948861][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.003281][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 859.011006][ T7833] usb 1-1: Using ep0 maxpacket: 32 [ 859.023619][ T7833] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 859.064755][ T7833] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 859.123205][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 859.163307][ T7833] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.210702][ T7833] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 859.243250][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 859.269790][ T7833] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 859.289538][ T7833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.314470][ T7833] usb 1-1: Product: syz [ 859.338879][ T7833] usb 1-1: Manufacturer: syz [ 859.357067][ T7833] usb 1-1: SerialNumber: syz [ 859.363491][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 859.418186][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 859.434102][ T7833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input50 [ 859.503352][ T6887] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 859.666401][ T5971] usb 4-1: USB disconnect, device number 124 [ 859.683353][ T7833] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 859.692520][ T7833] (id 0x00) [ 859.923581][ T7833] rc_core: IR keymap rc-imon-pad not found [ 859.935499][ T7833] Registered IR keymap rc-empty [ 859.946220][ T7833] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 859.981044][ T7833] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 860.034767][ T7833] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 860.059299][ T7833] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input51 [ 860.095028][ T7833] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:104> initialized [ 860.163265][ T5966] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 860.323395][ T5966] usb 4-1: Using ep0 maxpacket: 8 [ 860.333889][ T5966] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 860.344719][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.353030][ T5966] usb 4-1: Product: syz [ 860.358144][ T5966] usb 4-1: Manufacturer: syz [ 860.363261][ T5966] usb 4-1: SerialNumber: syz [ 860.383826][ T5966] usb 4-1: config 0 descriptor?? [ 860.403263][ T7833] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 860.433742][ T6071] net_ratelimit: 7 callbacks suppressed [ 860.433765][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 860.542761][ T5971] usb 5-1: USB disconnect, device number 18 [ 860.556386][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 860.593260][ T7833] usb 2-1: Using ep0 maxpacket: 8 [ 860.598658][ T5966] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 860.628081][ T7833] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 860.652782][ T7833] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 860.669682][ T5966] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 860.673422][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 860.706377][ T7833] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 860.780037][ T5966] usb 4-1: USB disconnect, device number 125 [ 860.806818][ T7833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 860.846136][ T7833] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 860.860834][ T7833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.871388][ T7833] usb 2-1: Product: syz [ 860.882833][ T7833] usb 2-1: Manufacturer: syz [ 860.887319][T13454] random: crng reseeded on system resumption [ 860.899098][ T7833] usb 2-1: SerialNumber: syz [ 860.899587][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 860.966517][ T5971] hid-generic 00A0:0006:0003.0028: unknown main item tag 0x0 [ 860.981309][ T5971] hid-generic 00A0:0006:0003.0028: unknown main item tag 0x0 [ 861.008896][ T5971] hid-generic 00A0:0006:0003.0028: hidraw0: HID v0.05 Device [syz1] on syz0 [ 861.018715][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 861.032706][ T7833] usb 2-1: config 0 descriptor?? [ 861.060803][ T7833] hub 2-1:0.0: bad descriptor, ignoring hub [ 861.075602][ T7833] hub 2-1:0.0: probe with driver hub failed with error -5 [ 861.143629][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 861.227383][T13455] imon:send_packet: packet tx failed (-71) [ 861.231922][ T7833] usb 1-1: USB disconnect, device number 104 [ 861.253493][T13455] imon:vfd_write: send packet #3 failed [ 861.259520][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 861.352459][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.382750][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.404575][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 861.514440][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 861.623929][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 861.755939][T13464] fuse: Bad value for 'fd' [ 862.284258][ T7833] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 862.633474][ T7833] usb 4-1: Using ep0 maxpacket: 8 [ 862.640879][ T7833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.651549][ T7833] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 862.664033][ T7833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 862.678548][ T7833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 862.690754][ T7833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 862.710838][ T7833] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 862.720836][ T7833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 862.729909][ T7833] usb 4-1: Product: syz [ 862.742080][ T7833] usb 4-1: Manufacturer: syz [ 862.759412][ T7833] usb 4-1: SerialNumber: syz [ 862.836271][ T7833] usb 4-1: config 0 descriptor?? [ 862.882092][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 863.125864][ T7833] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 863.137659][ T7833] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 863.326252][ T7833] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 863.337280][ T7833] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 863.347527][ T7833] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 863.383549][ T5971] usb 2-1: USB disconnect, device number 96 [ 863.421699][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.459719][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.517477][ T7833] usb 4-1: USB disconnect, device number 126 [ 863.907590][T13499] fuse: Bad value for 'fd' [ 864.553228][ T5966] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 864.973163][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 865.073427][ T5966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 865.132353][ T5966] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 865.161186][ T5966] usb 1-1: config 0 has no interface number 0 [ 865.171666][ T5966] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 865.195267][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1938'. [ 865.220335][ T5966] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 865.255453][ T5966] usb 1-1: config 0 interface 88 has no altsetting 0 [ 865.273997][ T5966] usb 1-1: language id specifier not provided by device, defaulting to English [ 865.294461][ T5966] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 865.305738][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 865.323232][ T5966] usb 1-1: Product: syz [ 865.327604][ T5966] usb 1-1: SerialNumber: syz [ 865.346829][ T5966] usb 1-1: config 0 descriptor?? [ 865.453218][ T5931] net_ratelimit: 30 callbacks suppressed [ 865.453243][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 865.618528][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 865.667069][T13529] tipc: Enabling of bearer rejected, failed to enable media [ 865.688345][T13512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.697355][T13512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.824340][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 865.865164][ T5966] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input52 [ 865.949368][ T5966] usb 1-1: USB disconnect, device number 105 [ 865.974081][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 866.103830][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 866.223313][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 866.335168][T13541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.383571][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 866.493504][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 866.604303][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 866.643733][ T5987] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 866.833626][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 866.850839][ T5987] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.893153][ T5987] usb 2-1: config 0 has no interface number 0 [ 866.920681][ T5987] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 866.976236][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.005568][ T5987] usb 2-1: Product: syz [ 867.053614][ T5987] usb 2-1: Manufacturer: syz [ 867.058292][ T5987] usb 2-1: SerialNumber: syz [ 867.110331][ T5987] usb 2-1: config 0 descriptor?? [ 867.165491][ T5987] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 867.516107][T13568] loop4: detected capacity change from 0 to 7 [ 867.567493][T13568] Dev loop4: unable to read RDB block 7 [ 867.574666][T13568] loop4: AHDI p1 p3 [ 867.587810][T13568] loop4: partition table partially beyond EOD, truncated [ 867.624797][T13568] loop4: p1 start 16777216 is beyond EOD, truncated [ 867.759257][ T5987] gspca_spca1528: reg_w err -110 [ 867.783331][ T5987] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 868.159083][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.229539][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.729079][T13584] could not allocate digest TFM handle poly1305-arm [ 869.237582][ T5987] usb 2-1: USB disconnect, device number 97 [ 869.547662][T13600] loop4: detected capacity change from 0 to 7 [ 869.556898][ T6561] Dev loop4: unable to read RDB block 7 [ 869.562515][ T6561] loop4: AHDI p1 p3 [ 869.567772][ T6561] loop4: partition table partially beyond EOD, truncated [ 869.578174][ T6561] loop4: p1 start 16777216 is beyond EOD, truncated [ 869.612362][T13600] Dev loop4: unable to read RDB block 7 [ 869.618148][T13600] loop4: AHDI p1 p3 [ 869.622149][T13600] loop4: partition table partially beyond EOD, truncated [ 869.623238][ T5987] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 869.629858][T13600] loop4: p1 start 16777216 is beyond EOD, truncated [ 869.741904][ T5971] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 869.916863][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.938768][ T5971] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 869.969086][ T5987] usb 1-1: Using ep0 maxpacket: 8 [ 870.003459][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.016953][ T5987] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 870.028076][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.039611][ T5987] usb 1-1: Product: syz [ 870.046069][ T5971] usb 2-1: config 0 descriptor?? [ 870.057565][ T5987] usb 1-1: Manufacturer: syz [ 870.062207][ T5987] usb 1-1: SerialNumber: syz [ 870.124229][ T5987] usb 1-1: config 0 descriptor?? [ 870.158752][ T5987] ipw 1-1:0.0: IPWireless converter converter detected [ 870.232243][T13608] binder_alloc: 13607: pid 13607 spamming oneway? 