last executing test programs: 53m2.694832549s ago: executing program 2 (id=17): gettid() sync() unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 52m59.919082934s ago: executing program 2 (id=31): syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 52m59.305763615s ago: executing program 2 (id=36): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) unshare(0x26020480) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 52m59.070854301s ago: executing program 2 (id=39): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 52m58.485680947s ago: executing program 32 (id=38): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) 52m57.978623261s ago: executing program 2 (id=46): openat$sequencer(0xffffffffffffff9c, 0x0, 0x62043, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 52m57.395435619s ago: executing program 2 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v'], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) 52m56.861462118s ago: executing program 33 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v'], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) 52m1.151257528s ago: executing program 1 (id=303): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) 52m0.2233846s ago: executing program 1 (id=308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xa0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f00)={0x2c, &(0x7f0000000cc0)={0x20, 0x1, 0x5, "82fecdff60"}, 0x0, 0x0, 0x0, 0x0}) 51m57.179281327s ago: executing program 1 (id=321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) fallocate(0xffffffffffffffff, 0x10, 0x8000000000000000, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 51m56.683448091s ago: executing program 1 (id=324): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 51m56.549801774s ago: executing program 1 (id=325): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) io_uring_enter(r1, 0x2def, 0x0, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 51m56.294971368s ago: executing program 1 (id=327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 51m55.852336895s ago: executing program 34 (id=327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 49m33.90167723s ago: executing program 6 (id=1129): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0xec72, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) 49m32.083607116s ago: executing program 6 (id=1141): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) r2 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 49m30.890168427s ago: executing program 6 (id=1149): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a002800002001003e0f21"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49m30.242465415s ago: executing program 6 (id=1152): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 49m29.583516144s ago: executing program 6 (id=1154): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005c000000000000000f00e035200000000f22e0"], 0x5c}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e9ffff4f000000000000000f080f0866ba2100b0db000000ef450f22c2"], 0x296}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49m28.566430429s ago: executing program 6 (id=1156): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f0000000500)) 49m13.138546262s ago: executing program 35 (id=1156): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f0000000500)) 49m6.974730236s ago: executing program 5 (id=1259): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff", 0x2}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0x6, {0x10000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 49m6.547416712s ago: executing program 5 (id=1261): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000013000100", @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021"], 0x68}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 49m5.387993092s ago: executing program 5 (id=1263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) r3 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x679a, 0x20, 0x84, 0x3ce, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x41, 0x0, r1, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0, 0x20}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 49m3.2348624s ago: executing program 5 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 49m2.221325584s ago: executing program 5 (id=1277): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = syz_io_uring_setup(0x15b, &(0x7f00000003c0)={0x0, 0xd50a, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 49m2.032457018s ago: executing program 5 (id=1279): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 49m1.625925877s ago: executing program 36 (id=1279): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 38m52.322416029s ago: executing program 0 (id=3257): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 38m52.034192429s ago: executing program 0 (id=3259): fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f00000000c0)=0xd, 0x0, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 38m51.051212859s ago: executing program 0 (id=3261): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') pipe(&(0x7f0000000440)) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c140000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 38m50.830040889s ago: executing program 0 (id=3262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 38m50.279059264s ago: executing program 0 (id=3263): syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) brk(0x200000ffa000) r0 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xffffdffd, 0x1, 0x1, 0x0, 0x76}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x7, 0x7, 0x1, 'queue0\x00', 0x1}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000006c0)={0x2}) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 38m49.8435595s ago: executing program 0 (id=3266): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x40000000000001}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r4}, 0x1}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 