last executing test programs: 5m19.599428929s ago: executing program 1 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x20040051) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xfffb, 0xfff2}, {0xd, 0x8}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x850) 5m18.49249055s ago: executing program 1 (id=540): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x501c40, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x2, 0x8000}) r1 = socket$inet6(0xa, 0x1, 0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x10, 0xada, 0x80, {{0x1e, 0x4, 0x2, 0x5, 0x78, 0x67, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp={0x44, 0x18, 0x30, 0x0, 0x4, [0x1, 0x2, 0x7fff, 0xd, 0xf]}, @ssrr={0x89, 0xf, 0x3a, [@multicast1, @loopback, @private=0xa010100]}, @timestamp={0x44, 0x1c, 0x4e, 0x0, 0x4, [0x8, 0x1000, 0x2c, 0x7f, 0x1, 0xc]}, @timestamp={0x44, 0x20, 0x97, 0x0, 0x4, [0x10, 0x9, 0x0, 0x10000, 0x8, 0x5, 0x8]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r4, 0x29, 0x6, 0xc5, 0x3, 0x33, @mcast2, @mcast2, 0x7, 0x7800, 0x4b03, 0x5}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=@flushpolicy={0x1a0, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e24, 0x4, 0x4e20, 0xf801, 0xa, 0xa0, 0x0, 0x2b, 0x0, r7}, {@in=@private=0x2, 0x4d3, 0x33}, @in=@rand_addr=0x64010100, {0x9, 0x8000000000000000, 0x3, 0x80000000, 0x4, 0x1, 0x4, 0x7}, {0x7329b8d9, 0x6, 0x0, 0x1}, {0xf, 0x4, 0x81}, 0x70bd2d, 0x3503, 0x2, 0x2, 0x9, 0x4}}, @policy={0xac, 0x7, {{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x5, 0x4e24, 0x7f52, 0x2, 0x20, 0x80, 0x3b, 0x0, r8}, {0x0, 0xf26, 0xab0, 0x7, 0x6, 0x100000000, 0x7, 0x2}, {0xff, 0xfffffffffffffff9, 0x8, 0xd864}, 0x5, 0x6e6bbf, 0x1, 0x1, 0x0, 0x3}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x4800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000800)=0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000020c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002080)={&(0x7f0000000900)={0x1764, r9, 0x101, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x1270, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "c7b8485f77e0408d8d1e5b51623b252c93b7f00e684f8053b0022b48493bef1119e415fe5816e86ac0648b970f0dc954ffe0fe5f07900fcae4b3473c10995de28e6e632cfb29c795d4e0c9c539a55e73714079cc5c0dac4499c7c71315280a911d408c7031eb651eb7c64d2e7838bc13a24c4b055e861429a4924c2aafbef3faad15af7b9c555b9d04348f35c9ef29b9dea25e0ae9722720e55b38ac2fd388007c5fce73e4bb3769d98e56dd33b0622d7a92a989b68b6e61b9c88e146d4781aa16d5bb22929ca37a0d0b1df228eb01e079b3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa2, 0x3, "6825b33fd1fd07fd68a8970a3047d05cafb4ff8db903a5382c167b4c642821915b5fe1203b9cf37babee391bd9057d87f0ab79a9f1951bb464dac0ec5a9a4d3427432fdcf49f92653990c4330871d163cceddf816237189608ada5e2f9a1a7fcb8f24f9d266c17114f8e4585576460261f48b8677da4a184e12bd0a7d35d0f9bb4d1102c5164c5fa85eb6e3a5679c9ca212e5a7f5d37359774e881bed9ca"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "494a2a9cc7d6cac0764e4238dc0e04cd09889ab19eac690df42105241446a7b9f27e790190162e8311d8a5cf61fd22a6cd086513e4cbde5f008f93bf0840b2e4a1327368dc7d15076200ed3522ce7b985e149e6378069efd6d0490885a611253b0b6d479830d11060089d39e0e03625a39d24261434a950abe6e1fbaf0a48c8476e968808760aa86e05b3ca1bd3c44fda4356cfde580f6c5dda10dd3fb974404769f15d00ee8d904b9820037ff830ebb2d970b6ae8e81ff2d08102b6d0ba200c5350dcc3ffd3a9f49295793e09f60917664ac28539110087d82b5cbdffd5f1cb843b77683c"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x4b1, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x21, 0x7f, [@challenge={0x10, 0x1, 0xda}, @rann={0x7e, 0x15, {{0x1, 0x59}, 0x9, 0x1, @device_a, 0x9, 0x9, 0x4}}, @supported_rates={0x1, 0x1, [{0x2, 0x1}]}]}]}, 0x1764}, 0x1, 0x0, 0x0, 0x4040801}, 0x8810) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000002380)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002340)={&(0x7f0000002180)={0x1b0, r11, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8001, @private2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7e88}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf387}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, r9, 0x200, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x810) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002500), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x44, r12, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4008804) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000002640), &(0x7f0000002680)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) statx(r0, &(0x7f00000026c0)='./file0\x00', 0x4000, 0x100, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r13) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000002800)={0x8602, {{0xa, 0x4e24, 0x8b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setresgid(r14, r14, r14) read$FUSE(r0, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_open_dev$sndpcmp(&(0x7f0000004900), 0xffffffffffff5eb4, 0x80000) sendmsg$nl_generic(r0, &(0x7f0000005e40)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005e00)={&(0x7f0000004980)={0x1478, 0x41, 0x200, 0x70bd27, 0x25dfdbff, {0x1c}, [@nested={0x15a, 0x128, 0x0, 0x1, [@generic="8500c90fab7b59ca", @generic="2f471b8f70e7605dd4647bd8f5bbda50d8489ea9b81aa14df4b9c945fbad34df9aee6a057ff8a9521ffaaf38c7dbc614f777ee675c572fc4661b2f2e945871b6b3fad8d7b78d1c2c2f01a115b284579ed1f2e6fed73a48dfe2fd1d525577c9c30e952083d9ee0ac638a3", @nested={0x4, 0x11e}, @typed={0x8, 0x103, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @nested={0x4, 0xf6}, @typed={0x8, 0xe2, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x14b}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r15}, @typed={0x7, 0xea, 0x0, 0x0, @str='/@\x00'}, @generic="26e6c27412f3cf06f5378b8e90357051be15c204a2a56ba25c621590669ed779c66fdf2dd8944639cec86a9fb84584c68e57b42985aeab2d4655c65028ecfb8315e811d040c04446891080bb08737b10945249597b11b6c8c730803d03aad3f0d45f9450206469a3dee79a8c26cefdb6a45068b9e525ed4a65acf38f69397294ec8992bfbd37096d11b1fade37d445cb557bfc7b38fe811cc5f3791115cd2160b1da2bfc60feb54fc88885eef968d9b7e411c28792eac0c9"]}, @generic="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", @typed={0x13, 0xb6, 0x0, 0x0, @binary="debbfc2145e593a979838901af226c"}, @generic="d5593ff8a1bbe82c5da87f45193c9f561a3fda5711952312b989d6c51f2ad7c453a931857e7252a467f7bdd7a2bf702f88f404858813c7a7c42e2c12069fb3f8051f3a07b64c752f94c9d975fedd2bc9f59631ddf36c0cb941f07c31db2c629f9fafea28632421822b2b13eb9e3d53a00b721e18ad5da2832d75c8626badfe8452b8cf99c981bb5edcdf875d04221bd38fe431ceb3f48a825e303026954ef2f33286ba2c03dd4061db869dd8fc0477763d8d4ef89721ed5395558452d7b8cd91362049ef36c753c4e68aa266d43d8db297ab4ff7427c6af84add7e5c6fa9a9fd57", @generic="94d22850172a7ecb216a30afa03fb0760899323e216621acb6ca2388a1c3ae5ca9ac5fe792fbd3199e4d23807d9b9e9c5c3afb1c476034fb7b6c86efea333c8ea6231f81e78be7f0ce6348c06a5ed4c3cc6a6b1f8bdf3f3a630b9022cba2bdc9d7de7f669fab3b6c785e6a479fcead1c3830c536b3242e207b7ecef8c77dfeaa83b35c5d7e899f00eca2b3b25a41cdff6f674a7dc2ead39b120a303c21b69e4a5a98e5e1ed876d8bf5f61984f02bf404b170a5cbdea517e9094532a7977540cd4c83de0e899232dca6c8981c3e92de8b567c2bfabc20ddf4125983ae949cc06eac388ca4290341b2ec50290f36a978a93523205d0c8604fe910cb7", @generic="209b5c20abc76ebb3717f748cdf2ece3e72853a3d3234b0700bd4f5b9f1cbca850366b84bef80ef2a387d66834c3f95c0e5318eaad57066fb873677ed0294f3e911c37a5c8ae0fc7ba232ea912c51669596f8f835b9e5fa066e56fc08972c7a598eaf49752ce619bbdfb37855175b6751c4152d98da1d3f59c6d056c3f40a0dfc74fd7215c23de326a485d1bd5e938a1d5103fa6c616e7554fbe2ac366065b8cc74c71c20bb2747fc2765a823ab930253b265d2240", @typed={0x8, 0x70, 0x0, 0x0, @uid=r7}, @generic="3d1ffe06c30e09096838cb28bb41b078ff5625d00b7b3166f98e20b2b56dcb4ebbba19f265ac5fead47cc80542422bf182fd3c93e30821addf46e4b484d48fe6a20af79fe1cd66ea3bff78a610eb059405aeaae8dffcc2c6d1"]}, 0x1478}, 0x1, 0x0, 0x0, 0x4c040}, 0x20004015) 5m17.99946589s ago: executing program 1 (id=544): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x5, 0x6, 0x3, 0x400}]}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) 5m17.620770672s ago: executing program 1 (id=545): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x20000) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x801) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 5m17.222758565s ago: executing program 1 (id=547): r0 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000008480)={0xb6, 0x0, 0xffffffffffffa3c4}) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001a40)=[{&(0x7f00000013c0)=""/210, 0xd2}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000001940)={0x1, 0x7f2e, 0xfffffffe, 0x2e, 0x8d, 0x3, 0x1, 0x10001}) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x25}], 0x1, 0x33, 0x51b) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) write$P9_RSETATTR(r6, &(0x7f00000019c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000a00)={0x1, 0x0, 0x0, &(0x7f0000000980)=""/82, 0x0}) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000001bc0)={0x0, {}, 0x0, {}, 0x1738, 0x6, 0x18, 0x10, "ff2f19a30d807c95cd32d9b9df3bed5eef09759c0160bc9ad1383c5436c18321ba067b8e2fea76e967d3122285ceb7a4b09308b4097895bb4bc330fc7e79fd74", "f80388262ee56066f0aa4dc850b3def4ac83de060d47a40c2da24f2d1c86388d", [0x100000001, 0x401]}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000001a80)={{0xee5f, 0x24}, 0x100, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$rds(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/132, 0x84}, {&(0x7f00000014c0)=""/175, 0xaf}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f0000001580)=""/243, 0xf3}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000001340)=""/104, 0x68}], 0x8, &(0x7f0000001840)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x316b8b10}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x546}, &(0x7f0000001700)=0x8046, &(0x7f0000001740)=0xc, 0x5, 0x1, 0x0, 0xf978, 0x1d, 0x81}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001780)=""/87, 0x57}, &(0x7f0000001800), 0x24}}], 0xa0, 0x4000804}, 0x20) 5m16.524336995s ago: executing program 1 (id=550): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 5m16.022713226s ago: executing program 32 (id=550): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 9.251752439s ago: executing program 5 (id=1958): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x9}, {0x10, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000080}, 0x24000880) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x184, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5d}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x12, 0x2, "4dfeff79c3ac3bf6fb1818672a3f"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd6, 0x1, "de05b42a47d87ec26a8ba04dd112b47b694b58c9e757fa275b4c1da2c99331c948a7aa9fda92bc515b733a99f1b17b760e56dfdde155aa7590d0772b46ea180efc0e32c4f95ef95ac46cd40d355ac6751c88e0ec24586e32f6a54924a9831cfad4b16f2ed682c9437126eabba438e638e6bed5b93e9811bee830690e00b9bc0eb87701026c7c145fe332d154e2e1568ccc672fbb62957723362d077cadd5594437aceb94b85b203147de173fcd1492d26825086cae525f493322da8f6530825e2d68e4b9ce20f26aa4d02e127c13852b22aa"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x43, 0x2, "fb34973ae415aec79744b8c9558bdac4bcc42f694f1d7828d43b35cac0b6f4d308ce873b79e0dd727681ddc003abcdd7901ad785f906b5aedd590a0c4f6b43"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x54000}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xda, 0xfc, 0xc5, 0x10, 0xcf3, 0xb003, 0x93d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x80, 0x5, "", [{{0x9, 0x4, 0x15, 0x4, 0x0, 0x24, 0xd8, 0xea, 0x8}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 8.722706163s ago: executing program 2 (id=1963): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10) sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x401, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045515, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r11 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 8.713569807s ago: executing program 3 (id=1964): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="24010000", @ANYRES16=r9, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.313365982s ago: executing program 2 (id=1969): socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001700)={'syz0\x00', {0xb, 0x101, 0x40, 0xd9be}, 0x1e, [0x2, 0x4, 0x40, 0x8, 0x4, 0xffffff4d, 0x0, 0x80010001, 0x9, 0x8, 0x401, 0xfff, 0x6, 0x6, 0x4, 0xcc, 0x9, 0x6, 0x3, 0x8, 0xc5, 0xfffffffb, 0x198, 0x5, 0x1ff, 0x8001, 0x4, 0xd5, 0x6, 0x1df, 0x3, 0x6, 0x7ff, 0x10000, 0x1000, 0x3, 0x1000, 0x80, 0x8, 0x2, 0xd, 0x5, 0x4, 0x2000000, 0x7b, 0xfffffff9, 0x3, 0x1, 0x6, 0x1, 0xfffffffd, 0x9, 0x88, 0x5, 0x8, 0x7, 0xffff, 0x0, 0x1, 0x0, 0x4, 0x3, 0x101, 0x7905359a], [0xb, 0x6, 0x3, 0x7fa, 0x9, 0x8, 0x80000001, 0x6, 0x99a, 0x4, 0x10000, 0x5, 0x177, 0x3, 0x1, 0x8, 0x5, 0x1, 0xf, 0x10, 0x3209, 0x6, 0xd1, 0x3, 0x7, 0x9, 0x9, 0x1, 0x6, 0x4, 0x81, 0xe0000000, 0x401, 0x40, 0x401, 0x5, 0x4, 0x4, 0x2, 0xffffffff, 0x8, 0xfffffff8, 0x3, 0x10000, 0xfffffffd, 0x8, 0x0, 0x0, 0x935b, 0x8, 0x8, 0x8001, 0x401, 0x0, 0xc7, 0x8, 0x3, 0x53c5c334, 0x55c5, 0xffffffff, 0x7f, 0x1], [0xd72, 0x1, 0x2, 0xffffffff, 0x79, 0xfffffff8, 0x3, 0xb, 0x6, 0x3, 0x4, 0x0, 0x88ab, 0x6, 0x536, 0x2, 0x9, 0x2, 0x7, 0x8, 0x80000000, 0x328, 0x9aa, 0x1, 0xc9, 0xf, 0x9, 0xfffffffd, 0x40, 0x3, 0x3ff, 0x8, 0x40, 0xf5f, 0x8001, 0x0, 0xe400, 0x8001, 0x200, 0x7fe00, 0x8, 0x2, 0x7, 0x180, 0x9a, 0x80000000, 0xe4, 0x207ff, 0x0, 0xb11c, 0x7, 0x5, 0x4, 0x200, 0x0, 0x5, 0x39d9dcaa, 0x6, 0x1, 0x8, 0x6, 0x5, 0xfffff15b, 0x8001], [0x5, 0x2, 0x6, 0xfff, 0x4, 0x8, 0x5, 0x3, 0xffffffff, 0x8, 0x2, 0xc, 0x1, 0xc, 0x7, 0x6, 0x3, 0x9, 0xff, 0x5, 0x0, 0x0, 0xfffffffa, 0x2, 0x200, 0x8, 0x8, 0xffffffff, 0x2d1f47ff, 0x2, 0x1ff, 0xbe, 0x8, 0x8000, 0xd, 0x0, 0x80000556, 0xb, 0x1, 0x1, 0x0, 0xd4, 0x24fe, 0x9, 0x9, 0x5, 0x3, 0xb, 0xff, 0xffff, 0x8, 0x4, 0x5, 0x0, 0x3, 0x0, 0x40, 0x4, 0x71, 0x8, 0x2, 0x1000, 0x8, 0x573]}, 0x45c) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd700206dcdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$pptp(0x18, 0x1, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="260000005200ffff000020000000000002000000"], 0x14}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x20000053, &(0x7f0000000140)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) close(r3) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @sdr={0x47524247, 0x80000000}}) 7.07141521s ago: executing program 3 (id=1971): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @sliced={0x153f, [0x8, 0x0, 0x5, 0x7, 0x9df, 0x4, 0xb, 0x2, 0x1000, 0x100, 0x5, 0x9, 0x612e, 0xd0, 0x1, 0x9, 0x9, 0x4, 0x2, 0xffff, 0x8, 0x1, 0x1, 0x800, 0x2, 0xcda4, 0x7, 0x4, 0x2, 0x8, 0x9, 0x7ff, 0xf, 0x6, 0x8, 0x7, 0x8, 0x2, 0x9, 0x5, 0x3, 0x2, 0xf, 0x10, 0x80, 0x1, 0x6, 0x4], 0xa}}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241800000008000905810300020000000904010000020d000009040101f7e314892a"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0xffffffffffffffd4, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x800, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) 7.007861204s ago: executing program 5 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x7c}}, 0x41) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) 6.856165308s ago: executing program 5 (id=1973): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="24010000", @ANYRES16=r9, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 6.155673714s ago: executing program 0 (id=1975): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x12, '\x00', @st={0x4, [{0x3, @uvalue=0xfffffffe00000}, {0x2, @svalue=0x7fffffff}, {0x2, @svalue=0x8000}, {0x1, @svalue=0x2}]}, 0x4}, {0x2, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x18, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @svalue=0x100}, {0x1, @svalue=0x4f}]}, 0xe6}]}) (fail_nth: 2) 5.507154621s ago: executing program 0 (id=1976): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x35315842}}) r1 = epoll_create1(0x80000) r2 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000003540)=""/194, 0xc2}, {&(0x7f0000001bc0)=""/4093, 0xffd}, {&(0x7f0000000240)=""/167, 0xa7}], 0x7}, 0x22140) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x4}) 5.381431468s ago: executing program 2 (id=1978): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES64], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, &(0x7f0000000180)={0x20, 0x23, 0xd0, {0xd0, 0x21, "4d3c7932384b279a039f1a4a2e8a497e5b5d61965dffc06d1588be7ee3831e62765d600099752d61b525bf17626c0876e27adccacfcca18eee14e99a7dd5b580444ce54f4b2d9ec3861a552d6033953b28c152e565285a4a08345e514ab9cc7bd0b616e2664d07394bf760c4db8eaa5ef8862590ae057efe89153d3da9167c50170993a1df9a42a177f900b4c9252fd5218569e9f31c53555de01c6b62829c692fd1f1d9f368450aefc15638c68c55b208cf3e393e8e3c471c96cf2864edbe06d7a44510e1177c13829b0c5533c3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "6327f71262a5380001fb5596e9bb6b11e43667cde4c7ea85dedf1038"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x4578f9c39a296303, 0xf, 0x9f, "7304d866f20442412b3ddf1fbd0995094387cad9508050685d3c5079af8ede85d05ba118e908f8956f96a90d3d8e0319cabd114a32c39003649ea5e7a8cfae2e8519b41de7821f9a65122ec0708901fdbb5a3b960871376d9509a6d7a39e762ee7b007fa9170bf79b4d91093de5e09f500cf8b8680f4ebaf9a07d368434900c3594fcb3d8258391e6301623b5aeceba517c5c71e5a25303c59a62846764bf2"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xbe}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "9e48"}, &(0x7f0000000400)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000440)={0x20, 0x83, 0x3, "82f200"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "038c21"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "2ef08c"}}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = semget$private(0x0, 0x7, 0x85) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xffbf, 0x2000}], 0x1, 0x0) semop(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xffffffa3, 0x800, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000002400)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r1, r1, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.234546547s ago: executing program 5 (id=1979): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004004}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r7 = io_uring_setup(0x228f, &(0x7f0000000100)={0x0, 0xc638, 0x10000, 0x5, 0x10000000}) io_uring_enter(r7, 0x0, 0x2, 0xf, 0x0, 0x18) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x202406c, &(0x7f00000029c0)=ANY=[], 0x1, 0x0, 0x0) 5.031151586s ago: executing program 0 (id=1980): r0 = socket$netlink(0x10, 0x3, 0x9) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x200) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000580)={r8, 0x7}, &(0x7f0000000600)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0)={r8, 0x9}, 0x8) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(0x0, r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (rerun: 64) 4.626703119s ago: executing program 2 (id=1981): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="24010000", @ANYRES16=r9, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4.264722772s ago: executing program 3 (id=1982): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x1a1) r7 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r5, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1, 0x80000000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r7, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x6c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x4}, {0xe, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_RATE={0x6, 0x5, {0x6, 0x1d}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x48, 0xd}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xf3, 0xf6, 0x2, 0x1, 0x9be0, 0x10000, 0x1}}, {0x6, 0x2, [0x40]}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x94}, 0x4000c00) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xee, 0x5, 0x8, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc0, 0x5}, {0xd000, 0x2000, 0x5, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x1000, 0x4000, 0xf, 0xff, 0xfe, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xe, 0x5, 0xfc, 0x3, 0xa, 0x5, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x7}, {0xffffffff, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x2, 0x20000401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000500)='K\xce\x85\x84!