1 buffers allocated for a total size of 4096 [ 870.284203][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.293766][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.326481][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.342608][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.379731][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.397628][T13592] sit0: Caught tx_queue_len zero misconfig [ 870.423811][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.426340][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.454093][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.464395][ T9699] net_ratelimit: 32 callbacks suppressed [ 870.464415][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 870.475959][ T5966] usb 1-1: USB disconnect, device number 106 [ 870.484747][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.506135][ T5966] ipw 1-1:0.0: device disconnected [ 870.521628][ T5971] usbhid 2-1:0.0: can't add hid device: -32 [ 870.537107][ T5971] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 870.547314][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.569654][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.601433][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.624801][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 870.743533][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 870.853403][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 870.974841][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 871.091217][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 871.203270][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 871.313291][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 871.333455][ T7833] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 871.424648][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 871.503334][ T7833] usb 1-1: Using ep0 maxpacket: 8 [ 871.516390][ T7833] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 871.525706][ T7833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.549136][ T7833] pvrusb2: Hardware description: Terratec Grabster AV400 [ 871.560127][ T7833] pvrusb2: ********** [ 871.570038][ T7833] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 871.570175][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 871.595608][ T7833] pvrusb2: Important functionality might not be entirely working. [ 871.617202][ T7833] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 871.690257][ T7833] pvrusb2: ********** [ 871.803988][ T2345] pvrusb2: Invalid write control endpoint [ 871.938084][ T2345] pvrusb2: Invalid write control endpoint [ 871.956629][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 871.970791][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 872.024509][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 872.070839][T13634] macsec1: entered promiscuous mode [ 872.073626][ T2345] pvrusb2: Device being rendered inoperable [ 872.094999][T13634] veth0_to_bridge: entered promiscuous mode [ 872.096852][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 872.108529][T13634] macsec1: entered allmulticast mode [ 872.113726][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 872.114576][T13634] veth0_to_bridge: entered allmulticast mode [ 872.145235][ T2345] pvrusb2: Attached sub-driver cx25840 [ 872.151304][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 872.190105][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 872.191652][T13634] veth0_to_bridge: left allmulticast mode [ 872.208609][T13634] veth0_to_bridge: left promiscuous mode [ 872.292104][ T7833] usb 1-1: USB disconnect, device number 107 [ 872.422212][ T5966] usb 2-1: USB disconnect, device number 98 [ 872.883217][ T5966] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 872.943635][ T7833] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 873.044212][ T5966] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 873.063270][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.089415][ T5966] usb 2-1: Product: syz [ 873.106216][ T5966] usb 2-1: Manufacturer: syz [ 873.110870][ T5966] usb 2-1: SerialNumber: syz [ 873.118264][ T7833] usb 4-1: Using ep0 maxpacket: 32 [ 873.129396][ T7833] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 873.141476][ T5966] usb 2-1: config 0 descriptor?? [ 873.152066][ T7833] usb 4-1: config 0 has no interface number 0 [ 873.162588][ T5966] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 873.172983][ T7833] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.191378][ T7833] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 49455, setting to 1024 [ 873.204461][ T7833] usb 4-1: config 0 interface 2 has no altsetting 0 [ 873.215448][ T7833] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 873.224996][ T7833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.233035][ T7833] usb 4-1: Product: syz [ 873.238346][ T7833] usb 4-1: Manufacturer: syz [ 873.246303][ T7833] usb 4-1: SerialNumber: syz [ 873.283426][T13650] could not allocate digest TFM handle poly1305-arm [ 873.294122][ T7833] usb 4-1: config 0 descriptor?? [ 873.366491][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.384238][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.398324][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.414984][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.435921][ T5971] usb 2-1: USB disconnect, device number 99 [ 873.502298][ T7833] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 873.672959][T13668] sctp: [Deprecated]: syz.2.1986 (pid 13668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.672959][T13668] Use struct sctp_sack_info instead [ 873.704149][T13645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.716886][T13645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.765193][ T7833] usb 4-1: USB disconnect, device number 127 [ 873.788601][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.801955][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.830928][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.913949][ T5971] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 874.063322][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 874.077785][ T5971] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 874.096371][ T5971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.119971][ T5971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.137740][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.154404][ T5971] usb 5-1: Product: syz [ 874.166666][ T5971] usb 5-1: Manufacturer: syz [ 874.174122][ T5971] usb 5-1: SerialNumber: syz [ 874.241336][T13683] FAULT_INJECTION: forcing a failure. [ 874.241336][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 874.255032][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.2.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.255069][T13683] Tainted: [L]=SOFTLOCKUP [ 874.255078][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.255092][T13683] Call Trace: [ 874.255101][T13683] [ 874.255110][T13683] dump_stack_lvl+0x189/0x250 [ 874.255144][T13683] ? __pfx____ratelimit+0x10/0x10 [ 874.255174][T13683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.255200][T13683] ? __pfx__printk+0x10/0x10 [ 874.255234][T13683] ? __pfx___might_resched+0x10/0x10 [ 874.255262][T13683] ? fs_reclaim_acquire+0x7d/0x100 [ 874.255292][T13683] should_fail_ex+0x414/0x560 [ 874.255325][T13683] should_failslab+0xa8/0x100 [ 874.255353][T13683] kmem_cache_alloc_noprof+0x88/0x710 [ 874.255385][T13683] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 874.255417][T13683] ? getname_flags+0xb8/0x540 [ 874.255442][T13683] ? __pfx_vfs_write+0x10/0x10 [ 874.255466][T13683] getname_flags+0xb8/0x540 [ 874.255496][T13683] do_sys_openat2+0xbc/0x200 [ 874.255528][T13683] ? __pfx_do_sys_openat2+0x10/0x10 [ 874.255562][T13683] ? ksys_write+0x22a/0x250 [ 874.255585][T13683] ? __pfx_ksys_write+0x10/0x10 [ 874.255609][T13683] __x64_sys_openat+0x138/0x170 [ 874.255644][T13683] do_syscall_64+0xfa/0xf80 [ 874.255674][T13683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.255696][T13683] ? clear_bhb_loop+0x60/0xb0 [ 874.255722][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.255744][T13683] RIP: 0033:0x7f183898df90 [ 874.255787][T13683] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 874.255807][T13683] RSP: 002b:00007f1839898b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 874.255838][T13683] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f183898df90 [ 874.255855][T13683] RDX: 0000000000101301 RSI: 00007f1839898c10 RDI: 00000000ffffff9c [ 874.255871][T13683] RBP: 00007f1839898c10 R08: 0000000000000000 R09: 0000000000000000 [ 874.255885][T13683] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 874.255899][T13683] R13: 00007f1838be6038 R14: 00007f1838be5fa0 R15: 00007f1838d0fa28 [ 874.255935][T13683] [ 874.733250][T13662] fuse: Bad value for 'user_id' [ 874.739351][T13662] fuse: Bad value for 'user_id' [ 874.752688][ T5971] usb 5-1: 0:2 : does not exist [ 874.779833][T13699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.803472][T13699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.825260][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1994'. [ 874.834624][T13698] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 874.841698][T13698] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1994'. [ 875.228085][T13704] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 875.308965][T13704] bond3: entered promiscuous mode [ 875.326635][T13704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 875.417518][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.424023][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.437040][T13706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 875.466097][T13706] bond3: (slave bond4): making interface the new active one [ 875.471122][ T5971] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 875.516181][T13706] bond4: entered promiscuous mode [ 875.533553][T13706] bond3: (slave bond4): Enslaving as an active interface with an up link [ 875.598702][ T5971] usb 5-1: USB disconnect, device number 19 [ 875.633634][ T9696] net_ratelimit: 29 callbacks suppressed [ 875.633652][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 875.688844][ T6561] udevd[6561]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.773896][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 875.836199][T13715] FAULT_INJECTION: forcing a failure. [ 875.836199][T13715] name failslab, interval 1, probability 0, space 0, times 0 [ 875.870939][T13715] CPU: 1 UID: 0 PID: 13715 Comm: syz.0.