38m48.99635072s ago: executing program 37 (id=3266): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x40000000000001}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r4}, 0x1}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 18.026131385s ago: executing program 8 (id=8728): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text16={0x10, &(0x7f0000000000)="b84a000f00d0d9edf4660f6076003e670f7e0ebaa000ec2e660f71f3ce66b9e40200000f320f23b366b9800000c00f326635000100000f30", 0x38}], 0x1, 0x48, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r6 = eventfd2(0x81, 0x800) r7 = syz_io_uring_setup(0x23d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4000000, 0x4023d}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x0, 0x0, 0xe37, 0x0, 0x1, r6}]) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) r12 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 16.958921534s ago: executing program 7 (id=8729): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000040000000000000000001000000a20000000000a05000000000000000000070000030900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640200000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000038020380340200800c0201801800028008000340000000010900020073797a3200000000040001"], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40d0000000000007110630000000000a6800000000000009520000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x23) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x80, @time={0x4, 0xa}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) socket(0xf, 0x4, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/33, &(0x7f0000000180)=0x21) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0xfff, 0x4) set_mempolicy(0x3, 0x0, 0x5) socket$igmp6(0xa, 0x3, 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x0, 0x40c00) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/191, 0xbf}], 0x1) 16.913434533s ago: executing program 3 (id=8730): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x4000003e, r6, 0x0) 16.254758636s ago: executing program 9 (id=8731): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb187}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r7}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 15.359986115s ago: executing program 8 (id=8733): syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3ff) chdir(0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000000)) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000004c0)={0x2, 0x1ebe417b, @status={[0x1de, 0xc, 0x1f62fa45, 0x4, 0x3, 0x9]}, [0x4, 0x5, 0x6, 0x8, 0xfffffffffffffff9, 0xf, 0x957, 0x7fffffff, 0x10000, 0x401, 0x4, 0x2, 0x6, 0x2, 0x3, 0x3, 0x8, 0x5, 0x8, 0x3, 0xff, 0x9, 0x8001, 0x7, 0x6, 0x3, 0xf, 0x3f88, 0x5e, 0x7a6c, 0x8fa7, 0xfffffffffffffff7, 0x5, 0x8001, 0x9, 0x1, 0x9, 0xc631, 0x7, 0xfdb, 0x9, 0x3, 0x4, 0x9, 0x3bc, 0xb3, 0x7, 0x3, 0x8001, 0x1ff, 0x3, 0x99, 0x4, 0x4, 0x400, 0xb00, 0x80000000, 0x20b8, 0x7, 0x6a26, 0x0, 0x7, 0x8a, 0x2]}) socket(0x29, 0x5, 0x40000) r5 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r5, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r4, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4) 13.795337187s ago: executing program 7 (id=8734): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x84, 0x2, 0x5332, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d4a14, 0x8, 0xfffffb9a, 0xffffffff, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x1, 0xba55, 0x8da8, 0x2, 0x200, 0x0, 0x8, 0xe, 0x4, 0x2, 0xf0, 0x8, 0xb2, 0x1, 0x199f, 0x8, 0x3, 0x9, 0x1, 0x4, 0x6, 0xffe, 0x5, 0x40, 0x39, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x1, 0xc32, 0x1, 0xe, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x295, 0x1, 0xffffffff, 0x981, 0x2, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000002, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff8, 0x101, 0xfffffffe, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x8, 0x1, 0x1, 0x8, 0x800007, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x4, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0xd, 0x80000000, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x100, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0x9, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4d, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x9, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xc57f, 0x3b, 0x6, 0x5, 0xffff0001, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x28a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edb, 0xfffffffd, 0x7, 0xe, 0x2, 0x8, 0x80000001, 0x2000133, 0x6]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030303030303430303030"], 0xb8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r11, 0x5016, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) 13.140437716s ago: executing program 3 (id=8735): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) dup(r0) syz_io_uring_setup(0x341b, &(0x7f0000000380)={0x0, 0x5079, 0x20000, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netpci0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYRES16=r5, @ANYRESHEX=r9, @ANYBLOB="010000000000000000006700fc89b20101003c00000008000300a31f187d1e7f0675bbfa8c36f7cd18c129d3bc18a207f514eb60caa164c8345b49a3a39215878edc5a3d9e7c444c1752029dcebeea66843f5a271a816d0839cf5eec95a80c709a5545769873ea49514ca08eacaae9f14b7af408bc7a92", @ANYRES8=r1, @ANYBLOB="0c00080000000000000000000800c300741300000800c40001000200", @ANYRES64=r8, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40094) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r11, @ANYBLOB="8d1ccbfab9536748395919fde141852fbc690bcde14597a4e9b38353e22ddd598e1e80c7773969d68e0294b7809b795cf2ae5101976d857ac7f10831cb8ff6aad13ac8ff88bc848d19912f9e25cc4c72ea4d8395bdd524313c89c85941ee91842b3f95012c7d2c27fdfeece4a102a698bd711cdbcc986c57b8f155ae3f36a358263884e9ceb150d3f879ccc0cb40c659ab2d137b4f62def5cc33996fbbfe6096a5206ffaa023977eafe8a6d2b5a55292f064"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 13.121084623s ago: executing program 9 (id=8736): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb187}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r6, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 11.699388571s ago: executing program 4 (id=8737): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 11.337588931s ago: executing program 8 (id=8738): unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x31b1, &(0x7f0000002300)={0x0, 0x202f, 0x4, 0x1, 0x177}) io_uring_setup(0x2ad3, &(0x7f0000002380)={0x0, 0xdca6, 0x2000, 0x3, 0x39d, 0x0, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x44090) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x1, 0xd6fe1, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r5}) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_open_dev$video(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syncfs(r7) 10.766684472s ago: executing program 3 (id=8739): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x0, 0x1000, 0x62}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="3c7c6f700c9415a3c1ea2dca4e84054f3b06e3b52251aa687502000000641520530a8909b301e029dbca13ab127a6580aba20e609ca6c412f7a92d741426aae435040d77d1fec0309ae80200a699f8617e27812a306dad21cfae1e6cdfa1ad104c01c49be62db4821d28533b2a27d74ad99e986c7bc974fffecc3bfb606a799cb43fe7783df8eb1ad6", 0x89, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 10.333906516s ago: executing program 7 (id=8740): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(0xffffffffffffffff, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}}, 0x0) 8.764127788s ago: executing program 9 (id=8741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x401, @dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffff3}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0180000000000000000001ffffffffffff80"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r3 = syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x2, 0x1000, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf25040000001c000280080003000400000008000800080000000800070005000000080004000800000040000380060007004e20000008000100000000001400020064756d6d79300000000000000000000006000400010000000800030004000000060007004e21000014000280080007003d000000060002004e21000008000500b6090000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xd9, 0xe5, 0xf7, 0x20, 0xbfd, 0x1c, 0x8ce8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x1, 0xe7, 0xd5, 0x37, 0x0, [], [{{0x9, 0x5, 0x1a, 0x8, 0x40, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x20, r8, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 8.694896256s ago: executing program 4 (id=8742): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000000c0)=0x8) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}}, 0x800) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 8.276739769s ago: executing program 8 (id=8743): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, 0x0, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 7.854055902s ago: executing program 7 (id=8744): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000040000000000000000001000000a20000000000a05000000000000000000070000030900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640200000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000038020380340200800c0201801800028008000340000000010900020073797a3200000000040001"], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40d0000000000007110630000000000a6800000000000009520000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000280)=""/211, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x23) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x80, @time={0x4, 0xa}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) socket(0xf, 0x4, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/33, &(0x7f0000000180)=0x21) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0xfff, 0x4) set_mempolicy(0x3, 0x0, 0x5) socket$igmp6(0xa, 0x3, 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x0, 0x40c00) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/191, 0xbf}], 0x1) 7.430028665s ago: executing program 9 (id=8745): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 6.718133638s ago: executing program 3 (id=8746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00040002", @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) r4 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000030603000000000000000000050037f5670421a6967993000000190a32abb5a01593fd0000000500e93f07"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8051) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r4, r5, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r8, 0x0, 0x4) fanotify_mark(0xffffffffffffffff, 0x0, 0x11, r8, &(0x7f0000000140)='./file0\x00') socket$inet_sctp(0x2, 0x1, 0x84) 6.551591624s ago: executing program 4 (id=8747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000), 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) clock_adjtime(0x0, &(0x7f0000000100)={0x0, 0x20000000000006a, 0x55cd, 0x8000000000000001, 0x400, 0x5, 0xd, 0xb446, 0x2, 0xffffffffffffffff, 0x100000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0xff, 0x4, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0xc84}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) 5.436451179s ago: executing program 8 (id=8748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) lseek(r4, 0x1000000000931f, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0xfded4000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000174cbc18c8c9941225f9ed4f0c016709f18cb7b03c2b1729"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.177679394s ago: executing program 4 (id=8749): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa050003000200000024000100000000000000000000000000000000004100000000000000000000000000000008000500010000001400020077673100"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000000800)="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", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, 0x0}}], 0x1, 0x2, 