\x82\x95\xe0\xfe\x9a\x82)C\xb6\x8b\xe3\xed\x02\x8b\x1e\x14\xd4\xa7\x97\x91\xc8\xb7\xa6Q\xb4j\xa8\xd3]\x8f\x17\x1fo\x0fa\x8d*\x8bWn\x93\xb0R\xcd\xf5\xdf\xd5J\x84@*\xec\x03I\x9a\xd5\x89O\x84\x04\xb1B\x89\x80I\x85\xe6\xc0B\\U\xf9Q\x044I\x8d\xb9\xb6,&\x14\x86\x9bb\x00\xa5\xa5\xca\xda\x14\xc4\xfd6\x06h\x9bL\x87?\x01m\xbb\x92\x19d)f\x06\xce\xdb]j|\xb2[}\x83\xe3.\"\"a\x9e|\xa4\x18\x03`H\xd1\x7f\x1d;UH\xc6\x86(\xff\x93\x85D\x8d\xcb\x03_\xceP\xf4\xec?\xbfFs\xb9\xfd\x15\xdb\x95\xa6\xfa\xda\xe8&\xbe\xe6', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x0, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) 3.422393825s ago: executing program 0 (id=1985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) 2.868056777s ago: executing program 0 (id=1987): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12011001e7ae500876171c50f02701020301090212000106008005090454fb007f4ddad0"], 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x60000, 0x85, &(0x7f0000000740)=""/133}]}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54350629bd7000fbdbdf250905044c4e20462004000000ae0d0000060000000e0000005f00000007000000010000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="014000007689c0240800000009000000080001001f000000"], 0x54}}, 0x24040014) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000600), &(0x7f0000000640)=0x10) 2.567948383s ago: executing program 2 (id=1988): socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001700)={'syz0\x00', {0xb, 0x101, 0x40, 0xd9be}, 0x1e, [0x2, 0x4, 0x40, 0x8, 0x4, 0xffffff4d, 0x0, 0x80010001, 0x9, 0x8, 0x401, 0xfff, 0x6, 0x6, 0x4, 0xcc, 0x9, 0x6, 0x3, 0x8, 0xc5, 0xfffffffb, 0x198, 0x5, 0x1ff, 0x8001, 0x4, 0xd5, 0x6, 0x1df, 0x3, 0x6, 0x7ff, 0x10000, 0x1000, 0x3, 0x1000, 0x80, 0x8, 0x2, 0xd, 0x5, 0x4, 0x2000000, 0x7b, 0xfffffff9, 0x3, 0x1, 0x6, 0x1, 0xfffffffd, 0x9, 0x88, 0x5, 0x8, 0x7, 0xffff, 0x0, 0x1, 0x0, 0x4, 0x3, 0x101, 0x7905359a], [0xb, 0x6, 0x3, 0x7fa, 0x9, 0x8, 0x80000001, 0x6, 0x99a, 0x4, 0x10000, 0x5, 0x177, 0x3, 0x1, 0x8, 0x5, 0x1, 0xf, 0x10, 0x3209, 0x6, 0xd1, 0x3, 0x7, 0x9, 0x9, 0x1, 0x6, 0x4, 0x81, 0xe0000000, 0x401, 0x40, 0x401, 0x5, 0x4, 0x4, 0x2, 0xffffffff, 0x8, 0xfffffff8, 0x3, 0x10000, 0xfffffffd, 0x8, 0x0, 0x0, 0x935b, 0x8, 0x8, 0x8001, 0x401, 0x0, 0xc7, 0x8, 0x3, 0x53c5c334, 0x55c5, 0xffffffff, 0x7f, 0x1], [0xd72, 0x1, 0x2, 0xffffffff, 0x79, 0xfffffff8, 0x3, 0xb, 0x6, 0x3, 0x4, 0x0, 0x88ab, 0x6, 0x536, 0x2, 0x9, 0x2, 0x7, 0x8, 0x80000000, 0x328, 0x9aa, 0x1, 0xc9, 0xf, 0x9, 0xfffffffd, 0x40, 0x3, 0x3ff, 0x8, 0x40, 0xf5f, 0x8001, 0x0, 0xe400, 0x8001, 0x200, 0x7fe00, 0x8, 0x2, 0x7, 0x180, 0x9a, 0x80000000, 0xe4, 0x207ff, 0x0, 0xb11c, 0x7, 0x5, 0x4, 0x200, 0x0, 0x5, 0x39d9dcaa, 0x6, 0x1, 0x8, 0x6, 0x5, 0xfffff15b, 0x8001], [0x5, 0x2, 0x6, 0xfff, 0x4, 0x8, 0x5, 0x3, 0xffffffff, 0x8, 0x2, 0xc, 0x1, 0xc, 0x7, 0x6, 0x3, 0x9, 0xff, 0x5, 0x0, 0x0, 0xfffffffa, 0x2, 0x200, 0x8, 0x8, 0xffffffff, 0x2d1f47ff, 0x2, 0x1ff, 0xbe, 0x8, 0x8000, 0xd, 0x0, 0x80000556, 0xb, 0x1, 0x1, 0x0, 0xd4, 0x24fe, 0x9, 0x9, 0x5, 0x3, 0xb, 0xff, 0xffff, 0x8, 0x4, 0x5, 0x0, 0x3, 0x0, 0x40, 0x4, 0x71, 0x8, 0x2, 0x1000, 0x8, 0x573]}, 0x45c) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd700206dcdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$pptp(0x18, 0x1, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="260000005200ffff000020000000000002000000"], 0x14}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x20000053, &(0x7f0000000140)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) close(r3) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @sdr={0x47524247, 0x80000000}}) 2.499280563s ago: executing program 4 (id=1989): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) socket$nl_audit(0x10, 0x3, 0x9) 1.802804555s ago: executing program 3 (id=1990): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x8010, r0, 0x73c91000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000000)={r0}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) (fail_nth: 3) 1.53005336s ago: executing program 4 (id=1991): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x12, '\x00', @st={0x4, [{0x3, @uvalue=0xfffffffe00000}, {0x2, @svalue=0x7fffffff}, {0x2, @svalue=0x8000}, {0x1, @svalue=0x2}]}, 0x4}, {0x2, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x18, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @svalue=0x100}, {0x1, @svalue=0x4f}]}, 0xe6}]}) 987.008545ms ago: executing program 5 (id=1992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0), 0x0, 0x2090) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 914.422434ms ago: executing program 4 (id=1993): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000000)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r2, 0x80000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x8, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000000000000a024000", @ANYRES32=0x0, @ANYRESOCT=r3], 0x38}}, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 569.686127ms ago: executing program 4 (id=1994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000003200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 391.521071ms ago: executing program 4 (id=1995): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 389.889102ms ago: executing program 2 (id=1996): socket$netlink(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0xffffffff00000003, {0x5, 0xfffffffffffffffb, 0x1000000001000000, 0x6, 0x300, 0x5, {0x7, 0xffffffffffffffff, 0x40000000000b, 0xfe2b25c, 0x7fffffffffc, 0x20000006d, 0x25, 0x0, 0x4010, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x5c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x38, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x34, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x30, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x2a, 0x3, "31f4b13992167fe55400000000f0fa671f5b5c3a5f32b0da4c593738eaac307fba9a431449c1"}}}}]}, 0x5c}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x1, 0x0, [{0xeeee8000, 0xc2, &(0x7f0000000140)=""/194}]}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 255.169288ms ago: executing program 3 (id=1997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) 115.282869ms ago: executing program 4 (id=1998): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40042, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000080)={0x0, 0x7ff}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x8) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 0s ago: executing program 3 (id=1999): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) syz_usb_connect$cdc_ncm(0x2, 0xd1, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="f4db419ff7d9c2c9223db4b4bd5d32b3065da44292d30d6d414cc75f1af0a4e619c465d137899d75d187a2976d35c25997c5189d93ba4fad25b82144299eb28b315c4a7adfe1bbc2bcfdb5cdbaf1cb9557c3590d90880c2fd11ed4a49c7ce95aa887cab7af348860c32642d943ee4e2b34db74cb568228d977970403f4f662bd425367bf55b55e28ced6deb0af18c9b868fae72e3354", @ANYRESDEC=0x0], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) kernel console output (not intermixed with test programs): 19.292553][ T29] audit: type=1326 audit(1773095140.516:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 419.420801][ T7701] usb 4-1: Using ep0 maxpacket: 16 [ 419.421390][ T29] audit: type=1326 audit(1773095140.516:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 419.428327][ T7701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.533860][ T7701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.570552][ T7701] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 419.599601][ T29] audit: type=1326 audit(1773095140.516:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 419.600140][ T7701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.705598][ T7701] usb 4-1: config 0 descriptor?? [ 419.724869][ T29] audit: type=1326 audit(1773095140.516:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 419.812949][ T12] net_ratelimit: 30 callbacks suppressed [ 419.812969][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 419.881127][ T29] audit: type=1326 audit(1773095140.516:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 419.930811][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 419.969537][ T29] audit: type=1326 audit(1773095140.516:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 420.258817][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 420.307633][T11887] hub 9-0:1.0: USB hub found [ 420.319313][T11887] hub 9-0:1.0: 1 port detected [ 420.374433][ T29] audit: type=1326 audit(1773095140.516:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 420.397734][ T3577] bond3: (slave bridge5): failed to get link speed/duplex [ 420.440835][ T29] audit: type=1326 audit(1773095140.516:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 420.510553][ T3577] bond3: (slave bridge5): failed to get link speed/duplex [ 420.520250][ T29] audit: type=1326 audit(1773095140.516:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 420.620748][ T3577] bond3: (slave bridge5): failed to get link speed/duplex [ 420.647647][T11892] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1575'. [ 420.874271][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 420.995826][ T13] bond3: (slave bridge5): failed to get link speed/duplex [ 421.069173][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1579'. [ 421.160655][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 421.171545][ T24] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 421.270472][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 421.348207][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.357123][ T24] usb 5-1: config 0 has no interface number 0 [ 421.367380][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 421.597968][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.624496][ T24] usb 5-1: config 0 descriptor?? [ 421.671836][ T24] usb 5-1: selecting invalid altsetting 1 [ 421.678171][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 421.692768][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 421.903510][ T24] DVB: Unable to find symbol cx22700_attach() [ 422.050667][ T5829] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 422.081031][ T24] DVB: Unable to find symbol tda10046_attach() [ 422.089665][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 422.165874][ T24] usb 5-1: USB disconnect, device number 97 [ 422.215866][ T5829] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 422.226790][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.235984][ T5829] usb 6-1: Product: syz [ 422.351714][ T5829] usb 6-1: Manufacturer: syz [ 422.381315][ T5829] usb 6-1: SerialNumber: syz [ 422.405585][ T5829] usb 6-1: config 0 descriptor?? [ 422.501157][ T5829] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 422.525419][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 422.541489][ T5829] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 422.555605][ T5829] usb 6-1: media controller created [ 422.614551][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.671345][ T7701] usbhid 4-1:0.0: can't add hid device: -71 [ 422.678777][ T7701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 422.745021][ T7701] usb 4-1: USB disconnect, device number 69 [ 423.089677][ T5829] DVB: Unable to find symbol mt352_attach() [ 423.263847][ T5829] DVB: Unable to find symbol nxt6000_attach() [ 423.340474][ T5829] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 423.369123][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 423.392550][ T5829] dvb-usb: schedule remote query interval to 1000 msecs. [ 423.399601][ T5829] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 423.440442][ T5829] dvb-usb: bulk message failed: -22 (7/0) [ 423.456645][ T5829] dvb-usb: bulk message failed: -22 (7/0) [ 423.499546][ T5829] usb 6-1: USB disconnect, device number 63 [ 423.643754][ T5829] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 423.683196][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.748178][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.428823][T11966] netlink: 392 bytes leftover after parsing attributes in process `syz.5.1595'. [ 424.443834][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.487131][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.522620][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.532911][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.560707][ T5829] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 424.735218][ T7710] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 424.747235][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.770917][ T5829] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 424.795900][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.824157][ T5829] usb 4-1: Product: syz [ 424.835581][ T5829] usb 4-1: Manufacturer: syz [ 424.850234][ T5829] usb 4-1: SerialNumber: syz [ 424.880518][ T1155] net_ratelimit: 30 callbacks suppressed [ 424.880540][ T1155] bond3: (slave bridge5): failed to get link speed/duplex [ 424.894031][ T7710] usb 5-1: Using ep0 maxpacket: 16 [ 424.907663][ T7710] usb 5-1: config 0 has no interfaces? [ 424.939368][ T7710] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 424.949812][ T7710] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 425.038592][ T7710] usb 5-1: Manufacturer: syz [ 425.099964][ T7710] usb 5-1: config 0 descriptor?? [ 425.281067][ T1155] bond3: (slave bridge5): failed to get link speed/duplex [ 425.285119][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.361386][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.440555][ T1155] bond3: (slave bridge5): failed to get link speed/duplex [ 425.550567][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 425.602850][ T5829] usb 4-1: unit 5 not found! [ 425.607692][ T5829] usb 4-1: unit 3 not found! [ 425.660575][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 425.770504][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 425.895412][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1594'. [ 425.902828][T11959] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 425.951706][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 426.003938][ T5829] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 426.011416][ T5829] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 426.035990][ T5829] usb 4-1: USB disconnect, device number 70 [ 426.070577][ T13] bond3: (slave bridge5): failed to get link speed/duplex [ 426.180577][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 426.291843][T11984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.299140][T11984] IPv6: NLM_F_CREATE should be set when creating new route [ 426.306735][T11984] IPv6: NLM_F_CREATE should be set when creating new route [ 427.229405][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.250992][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.408618][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.423784][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.444369][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.463440][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.472953][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 427.500856][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 427.662832][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 427.676721][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 427.694031][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.705891][ T24] usb 4-1: Product: syz [ 427.710560][ T24] usb 4-1: Manufacturer: syz [ 427.720758][ T24] usb 4-1: SerialNumber: syz [ 427.733934][ T24] usb 4-1: config 0 descriptor?? [ 428.006290][ T5829] usb 5-1: USB disconnect, device number 98 [ 428.206582][ T5829] usb 4-1: USB disconnect, device number 71 [ 428.384253][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 