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.870978][T13715] Tainted: [L]=SOFTLOCKUP [ 875.870993][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.871008][T13715] Call Trace: [ 875.871018][T13715] [ 875.871028][T13715] dump_stack_lvl+0x189/0x250 [ 875.871061][T13715] ? __pfx____ratelimit+0x10/0x10 [ 875.871091][T13715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.871119][T13715] ? __pfx__printk+0x10/0x10 [ 875.871158][T13715] ? __pfx___might_resched+0x10/0x10 [ 875.871181][T13715] ? fs_reclaim_acquire+0x7d/0x100 [ 875.871211][T13715] should_fail_ex+0x414/0x560 [ 875.871243][T13715] should_failslab+0xa8/0x100 [ 875.871272][T13715] __kmalloc_noprof+0xdf/0x800 [ 875.871294][T13715] ? tomoyo_encode+0x28b/0x550 [ 875.871323][T13715] tomoyo_encode+0x28b/0x550 [ 875.871353][T13715] tomoyo_realpath_from_path+0x58d/0x5d0 [ 875.871392][T13715] tomoyo_check_open_permission+0x1c1/0x3b0 [ 875.871425][T13715] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 875.871465][T13715] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 875.871544][T13715] security_file_open+0xb1/0x270 [ 875.871575][T13715] do_dentry_open+0x34e/0x1420 [ 875.871617][T13715] vfs_open+0x3b/0x340 [ 875.871643][T13715] ? path_openat+0x33f3/0x3dd0 [ 875.871665][T13715] path_openat+0x340e/0x3dd0 [ 875.871691][T13715] ? __pfx_stack_trace_save+0x10/0x10 [ 875.871723][T13715] ? stack_depot_save_flags+0x40/0x850 [ 875.871755][T13715] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 875.871782][T13715] ? getname_flags+0xb8/0x540 [ 875.871804][T13715] ? __pfx_path_openat+0x10/0x10 [ 875.871823][T13715] ? __lock_acquire+0x6b6/0x2cf0 [ 875.871855][T13715] do_filp_open+0x1fa/0x410 [ 875.871874][T13715] ? __pfx_do_filp_open+0x10/0x10 [ 875.871909][T13715] ? _raw_spin_unlock+0x28/0x50 [ 875.871929][T13715] ? alloc_fd+0x64c/0x6c0 [ 875.871960][T13715] do_sys_openat2+0x121/0x200 [ 875.871994][T13715] ? __pfx_do_sys_openat2+0x10/0x10 [ 875.872022][T13715] ? ksys_write+0x22a/0x250 [ 875.872041][T13715] ? __pfx_ksys_write+0x10/0x10 [ 875.872061][T13715] __x64_sys_openat+0x138/0x170 [ 875.872090][T13715] do_syscall_64+0xfa/0xf80 [ 875.872115][T13715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.872142][T13715] ? clear_bhb_loop+0x60/0xb0 [ 875.872167][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.872185][T13715] RIP: 0033:0x7f3baaf8df90 [ 875.872202][T13715] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 875.872218][T13715] RSP: 002b:00007f3babd4cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 875.872238][T13715] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f3baaf8df90 [ 875.872251][T13715] RDX: 0000000000101301 RSI: 00007f3babd4cc10 RDI: 00000000ffffff9c [ 875.872264][T13715] RBP: 00007f3babd4cc10 R08: 0000000000000000 R09: 0000000000000000 [ 875.872276][T13715] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 875.872287][T13715] R13: 00007f3bab1e6038 R14: 00007f3bab1e5fa0 R15: 00007f3bab30fa28 [ 875.872316][T13715] [ 875.872346][T13715] ERROR: Out of memory at tomoyo_realpath_from_path. [ 875.923275][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 875.930426][ T5966] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 876.270661][T13721] FAULT_INJECTION: forcing a failure. [ 876.270661][T13721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.355271][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 876.362742][T13721] CPU: 0 UID: 0 PID: 13721 Comm: syz.0.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.362767][T13721] Tainted: [L]=SOFTLOCKUP [ 876.362773][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.362783][T13721] Call Trace: [ 876.362791][T13721] [ 876.362798][T13721] dump_stack_lvl+0x189/0x250 [ 876.362823][T13721] ? __pfx____ratelimit+0x10/0x10 [ 876.362843][T13721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.362862][T13721] ? __pfx__printk+0x10/0x10 [ 876.362893][T13721] should_fail_ex+0x414/0x560 [ 876.362916][T13721] strncpy_from_user+0x36/0x2c0 [ 876.362936][T13721] getname_flags+0xf3/0x540 [ 876.362970][T13721] do_sys_openat2+0xbc/0x200 [ 876.362994][T13721] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.363018][T13721] ? ksys_write+0x22a/0x250 [ 876.363035][T13721] ? __pfx_ksys_write+0x10/0x10 [ 876.363051][T13721] __x64_sys_openat+0x138/0x170 [ 876.363160][T13721] do_syscall_64+0xfa/0xf80 [ 876.363198][T13721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.363222][T13721] ? clear_bhb_loop+0x60/0xb0 [ 876.363250][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.363273][T13721] RIP: 0033:0x7f3baaf8df90 [ 876.363295][T13721] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 876.363315][T13721] RSP: 002b:00007f3babd4cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 876.363341][T13721] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f3baaf8df90 [ 876.363359][T13721] RDX: 0000000000101301 RSI: 00007f3babd4cc10 RDI: 00000000ffffff9c [ 876.363375][T13721] RBP: 00007f3babd4cc10 R08: 0000000000000000 R09: 0000000000000000 [ 876.363386][T13721] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 876.363397][T13721] R13: 00007f3bab1e6038 R14: 00007f3bab1e5fa0 R15: 00007f3bab30fa28 [ 876.363426][T13721] [ 876.664577][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 876.684659][ T5966] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 876.713940][ T5999] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 876.733492][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.741527][ T5966] usb 2-1: Product: syz [ 876.765592][ T5966] usb 2-1: Manufacturer: syz [ 876.770263][ T5966] usb 2-1: SerialNumber: syz [ 876.784464][ T5966] usb 2-1: config 0 descriptor?? [ 876.792234][ T5966] esd_usb 2-1:0.0: sending version message failed [ 876.804472][ T5966] esd_usb 2-1:0.0: probe with driver esd_usb failed with error -22 [ 876.823884][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 876.933515][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 876.991512][ T5966] usb 2-1: USB disconnect, device number 100 [ 877.045856][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 877.144438][ T5971] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 877.175744][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 877.304067][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 877.313577][ T5971] usb 1-1: config index 0 descriptor too short (expected 149, got 148) [ 877.325850][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.338502][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 877.349536][ T5971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 877.360255][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 877.375597][ T5971] usb 1-1: SerialNumber: syz [ 877.398758][ T5971] usb 1-1: 0:2 : does not exist [ 877.778911][T13760] FAULT_INJECTION: forcing a failure. [ 877.778911][T13760] name failslab, interval 1, probability 0, space 0, times 0 [ 877.833348][T13760] CPU: 0 UID: 0 PID: 13760 Comm: syz.4.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.833386][T13760] Tainted: [L]=SOFTLOCKUP [ 877.833395][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 877.833409][T13760] Call Trace: [ 877.833418][T13760] [ 877.833428][T13760] dump_stack_lvl+0x189/0x250 [ 877.833460][T13760] ? __pfx____ratelimit+0x10/0x10 [ 877.833488][T13760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.833515][T13760] ? __pfx__printk+0x10/0x10 [ 877.833553][T13760] ? __pfx___might_resched+0x10/0x10 [ 877.833577][T13760] ? fs_reclaim_acquire+0x7d/0x100 [ 877.833620][T13760] should_fail_ex+0x414/0x560 [ 877.833654][T13760] should_failslab+0xa8/0x100 [ 877.833683][T13760] __kmalloc_noprof+0xdf/0x800 [ 877.833705][T13760] ? tomoyo_encode+0x28b/0x550 [ 877.833734][T13760] tomoyo_encode+0x28b/0x550 [ 877.833763][T13760] tomoyo_realpath_from_path+0x58d/0x5d0 [ 877.833801][T13760] tomoyo_check_open_permission+0x1c1/0x3b0 [ 877.833835][T13760] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 877.833868][T13760] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 877.833949][T13760] security_file_open+0xb1/0x270 [ 877.833980][T13760] do_dentry_open+0x34e/0x1420 [ 877.834025][T13760] vfs_open+0x3b/0x340 [ 877.834051][T13760] ? path_openat+0x33f3/0x3dd0 [ 877.834075][T13760] path_openat+0x340e/0x3dd0 [ 877.834110][T13760] ? __pfx_stack_trace_save+0x10/0x10 [ 877.834146][T13760] ? stack_depot_save_flags+0x40/0x850 [ 877.834185][T13760] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 877.834216][T13760] ? getname_flags+0xb8/0x540 [ 877.834243][T13760] ? __pfx_path_openat+0x10/0x10 [ 877.834266][T13760] ? __lock_acquire+0x6b6/0x2cf0 [ 877.834305][T13760] do_filp_open+0x1fa/0x410 [ 877.834328][T13760] ? __pfx_do_filp_open+0x10/0x10 [ 877.834376][T13760] ? _raw_spin_unlock+0x28/0x50 [ 877.834401][T13760] ? alloc_fd+0x64c/0x6c0 [ 877.834439][T13760] do_sys_openat2+0x121/0x200 [ 877.834472][T13760] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.834522][T13760] ? ksys_write+0x22a/0x250 [ 877.834546][T13760] ? __pfx_ksys_write+0x10/0x10 [ 877.834571][T13760] __x64_sys_openat+0x138/0x170 [ 877.834614][T13760] do_syscall_64+0xfa/0xf80 [ 877.834645][T13760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.834668][T13760] ? clear_bhb_loop+0x60/0xb0 [ 877.834695][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.834716][T13760] RIP: 0033:0x7f6f2118df90 [ 877.834736][T13760] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 877.834756][T13760] RSP: 002b:00007f6f220bbb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 877.834779][T13760] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f6f2118df90 [ 877.834795][T13760] RDX: 0000000000101301 RSI: 00007f6f220bbc10 RDI: 00000000ffffff9c [ 877.834810][T13760] RBP: 00007f6f220bbc10 R08: 0000000000000000 R09: 0000000000000000 [ 877.834824][T13760] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 877.834839][T13760] R13: 00007f6f213e6038 R14: 00007f6f213e5fa0 R15: 00007f6f2150fa28 [ 877.834875][T13760] [ 877.840965][T13760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 878.226020][ T5971] usb 1-1: USB disconnect, device number 108 [ 878.417255][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.448928][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.563189][ T7833] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 878.717079][ T7833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 878.726020][ T7833] usb 5-1: config 255 has an invalid interface number: 119 but max is 0 [ 878.734625][ T7833] usb 5-1: config 255 has no interface number 0 [ 878.740992][ T7833] usb 5-1: too many endpoints for config 255 interface 119 altsetting 9: 232, using maximum allowed: 30 [ 878.752388][ T7833] usb 5-1: config 255 interface 119 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 878.766108][ T7833] usb 5-1: config 255 interface 119 has no altsetting 0 [ 878.775415][ T7833] usb 5-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 878.785008][ T7833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.793029][ T7833] usb 5-1: Product: syz [ 878.797340][ T7833] usb 5-1: Manufacturer: syz [ 878.801972][ T7833] usb 5-1: SerialNumber: syz [ 878.882251][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 878.882271][ T30] audit: type=1326 audit(1765168932.894:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.1.2019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72e6d8f749 code=0x0 [ 879.020851][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.031445][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.074944][ T7833] usb 5-1: USB disconnect, device number 20 [ 879.773500][ T5971] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 