0x0) sched_getattr(r7, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x2}, 0xf7fe}) 4.891625398s ago: executing program 9 (id=8750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00') symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) dup2(0xffffffffffffffff, r2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) r4 = fsopen(&(0x7f0000000140)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='sourca', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) capset(0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x4e6d, &(0x7f0000000200)={0x0, 0xab63, 0x10100, 0x2, 0xfffffffc}, 0x0, 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) bind$packet(r5, 0x0, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000002c0)={'ipvlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x601, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300)=[r6], &(0x7f0000000580)}) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3b4, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0x110, 0x144, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/fib_trie\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4.5233795s ago: executing program 7 (id=8752): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb187}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r6, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 2.769297981s ago: executing program 3 (id=8753): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0xf9e8, 0x4) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x2) recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/25, 0x19}, 0xa65}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsopen(&(0x7f0000000580)='vxfs\x00', 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) 2.491694698s ago: executing program 4 (id=8754): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0xc00}, {0x0, 0x8000}], 0xa) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0xa1]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, &(0x7f0000000740)={0x0, 0xd2d9, 0x0, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb0000000000000000850000002f000000340000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fadvise64(r5, 0x18, 0x0, 0x4) io_setup(0x4, &(0x7f0000000400)) 2.469069364s ago: executing program 9 (id=8755): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001000600000000000000"], 0x20}}, 0x40010) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x30d4c0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x317000, 0x1000, 0x3}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x522e, &(0x7f0000000480)={0x0, 0xdb68, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x12d, 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r5, 0x4a12, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40, &(0x7f00000052c0)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xafbd4243d724e9a4}, 0x0) 2.194516779s ago: executing program 8 (id=8756): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x5d, &(0x7f0000000300)={0x5, 0xf, 0x5d, 0x4, [@generic={0x38, 0x10, 0xb, "587bccd8680f4ac8d23d8aa1103377f344c1c58fe80ac589bc4804627cd51c368872c648175b7452a75eb5fae00f8c175ba07d761f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xc, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0xb8, 0x0, 0x8, 0x1e00, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 613.133398ms ago: executing program 7 (id=8757): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) r3 = syz_open_procfs(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="736536081b8900002e2f64bcfe"]) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x6, "9b2f6985"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x5, "5c99b5"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f00000004c0)="640f01cb0fc73b66b82c010f00d8440f20c0350e000000440f22c0c7442400394c13d5c744240271000000c7442406000000000f011c242e260f01ee0f20c5b8ee0000000f23c80f21f8350c0050000f23f866bad00466ed0f01c9", 0x5b}], 0x1, 0x10, &(0x7f0000000700)=[@efer={0x2, 0x4000}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}], 0x2) r7 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000d40)="01", 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="b00000", @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="140002006d6163766c616e3100000000000000001400020064766d7270310000000000000000000028000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200627269646765"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x14) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 0s ago: executing program 4 (id=8758): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRESDEC], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000100)='u1', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000802) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f000000060002"], 0x70}}, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r12}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "5ef42005fbf3ee39"}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): USB device number 55 using dummy_hcd [ 3062.872642][T18284] usb 5-1: USB disconnect, device number 107 [ 3062.890496][ T5202] usb 10-1: device descriptor read/64, error -71 [ 3063.000918][ T5202] usb usb10-port1: attempt power cycle [ 3063.360406][ T5202] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 3063.382209][ T5202] usb 10-1: device descriptor read/8, error -71 [ 3063.780495][ T5202] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 3063.814675][ T5202] usb 10-1: device descriptor read/8, error -71 [ 3063.932178][ T5202] usb usb10-port1: unable to enumerate USB device [ 3064.130363][T18284] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 3064.290895][T18284] usb 5-1: Using ep0 maxpacket: 32 [ 3064.300393][T18284] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 3064.308959][T18284] usb 5-1: config 0 has no interface number 0 [ 3064.326214][T18284] usb 5-1: config 0 interface 184 has no altsetting 0 [ 3064.373105][T18284] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3064.401074][T18284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.487592][T18284] usb 