428.552748][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 428.561931][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 429.438438][T12044] kernel profiling enabled (shift: 63) [ 429.444680][T12044] profiling shift: 63 too large [ 429.480635][ T7706] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 429.670706][ T7706] usb 4-1: device descriptor read/64, error -71 [ 429.963506][ T12] net_ratelimit: 26 callbacks suppressed [ 429.963534][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 429.980498][ T7706] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 430.100563][ T1155] bond3: (slave bridge5): failed to get link speed/duplex [ 430.140680][ T7706] usb 4-1: device descriptor read/64, error -71 [ 430.262120][ T7706] usb usb4-port1: attempt power cycle [ 430.319801][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 430.450568][ T1155] bond3: (slave bridge5): failed to get link speed/duplex [ 430.628595][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 430.680562][ T7706] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 430.711340][ T7706] usb 4-1: device descriptor read/8, error -71 [ 430.800631][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 430.930700][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 430.950684][ T7706] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 431.011488][ T7706] usb 4-1: device descriptor read/8, error -71 [ 431.040634][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 431.152224][ T7706] usb usb4-port1: unable to enumerate USB device [ 431.171238][ T1155] bond3: (slave bridge5): failed to get link speed/duplex [ 431.300637][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 431.454061][T12060] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1623'. [ 431.809075][T12072] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 431.847603][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 432.150480][ T7711] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 432.152918][T12080] netlink: 392 bytes leftover after parsing attributes in process `syz.5.1626'. [ 432.430930][ T7711] usb 5-1: Using ep0 maxpacket: 32 [ 432.443804][ T7711] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 432.456153][ T7711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 432.468039][ T7711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 432.481488][ T7711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 432.512314][ T7711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 432.542662][ T7711] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 432.553889][ T7711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.577409][ T7711] usb 5-1: Product: syz [ 432.591014][ T7711] usb 5-1: Manufacturer: syz [ 432.596037][ T7711] usb 5-1: SerialNumber: syz [ 432.609373][ T7711] usb 5-1: config 0 descriptor?? [ 432.635068][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 432.667002][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 432.709691][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 432.741180][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 432.772710][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 432.809457][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 432.855480][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 433.026897][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.051443][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.099324][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.151089][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.171375][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.188562][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.219403][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.227353][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.259961][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.266905][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.285471][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.321600][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.343659][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.361275][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.379096][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.389538][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.398111][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.407299][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.414447][ T7711] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 433.425367][ T7711] input input46: Timeout waiting for response from device. [ 433.454757][ T7711] usb 5-1: USB disconnect, device number 99 [ 433.648903][T12095] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 433.655477][T12095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.688565][T12094] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 433.695224][T12094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.710760][T12095] vhci_hcd vhci_hcd.0: Device attached [ 433.725531][T12094] vhci_hcd vhci_hcd.0: Device attached [ 433.858971][T12110] usb usb8: usbfs: process 12110 (syz.4.1633) did not claim interface 0 before use [ 433.889938][T12110] usb usb8: selecting invalid altsetting 2047 [ 434.144048][T12097] vhci_hcd: connection closed [ 434.156885][T12096] vhci_hcd: connection closed [ 434.168247][ T13] vhci_hcd vhci_hcd.2: stop threads [ 434.231343][ T13] vhci_hcd vhci_hcd.2: release socket [ 434.241387][ T5829] usb 37-2: new low-speed USB device number 3 using vhci_hcd [ 434.256880][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 434.336310][ T13] vhci_hcd vhci_hcd.2: stop threads [ 434.348575][ T13] vhci_hcd vhci_hcd.2: release socket [ 434.365798][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 434.446367][ T7711] hid_parser_main: 4005 callbacks suppressed [ 434.446391][ T7711] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 434.587409][T12113] sctp: [Deprecated]: syz.2.1634 (pid 12113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.587409][T12113] Use struct sctp_sack_info instead [ 434.832394][ T7711] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.844127][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.858560][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.968717][T12141] sock: sock_timestamping_bind_phc: sock not bind to device [ 435.067872][ T8780] net_ratelimit: 17 callbacks suppressed [ 435.067897][ T8780] bond3: (slave bridge5): failed to get link speed/duplex [ 435.334944][ T8780] bond3: (slave bridge5): failed to get link speed/duplex [ 435.480819][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 435.620699][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 435.732817][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 435.850666][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 435.980788][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 436.100214][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 436.220763][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 436.341201][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 436.973725][ T7711] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 437.283391][ T7711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.296116][ T7711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.355461][ T7711] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 437.382260][ T7711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.410249][ T7711] usb 4-1: config 0 descriptor?? [ 437.655595][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.665337][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.918965][ T7711] playstation 0003:054C:0DF2.001D: unknown main item tag 0x5 [ 437.950342][ T7711] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 438.117531][ T7711] playstation 0003:054C:0DF2.001D: Failed to retrieve feature with reportID 9: -71 [ 438.132615][ T7711] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense pairing info: -71 [ 438.159087][ T7711] playstation 0003:054C:0DF2.001D: Failed to get MAC address from DualSense [ 438.161066][ T7701] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 438.170337][T12205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.195579][ T7711] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 438.211312][T12205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.220251][ T7711] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -71 [ 438.278949][ T7711] usb 4-1: USB disconnect, device number 76 [ 438.341409][ T7701] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.349540][ T7701] usb 5-1: config 0 has no interface number 0 [ 438.366020][ T7701] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 438.390469][ T7701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.401026][T12210] vlan2: entered promiscuous mode [ 438.410614][T12210] team0: entered promiscuous mode [ 438.411744][ T7701] usb 5-1: config 0 descriptor?? [ 438.415686][T12210] team_slave_0: entered promiscuous mode [ 438.453803][ T7701] usb 5-1: selecting invalid altsetting 1 [ 438.463663][T12210] team_slave_1: entered promiscuous mode [ 438.480579][ T7701] dvb_ttusb_budget: ttusb_init_controller: error [ 438.492829][ T7701] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 438.502381][T12212] xt_hashlimit: size too large, truncated to 1048576 [ 438.580706][ T7701] DVB: Unable to find symbol cx22700_attach() [ 438.597703][T12220] __nla_validate_parse: 27 callbacks suppressed [ 438.597755][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 438.616020][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 438.625762][T12220] bridge_slave_1: left allmulticast mode [ 438.632711][T12220] bridge_slave_1: left promiscuous mode [ 438.638733][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.655417][ T7701] DVB: Unable to find symbol tda10046_attach() [ 438.665681][ T7701] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 438.680529][ T7701] usb 5-1: USB disconnect, device number 100 [ 438.700065][T12220] bridge_slave_0: left allmulticast mode [ 438.722531][T12220] bridge_slave_0: left promiscuous mode [ 438.738749][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.781087][ T5936] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 438.930833][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 438.942929][ T5936] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 438.952825][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.966322][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 438.987671][ T5936] usb 6-1: Product: syz [ 439.032647][ T5936] usb 6-1: Manufacturer: syz [ 439.037309][ T5936] usb 6-1: SerialNumber: syz [ 439.071806][ T5936] usb 6-1: config 0 descriptor?? [ 439.331030][ T5829] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 439.361664][T12238] syz_tun: entered allmulticast mode [ 439.400790][T12235] syz_tun: left allmulticast mode [ 439.494345][T12241] usb usb8: usbfs: process 12241 (syz.2.1660) did not claim interface 0 before use [ 439.504592][T12241] usb usb8: selecting invalid altsetting 2047 [ 439.531339][ T5936] airspy 6-1:0.0: Board ID: 00 [ 439.536154][ T5936] airspy 6-1:0.0: Firmware version: [ 439.600664][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 439.820321][ T7706] IPVS: starting estimator thread 0... [ 439.830596][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 439.842673][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 439.863780][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 439.895122][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.930608][T12245] IPVS: using max 57 ests per chain, 136800 per kthread [ 439.939905][ T24] usb 5-1: Product: syz [ 439.955912][ T24] usb 5-1: Manufacturer: syz [ 439.978122][ T24] usb 5-1: SerialNumber: syz [ 440.089685][ T8280] net_ratelimit: 396 callbacks suppressed [ 440.089700][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 440.230201][ T24] usb 5-1: config 0 descriptor?? [ 440.245768][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 440.255846][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 440.309317][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.316005][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.470747][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.516553][T12249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1664'. [ 440.526778][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.540786][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 440.542097][T12250] atomic_op ffff88805c374998 conn xmit_atomic 0000000000000000 [ 440.690762][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 440.789209][ T5936] airspy 6-1:0.0: Registered as swradio24 [ 440.800453][ T5936] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 440.813602][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 440.931339][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 440.939170][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 440.988052][ T7701] usb 6-1: USB disconnect, device number 64 [ 441.060920][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 441.190941][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 441.310726][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 441.381732][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 441.432002][ T24] em28xx 5-1:0.0: board has no eeprom [ 441.433014][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 441.461383][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 441.691553][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.700281][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.762848][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 441.850662][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 441.859716][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 441.891663][ T7710] em28xx 5-1:0.0: Binding DVB extension [ 441.918762][ T24] usb 5-1: USB disconnect, device number 101 [ 441.947881][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 442.051116][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1671'. [ 442.109423][ T7710] em28xx 5-1:0.0: Registering input extension [ 442.135733][ T24] em28xx 5-1:0.0: Closing input extension [ 442.150766][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 442.223545][ T24] em28xx 5-1:0.0: Freeing device [ 442.408438][T12284] netlink: 'syz.4.1673': attribute type 21 has an invalid length. [ 442.433635][T12284] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1673'. [ 442.440554][ T5936] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 442.495616][T12284] netlink: 'syz.4.1673': attribute type 5 has an invalid length. [ 442.503665][T12284] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1673'. [ 442.692394][ T5936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.714884][ T5936] usb 4-1: config 0 has no interface number 0 [ 442.725052][ T5936] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 442.745311][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.793207][ T5936] usb 4-1: config 0 descriptor?? [ 442.844880][ T5936] usb 4-1: selecting invalid altsetting 1 [ 442.855681][ T5936] dvb_ttusb_budget: ttusb_init_controller: error [ 442.987756][ T5936] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 443.098154][ T5936] DVB: Unable to find symbol cx22700_attach() [ 443.298238][ T5936] DVB: Unable to find symbol tda10046_attach() [ 443.311471][ T5936] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 443.335071][ T5936] usb 4-1: USB disconnect, device number 77 [ 443.421765][ T7701] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 443.592035][ T7701] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 443.636803][T12310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.666094][ T7701] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 443.773283][ T7701] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 443.830453][ T7701] usb 5-1: config 150 has no interface number 0 [ 443.843054][ T7701] usb 5-1: config 150 interface 204 has no altsetting 0 [ 443.865994][ T7701] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 443.880463][ T7701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.889046][ T7701] usb 5-1: Product: syz [ 443.897113][ T7701] usb 5-1: Manufacturer: syz [ 443.902103][ T7701] usb 5-1: SerialNumber: syz [ 444.246583][ T7701] usb 5-1: USB disconnect, device number 102 [ 445.154709][ T48] net_ratelimit: 26 callbacks suppressed [ 445.154729][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 445.200525][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 445.281089][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 445.364673][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 445.390487][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 445.401136][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 445.410306][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.423024][T12355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.469025][ T24] usb 4-1: Product: syz [ 445.479789][ T24] usb 4-1: Manufacturer: syz [ 445.493343][ T24] usb 4-1: SerialNumber: syz [ 445.521639][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 445.531638][ T24] usb 4-1: config 0 descriptor?? [ 445.548357][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 445.561463][ T24] usb 4-1: Detected FT-X [ 445.632080][T12361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.641345][T12361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.650723][ T5936] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 445.696678][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 445.705757][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 445.763120][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 445.812305][ T5936] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 445.820785][ T5936] usb 6-1: config 0 has no interface number 0 [ 445.820874][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 445.837173][ T5936] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 445.889578][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.907657][ T5936] usb 6-1: config 0 descriptor?? [ 445.924328][ T5936] usb 