879.882465][T13811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 879.950524][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.964847][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.975585][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.003595][ T5971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.025604][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.039646][ T5971] usb 2-1: config 0 descriptor?? [ 880.043339][ T7833] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 880.175379][T13815] netlink: 'syz.2.2032': attribute type 5 has an invalid length. [ 880.217788][ T7833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 880.235899][ T7833] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.261264][ T7833] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 880.273592][ T7833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.285729][ T7833] usb 5-1: config 0 descriptor?? [ 880.300234][T13808] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 880.364038][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 880.387406][T13819] vxlan1: entered promiscuous mode [ 880.673653][T13799] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2025'. [ 880.704636][T13799] xt_time: unknown flags 0xf4 [ 880.739298][ T7833] usb 5-1: string descriptor 0 read error: -71 [ 880.745970][ T5931] net_ratelimit: 29 callbacks suppressed [ 880.745992][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 880.762635][ T5971] usbhid 2-1:0.0: can't add hid device: -71 [ 880.770215][ T7833] usbhid 5-1:0.0: can't add hid device: -71 [ 880.785576][ T7833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 880.797926][ T5971] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 880.801673][ T7833] usb 5-1: USB disconnect, device number 21 [ 880.845297][ T5971] usb 2-1: USB disconnect, device number 101 [ 880.893414][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 880.963712][ T5987] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 881.013258][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 881.132990][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 881.133238][ T5987] usb 1-1: Using ep0 maxpacket: 32 [ 881.147495][ T5987] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 881.156184][ T5987] usb 1-1: config 0 has no interface number 0 [ 881.172591][ T5987] usb 1-1: config 0 interface 12 has no altsetting 0 [ 881.195656][ T5987] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 881.205203][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.220885][ T5987] usb 1-1: Product: syz [ 881.230286][ T5987] usb 1-1: Manufacturer: syz [ 881.235323][T13830] input: syz1 as /devices/virtual/input/input53 [ 881.242244][ T5987] usb 1-1: SerialNumber: syz [ 881.253268][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 881.262237][ T5987] usb 1-1: config 0 descriptor?? [ 881.363235][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 881.588627][ T9696] tipc: Subscription rejected, illegal request [ 881.605159][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 881.674923][T13837] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.2037'. [ 881.726696][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 881.737342][T13837] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.2037'. [ 881.802528][T13837] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2037'. [ 881.883388][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 882.004766][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 882.223308][ T5971] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 882.407748][ T5971] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 882.443364][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.485582][ T5971] usb 5-1: config 0 descriptor?? [ 882.494247][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 882.528103][ T5987] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 882.549666][ T5971] cp210x 5-1:0.0: cp210x converter detected [ 882.561416][ T5987] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 882.580065][ T5987] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 882.635293][ T5987] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 882.712607][ T5987] usb 1-1: USB disconnect, device number 109 [ 883.072668][ T5971] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 883.086073][ T5971] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 883.111475][ T5971] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 883.140381][ T5971] usb 5-1: cp210x converter now attached to ttyUSB0 [ 883.292900][T13842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.377243][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2044'. [ 883.499140][T13842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.668707][ T7833] usb 5-1: USB disconnect, device number 22 [ 883.744077][ T7833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 883.802272][ T7833] cp210x 5-1:0.0: device disconnected [ 884.173284][ T5966] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 884.303322][ T5966] usb 1-1: device descriptor read/64, error -71 [ 884.563247][ T5966] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 884.703344][ T5966] usb 1-1: device descriptor read/64, error -71 [ 884.823778][ T5966] usb usb1-port1: attempt power cycle [ 884.900918][T13878] input: syz0 as /devices/virtual/input/input54 [ 885.205702][ T5966] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 885.234045][ T5966] usb 1-1: device descriptor read/8, error -71 [ 885.443300][ T5971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 885.473268][ T5966] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 885.503926][ T5966] usb 1-1: device descriptor read/8, error -71 [ 885.603137][ T5971] usb 4-1: Using ep0 maxpacket: 8 [ 885.614829][ T5971] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 885.623012][ T5971] usb 4-1: config 0 has no interface number 0 [ 885.633770][ T5966] usb usb1-port1: unable to enumerate USB device [ 885.657334][ T5971] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 885.673149][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.681214][ T5971] usb 4-1: Product: syz [ 885.703786][ T5971] usb 4-1: Manufacturer: syz [ 885.713474][ T5971] usb 4-1: SerialNumber: syz [ 885.734838][ T5971] usb 4-1: config 0 descriptor?? [ 885.744257][ T5971] redrat3 4-1:0.31: Couldn't find all endpoints [ 885.943186][ T5923] net_ratelimit: 32 callbacks suppressed [ 885.943209][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 885.971543][T13884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.989809][T13884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.019358][ T5971] usb 4-1: USB disconnect, device number 2 [ 886.065320][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.183262][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.235808][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 886.244994][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2055'. [ 886.293264][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.333560][ T5987] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 886.433194][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.530623][ T5987] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 886.542931][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 886.543311][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.563179][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 38555, setting to 64 [ 886.603620][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 886.648801][ T5987] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.659228][ T5987] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.663325][ T5923] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.683760][ T5987] usb 2-1: Manufacturer: syz [ 886.722396][ T5987] usb 2-1: config 0 descriptor?? [ 886.824733][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 886.944679][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 887.063226][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 887.163185][ T5987] rc_core: IR keymap rc-hauppauge not found [ 887.172001][ T5987] Registered IR keymap rc-empty [ 887.193876][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.245121][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.292616][ T5987] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 887.362029][ T5987] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 887.419766][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.476751][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.506273][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.533525][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.573700][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.616880][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.646635][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.673882][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.693659][T13921] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2060'. [ 887.703471][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.733693][ T5987] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 887.756680][ T5987] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 887.856308][ T5987] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 887.927579][ T5987] usb 2-1: USB disconnect, device number 102 [ 888.003196][ T5971] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 888.183306][ T5971] usb 5-1: device descriptor read/64, error -71 [ 888.453398][ T5971] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 888.589119][T13925] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 888.633255][ T5971] usb 5-1: device descriptor read/64, error -71 [ 888.684055][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.744502][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.765656][ T5971] usb usb5-port1: attempt power cycle [ 888.943858][ T6028] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 889.163152][ T6028] usb 1-1: Using ep0 maxpacket: 32 [ 889.163434][ T5971] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 889.182689][ T6028] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 889.197418][ T6028] usb 1-1: config 0 has no interface number 0 [ 889.197955][ T5971] usb 5-1: device descriptor read/8, error -71 [ 889.291464][ T6028] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 889.356223][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 889.423318][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.431688][ T6028] usb 1-1: Product: syz [ 889.436539][ T6028] usb 1-1: Manufacturer: syz [ 889.441305][ T6028] usb 1-1: SerialNumber: syz [ 889.453763][ T6028] usb 1-1: config 0 descriptor?? [ 889.463560][ T6028] smsc95xx v2.0.0 [ 889.483537][ T5971] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 889.553003][ T5971] usb 5-1: device descriptor read/8, error -71 [ 889.663996][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.673648][ T5971] usb usb5-port1: unable to enumerate USB device [ 889.683896][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.934384][ T6028] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 889.950312][ T6028] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 889.960355][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 889.984194][ T6028] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 890.013602][ T6028] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 890.083764][T13950] syzkaller0: entered promiscuous mode [ 890.089295][T13950] syzkaller0: entered allmulticast mode [ 890.391018][ T5987] usb 1-1: USB disconnect, device number 114 [ 890.484033][ T6028] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 890.679913][ T6028] usb 4-1: Using ep0 maxpacket: 16 [ 890.687933][ T6028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.724178][ T6028] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 890.744497][ T6028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.806094][ T6028] usb 4-1: config 0 descriptor?? [ 891.248098][ T6028] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 891.450998][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.465160][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.708602][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.721188][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.748570][T13954] net_ratelimit: 19 callbacks suppressed [ 891.748588][T13954] openvswitch: netlink: Duplicate or invalid key (type 0). [ 891.780225][T13954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.798340][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.805125][ T5987] usb 4-1: USB disconnect, device number 3 [ 891.810985][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.992975][T13994] fuse: Bad value for 'rootmode' [ 893.653376][ T6028] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 893.826282][ T6028] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 893.837439][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.853841][ T6028] usb 5-1: config 0 descriptor?? [ 894.077886][ T6028] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 894.935637][ T5987] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 895.032508][T13984] geneve3: entered allmulticast mode [ 895.045149][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.114521][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.127856][ T5987] usb 4-1: config 0 has no interfaces? [ 895.148310][ T5987] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 895.163312][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.175562][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.193320][ T5987] usb 4-1: Product: syz [ 895.202558][ T5987] usb 4-1: Manufacturer: syz [ 895.214693][ T5987] usb 4-1: SerialNumber: syz [ 895.242534][ T5987] usb 4-1: config 0 descriptor?? [ 895.251172][T14008] loop9: detected capacity change from 0 to 7 [ 895.265005][T14008] Dev loop9: unable to read RDB block 7 [ 895.271751][T14008] loop9: unable to read partition table [ 895.281281][T14008] loop9: partition table beyond EOD, truncated [ 895.288767][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.296819][T14008] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 895.363370][T14010] netlink: 'syz.2.2081': attribute type 12 has an invalid length. [ 895.423501][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.470225][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.484957][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.494875][ T5987] usb 4-1: USB disconnect, device number 4 [ 895.544708][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.663738][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.785253][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 895.903490][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 896.214886][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.247157][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.326965][ T6028] [drm:udl_init] *ERROR* Selecting channel failed [ 896.406620][ T6028] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 896.469223][ T6028] [drm] Initialized udl on minor 2 [ 896.534286][ T6028] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 896.565517][ T6028] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 896.597009][ T5966] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 896.622157][ T6028] usb 5-1: USB disconnect, device number 27 [ 896.628469][ T5966] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 896.736516][ T5987] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 896.757301][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2089'. [ 896.816809][ T5999] net_ratelimit: 7 callbacks suppressed [ 896.816830][ T5999] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 896.943271][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 896.951047][ T5987] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 897.167499][ T5987] usb 4-1: config 1 has no interface number 1 [ 897.190538][T14048] netlink: 'syz.0.2091': attribute type 8 has an invalid length. [ 897.198940][ T5987] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 897.199496][T14048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.275574][ T5987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.289075][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.313211][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 897.323518][ T6028] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 897.331712][ T5987] usb 4-1: Product: syz [ 897.343363][ T5987] usb 4-1: Manufacturer: syz [ 897.348186][ T5987] usb 4-1: SerialNumber: syz [ 897.413975][ T5987] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 897.422878][ T5987] usb 4-1: no configuration chosen from 1 choice [ 897.469437][ T30] audit: type=1326 audit(1765168951.484:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.493189][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 897.510856][T14054] netlink: 'syz.2.2092': attribute type 11 has an invalid length. [ 897.523217][ T6028] usb 5-1: Using ep0 maxpacket: 16 [ 897.528591][ T30] audit: type=1326 audit(1765168951.514:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.569229][ T30] audit: type=1326 audit(1765168951.514:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.621001][ T6028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.634167][ T5999] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 897.641745][ T6028] usb 5-1: config 0 has no interfaces? [ 897.668149][ T30] audit: type=1326 audit(1765168951.514:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.668251][ T6028] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 897.700275][ T30] audit: type=1326 audit(1765168951.514:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.723407][ T30] audit: type=1326 audit(1765168951.514:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.743154][ T6028] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 897.754845][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 897.850648][ T6028] usb 5-1: Manufacturer: syz [ 897.867383][ T30] audit: type=1326 audit(1765168951.514:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.874394][ T6028] usb 5-1: config 0 descriptor?? [ 897.890075][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 897.913226][ T30] audit: type=1326 audit(1765168951.514:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.945966][ T30] audit: type=1326 audit(1765168951.514:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 897.969440][ T30] audit: type=1326 audit(1765168951.514:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14049 comm="syz.2.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183898f749 code=0x7ffc0000 [ 898.013344][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 898.124590][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 898.243216][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 899.013280][ T7833] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 899.335554][ T7833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.347034][ T7833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.357666][ T7833] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 899.452806][ T7833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.496324][ T5987] usb 4-1: USB disconnect, device number 5 [ 899.504534][ T7833] usb 2-1: config 0 descriptor?? [ 899.700957][ T6028] usb 5-1: USB disconnect, device number 28 [ 900.022224][ T7833] hid-retrode 0003:0403:97C1.002A: item fetching failed at offset 4/7 [ 900.048168][ T7833] hid-retrode 0003:0403:97C1.002A: probe with driver hid-retrode failed with error -22 [ 900.094063][ T5987] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 900.303194][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 900.310652][ T5987] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 900.319173][ T5987] usb 4-1: config 0 has no interface number 0 [ 900.327387][ T5987] usb 4-1: config 0 interface 184 has no altsetting 0 [ 900.572920][ T5987] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 900.582540][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.595056][T14086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.604423][T14086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.613470][ T5987] usb 4-1: Product: syz [ 900.618142][ T5987] usb 4-1: Manufacturer: syz [ 900.622980][ T5987] usb 4-1: SerialNumber: syz [ 900.642254][ T5987] usb 4-1: config 0 descriptor?? [ 900.662854][ T5987] smsc75xx v1.0.0 [ 900.804887][ T7833] usb 2-1: USB disconnect, device number 103 [ 900.940260][ T5987] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 900.985868][ T5987] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 901.018464][ T5987] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 901.161337][ T5987] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 901.193227][ T5987] usb 4-1: USB disconnect, device number 6 [ 901.593207][ T5987] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 901.696770][T14105] vlan0: entered allmulticast mode [ 901.702661][T14105] veth0_to_bond: entered allmulticast mode [ 901.776117][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.796129][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.823608][ T5987] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 901.842632][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.873318][ T5987] usb 4-1: config 0 descriptor?? [ 901.935236][ T9695] net_ratelimit: 20 callbacks suppressed [ 901.935259][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.082036][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.193183][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.313263][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.429417][T14119] pim6reg: entered allmulticast mode [ 902.450181][T14119] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 902.458566][ T5999] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.552299][ T5987] usb 4-1: string descriptor 0 read error: -22 [ 902.577474][T14119] bond0: (slave netdevsim0): Releasing backup interface [ 902.601291][T14119] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 902.629428][T14119] team0: Failed to send options change via netlink (err -105) [ 902.645933][T14119] team0: Port device netdevsim0 added [ 902.663607][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.766544][T14107] tipc: Enabling of bearer rejected, failed to enable media [ 902.785868][T14107] netlink: 173940 bytes leftover after parsing attributes