6-1: selecting invalid altsetting 1 [ 445.932479][ T5936] dvb_ttusb_budget: ttusb_init_controller: error [ 445.940644][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 445.950021][ T5936] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 446.026902][ T5936] DVB: Unable to find symbol cx22700_attach() [ 446.051710][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 446.084499][ T5936] DVB: Unable to find symbol tda10046_attach() [ 446.092294][ T5936] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 446.127062][ T5936] usb 6-1: USB disconnect, device number 65 [ 446.170505][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 446.178499][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 446.280596][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 446.434375][ T24] usb 4-1: USB disconnect, device number 78 [ 446.446087][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 446.468157][ T24] ftdi_sio 4-1:0.0: device disconnected [ 447.858785][ T24] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 447.881334][ T7710] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 447.945214][ T24] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 448.031531][ T7710] usb 4-1: device descriptor read/64, error -71 [ 448.270531][ T7710] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 448.450538][ T7710] usb 4-1: device descriptor read/64, error -71 [ 448.562247][ T7710] usb usb4-port1: attempt power cycle [ 448.796920][ T5936] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 448.931315][ T7710] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 448.971965][ T5936] usb 5-1: device descriptor read/64, error -71 [ 448.991328][ T7710] usb 4-1: device descriptor read/8, error -71 [ 449.231678][ T5936] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 449.378070][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 449.390237][ T5936] usb 5-1: device descriptor read/64, error -71 [ 449.420563][ T7710] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 449.443077][T12417] usb usb8: usbfs: process 12417 (syz.2.1702) did not claim interface 0 before use [ 449.454776][T12417] usb usb8: selecting invalid altsetting 2047 [ 449.527583][ T5936] usb usb5-port1: attempt power cycle [ 449.532034][ T7710] usb 4-1: device descriptor read/8, error -71 [ 450.150689][ T5936] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 450.200574][ T48] net_ratelimit: 23 callbacks suppressed [ 450.200601][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 450.260750][ T7710] usb usb4-port1: unable to enumerate USB device [ 450.270203][ T5936] usb 5-1: device descriptor read/8, error -71 [ 450.349910][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 450.620983][ T5936] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 450.644588][ T5936] usb 5-1: device descriptor read/8, error -71 [ 450.671247][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 450.771022][ T5936] usb usb5-port1: unable to enumerate USB device [ 450.782780][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 450.890831][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 451.002369][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 451.009914][ T7710] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 451.120542][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 451.181251][ T7710] usb 6-1: not running at top speed; connect to a high speed hub [ 451.190136][ T7710] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 451.205987][ T7710] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.230543][ T7710] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 451.241658][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 451.251229][ T7710] usb 6-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 451.260334][ T7710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.278638][ T7710] usb 6-1: Product: syz [ 451.295425][ T7710] usb 6-1: Manufacturer: syz [ 451.300215][ T7710] usb 6-1: SerialNumber: syz [ 451.351327][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 451.380528][ T7701] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 451.460627][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 451.493221][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 451.525408][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.535561][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.541321][ T7701] usb 5-1: Using ep0 maxpacket: 8 [ 451.557222][ T7701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.562489][ T7710] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 451.570224][ T7701] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.585177][ T7701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.594277][ T7701] usb 5-1: SerialNumber: syz [ 451.613361][ T7701] usb 5-1: bad CDC descriptors [ 451.685898][ T7710] usb 6-1: USB disconnect, device number 66 [ 451.750720][ T7711] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 451.815991][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.825271][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.834486][ T7701] usb 5-1: USB disconnect, device number 107 [ 451.904244][T12449] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 451.913007][ T7711] usb 4-1: Using ep0 maxpacket: 16 [ 451.919833][ T7711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.920331][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.933921][ T7711] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.940221][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.953800][ T7711] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.965037][ T7711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.973390][ T7711] usb 4-1: Product: syz [ 451.977691][ T7711] usb 4-1: Manufacturer: syz [ 451.982967][ T7711] usb 4-1: SerialNumber: syz [ 452.206425][ T7711] usb 4-1: 0:2 : does not exist [ 452.222796][ T7711] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 452.258140][T12457] loop2: detected capacity change from 0 to 7 [ 452.266434][ T6088] Dev loop2: unable to read RDB block 7 [ 452.270179][ T7711] usb 4-1: USB disconnect, device number 83 [ 452.279506][ T6088] loop2: AHDI p1 p2 p3 [ 452.280564][ T7710] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 452.289228][ T6088] loop2: partition table partially beyond EOD, truncated [ 452.302603][ T6088] loop2: p1 start 1818582900 is beyond EOD, truncated [ 452.318147][ T6088] loop2: p3 start 335544320 is beyond EOD, truncated [ 452.322761][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.344155][T12457] Dev loop2: unable to read RDB block 7 [ 452.350026][T12457] loop2: AHDI p1 p2 p3 [ 452.356189][T12457] loop2: partition table partially beyond EOD, truncated [ 452.364363][T12457] loop2: p1 start 1818582900 is beyond EOD, truncated [ 452.371798][T12457] loop2: p3 start 335544320 is beyond EOD, truncated [ 452.461581][ T7710] usb 5-1: Using ep0 maxpacket: 16 [ 452.469609][ T7710] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 452.484020][ T7710] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 452.495162][ T7710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.503509][ T7710] usb 5-1: Product: syz [ 452.507696][ T7710] usb 5-1: Manufacturer: syz [ 452.520510][ T7710] usb 5-1: SerialNumber: syz [ 452.544063][ T7710] usb 5-1: bad CDC descriptors [ 452.785569][T12468] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 452.806811][ T7701] IPVS: starting estimator thread 0... [ 452.907264][ T7701] usb 5-1: USB disconnect, device number 108 [ 453.001831][T12473] IPVS: using max 57 ests per chain, 136800 per kthread [ 453.310681][ T7710] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 453.506581][ T7710] usb 4-1: Using ep0 maxpacket: 32 [ 453.529396][ T7710] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 43, changing to 7 [ 453.560122][ T7710] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 453.573617][ T7710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.596083][ T7710] usb 4-1: Product: syz [ 453.612630][ T7710] usb 4-1: Manufacturer: syz [ 453.710467][ T7710] usb 4-1: SerialNumber: syz [ 453.780266][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1721'. [ 453.989220][ T7710] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 454.186295][ T7710] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 454.377370][ T7710] usb 4-1: USB disconnect, device number 84 [ 454.487740][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.787610][T12506] program syz.5.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.287316][ T7706] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 455.289892][ T177] net_ratelimit: 33 callbacks suppressed [ 455.289916][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 455.421999][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 455.465635][ T7706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.476737][ T7706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.500082][ T7706] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 455.540607][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 455.579257][ T7706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.624980][ T7706] usb 6-1: config 0 descriptor?? [ 455.651321][ T8280] bond3: (slave bridge5): failed to get link speed/duplex [ 455.760731][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 455.872771][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 455.990988][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 456.093087][ T7706] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 456.100650][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 456.116437][ T7706] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 456.138941][ T7706] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.001F/input/input48 [ 456.212630][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 456.273185][ T7706] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 456.288448][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.301335][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.320654][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 456.396159][T12538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.423112][T12538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1736'. [ 456.462873][T12538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1736'. [ 456.552889][ T7706] usb 6-1: USB disconnect, device number 67 [ 456.773743][T12550] kAFS: unable to lookup cell '' [ 456.875972][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 456.875992][ T29] audit: type=1326 audit(1773095178.236:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 456.979687][ T29] audit: type=1326 audit(1773095178.236:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.011748][ T29] audit: type=1326 audit(1773095178.236:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.044600][ T29] audit: type=1326 audit(1773095178.236:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.046868][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 457.078484][ T29] audit: type=1326 audit(1773095178.236:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.118555][ T29] audit: type=1326 audit(1773095178.236:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.143294][ T29] audit: type=1326 audit(1773095178.236:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.167082][T12556] trusted_key: encrypted_key: insufficient parameters specified [ 457.182854][ T29] audit: type=1326 audit(1773095178.246:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.211713][ T29] audit: type=1326 audit(1773095178.246:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.217085][T12557] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 457.253070][ T29] audit: type=1326 audit(1773095178.246:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.0.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 457.929559][T12584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.970810][ T7706] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 458.113020][ T7706] usb 4-1: device descriptor read/64, error -71 [ 458.370506][ T7706] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 458.470634][ T5936] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 458.520632][ T7706] usb 4-1: device descriptor read/64, error -71 [ 458.614465][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 458.630571][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 458.650635][ T7706] usb usb4-port1: attempt power cycle [ 458.659785][ T5936] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 458.671220][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.684695][ T5936] usb 6-1: config 0 descriptor?? [ 458.694448][ T5936] as10x_usb: device has been detected [ 458.700891][ T5936] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 458.734763][ T5936] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 458.804474][ T5936] as10x_usb: error during firmware upload part1 [ 458.812123][ T5936] Registered device nBox DVB-T Dongle [ 458.901940][ T7701] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 459.011107][ T7706] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 459.031064][ T7706] usb 4-1: device descriptor read/8, error -71 [ 459.193169][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.204697][ T7701] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.216778][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.420741][ T7706] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 459.429540][ T7701] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.440608][ T7701] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.450417][ T7706] usb 4-1: device descriptor read/8, error -71 [ 459.497511][ T7701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.533409][T12600] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 459.558247][ T7701] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.565828][ T7706] usb usb4-port1: unable to enumerate USB device [ 459.589226][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.687065][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.898625][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.916496][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.960794][T12600] vlan0: entered promiscuous mode [ 460.342807][ T8781] net_ratelimit: 30 callbacks suppressed [ 460.342834][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 460.480474][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 460.590508][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 460.705822][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 460.820532][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 460.912047][T12616] fuse: Bad value for 'fd' [ 460.932103][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 460.979121][T12616] ipip0: entered promiscuous mode [ 460.984448][T12616] ipip0: entered allmulticast mode [ 461.051661][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 461.059102][T12618] fuse: Bad value for 'group_id' [ 461.065175][T12618] fuse: Bad value for 'group_id' [ 461.180563][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 461.310652][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 461.502649][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 461.629885][ T7701] usb 5-1: USB disconnect, device number 109 [ 462.190671][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1765'. [ 462.508329][ T5936] usb 6-1: USB disconnect, device number 68 [ 462.537641][T12646] sg_write: data in/out 294879/80 bytes for SCSI command 0x2-- guessing data in; [ 462.537641][T12646] program syz.2.1767 not setting count and/or reply_len properly [ 462.586042][ T5936] Unregistered device nBox DVB-T Dongle [ 462.591418][ T5936] as10x_usb: device has been disconnected [ 462.856949][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1768'. [ 462.940401][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 462.940424][ T29] audit: type=1326 audit(1773095184.386:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 462.985090][ T29] audit: type=1326 audit(1773095184.386:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 463.052271][ T29] audit: type=1326 audit(1773095184.386:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2b735cfce code=0x7ffc0000 [ 463.076514][ T29] audit: type=1326 audit(1773095184.396:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 463.173808][ T5936] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 463.253223][ T5926] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 463.360446][ T29] audit: type=1326 audit(1773095184.396:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.5.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7ffc0000 [ 463.360488][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 463.431584][ T5936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.440621][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 463.445934][T12664] fuse: Bad value for 'group_id' [ 463.451284][ T5936] usb 4-1: config 0 has no interface number 0 [ 463.451924][ T5926] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 463.469258][ T5936] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 463.479883][T12664] fuse: Bad value for 'group_id' [ 463.486334][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.490590][ T5926] usb 6-1: config 0 has no interface number 0 [ 463.522811][ T5936] usb 4-1: Product: syz [ 463.528375][ T5936] usb 4-1: Manufacturer: syz [ 463.535120][ T5936] usb 4-1: SerialNumber: syz [ 463.553745][ T5926] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.596754][ T5926] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.608121][ T5936] usb 4-1: config 0 descriptor?? [ 463.630236][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.644202][ T5936] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 463.650429][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 463.666089][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.674439][ T5936] usb 4-1: selecting invalid altsetting 1 [ 463.680790][ T5936] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 463.698421][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.709829][ T5936] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.723399][ T5936] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 463.852581][ T5936] usb 4-1: media controller created [ 463.870196][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.871849][ T5926] usb 6-1: config 0 descriptor?? [ 464.019914][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 464.152824][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 464.372339][T12676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1777'. [ 464.389104][T12675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.401940][T12675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.998929][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 465.015670][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 465.034045][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 465.047179][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 465.059250][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 465.069764][ T7701] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 465.145590][T12696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.152452][ T5936] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 465.154657][T12696] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.168171][ T8782] wlan1: Trigger new scan to find an IBSS to join [ 465.185836][ T5936] zl10353_read_register: readreg error (reg=127, ret==-110) [ 465.198158][T12700] fuse: Bad value for 'group_id' [ 465.212666][T12700] fuse: Bad value for 'group_id' [ 465.286898][T12696] caif0: left allmulticast mode [ 465.367383][ T8782] net_ratelimit: 30 callbacks suppressed [ 465.367405][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 465.404998][ T7701] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.421836][ T7701] usb 5-1: config 0 has no interface number 0 [ 465.435287][ T7701] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.447496][ T7701] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.517928][ T7701] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 465.528083][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 465.545967][ T7701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.653364][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 465.692151][ T7701] usb 5-1: config 0 descriptor?? [ 465.756622][ T5926] usbhid 6-1:0.8: can't add hid device: -71 [ 465.764904][ T5926] usbhid 6-1:0.8: probe with driver usbhid failed with error -71 [ 465.801432][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 465.910065][ T5926] usb 6-1: USB disconnect, device number 69 [ 465.916453][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 465.938055][ T7710] usb 4-1: USB disconnect, device number 89 [ 466.032419][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 466.187469][ T7701] uclogic 0003:5543:0522.0020: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input1 [ 466.240763][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 466.273752][T12718] netlink: 'syz.5.1785': attribute type 4 has an invalid length. [ 466.925768][ T5926] usb 5-1: USB disconnect, device number 110 [ 466.954312][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 467.244598][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 467.390614][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 468.117901][T12732] __nla_validate_parse: 13 callbacks suppressed [ 468.117925][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1790'. [ 468.144143][T12735] program syz.0.1789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.311386][T12742] fuse: Bad value for 'fd' [ 468.372911][T12745] fuse: Bad value for 'fd' [ 468.433956][T12747] fuse: Bad value for 'fd' [ 468.869701][T12730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.876834][T12730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 468.898906][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.937961][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.021781][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 469.033115][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 469.044745][T12751] netlink: 'syz.5.1797': attribute type 19 has an invalid length. [ 469.060590][T12751] netlink: 'syz.5.1797': attribute type 20 has an invalid length. [ 469.131138][ T5936] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 469.150798][ T5926] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 469.300801][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 469.322286][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 469.332035][ T5926] usb 5-1: config 250 has an invalid descriptor of length 32, skipping remainder of the config [ 469.349361][ T5926] usb 5-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 469.395467][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 469.401835][ T5936] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 469.401865][ T5936] usb 4-1: config 0 has no interface number 0 [ 469.401905][ T5936] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.401933][ T5936] usb 4-1: config 0 interface 85 has no altsetting 0 [ 469.407222][ T5936] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 469.411773][ T5926] usb 5-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 469.429137][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.436497][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.470888][ T5936] usb 4-1: Product: syz [ 469.470918][ T5936] usb 4-1: Manufacturer: syz [ 469.470935][ T5936] usb 4-1: SerialNumber: syz [ 469.496582][ T5936] usb 4-1: config 0 descriptor?? [ 469.717534][ T5936] appletouch 4-1:0.85: Failed to read mode from device. [ 469.727142][ T5936] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 469.978216][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.011299][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.047345][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.054617][T12775] bridge0: port 2(bridge_slave_1) entered listening state [ 470.063567][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.070790][T12775] bridge0: port 1(bridge_slave_0) entered listening state [ 470.085831][T12775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.220482][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 470.450754][ T48] net_ratelimit: 23 callbacks suppressed [ 470.450775][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 470.570738][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 470.694909][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 470.706984][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.716826][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.902052][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 471.020827][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 471.130519][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 471.177888][ T7710] usb 5-1: USB disconnect, device number 111 [ 471.180618][ T8782] wlan1: Trigger new scan to find an IBSS to join [ 471.240686][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 471.268229][T12788] fuse: Bad value for 'user_id' [ 471.273836][T12788] fuse: Bad value for 'user_id' [ 471.351601][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 471.470545][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 471.532873][T12791] input: syz1 as /devices/virtual/input/input50 [ 471.581227][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 471.748602][ T7711] usb 4-1: USB disconnect, device number 90 [ 472.113188][ T8782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.250500][ T5936] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 472.300696][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 472.402900][ T5936] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 472.417920][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.430527][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.442719][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.451407][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.468680][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.480472][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.492978][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.503310][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.519235][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.527867][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.545583][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.560924][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.571685][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.580977][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.600490][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.612017][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.621688][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.639029][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.649228][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.658965][ T7701] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 472.670780][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.682761][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.691892][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.701462][ T5936] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.713321][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.736335][ T5936] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 472.746235][ T5936] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 472.766196][ T5936] usb 6-1: Product: syz [ 472.773948][ T5936] usb 6-1: Manufacturer: syz [ 472.832158][ T7701] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 472.851037][ T5936] usb 6-1: SerialNumber: syz [ 472.856035][ T7701] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 472.860426][ T29] audit: type=1326 audit(1773095194.316:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x0 [ 472.870515][ T7701] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 472.920636][ T5936] usb 6-1: config 0 descriptor?? [ 472.957015][ T5936] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 472.980589][ T7701] usb 5-1: config 220 has no interface number 2 [ 472.991593][ T7701] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 473.046272][ T7701] usb 5-1: config 220 interface 0 has no altsetting 0 [ 473.054495][ T7701] usb 5-1: config 220 interface 76 has no altsetting 0 [ 473.061727][ T7701] usb 5-1: config 220 interface 1 has no altsetting 0 [ 473.075450][ T7701] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 473.085706][ T7701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.095135][ T7701] usb 5-1: Product: syz [ 473.152292][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 473.173900][ T7701] usb 5-1: Manufacturer: syz [ 473.178904][ T7701] usb 5-1: SerialNumber: syz [ 473.253699][T12830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.267991][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 473.268510][ T7711] usb 6-1: USB disconnect, device number 70 [ 473.341623][ T7711] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 473.360825][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.382919][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.394229][T12830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.495677][ T7701] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 473.503900][ T7701] uvcvideo 5-1:220.0: No valid video chain found. [ 473.511969][ T7701] usb 5-1: selecting invalid altsetting 0 [ 473.526166][ T7701] usb 5-1: selecting invalid altsetting 0 [ 473.532325][ T7701] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 473.584359][ T7701] usb 5-1: USB disconnect, device number 112 [ 473.810452][ T7711] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 473.982858][ T7711] usb 6-1: Using ep0 maxpacket: 16 [ 473.991515][ T7711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 474.001867][ T7711] usb 6-1: config 4 has an invalid interface number: 127 but max is 0 [ 474.016923][ T7711] usb 6-1: config 4 has no interface number 0 [ 474.027438][ T7711] usb 6-1: config 4 interface 127 has no altsetting 0 [ 474.047618][ T7711] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 474.057411][ T7711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.066459][ T7711] usb 6-1: Product: syz [ 474.071031][ T7711] usb 6-1: Manufacturer: syz [ 474.075746][ T7711] usb 6-1: SerialNumber: syz [ 474.225503][T12844] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1819'. [ 474.270028][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.279756][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.308412][ T7711] usbhid 6-1:4.127: couldn't find an input interrupt endpoint [ 474.352389][ T7711] usb 6-1: USB disconnect, device number 71 [ 474.361544][ T7701] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 474.511836][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1823'. [ 474.521128][ T7701] usb 5-1: Using ep0 maxpacket: 32 [ 474.529333][ T7701] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 474.540167][ T7701] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 474.552017][ T7701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.583871][ T7701] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 474.594622][ T7701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.603653][ T7701] usb 5-1: Product: syz [ 474.608171][ T7701] usb 5-1: Manufacturer: syz [ 474.621930][ T7701] usb 5-1: SerialNumber: syz [ 474.633620][ T7701] usb 5-1: config 0 descriptor?? [ 475.104577][T12839] tipc: MTU too low for tipc bearer [ 475.111807][ T7701] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 475.119182][ T7701] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 475.119921][T12857] Cannot find del_set index 3 as target [ 475.370569][ T7701] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 475.494015][ T1107] net_ratelimit: 33 callbacks suppressed [ 475.494034][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 475.540511][ T7701] usb 6-1: Using ep0 maxpacket: 32 [ 475.565180][ T7701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.598133][ T7701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.621471][ T7701] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.630986][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 475.647102][ T7701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.691867][ T7701] usb 6-1: config 0 descriptor?? [ 475.718120][ T7701] hub 6-1:0.0: USB hub found [ 475.741022][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 475.850740][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 475.900072][ T7701] hub 6-1:0.0: 1 port detected [ 475.970529][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 476.092803][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 476.241130][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 476.252745][T12864] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 476.262823][T12864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1827'. [ 476.362394][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 476.470685][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 476.507128][ T7701] hub 6-1:0.0: activate --> -90 [ 476.661303][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 476.766838][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.777209][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.891195][ T7710] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 477.040728][ T7710] usb 4-1: device descriptor read/64, error -71 [ 477.108936][ T5936] usb 5-1: USB disconnect, device number 113 [ 477.280525][ T7710] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 477.411328][ T7710] usb 4-1: device descriptor read/64, error -71 [ 477.412291][T12885] input: syz1 as /devices/virtual/input/input51 [ 477.520824][ T7710] usb usb4-port1: attempt power cycle [ 477.742453][ T7701] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 477.860548][ T7710] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 477.881087][ T7710] usb 4-1: device descriptor read/8, error -71 [ 478.130567][ T7710] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 478.172570][ T7710] usb 4-1: device descriptor read/8, error -71 [ 478.180828][ T7701] usb 6-1: USB disconnect, device number 72 [ 478.301021][T12897] netlink: 'syz.5.1835': attribute type 4 has an invalid length. [ 478.309091][T12897] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1835'. [ 478.345994][ T7710] usb usb4-port1: unable to enumerate USB device [ 478.590031][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.641204][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.592085][T12915] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1839'. [ 479.601428][T12915] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1839'. [ 479.611455][T12915] netlink: 39 bytes leftover after parsing attributes in process `syz.5.1839'. [ 479.689928][T12915] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 479.766662][T12914] netlink: 'syz.5.1839': attribute type 2 has an invalid length. [ 479.774919][T12914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1839'. [ 480.524071][ T8781] net_ratelimit: 28 callbacks suppressed [ 480.524091][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 480.623149][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 480.650640][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 480.920552][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 480.968755][ T29] audit: type=1326 audit(1773095202.426:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.3.1845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cbdd9c799 code=0x0 [ 481.058633][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 481.170470][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 481.275143][T12943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1846'. [ 481.300524][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 481.421923][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 481.550612][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 481.665559][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 