in process `syz.3.2105'. [ 902.795849][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 902.823552][ T5987] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002B/input/input56 [ 902.914251][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 903.024169][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 903.190378][ T6539] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 903.270358][ T5987] uclogic 0003:256C:006D.002B: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 903.332136][ T5987] usb 4-1: USB disconnect, device number 7 [ 903.460757][T14125] fido_id[14125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 904.209770][T14137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.218660][T14137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.250424][T14139] binder: 14131:14139 ioctl c0306201 0 returned -14 [ 905.223978][T14167] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2122'. [ 905.277127][T14167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.295841][T14167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.444481][ T6174] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 905.502360][T14174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2125'. [ 905.502367][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2125'. [ 905.547890][T14174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2125'. [ 905.623539][ T6174] usb 1-1: Using ep0 maxpacket: 8 [ 905.632827][ T6174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 905.645971][ T6174] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 905.672608][ T6174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 905.694390][ T6174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 905.710025][ T6174] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 905.729188][ T6174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 905.748571][ T6174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 905.764582][ T6174] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 905.792153][ T6174] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 905.806836][ T6174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.821463][ T6174] usb 1-1: Product: syz [ 905.829297][ T6174] usb 1-1: Manufacturer: syz [ 905.837298][ T6174] usb 1-1: SerialNumber: syz [ 905.851771][ T6174] usb 1-1: config 0 descriptor?? [ 905.865687][T14166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 905.892872][ T6174] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.032843][ T6174] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 906.083425][T14166] fuse: Unknown parameter 'g“oup_id' [ 906.100522][ T6174] usb 1-1: USB disconnect, device number 115 [ 906.216852][T14179] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2127'. [ 906.233808][T13162] udevd[13162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.534283][ T5966] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 906.695258][ T5966] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 906.710564][ T5966] usb 5-1: config 0 has no interface number 0 [ 906.722999][ T5966] usb 5-1: config 0 interface 92 has no altsetting 0 [ 906.746209][ T5966] usb 5-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=c7.34 [ 906.756581][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.767941][ T5966] usb 5-1: Product: syz [ 906.772257][ T5966] usb 5-1: Manufacturer: syz [ 906.777676][ T5966] usb 5-1: SerialNumber: syz [ 906.788656][ T5966] usb 5-1: config 0 descriptor?? [ 906.863623][ T7833] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 906.953649][ T5931] net_ratelimit: 32 callbacks suppressed [ 906.953672][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.003185][ T6174] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 907.037147][ T7833] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 907.051997][ T7833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.069503][ T7833] usb 2-1: config 0 descriptor?? [ 907.077146][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.095634][ T7833] cp210x 2-1:0.0: cp210x converter detected [ 907.163648][ T6174] usb 1-1: Using ep0 maxpacket: 8 [ 907.173668][ T6174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 907.193655][ T6174] usb 1-1: config 0 has no interfaces? [ 907.202751][ T6174] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 907.210674][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.232831][ T6174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.244476][ T5966] cdc_acm 5-1:0.92: Zero length descriptor references [ 907.262980][ T5966] cdc_acm 5-1:0.92: probe with driver cdc_acm failed with error -22 [ 907.285955][ T5966] usb 5-1: USB disconnect, device number 29 [ 907.292036][ T6174] usb 1-1: Product: syz [ 907.308355][ T6174] usb 1-1: Manufacturer: syz [ 907.316541][ T6174] usb 1-1: SerialNumber: syz [ 907.349857][ T6174] usb 1-1: config 0 descriptor?? [ 907.364531][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.497232][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.508206][ T7833] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 907.516887][T14186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.527770][T14186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.547994][ T7833] usb 2-1: cp210x converter now attached to ttyUSB0 [ 907.633601][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.749748][ T7833] usb 2-1: USB disconnect, device number 104 [ 907.756217][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 907.779131][ T7833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 907.797259][ T7833] cp210x 2-1:0.0: device disconnected [ 907.886824][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 908.013169][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 908.118750][ T6174] usb 1-1: USB disconnect, device number 116 [ 908.133210][ T5999] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 908.148918][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2136'. [ 908.355113][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.377292][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.463355][ T7833] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 908.704920][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.722838][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.723237][ T7833] usb 5-1: device descriptor read/64, error -71 [ 908.757807][ T6028] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 908.924902][ T6028] usb 2-1: too many configurations: 78, using maximum allowed: 8 [ 908.979373][ T6028] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 909.007727][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.033271][ T7833] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 909.042872][ T6028] usb 2-1: Product: syz [ 909.074805][ T6028] usb 2-1: Manufacturer: syz [ 909.088178][ T6028] usb 2-1: SerialNumber: syz [ 909.161531][ T6028] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 909.197531][ T7833] usb 5-1: device descriptor read/64, error -71 [ 909.217145][ T5966] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 909.347772][ T7833] usb usb5-port1: attempt power cycle [ 909.421353][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.438759][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.616150][ T6174] usb 2-1: USB disconnect, device number 105 [ 909.708014][ T7833] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 909.738104][ T7833] usb 5-1: device descriptor read/8, error -71 [ 909.989295][ T7833] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 910.036630][ T7833] usb 5-1: device descriptor read/8, error -71 [ 910.157148][ T7833] usb usb5-port1: unable to enumerate USB device [ 910.293210][ T5966] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 910.305014][ T5966] ath9k_htc: Failed to initialize the device [ 910.332033][ T6174] usb 2-1: ath9k_htc: USB layer deinitialized [ 910.382481][T14232] loop5: detected capacity change from 0 to 7 [ 910.456323][ T6561] Dev loop5: unable to read RDB block 7 [ 910.463429][ T6561] loop5: AHDI p1 p2 p3 [ 910.472392][ T6561] loop5: partition table partially beyond EOD, truncated [ 910.486379][ T6561] loop5: p1 start 1601398130 is beyond EOD, truncated [ 910.500824][ T6561] loop5: p2 start 1702059890 is beyond EOD, truncated [ 910.513984][T14232] Dev loop5: unable to read RDB block 7 [ 910.519933][T14232] loop5: AHDI p1 p2 p3 [ 910.525022][T14232] loop5: partition table partially beyond EOD, truncated [ 910.532763][T14232] loop5: p1 start 1601398130 is beyond EOD, truncated [ 910.555124][T14232] loop5: p2 start 1702059890 is beyond EOD, truncated [ 910.663282][ T6174] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 910.848017][ T6174] usb 2-1: device descriptor read/64, error -71 [ 911.104835][ T6174] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 911.257177][ T6174] usb 2-1: device descriptor read/64, error -71 [ 911.383827][ T6174] usb usb2-port1: attempt power cycle [ 911.502153][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.533702][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.693646][ T7833] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 911.733577][ T6174] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 911.754574][ T6174] usb 2-1: device descriptor read/8, error -71 [ 911.843429][ T6028] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 911.863309][ T7833] usb 5-1: Using ep0 maxpacket: 16 [ 911.873175][ T7833] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 911.882569][ T7833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.890757][ T7833] usb 5-1: Product: syz [ 911.898707][ T7833] usb 5-1: Manufacturer: syz [ 911.906672][ T7833] usb 5-1: SerialNumber: syz [ 911.916675][ T7833] usb 5-1: config 0 descriptor?? [ 911.930032][ T7833] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 912.003722][ T6174] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 912.013331][ T9695] net_ratelimit: 33 callbacks suppressed [ 912.013353][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.028905][ T6174] usb 2-1: device descriptor read/8, error -71 [ 912.036054][ T6028] usb 4-1: config 9 has an invalid interface number: 112 but max is 2 [ 912.044956][ T6028] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 912.054243][ T6028] usb 4-1: config 9 has an invalid interface number: 20 but max is 2 [ 912.062578][ T6028] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 912.071962][ T6028] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 912.082439][ T6028] usb 4-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 912.091588][ T6028] usb 4-1: config 9 has no interface number 0 [ 912.098016][ T6028] usb 4-1: config 9 has no interface number 1 [ 912.104473][ T6028] usb 4-1: config 9 interface 112 altsetting 12 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 912.115964][ T6028] usb 4-1: config 9 interface 112 altsetting 12 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 912.127741][ T6028] usb 4-1: config 9 interface 112 altsetting 12 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 912.133787][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.140372][ T6028] usb 4-1: config 9 interface 112 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 