481.780594][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 481.878698][ T7711] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 482.067336][ T7711] usb 6-1: config 127 has an invalid interface number: 2 but max is 1 [ 482.081801][ T7711] usb 6-1: config 127 has an invalid interface number: 121 but max is 1 [ 482.162142][ T7711] usb 6-1: config 127 has no interface number 0 [ 482.210536][ T7711] usb 6-1: config 127 has no interface number 1 [ 482.227211][ T7711] usb 6-1: config 127 interface 2 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 482.248780][ T7711] usb 6-1: config 127 interface 2 altsetting 7 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 482.269296][ T7711] usb 6-1: config 127 interface 2 altsetting 7 endpoint 0xE has invalid maxpacket 935, setting to 8 [ 482.288376][ T7711] usb 6-1: config 127 interface 2 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 482.300825][ T7711] usb 6-1: config 127 interface 2 altsetting 7 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 482.312262][ T7711] usb 6-1: config 127 interface 2 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 482.382662][ T7711] usb 6-1: config 127 interface 2 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 482.394040][ T7711] usb 6-1: config 127 interface 121 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.499496][ T7711] usb 6-1: config 127 interface 2 has no altsetting 0 [ 482.507376][ T7711] usb 6-1: language id specifier not provided by device, defaulting to English [ 482.567796][ T7711] usb 6-1: Dual-Role OTG device on HNP port [ 482.577812][ T7711] usb 6-1: New USB device found, idVendor=05c6, idProduct=9091, bcdDevice=b1.25 [ 482.593856][ T7711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.610467][ T7711] usb 6-1: Product: Ⱃ [ 482.670200][ T7711] usb 6-1: Manufacturer: ᐁ [ 482.687907][ T7711] usb 6-1: SerialNumber: ᰉ [ 482.814131][T12970] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1854'. [ 483.076951][ T7711] usb 6-1: USB disconnect, device number 73 [ 483.540161][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 483.940532][ T7711] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 484.000552][ T7710] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 484.097708][T12994] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1862'. [ 484.218170][ T7710] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.520788][ T7710] usb 5-1: config 0 has no interface number 0 [ 484.528636][ T7710] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.540600][ T7710] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.553155][ T7711] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.564931][ T7711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.576179][ T7710] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 484.585625][ T7711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.595720][ T7710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.604208][ T7711] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.619475][ T7710] usb 5-1: config 0 descriptor?? [ 484.624887][ T7711] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.742876][ T7711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.763660][ T7711] usb 6-1: config 0 descriptor?? [ 484.806132][T12998] ip6tnl2: entered promiscuous mode [ 485.042745][ T7710] usbhid 5-1:0.1: can't add hid device: -71 [ 485.048819][ T7710] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 485.071918][ T7710] usb 5-1: USB disconnect, device number 114 [ 485.102551][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 485.111257][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 485.222816][ T7711] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 485.479692][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 485.754171][ T8781] net_ratelimit: 24 callbacks suppressed [ 485.754191][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 485.872999][T13008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.882000][T13008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.121669][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1868'. [ 486.264379][T13015] netlink: 'syz.4.1867': attribute type 4 has an invalid length. [ 486.277527][T13015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1867'. [ 486.539749][ T29] audit: type=1326 audit(1773095207.966:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 486.800426][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 486.810080][ T29] audit: type=1326 audit(1773095207.966:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd45f5cfce code=0x7ffc0000 [ 486.866587][ T29] audit: type=1326 audit(1773095207.966:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 486.922241][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 486.968034][ T29] audit: type=1326 audit(1773095207.966:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd45f5cfce code=0x7ffc0000 [ 487.031372][ T29] audit: type=1326 audit(1773095207.966:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 487.080915][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 487.092773][ T29] audit: type=1326 audit(1773095207.966:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 487.126578][ T29] audit: type=1326 audit(1773095207.966:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 487.172634][ T29] audit: type=1326 audit(1773095207.966:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 487.200957][ T29] audit: type=1326 audit(1773095207.966:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd45f9c799 code=0x7ffc0000 [ 487.241250][ T29] audit: type=1326 audit(1773095207.966:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd45f5cfce code=0x7ffc0000 [ 487.352323][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 487.380761][ T5926] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 487.440479][ T7701] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 487.462694][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 487.562357][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 487.571949][ T5926] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 487.585624][ T5926] usb 5-1: config 0 has no interface number 0 [ 487.599169][ T5926] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 487.609842][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 487.625522][ T5926] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 487.639930][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.649787][ T7710] usb 6-1: USB disconnect, device number 74 [ 487.669262][ T5926] usb 5-1: Product: syz [ 487.681915][ T5926] usb 5-1: Manufacturer: syz [ 487.691086][ T7701] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.697340][ T5926] usb 5-1: SerialNumber: syz [ 487.710717][ T7701] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 487.740555][ T7701] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 487.776311][ T5926] usb 5-1: config 0 descriptor?? [ 487.780438][ T7701] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 487.790299][ T7701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.824988][T13024] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 487.827608][T13026] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 487.903265][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 488.020753][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 488.053166][T13024] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 488.132529][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 488.366922][ T7711] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 488.525963][ T7711] usb 6-1: config 251 has an invalid interface number: 140 but max is 0 [ 488.540432][ T7711] usb 6-1: config 251 has no interface number 0 [ 488.550677][ T7711] usb 6-1: config 251 interface 140 altsetting 4 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 488.588343][ T7711] usb 6-1: config 251 interface 140 has no altsetting 0 [ 488.630488][ T7711] usb 6-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=45.86 [ 488.646635][ T7711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.672147][ T7711] usb 6-1: Product: syz [ 488.684776][ T7711] usb 6-1: Manufacturer: syz [ 488.702581][ T7711] usb 6-1: SerialNumber: syz [ 489.111514][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.131411][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.870881][ T7701] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 489.881808][ T7701] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input53 [ 489.996138][ T7701] usb 4-1: USB disconnect, device number 95 [ 490.002691][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 490.287502][T13064] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 490.472877][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 490.482396][ T5926] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 490.519142][ T5926] asix 5-1:0.188: probe with driver asix failed with error -71 [ 490.613665][ T5926] usb 5-1: USB disconnect, device number 115 [ 490.692450][T13077] sg_write: data in/out 294879/80 bytes for SCSI command 0x2-- guessing data in; [ 490.692450][T13077] program syz.2.1886 not setting count and/or reply_len properly [ 490.811568][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 490.833249][ T8782] net_ratelimit: 20 callbacks suppressed [ 490.833277][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 491.080843][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 491.371748][ T7711] usb 6-1: USB disconnect, device number 75 [ 491.398165][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1888'. [ 491.440561][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 491.512399][T13089] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1888'. [ 491.534298][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'. [ 491.570544][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 491.595193][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 491.595210][ T29] audit: type=1326 audit(1773095213.046:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 491.655588][T13094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.665523][T13094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.736050][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 491.758272][ T29] audit: type=1326 audit(1773095213.046:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 491.777699][T13101] loop4: detected capacity change from 0 to 65536 [ 491.784196][ T29] audit: type=1326 audit(1773095213.046:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7775d5cfce code=0x7ffc0000 [ 491.841954][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 491.922809][ T29] audit: type=1326 audit(1773095213.056:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 491.960097][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 491.999026][ T29] audit: type=1326 audit(1773095213.056:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 492.055840][ T29] audit: type=1326 audit(1773095213.116:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7775d5cfce code=0x7ffc0000 [ 492.081753][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 492.094495][ T29] audit: type=1326 audit(1773095213.116:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 492.118586][ T29] audit: type=1326 audit(1773095213.116:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 492.143561][ T29] audit: type=1326 audit(1773095213.116:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 492.177842][ T29] audit: type=1326 audit(1773095213.116:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 492.200939][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 492.210912][T13110] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 492.217463][T13110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.234821][T13110] vhci_hcd vhci_hcd.0: Device attached [ 492.320813][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 492.450491][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 492.470980][ T5936] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 492.480094][ T7701] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 492.571589][T13124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 492.578130][T13124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 492.587676][T13124] vhci_hcd vhci_hcd.0: Device attached [ 492.642514][ T7701] usb 6-1: config 0 has no interfaces? [ 492.648226][ T7701] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 492.657772][ T7701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.667991][ T7701] usb 6-1: config 0 descriptor?? [ 492.730516][ T5829] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 492.870787][ T7711] usb 42-1: SetAddress Request (2) to port 0 [ 492.878068][ T7711] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 492.887208][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.906365][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.916481][ T5829] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 492.926313][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.937473][ T5829] usb 4-1: config 0 descriptor?? [ 493.122571][T13125] vhci_hcd: connection reset by peer [ 493.129041][ T1107] vhci_hcd vhci_hcd.4: stop threads [ 493.137182][ T1107] vhci_hcd vhci_hcd.4: release socket [ 493.148535][ T1107] vhci_hcd vhci_hcd.4: disconnect device [ 493.389889][ T5829] uclogic 0003:5543:0042.0022: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 493.552755][ T5829] usb 4-1: USB disconnect, device number 96 [ 493.598615][T13131] fido_id[13131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 494.205882][T13144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1905'. [ 494.537118][T13151] loop2: detected capacity change from 0 to 7 [ 494.550105][T13151] loop2: [ 494.557674][T13151] loop2: partition table partially beyond EOD, truncated [ 494.775574][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.788682][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.828256][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 495.539017][T13170] could not allocate digest TFM handle blake2s-224 [ 495.649606][ T5825] usb 6-1: USB disconnect, device number 76 [ 495.663129][T13112] vhci_hcd: connection reset by peer [ 495.672948][ T48] vhci_hcd vhci_hcd.5: stop threads [ 495.689186][ T48] vhci_hcd vhci_hcd.5: release socket [ 495.772451][ T48] vhci_hcd vhci_hcd.5: disconnect device [ 495.890029][ T48] net_ratelimit: 29 callbacks suppressed [ 495.890044][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 496.024802][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 496.142983][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 496.265152][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 496.411118][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 496.520506][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 496.630631][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 496.713924][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.734717][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.771609][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 497.079679][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 497.139109][T13190] netlink: 2908 bytes leftover after parsing attributes in process `syz.2.1915'. [ 497.211672][T13190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.226117][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.237159][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.261067][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 497.570484][ T5936] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 497.650785][T13199] loop2: detected capacity change from 0 to 7 [ 497.663113][T13201] xt_hashlimit: size too large, truncated to 1048576 [ 497.673345][T13199] loop2: [ 497.681854][T13199] loop2: partition table partially beyond EOD, truncated [ 497.999245][ T7711] usb 42-1: device descriptor read/8, error -110 [ 498.198346][T13223] sg_write: data in/out 294879/80 bytes for SCSI command 0x2-- guessing data in; [ 498.198346][T13223] program syz.3.1924 not setting count and/or reply_len properly [ 498.391874][ T7711] usb usb42-port1: attempt power cycle [ 499.069878][ T7711] usb usb42-port1: unable to enumerate USB device [ 499.508473][T13247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.747965][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 500.460464][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.467754][ C0] bridge0: topology change detected, propagating [ 500.474904][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.482158][ C0] bridge0: topology change detected, propagating [ 500.790827][T13269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1936'. [ 500.930638][ T8781] net_ratelimit: 27 callbacks suppressed [ 500.930659][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 501.053604][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 501.190615][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 501.300593][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 501.420635][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 501.531883][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 501.640900][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 501.744236][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.752225][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 501.761618][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.793676][T13291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 501.810583][ T5936] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 501.860579][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 501.924860][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1944'. [ 501.962511][ T5936] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 501.970796][ T1107] bond3: (slave bridge5): failed to get link speed/duplex [ 501.973518][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.988867][ T5936] usb 4-1: config 0 has no interface number 0 [ 501.995523][ T5936] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 502.009252][ T5936] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.036052][ T5936] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 502.047912][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.072763][ T5936] usb 4-1: Product: syz [ 502.101868][ T5936] usb 4-1: Manufacturer: syz [ 502.115602][ T5936] usb 4-1: SerialNumber: syz [ 502.129651][ T5936] usb 4-1: config 0 descriptor?? [ 502.360652][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.387149][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.462625][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.476467][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.691557][ T5829] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 502.754710][T13311] usb usb8: usbfs: process 13311 (syz.0.1949) did not claim interface 0 before use [ 502.792409][T13311] usb usb8: selecting invalid altsetting 2047 [ 502.824674][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.890087][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.917102][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 502.939444][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 502.963299][ T5936] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 502.980596][ T5829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 503.001935][ T5936] usb 4-1: USB disconnect, device number 97 [ 503.008075][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.037039][ T5829] usb 5-1: config 0 descriptor?? [ 503.246995][ T5829] ath6kl: Failed to submit usb control message: -71 [ 503.260385][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 503.260403][ T29] audit: type=1326 audit(1773095224.676:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b739c799 code=0x7fc00000 [ 503.320563][ T5829] ath6kl: unable to send the bmi data to the device: -71 [ 503.327625][ T5829] ath6kl: Unable to send get target info: -71 [ 503.660770][ T29] audit: type=1326 audit(1773095224.676:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2b739c799 code=0x7fc00000 [ 503.683811][ T5829] ath6kl: Failed to init ath6kl core: -71 [ 503.691606][ T5829] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 503.715087][ T5829] usb 5-1: USB disconnect, device number 116 [ 504.191235][ T5936] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 504.303279][ T8279] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 504.441369][ T5829] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 504.454268][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.467758][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.483360][ T5936] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 504.498237][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.620501][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 504.628706][ T5829] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 504.637431][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.649594][ T5936] usb 4-1: config 0 descriptor?? [ 504.657903][ T5829] usb 5-1: config 0 has no interface number 0 [ 504.680603][ T5829] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.719090][ T5829] usb 5-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 504.757447][ T5829] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 504.776657][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.810235][ T5829] usb 5-1: Product: syz [ 504.833655][ T5829] usb 5-1: Manufacturer: syz [ 504.923026][ T5829] usb 5-1: SerialNumber: syz [ 504.932845][ T5829] usb 5-1: config 0 descriptor?? [ 504.949209][ T5829] ttusb_dec_send_command: command bulk message failed: error -8 [ 504.964424][ T5829] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8 [ 504.984068][ T5829] usbhid 5-1:0.113: couldn't find an input interrupt endpoint [ 505.145535][ T5936] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x2 [ 505.183705][ T5829] usb 5-1: USB disconnect, device number 117 [ 505.199785][ T5936] pyra 0003:1E7D:2CF6.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 505.360634][ T5936] pyra 0003:1E7D:2CF6.0023: couldn't init struct pyra_device [ 505.368272][ T5936] pyra 0003:1E7D:2CF6.0023: couldn't install mouse [ 505.443364][ T5936] pyra 0003:1E7D:2CF6.0023: probe with driver pyra failed with error -32 [ 505.559352][ T5936] usb 4-1: USB disconnect, device number 98 [ 505.814932][T13336] netlink: 'syz.5.1958': attribute type 12 has an invalid length. [ 505.835530][T13336] netlink: 'syz.5.1958': attribute type 29 has an invalid length. [ 505.873643][T13336] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1958'. [ 505.907850][T13336] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1958'. [ 505.928461][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1960'. [ 505.942344][ T48] net_ratelimit: 27 callbacks suppressed [ 505.942363][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 505.961017][T13345] FAULT_INJECTION: forcing a failure. [ 505.961017][T13345] name failslab, interval 1, probability 0, space 0, times 0 [ 505.978585][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.2.1961 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.978615][T13345] Tainted: [L]=SOFTLOCKUP [ 505.978620][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.978637][T13345] Call Trace: [ 505.978666][T13345] [ 505.978679][T13345] dump_stack_lvl+0xe8/0x150 [ 505.978805][T13345] should_fail_ex+0x412/0x560 [ 505.978877][T13345] should_failslab+0xa8/0x100 [ 505.978929][T13345] __kmalloc_noprof+0xe8/0x760 [ 505.978947][T13345] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.979050][T13345] tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.979078][T13345] ? tomoyo_path_number_perm+0x219/0x630 [ 505.979094][T13345] tomoyo_path_number_perm+0x246/0x630 [ 505.979113][T13345] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.979131][T13345] ? __lock_acquire+0x6b5/0x2cf0 [ 505.979166][T13345] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 505.979256][T13345] ? __fget_files+0x2a/0x420 [ 505.979288][T13345] ? __fget_files+0x2a/0x420 [ 505.979307][T13345] ? __fget_files+0x3a0/0x420 [ 505.979325][T13345] ? __fget_files+0x2a/0x420 [ 505.979348][T13345] security_file_ioctl+0xc3/0x2a0 [ 505.979388][T13345] __se_sys_ioctl+0x47/0x170 [ 505.979416][T13345] do_syscall_64+0x14d/0xf80 [ 505.979451][T13345] ? trace_irq_disable+0x3b/0x150 [ 505.979478][T13345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.979504][T13345] ? clear_bhb_loop+0x40/0x90 [ 505.979521][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.979539][T13345] RIP: 0033:0x7f7775d9c799 [ 505.979576][T13345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.979589][T13345] RSP: 002b:00007f7776cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.979634][T13345] RAX: ffffffffffffffda RBX: 00007f7776015fa0 RCX: 00007f7775d9c799 [ 505.979645][T13345] RDX: 0000200000000100 RSI: 0000000040106f52 RDI: 0000000000000003 [ 505.979655][T13345] RBP: 00007f7776cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 505.979664][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.979673][T13345] R13: 00007f7776016038 R14: 00007f7776015fa0 R15: 00007f777613fa48 [ 505.979697][T13345] [ 505.979710][T13345] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.170448][ T7711] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 506.179200][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 506.333758][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 506.370504][ T7711] usb 6-1: Using ep0 maxpacket: 16 [ 506.427113][ T29] audit: type=1326 audit(1773095227.866:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 506.450921][T13358] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 506.463003][ T7711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.476095][ T29] audit: type=1326 audit(1773095227.866:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 506.476404][ T7711] usb 6-1: config 5 has an invalid interface number: 21 but max is 0 [ 506.521540][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 506.535192][T13358] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 506.558922][T13362] usb usb8: usbfs: process 13362 (syz.3.1964) did not claim interface 0 before use [ 506.569718][ T7711] usb 6-1: config 5 has no interface number 0 [ 506.570295][T13362] usb usb8: selecting invalid altsetting 2047 [ 506.576414][ T7711] usb 6-1: config 5 interface 21 has no altsetting 0 [ 506.626226][ T29] audit: type=1326 audit(1773095227.866:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 506.636617][ T7711] usb 6-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=93.d3 [ 506.676399][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 506.865007][ T7711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.883983][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 506.885759][ T7711] usb 6-1: Product: syz [ 506.905705][ T7711] usb 6-1: Manufacturer: syz [ 506.917670][ T7711] usb 6-1: SerialNumber: syz [ 506.997137][ T29] audit: type=1326 audit(1773095227.866:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 507.020182][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 507.020303][ T29] audit: type=1326 audit(1773095227.866:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 507.069733][ T29] audit: type=1326 audit(1773095227.866:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 507.251843][ T8279] bond3: (slave bridge5): failed to get link speed/duplex [ 507.286352][ T29] audit: type=1326 audit(1773095227.876:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 507.367913][ T7711] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 507.376676][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 507.429525][ T7711] usb 6-1: USB disconnect, device number 77 [ 507.464764][ T29] audit: type=1326 audit(1773095227.876:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13352 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775d9c799 code=0x7ffc0000 [ 507.492927][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 507.750005][T13377] ipt_ECN: cannot use operation on non-tcp rule [ 508.020621][ T5936] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 508.180577][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 508.188400][ T5936] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 508.198196][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 508.299097][ T5926] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 508.308894][ T5936] usb 5-1: Manufacturer: syz [ 508.342116][ T5936] usb 5-1: config 0 descriptor?? [ 508.370896][T13389] usb usb8: usbfs: process 13389 (syz.5.1973) did not claim interface 0 before use [ 508.385301][T13389] usb usb8: selecting invalid altsetting 2047 [ 508.470506][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.487471][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.502532][ T5926] usb 4-1: config 1 has no interface number 0 [ 508.508959][ T5926] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.558956][ T5926] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 508.605703][T13391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1974'. [ 508.626166][ T5926] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 508.626425][ T5936] usb_8dev 5-1:0.0 can0: sending command message failed [ 508.653909][ T5926] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 508.655054][ T5936] usb_8dev 5-1:0.0 can0: can't get firmware version [ 508.685505][ T5926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.696987][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.719282][ T5926] usb 4-1: Product: syz [ 508.732342][ T5926] usb 4-1: Manufacturer: syz [ 508.745391][ T5926] usb 4-1: SerialNumber: syz [ 508.802129][ T5936] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 508.820293][ T5936] usb 5-1: USB disconnect, device number 118 [ 508.889046][T13395] FAULT_INJECTION: forcing a failure. [ 508.889046][T13395] name failslab, interval 1, probability 0, space 0, times 0 [ 508.910573][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.0.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.910603][T13395] Tainted: [L]=SOFTLOCKUP [ 508.910611][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.910622][T13395] Call Trace: [ 508.910630][T13395] [ 508.910638][T13395] dump_stack_lvl+0xe8/0x150 [ 508.910663][T13395] should_fail_ex+0x412/0x560 [ 508.910687][T13395] should_failslab+0xa8/0x100 [ 508.910712][T13395] __kmalloc_noprof+0xe8/0x760 [ 508.910734][T13395] ? tomoyo_encode+0x28b/0x550 [ 508.910763][T13395] tomoyo_encode+0x28b/0x550 [ 508.910784][T13395] tomoyo_realpath_from_path+0x58d/0x5d0 [ 508.910803][T13395] ? tomoyo_path_number_perm+0x219/0x630 [ 508.910814][T13395] tomoyo_path_number_perm+0x246/0x630 [ 508.910827][T13395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.910849][T13395] ? __lock_acquire+0x6b5/0x2cf0 [ 508.910883][T13395] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 508.910914][T13395] ? __fget_files+0x2a/0x420 [ 508.910940][T13395] ? __fget_files+0x2a/0x420 [ 508.910955][T13395] ? __fget_files+0x3a0/0x420 [ 508.910968][T13395] ? __fget_files+0x2a/0x420 [ 508.910984][T13395] security_file_ioctl+0xc3/0x2a0 [ 508.911005][T13395] __se_sys_ioctl+0x47/0x170 [ 508.911028][T13395] do_syscall_64+0x14d/0xf80 [ 508.911045][T13395] ? trace_irq_disable+0x3b/0x150 [ 508.911069][T13395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.911085][T13395] ? clear_bhb_loop+0x40/0x90 [ 508.911097][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.911107][T13395] RIP: 0033:0x7fbd45f9c799 [ 508.911118][T13395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.911127][T13395] RSP: 002b:00007fbd46eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.911140][T13395] RAX: ffffffffffffffda RBX: 00007fbd46215fa0 RCX: 00007fbd45f9c799 [ 508.911154][T13395] RDX: 0000200000000100 RSI: 0000000040106f52 RDI: 0000000000000003 [ 508.911165][T13395] RBP: 00007fbd46eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 508.911177][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.911188][T13395] R13: 00007fbd46216038 R14: 00007fbd46215fa0 R15: 00007fbd4633fa48 [ 508.911217][T13395] [ 508.911252][T13395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 509.156197][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1971'. [ 509.683648][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.700725][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.783646][T13406] gretap1: entered allmulticast mode [ 509.850440][ T5936] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 510.002304][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.015571][ T5926] cdc_ncm 4-1:1.1: bind() failure [ 510.028015][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.045798][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.049987][ T5926] usb 4-1: USB disconnect, device number 99 [ 510.069457][ T5936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.121172][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.156783][ T5936] usb 5-1: config 0 descriptor?? [ 510.638055][T13400] binder: BINDER_SET_CONTEXT_MGR already set [ 510.644351][T13400] binder: 13399:13400 ioctl 4018620d 200000000040 returned -16 [ 510.663966][T13418] usb usb8: usbfs: process 13418 (syz.2.1981) did not claim interface 0 before use [ 510.689458][ T5936] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 510.729189][ T5936] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 510.774279][T13418] usb usb8: selecting invalid altsetting 2047 [ 510.952448][ T5926] usb 5-1: USB disconnect, device number 119 [ 510.970691][ T8782] net_ratelimit: 28 callbacks suppressed [ 510.970708][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 511.082873][T13432] netlink: 'syz.5.1984': attribute type 4 has an invalid length. [ 511.091892][T13432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1984'. [ 511.404808][T13421] fido_id[13421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 511.439135][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 511.561216][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 511.702152][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 511.722628][T13436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1985'. [ 511.823645][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 511.950725][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 512.004369][T13440] FAULT_INJECTION: forcing a failure. [ 512.004369][T13440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.061230][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 512.099045][T13440] CPU: 1 UID: 0 PID: 13440 Comm: syz.4.1986 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.099065][T13440] Tainted: [L]=SOFTLOCKUP [ 512.099069][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.099077][T13440] Call Trace: [ 512.099086][T13440] [ 512.099094][T13440] dump_stack_lvl+0xe8/0x150 [ 512.099121][T13440] should_fail_ex+0x412/0x560 [ 512.099137][T13440] _copy_from_user+0x2d/0xb0 [ 512.099225][T13440] dvb_usercopy+0x15c/0x2e0 [ 512.099286][T13440] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 512.099317][T13440] ? __pfx_dvb_usercopy+0x10/0x10 [ 512.099333][T13440] ? __fget_files+0x2a/0x420 [ 512.099348][T13440] ? __fget_files+0x3a0/0x420 [ 512.099361][T13440] ? __fget_files+0x2a/0x420 [ 512.099376][T13440] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 512.099385][T13440] dvb_frontend_ioctl+0x59/0x80 [ 512.099396][T13440] __se_sys_ioctl+0xfc/0x170 [ 512.099410][T13440] do_syscall_64+0x14d/0xf80 [ 512.099419][T13440] ? trace_irq_disable+0x3b/0x150 [ 512.099436][T13440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.099446][T13440] ? clear_bhb_loop+0x40/0x90 [ 512.099458][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.099468][T13440] RIP: 0033:0x7f1910d9c799 [ 512.099479][T13440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.099489][T13440] RSP: 002b:00007f1911bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.099501][T13440] RAX: ffffffffffffffda RBX: 00007f1911015fa0 RCX: 00007f1910d9c799 [ 512.099508][T13440] RDX: 0000200000000100 RSI: 0000000040106f52 RDI: 0000000000000003 [ 512.099515][T13440] RBP: 00007f1911bad090 R08: 0000000000000000 R09: 0000000000000000 [ 512.099521][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.099527][T13440] R13: 00007f1911016038 R14: 00007f1911015fa0 R15: 00007f191113fa48 [ 512.099542][T13440] [ 512.314209][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 512.322957][T13443] netlink: 'syz.0.1987': attribute type 10 has an invalid length. [ 512.330858][T13443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1987'. [ 512.340249][T13443] dummy0: entered promiscuous mode [ 512.345932][T13443] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 512.430600][ T177] bond3: (slave bridge5): failed to get link speed/duplex [ 512.609815][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.617530][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.419419][ T177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.429812][ T177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.467829][ T177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.541697][T13456] FAULT_INJECTION: forcing a failure. [ 513.541697][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 513.555614][T13456] CPU: 0 UID: 0 PID: 13456 Comm: syz.3.1990 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.555642][T13456] Tainted: [L]=SOFTLOCKUP [ 513.555649][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.555659][T13456] Call Trace: [ 513.555668][T13456] [ 513.555676][T13456] dump_stack_lvl+0xe8/0x150 [ 513.555705][T13456] should_fail_ex+0x412/0x560 [ 513.555741][T13456] should_failslab+0xa8/0x100 [ 513.555766][T13456] __kmalloc_noprof+0xe8/0x760 [ 513.555788][T13456] ? io_cache_alloc_new+0x40/0x100 [ 513.555917][T13456] ? __pfx___io_read+0x10/0x10 [ 513.555969][T13456] io_cache_alloc_new+0x40/0x100 [ 513.555995][T13456] io_arm_apoll+0x484/0x950 [ 513.556018][T13456] ? __pfx_io_arm_apoll+0x10/0x10 [ 513.556041][T13456] ? io_file_get_normal+0xe9/0x310 [ 513.556100][T13456] io_queue_async+0x175/0x2d0 [ 513.556122][T13456] io_submit_sqes+0x11d9/0x2370 [ 513.556177][T13456] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 513.556207][T13456] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 513.556232][T13456] ? __fget_files+0x3a0/0x420 [ 513.556262][T13456] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 513.556289][T13456] ? fput+0xa0/0xd0 [ 513.556314][T13456] ? ksys_write+0x242/0x270 [ 513.556336][T13456] ? __pfx_ksys_write+0x10/0x10 [ 513.556361][T13456] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 513.556390][T13456] do_syscall_64+0x14d/0xf80 [ 513.556408][T13456] ? trace_irq_disable+0x3b/0x150 [ 513.556432][T13456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.556451][T13456] ? clear_bhb_loop+0x40/0x90 [ 513.556481][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.556500][T13456] RIP: 0033:0x7f2cbdd9c799 [ 513.556518][T13456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.556534][T13456] RSP: 002b:00007f2cbebdd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 513.556554][T13456] RAX: ffffffffffffffda RBX: 00007f2cbe016180 RCX: 00007f2cbdd9c799 [ 513.556568][T13456] RDX: 0000000000000000 RSI: 0000000000000f23 RDI: 0000000000000007 [ 513.556579][T13456] RBP: 00007f2cbebdd090 R08: 0000000000000000 R09: 0000000000000000 [ 513.556591][T13456] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 513.556602][T13456] R13: 00007f2cbe016218 R14: 00007f2cbe016180 R15: 00007f2cbe13fa48 [ 513.556631][T13456] [ 513.847645][ T177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.129572][T13464] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1993'. [ 514.330872][ T5926] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 514.481877][ T5926] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.490232][ T5926] usb 6-1: config 0 has no interface number 0 [ 514.497369][ T5926] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 514.508655][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 514.547730][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.578811][ T5926] usb 6-1: config 0 descriptor?? [ 514.644237][ T5926] usb 6-1: selecting invalid altsetting 1 [ 514.655993][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.669260][ T5926] dvb_ttusb_budget: ttusb_init_controller: error [ 514.682363][ T5926] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 514.708701][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.769282][T13469] binder: BINDER_SET_CONTEXT_MGR already set [ 514.779141][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1997'. [ 514.783103][T13469] binder: 13468:13469 ioctl 4018620d 200000000040 returned -16 [ 514.884608][ T5926] DVB: Unable to find symbol cx22700_attach() [ 514.997637][ T5926] DVB: Unable to find symbol tda10046_attach() [ 515.008106][ T5926] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 515.042951][ T5926] usb 6-1: USB disconnect, device number 78 [ 515.119799][T13484] usb usb8: usbfs: process 13484 (syz.4.1998) did not claim interface 0 before use [ 515.133904][T13484] usb usb8: selecting invalid altsetting 2047 [ 515.180759][ T30] INFO: task kworker/0:9:7702 blocked for more than 143 seconds. [ 515.188745][ T30] Tainted: G L syzkaller #0 [ 515.195597][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.261611][ T30] task:kworker/0:9 state:D stack:22432 pid:7702 tgid:7702 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 515.274160][ T30] Workqueue: usb_hub_wq hub_event [ 515.279496][ T30] Call Trace: [ 515.283355][ T30] [ 515.286466][ T30] __schedule+0x15dd/0x52d0 [ 515.292060][ T30] ? __pfx___schedule+0x10/0x10 [ 515.297299][ T30] ? schedule+0x90/0x360 [ 515.302409][ T30] schedule+0x164/0x360 [ 515.306832][ T30] schedule_timeout+0xc3/0x2c0 [ 515.311996][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.317175][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 515.322926][ T7706] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 515.332421][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.337615][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.343570][ T30] ? wait_for_completion+0x274/0x5e0 [ 515.348994][ T30] wait_for_completion+0x2cc/0x5e0 [ 515.361415][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 515.377794][ T30] i2c_del_adapter+0x5c0/0x790 [ 515.389796][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 515.395524][ T30] ? kfree+0x4d/0x630 [ 515.401390][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 515.418719][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 515.424679][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 515.436603][ T30] cxusb_probe+0x60f/0x710 [ 515.441505][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.449034][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 515.454507][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.460838][ T7706] usb 4-1: device descriptor read/64, error -71 [ 515.468516][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 515.474662][ T30] usb_probe_interface+0x668/0xc90 [ 515.480664][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 515.486513][ T30] really_probe+0x267/0xaf0 [ 515.492506][ T30] __driver_probe_device+0x18c/0x320 [ 515.498949][ T30] driver_probe_device+0x4f/0x240 [ 515.505011][ T30] __device_attach_driver+0x279/0x430 [ 515.511087][ T30] bus_for_each_drv+0x258/0x2f0 [ 515.516274][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 515.523639][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 515.531809][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.537242][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.544434][ T30] __device_attach+0x2c5/0x450 [ 515.550161][ T30] ? __pfx___device_attach+0x10/0x10 [ 515.556056][ T30] ? _raw_spin_unlock+0x28/0x50 [ 515.561735][ T30] device_initial_probe+0xa1/0xd0 [ 515.566951][ T30] bus_probe_device+0x12a/0x220 [ 515.573044][ T30] ? device_add+0x726/0xb70 [ 515.578408][ T30] device_add+0x7b6/0xb70 [ 515.584680][ T30] usb_set_configuration+0x1a87/0x2110 [ 515.590788][ T30] usb_generic_driver_probe+0x8d/0x150 [ 515.596401][ T30] usb_probe_device+0x1c4/0x3b0 [ 515.602690][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 515.609202][ T30] really_probe+0x267/0xaf0 [ 515.614379][ T30] __driver_probe_device+0x18c/0x320 [ 515.619900][ T30] driver_probe_device+0x4f/0x240 [ 515.626132][ T30] __device_attach_driver+0x279/0x430 [ 515.631893][ T30] bus_for_each_drv+0x258/0x2f0 [ 515.637215][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 515.645502][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 515.652262][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.657763][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.664529][ T30] __device_attach+0x2c5/0x450 [ 515.669795][ T30] ? __pfx___device_attach+0x10/0x10 [ 515.675990][ T30] ? _raw_spin_unlock+0x28/0x50 [ 515.681377][ T30] device_initial_probe+0xa1/0xd0 [ 515.686639][ T30] bus_probe_device+0x12a/0x220 [ 515.692098][ T30] ? device_add+0x726/0xb70 [ 515.697106][ T30] device_add+0x7b6/0xb70 [ 515.701607][ T7706] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 515.710536][ T30] usb_new_device+0xa08/0x16f0 [ 515.716251][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 515.722631][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.728392][ T30] hub_event+0x2a1c/0x4f30 [ 515.733802][ T30] ? kasan_save_track+0x4f/0x80 [ 515.739850][ T30] ? __pfx_hub_event+0x10/0x10 [ 515.746333][ T30] ? process_scheduled_works+0xa25/0x1830 [ 515.752985][ T30] ? process_scheduled_works+0xa25/0x1830 [ 515.760898][ T30] process_scheduled_works+0xb02/0x1830 [ 515.767153][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.805534][ T30] ? assign_work+0x3d5/0x5e0 [ 515.810716][ T30] worker_thread+0xa50/0xfc0 [ 515.815408][ T30] kthread+0x388/0x470 [ 515.819648][ T30] ? __pfx_worker_thread+0x10/0x10 [ 515.825614][ T30] ? __pfx_kthread+0x10/0x10 [ 515.830647][ T30] ret_from_fork+0x51e/0xb90 [ 515.837283][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 515.843851][ T30] ? __switch_to+0xc7d/0x1450 [ 515.848846][ T30] ? __pfx_kthread+0x10/0x10 [ 515.853818][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.858699][ T30] [ 515.861927][ T7706] usb 4-1: device descriptor read/64, error -71 [ 515.870991][ T30] [ 515.870991][ T30] Showing all locks held in the system: [ 515.878878][ T30] 1 lock held by khungtaskd/30: [ 515.884414][ T30] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.894859][ T30] 2 locks held by getty/5584: [ 515.899947][ T30] #0: ffff88803704a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.910650][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 515.926042][ T30] 5 locks held by kworker/0:9/7702: [ 515.941419][ T30] #0: ffff888021e8e948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 515.960695][ T30] #1: ffffc900034d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 515.973868][ T7706] usb usb4-port1: attempt power cycle [ 515.983096][ T30] #2: ffff88802a2ae198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 516.000702][ T30] #3: ffff88801b703198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 516.020846][ T30] #4: ffff88807f7d6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 516.030750][ T30] 6 locks held by kworker/0:13/7706: [ 516.036304][ T30] #0: ffff888021e8e948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 516.051284][ T8781] net_ratelimit: 20 callbacks suppressed [ 516.051312][ T8781] bond3: (slave bridge5): failed to get link speed/duplex [ 516.052843][ T30] #1: ffffc90003077c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 516.089554][ T30] #2: ffff88802a24a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 516.101071][ T30] #3: ffff88802a3bb518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 516.121827][ T30] #4: ffff88802a254a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 516.140824][ T30] #5: ffffffff8f473ab0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 516.156245][ T30] [ 516.161999][ T48] bond3: (slave bridge5): failed to get link speed/duplex [ 516.165303][ T30] ============================================= [ 516.165303][ T30] [ 516.184687][ T30] NMI backtrace for cpu 0 [ 516.184707][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 516.184723][ T30] Tainted: [L]=SOFTLOCKUP [ 516.184727][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.184733][ T30] Call Trace: [ 516.184738][ T30] [ 516.184744][ T30] dump_stack_lvl+0xe8/0x150 [ 516.184764][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 516.184870][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.184892][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 516.184906][ T30] sys_info+0x135/0x170 [ 516.184917][ T30] watchdog+0xfd9/0x1030 [ 516.184935][ T30] ? watchdog+0x21a/0x1030 [ 516.184952][ T30] kthread+0x388/0x470 [ 516.184962][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.184975][ T30] ? __pfx_kthread+0x10/0x10 [ 516.184985][ T30] ret_from_fork+0x51e/0xb90 [ 516.184999][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 516.185011][ T30] ? __switch_to+0xc7d/0x1450 [ 516.185025][ T30] ? __pfx_kthread+0x10/0x10 [ 516.185034][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.185055][ T30] [ 516.185060][ T30] Sending NMI from CPU 0 to CPUs 1: [ 516.281066][ T8782] bond3: (slave bridge5): failed to get link speed/duplex [ 516.284476][ C1] NMI backtrace for cpu 1 [ 516.284492][ C1] CPU: 1 UID: 0 PID: 8782 Comm: kworker/u8:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.284514][ C1] Tainted: [L]=SOFTLOCKUP [ 516.284520][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.284536][ C1] Workqueue: bond3 bond_mii_monitor [ 516.284650][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 516.284779][ C1] Code: 44 85 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bc 8b ef fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 c7 6e 70 06 cc 44 89 f9 80 e1 07 38 c1 [ 516.284793][ C1] RSP: 0018:ffffc90005f1f210 EFLAGS: 00000002 [ 516.284806][ C1] RAX: 000000000000002e RBX: 000000000000002e RCX: 0000000000000000 [ 516.284816][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 516.284826][ C1] RBP: 00000000000003f8 R08: ffff888025a48237 R09: 1ffff11004b49046 [ 516.284836][ C1] R10: dffffc0000000000 R11: ffffffff85405950 R12: dffffc0000000000 [ 516.284847][ C1] R13: ffffffff9a2b3a47 R14: ffffffff9a5cb8e0 R15: 0000000000000000 [ 516.284858][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 516.284870][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.284880][ C1] CR2: 0000200000404030 CR3: 000000007c66a000 CR4: 00000000003526f0 [ 516.284894][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.284903][ C1] DR3: 00000000ffff000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 516.284912][ C1] Call Trace: [ 516.284919][ C1] [ 516.284928][ C1] serial8250_console_write+0x140c/0x1ba0 [ 516.284957][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 516.284978][ C1] ? lock_acquire+0xf0/0x2e0 [ 516.284998][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 516.285014][ C1] ? console_flush_all+0x123/0xb20 [ 516.285029][ C1] console_flush_all+0x718/0xb20 [ 516.285044][ C1] ? console_flush_all+0x123/0xb20 [ 516.285061][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 516.285077][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 516.285095][ C1] console_unlock+0xd1/0x1c0 [ 516.285116][ C1] ? __pfx_console_unlock+0x10/0x10 [ 516.285137][ C1] ? vprintk_emit+0x455/0x560 [ 516.285156][ C1] ? vprintk_emit+0x2cf/0x560 [ 516.285175][ C1] ? vprintk_emit+0x2cf/0x560 [ 516.285195][ C1] vprintk_emit+0x485/0x560 [ 516.285221][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 516.285242][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 516.285266][ C1] _printk+0xdd/0x130 [ 516.285282][ C1] ? __pfx__printk+0x10/0x10 [ 516.285297][ C1] ? __netdev_printk+0x36f/0x480 [ 516.285369][ C1] netdev_warn+0x11e/0x180 [ 516.285387][ C1] ? __pfx_netdev_warn+0x10/0x10 [ 516.285402][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.285423][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.285442][ C1] ? ___ratelimit+0x58c/0x8d0 [ 516.285463][ C1] bond_mii_monitor+0x1a3a/0x2ec0 [ 516.285485][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 516.285503][ C1] ? __pfx_bond_mii_monitor+0x10/0x10 [ 516.285531][ C1] ? process_scheduled_works+0xa25/0x1830 [ 516.285549][ C1] ? process_scheduled_works+0xa25/0x1830 [ 516.285567][ C1] process_scheduled_works+0xb02/0x1830 [ 516.285595][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.285616][ C1] ? assign_work+0x3d5/0x5e0 [ 516.285635][ C1] worker_thread+0xa50/0xfc0 [ 516.285664][ C1] kthread+0x388/0x470 [ 516.285678][ C1] ? __pfx_worker_thread+0x10/0x10 [ 516.285695][ C1] ? __pfx_kthread+0x10/0x10 [ 516.285708][ C1] ret_from_fork+0x51e/0xb90 [ 516.285728][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 516.285745][ C1] ? __switch_to+0xc7d/0x1450 [ 516.285762][ C1] ? __pfx_kthread+0x10/0x10 [ 516.285776][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.285802][ C1] [ 516.287529][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 516.287552][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 516.287577][ T30] Tainted: [L]=SOFTLOCKUP [ 516.287585][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.287601][ T30] Call Trace: [ 516.287609][ T30] [ 516.287618][ T30] vpanic+0x56c/0xa60 [ 516.287646][ T30] ? __pfx___schedule+0x10/0x10 [ 516.287673][ T30] ? __pfx_vpanic+0x10/0x10 [ 516.287709][ T30] panic+0xc5/0xd0 [ 516.287732][ T30] ? __pfx_panic+0x10/0x10 [ 516.287757][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 516.287798][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 516.287823][ T30] watchdog+0x1023/0x1030 [ 516.287855][ T30] ? watchdog+0x21a/0x1030 [ 516.287886][ T30] kthread+0x388/0x470 [ 516.287904][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.287928][ T30] ? __pfx_kthread+0x10/0x10 [ 516.287947][ T30] ret_from_fork+0x51e/0xb90 [ 516.287972][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 516.287993][ T30] ? __switch_to+0xc7d/0x1450 [ 516.288016][ T30] ? __pfx_kthread+0x10/0x10 [ 516.288035][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.288074][ T30] [ 516.289873][ T30] Kernel Offset: disabled