912.158977][ T6028] usb 4-1: config 9 interface 112 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 912.170163][ T6028] usb 4-1: config 9 interface 112 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 912.170555][ T6174] usb usb2-port1: unable to enumerate USB device [ 912.211465][ T6028] usb 4-1: config 9 interface 112 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 912.227216][ T6028] usb 4-1: config 9 interface 112 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 912.240633][ T6028] usb 4-1: config 9 interface 112 altsetting 12 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 912.252414][ T6028] usb 4-1: config 9 interface 20 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 912.266705][ T6028] usb 4-1: config 9 interface 112 has no altsetting 0 [ 912.274747][ T6028] usb 4-1: config 9 interface 20 has no altsetting 0 [ 912.284957][ T6028] usb 4-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=fe.9d [ 912.294575][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.302646][ T6028] usb 4-1: Product: syz [ 912.302729][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.307413][ T6028] usb 4-1: Manufacturer: Ъ [ 912.320183][ T6028] usb 4-1: SerialNumber: syz [ 912.443236][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.553352][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.561624][ T6028] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 912.574067][ T6028] snd-usb-audio 4-1:9.112: probe with driver snd-usb-audio failed with error -2 [ 912.618289][ T6028] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 912.663248][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.666125][ T6028] snd-usb-audio 4-1:9.20: probe with driver snd-usb-audio failed with error -2 [ 912.712272][ T6028] usb 4-1: USB disconnect, device number 8 [ 912.744349][ T6889] udevd[6889]: setting owner of /dev/bus/usb/004/008 to uid=0, gid=0 failed: No such file or directory [ 912.844878][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 912.870751][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.20/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.960113][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 913.097145][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 913.223280][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 913.263603][ T7833] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 913.294209][ T7833] usb 5-1: USB disconnect, device number 34 [ 913.676373][ T7833] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 913.835443][ T7833] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 913.846087][ T7833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.862122][ T7833] usb 1-1: config 0 descriptor?? [ 914.314577][ T7833] corsair 0003:1B1C:1B09.002C: hidraw0: USB HID v10.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.0-1/input0 [ 914.523844][ T7833] usb 1-1: USB disconnect, device number 117 [ 915.477790][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2164'. [ 915.823246][ T5966] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 915.983215][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 915.992530][ T5966] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 916.020306][ T5966] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 916.063973][ T5966] usb 5-1: config 127 has no interface number 1 [ 916.102519][ T5966] usb 5-1: config 127 interface 171 has no altsetting 0 [ 916.197893][ T5966] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 916.224752][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.265820][ T5966] usb 5-1: Product: syz [ 916.286210][ T5966] usb 5-1: Manufacturer: syz [ 916.299361][ T5966] usb 5-1: SerialNumber: syz [ 916.513187][ T6174] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 916.538185][T14312] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 916.630922][T14315] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 916.717348][ T6174] usb 1-1: config index 0 descriptor too short (expected 8475, got 27) [ 916.725832][ T6174] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 916.760635][ T6174] usb 1-1: config 0 has no interface number 0 [ 916.773940][ T6174] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 916.802259][ T6174] usb 1-1: config 0 interface 200 has no altsetting 0 [ 916.825382][ T5987] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 916.842325][ T6174] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 916.878607][ T6174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.897828][ T6174] usb 1-1: Product: syz [ 916.910704][ T6174] usb 1-1: Manufacturer: syz [ 916.922501][ T6174] usb 1-1: SerialNumber: syz [ 916.945872][ T6174] usb 1-1: config 0 descriptor?? [ 916.986773][ T5987] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 917.000440][ T5987] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 917.026198][ T5987] usb 4-1: config 0 interface 0 has no altsetting 0 [ 917.056223][ T5987] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 917.067097][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 917.075472][ T5987] usb 4-1: Product: syz [ 917.080960][ T5987] usb 4-1: Manufacturer: syz [ 917.091073][ T5987] usb 4-1: SerialNumber: syz [ 917.123970][ T5922] net_ratelimit: 33 callbacks suppressed [ 917.124022][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 917.212031][ T5987] usb 4-1: config 0 descriptor?? [ 917.235158][ T5987] hub 4-1:0.0: bad descriptor, ignoring hub [ 917.287227][ T6174] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input57 [ 917.299130][ T5987] hub 4-1:0.0: probe with driver hub failed with error -5 [ 917.312687][ T5987] usb 4-1: selecting invalid altsetting 0 [ 917.324979][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 917.399346][ T6174] usb 1-1: USB disconnect, device number 118 [ 917.519509][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 917.544166][ T5987] usb 4-1: USB disconnect, device number 9 [ 917.644328][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 917.657750][T13162] udevd[13162]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.783580][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 917.988244][ T9695] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 918.163926][ T5931] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 918.275599][ T9696] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 918.286335][T14335] FAULT_INJECTION: forcing a failure. [ 918.286335][T14335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.363391][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.3.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.363432][T14335] Tainted: [L]=SOFTLOCKUP [ 918.363441][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.363456][T14335] Call Trace: [ 918.363466][T14335] [ 918.363477][T14335] dump_stack_lvl+0x189/0x250 [ 918.363510][T14335] ? __pfx____ratelimit+0x10/0x10 [ 918.363539][T14335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.363566][T14335] ? __pfx__printk+0x10/0x10 [ 918.363599][T14335] ? __might_fault+0xb0/0x130 [ 918.363646][T14335] should_fail_ex+0x414/0x560 [ 918.363678][T14335] _copy_from_user+0x2d/0xb0 [ 918.363713][T14335] ___sys_sendmsg+0x158/0x2a0 [ 918.363750][T14335] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.363789][T14335] ? rcu_read_lock_any_held+0xb3/0x120 [ 918.363852][T14335] ? __fget_files+0x2a/0x420 [ 918.363879][T14335] ? __fget_files+0x3a0/0x420 [ 918.363918][T14335] __x64_sys_sendmsg+0x19b/0x260 [ 918.363954][T14335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.363997][T14335] ? __pfx_ksys_write+0x10/0x10 [ 918.364024][T14335] ? do_syscall_64+0xbe/0xf80 [ 918.364047][T14335] do_syscall_64+0xfa/0xf80 [ 918.364068][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.364083][T14335] ? clear_bhb_loop+0x60/0xb0 [ 918.364102][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.364117][T14335] RIP: 0033:0x7f798578f749 [ 918.364131][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.364145][T14335] RSP: 002b:00007f7986582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.364162][T14335] RAX: ffffffffffffffda RBX: 00007f79859e5fa0 RCX: 00007f798578f749 [ 918.364174][T14335] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000003 [ 918.364184][T14335] RBP: 00007f7986582090 R08: 0000000000000000 R09: 0000000000000000 [ 918.364193][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.364203][T14335] R13: 00007f79859e6038 R14: 00007f79859e5fa0 R15: 00007f7985b0fa28 [ 918.364227][T14335] [ 918.580602][ T8196] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 919.046832][T14338] loop9: detected capacity change from 0 to 7 [ 919.101239][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 919.104378][ T5966] xr_serial 5-1:127.171: xr_serial converter detected [ 919.131376][T14338] Dev loop9: unable to read RDB block 7 [ 919.251012][T14338] loop9: unable to read partition table [ 919.273306][T14338] loop9: partition table beyond EOD, truncated [ 919.279531][T14338] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 919.345555][ T5966] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 919.352172][ T5966] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 919.379868][ T5966] usb 5-1: USB disconnect, device number 35 [ 919.392872][ T5966] xr_serial 5-1:127.171: device disconnected [ 919.953385][ T5966] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 920.123371][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 920.130042][ T5966] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 920.153231][ T5966] usb 5-1: config 0 has no interface number 0 [ 920.173427][ T5966] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.213233][ T5966] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.259859][ T5966] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 920.303199][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.345365][ T5966] usb 5-1: config 0 descriptor?? [ 920.573582][ T6174] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 920.773509][ T6174] usb 4-1: Using ep0 maxpacket: 16 [ 920.786724][ T6174] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 920.795829][ T6174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.836484][ T6174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.889915][ T6174] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 920.913194][ T5987] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 920.939746][T14365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.949625][ T6174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.966197][T14365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.968897][ T6174] usb 4-1: Product: syz [ 921.064341][ T6174] usb 4-1: Manufacturer: syz [ 921.069086][ T6174] usb 4-1: SerialNumber: syz [ 921.123474][ T5987] usb 2-1: device descriptor read/64, error -71 [ 921.373213][ T5987] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 921.488521][ T6174] usb 4-1: 0:2 : does not exist [ 921.513243][ T5987] usb 2-1: device descriptor read/64, error -71 [ 921.595949][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 921.624479][ T5987] usb usb2-port1: attempt power cycle [ 921.850856][T14376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2185'. [ 921.955506][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.966131][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.983178][ T5987] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 922.040250][ T5987] usb 2-1: device descriptor read/8, error -71 [ 922.288292][ T5987] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 922.330508][ T5987] usb 2-1: device descriptor read/8, error -71 [ 922.504387][ T5966] usbhid 5-1:0.1: can't add hid device: -71 [ 922.505341][ T5987] usb usb2-port1: unable to enumerate USB device [ 922.517279][ T5966] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 922.557186][ T5966] usb 5-1: USB disconnect, device number 36 [ 922.605901][T14379] loop9: detected capacity change from 0 to 7 [ 922.627807][T14379] Dev loop9: unable to read RDB block 7 [ 922.635504][T14379] loop9: unable to read partition table [ 922.641543][T14379] loop9: partition table beyond EOD, truncated [ 922.676750][T14379] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 922.850217][T14371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.870086][T14371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.927769][T14371] bond0 (unregistering): Released all slaves [ 923.033503][ T6071] net_ratelimit: 20 callbacks suppressed [ 923.033529][ T6071] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.153681][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.273986][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.373488][ T5987] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 923.385849][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.513970][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.533317][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 923.551484][ T5987] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 923.582488][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.636373][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.651296][ T5987] usb 5-1: config 0 descriptor?? [ 923.671286][ T5987] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 923.773452][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.900411][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 923.987213][T14385] page: refcount:18 mapcount:0 mapping:ffff888148d52b00 index:0xa80 pfn:0x46280 [ 923.997309][T14385] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 924.007865][T14385] memcg:ffff888079e60000 [ 924.020265][ T5922] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 924.027996][T14385] aops:def_blk_aops ino:fa00000 [ 924.032940][T14385] flags: 0xfff60000000079(locked|uptodate|dirty|lru|head|node=0|zone=1|lastcpupid=0x7ff) [ 924.043952][T14385] raw: 00fff60000000079 ffffea000118a408 ffffea0001190008 ffff888148d52b00 [ 924.058531][T14385] raw: 0000000000000a80 0000000000000000 00000012ffffffff ffff888079e60000 [ 924.069910][T14385] head: 00fff60000000079 ffffea000118a408 ffffea0001190008 ffff888148d52b00 [ 924.080066][T14385] head: 0000000000000a80 0000000000000000 00000012ffffffff ffff888079e60000 [ 924.089093][T14385] head: 00fff00000000204 ffffea000118a001 00000000ffffffff 00000000ffffffff [ 924.097921][T14385] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 924.106929][T14385] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 924.121005][T14385] page_owner tracks the page as allocated [ 924.131070][T14385] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 14385, tgid 14383 (syz.1.2188), ts 923918603444, free_ts 921334990560 [ 924.162534][T14385] post_alloc_hook+0x234/0x290 [ 924.162751][ T9699] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 924.176555][T14385] get_page_from_freelist+0x2365/0x2440 [ 924.184295][T14385] __alloc_frozen_pages_noprof+0x181/0x370 [ 924.193909][T14385] alloc_pages_mpol+0x232/0x4a0 [ 924.200605][T14385] alloc_pages_noprof+0xa9/0x190 [ 924.206963][T14385] folio_alloc_noprof+0x1e/0x30 [ 924.215005][T14385] filemap_alloc_folio_noprof+0x112/0x490 [ 924.215155][ T6174] usb 4-1: 1:0: cannot get min/max values for control 6 (id 1) [ 924.229341][T14385] page_cache_ra_order+0x546/0xe50 [ 924.262108][T14385] do_sync_mmap_readahead+0x394/0x870 [ 924.274349][T14385] filemap_fault+0x6ac/0x1290 [ 924.281034][T14385] __do_fault+0x138/0x390 [ 924.286595][T14385] do_pte_missing+0x6ad/0x3330 [ 924.291618][T14385] handle_mm_fault+0x1b26/0x32b0 [ 924.299087][T14385] do_user_addr_fault+0x764/0x1380 [ 924.305344][T14385] exc_page_fault+0x82/0x100 [ 924.317583][T14382] input: syz1 as /devices/virtual/input/input58 [ 924.330637][T14385] asm_exc_page_fault+0x26/0x30 [ 924.336346][T14385] page last free pid 14332 tgid 14330 stack trace: [ 924.351333][T14385] free_unref_folios+0xdb3/0x14f0 [ 924.356956][T14385] folios_put_refs+0x584/0x670 [ 924.362073][T14385] truncate_inode_pages_range+0x346/0xd90 [ 924.368381][T14385] blkdev_flush_mapping+0x109/0x2f0 [ 924.374636][T14385] bdev_release+0x417/0x650 [ 924.385058][T14385] blkdev_release+0x15/0x20 [ 924.390857][T14385] __fput+0x44c/0xa70 [ 924.397921][ T6174] usb 4-1: USB disconnect, device number 10 [ 924.425981][T14385] task_work_run+0x1d4/0x260 [ 924.431257][T14385] do_exit+0x6c5/0x2310 [ 924.440147][T14385] do_group_exit+0x21c/0x2d0 [ 924.460998][T14385] get_signal+0x1285/0x1340 [ 924.469254][T14385] arch_do_signal_or_restart+0x9a/0x7a0 [ 924.477420][T14385] exit_to_user_mode_loop+0x87/0x4f0 [ 924.486522][ T5987] gspca_nw80x: reg_w err -71 [ 924.512723][ T5987] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 924.529368][ T6561] udevd[6561]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.554189][ T5987] usb 5-1: USB disconnect, device number 37 [ 924.565740][T14385] do_syscall_64+0x2e3/0xf80 [ 924.579432][T14385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.644182][T14385] ------------[ cut here ]------------ [ 924.649726][T14385] kernel BUG at mm/filemap.c:3579! [ 924.666076][T14385] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 924.672398][T14385] CPU: 0 UID: 0 PID: 14385 Comm: syz.1.2188 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.683377][T14385] Tainted: [L]=SOFTLOCKUP [ 924.687717][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.697784][T14385] RIP: 0010:filemap_fault+0x1215/0x1290 [ 924.703445][T14385] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b5 f2 2c 00 e9 81 fc ff ff e8 1b a1 c6 ff 48 89 df 48 c7 c6 80 a9 74 8b e8 dc f7 2c ff 90 <0f> 0b e8 04 a1 c6 ff 48 8b 3c 24 48 c7 c6 00 b0 74 8b e8 c4 f7 2c [ 924.723072][T14385] RSP: 0018:ffffc9000b617280 EFLAGS: 00010246 [ 924.729161][T14385] RAX: 842be981b80a2000 RBX: ffffea000118a000 RCX: 0000000000000000 [ 924.737144][T14385] RDX: 0000000000000000 RSI: ffffffff8d7867c7 RDI: 00000000ffffffff [ 924.745128][T14385] RBP: ffffc9000b6173b8 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 924.753119][T14385] R10: dffffc0000000000 R11: fffffbfff1f02ecf R12: dffffc0000000000 [ 924.761106][T14385] R13: 1ffffd4000231401 R14: ffffea000118a018 R15: ffffea000118a008 [ 924.769099][T14385] FS: 00007f72e7c596c0(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 924.778044][T14385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 924.784670][T14385] CR2: 0000200000404030 CR3: 00000000544f6000 CR4: 00000000003526f0 [ 924.792668][T14385] Call Trace: [ 924.795960][T14385] [ 924.798910][T14385] ? __pfx_filemap_fault+0x10/0x10 [ 924.804048][T14385] __do_fault+0x138/0x390 [ 924.808391][T14385] do_pte_missing+0x6ad/0x3330 [ 924.813173][T14385] ? handle_mm_fault+0xdb/0x32b0 [ 924.818137][T14385] handle_mm_fault+0x1b26/0x32b0 [ 924.823103][T14385] ? handle_mm_fault+0xdb/0x32b0 [ 924.828087][T14385] ? __pfx_handle_mm_fault+0x10/0x10 [ 924.833399][T14385] ? lock_mm_and_find_vma+0x9c/0x300 [ 924.838695][T14385] do_user_addr_fault+0x764/0x1380 [ 924.843825][T14385] exc_page_fault+0x82/0x100 [ 924.848439][T14385] asm_exc_page_fault+0x26/0x30 [ 924.853301][T14385] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 924.859127][T14385] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 924.878750][T14385] RSP: 0018:ffffc9000b6178b8 EFLAGS: 00050202 [ 924.884918][T14385] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000066ff0 [ 924.892901][T14385] RDX: ffff88807c97db80 RSI: 0000000000000002 RDI: 00000000ffffffff [ 924.900881][T14385] RBP: ffffc9000b617a30 R08: ffffc9000b617667 R09: 1ffff920016c2ecc [ 924.908868][T14385] R10: dffffc0000000000 R11: fffff520016c2ecd R12: 0000000000000002 [ 924.916851][T14385] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000066fc0 [ 924.924844][T14385] ____sys_recvmsg+0x2ab/0x460 [ 924.929638][T14385] ? __pfx_____sys_recvmsg+0x10/0x10 [ 924.934948][T14385] ? import_iovec+0x74/0xa0 [ 924.939493][T14385] ___sys_recvmsg+0x1b5/0x510 [ 924.944182][T14385] ? __pfx____sys_recvmsg+0x10/0x10 [ 924.949418][T14385] ? __might_fault+0xb0/0x130 [ 924.954116][T14385] do_recvmmsg+0x307/0x770 [ 924.958556][T14385] ? __pfx_do_recvmmsg+0x10/0x10 [ 924.963554][T14385] ? __pfx___seccomp_filter+0x10/0x10 [ 924.968946][T14385] __x64_sys_recvmmsg+0x190/0x240 [ 924.973983][T14385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 924.979540][T14385] do_syscall_64+0xfa/0xf80 [ 924.984068][T14385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.990157][T14385] ? clear_bhb_loop+0x60/0xb0 [ 924.994845][T14385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.000834][T14385] RIP: 0033:0x7f72e6d8f749 [ 925.005260][T14385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.024883][T14385] RSP: 002b:00007f72e7c59038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 925.033324][T14385] RAX: ffffffffffffffda RBX: 00007f72e6fe6090 RCX: 00007f72e6d8f749 [ 925.041315][T14385] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 925.049301][T14385] RBP: 00007f72e6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 925.057280][T14385] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 925.065264][T14385] R13: 00007f72e6fe6128 R14: 00007f72e6fe6090 R15: 00007f72e710fa28 [ 925.073262][T14385] [ 925.076325][T14385] Modules linked in: [ 925.080801][T14385] ---[ end trace 0000000000000000 ]--- [ 925.202385][T14385] RIP: 0010:filemap_fault+0x1215/0x1290 [ 925.232988][T14385] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b5 f2 2c 00 e9 81 fc ff ff e8 1b a1 c6 ff 48 89 df 48 c7 c6 80 a9 74 8b e8 dc f7 2c ff 90 <0f> 0b e8 04 a1 c6 ff 48 8b 3c 24 48 c7 c6 00 b0 74 8b e8 c4 f7 2c [ 925.275290][T14385] RSP: 0018:ffffc9000b617280 EFLAGS: 00010246 [ 925.281442][T14385] RAX: 842be981b80a2000 RBX: ffffea000118a000 RCX: 0000000000000000 [ 925.292954][T14385] RDX: 0000000000000000 RSI: ffffffff8d7867c7 RDI: 00000000ffffffff [ 925.321801][T14385] RBP: ffffc9000b6173b8 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 925.332307][T14385] R10: dffffc0000000000 R11: fffffbfff1f02ecf R12: dffffc0000000000 [ 925.344543][T14385] R13: 1ffffd4000231401 R14: ffffea000118a018 R15: ffffea000118a008 [ 925.352592][T14385] FS: 00007f72e7c596c0(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 925.361906][T14385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.369024][T14385] CR2: 00007f1838bb6ad8 CR3: 00000000544f6000 CR4: 00000000003526f0 [ 925.377389][T14385] Kernel panic - not syncing: Fatal exception [ 925.383879][T14385] Kernel Offset: disabled [ 925.388229][T14385] Rebooting in 86400 seconds..