5-1: Product: syz [ 3064.588158][ T49] net_ratelimit: 23 callbacks suppressed [ 3064.588176][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3064.601696][T18284] usb 5-1: Manufacturer: syz [ 3064.606317][T18284] usb 5-1: SerialNumber: syz [ 3064.842260][T18284] usb 5-1: config 0 descriptor?? [ 3064.960672][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3065.010664][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8344'. [ 3065.021305][T18284] smsc75xx v1.0.0 [ 3065.024946][T18284] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3065.127066][T18284] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 3065.137622][T12201] bond2: entered promiscuous mode [ 3065.201045][T12201] bond2: entered allmulticast mode [ 3065.336219][T12210] bond2 (unregistering): Released all slaves [ 3065.750967][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.041775][T12215] netlink: 'syz.9.8345': attribute type 4 has an invalid length. [ 3066.071442][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.183888][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.335340][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.501722][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.711397][T12236] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8347' sets config #0 [ 3066.721167][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.868939][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3066.896327][T12236] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8347' sets config #1 [ 3067.041145][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3067.863825][T18284] usb 5-1: USB disconnect, device number 108 [ 3069.843780][ T1104] net_ratelimit: 6 callbacks suppressed [ 3069.843800][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3069.960546][ T5202] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3070.196399][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3070.210653][ T5202] usb 4-1: Using ep0 maxpacket: 16 [ 3070.249723][ T5202] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3070.309786][ T5202] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3070.374670][ T5202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3070.385034][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3070.426418][ T5202] usb 4-1: Product: syz [ 3070.450033][ T5202] usb 4-1: Manufacturer: syz [ 3070.500846][ T5202] usb 4-1: SerialNumber: syz [ 3070.530767][ T5202] usb 4-1: config 0 descriptor?? [ 3070.555776][ T5202] hub 4-1:0.0: bad descriptor, ignoring hub [ 3070.565336][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3070.577411][ T5202] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3070.711965][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3070.847580][T12270] tipc: Enabled bearer , priority 0 [ 3070.875935][T12270] syzkaller0: entered promiscuous mode [ 3070.903921][T12270] syzkaller0: entered allmulticast mode [ 3070.930886][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3071.013241][T12271] tipc: Resetting bearer [ 3071.050330][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3071.067598][T12269] tipc: Resetting bearer [ 3071.123933][T12269] tipc: Disabling bearer [ 3071.162067][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3071.290573][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3071.420631][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3072.001575][T18284] usb 4-1: USB disconnect, device number 56 [ 3072.007143][T12287] netlink: 'syz.8.8360': attribute type 12 has an invalid length. [ 3072.026207][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8360'. [ 3072.381386][ T5202] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3072.597605][ T5202] usb 4-1: config 0 has no interfaces? [ 3072.614834][ T5202] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3073.020518][ T5202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.059084][ T5202] usb 4-1: Product: syz [ 3073.069314][ T5202] usb 4-1: Manufacturer: syz [ 3073.074828][ T5202] usb 4-1: SerialNumber: syz [ 3073.137850][ T5202] usb 4-1: config 0 descriptor?? [ 3074.994116][T14114] net_ratelimit: 20 callbacks suppressed [ 3074.994132][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.161390][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.220716][T12324] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 3075.227266][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3075.285284][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.303335][T12327] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 3075.309890][T12327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3075.353067][T12324] vhci_hcd vhci_hcd.0: Device attached [ 3075.357021][T12327] vhci_hcd vhci_hcd.0: Device attached [ 3075.401050][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.409963][T12330] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 3075.416485][T12330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3075.539298][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.551948][T12330] vhci_hcd vhci_hcd.0: Device attached [ 3075.590457][T18284] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 3075.592455][T12324] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 3075.604469][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3075.650853][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.659872][T12324] vhci_hcd vhci_hcd.0: Device attached [ 3075.883069][T12335] vhci_hcd: connection closed [ 3075.883312][T14114] vhci_hcd: stop threads [ 3075.884142][T12331] vhci_hcd: connection closed [ 3075.894559][T12328] vhci_hcd: connection closed [ 3075.902374][ T5707] usb 4-1: USB disconnect, device number 57 [ 3075.950215][T12325] vhci_hcd: connection reset by peer [ 3075.960475][T14114] vhci_hcd: release socket [ 3075.968281][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3075.980660][T14114] vhci_hcd: disconnect device [ 3076.012720][T14114] vhci_hcd: stop threads [ 3076.076172][T14114] vhci_hcd: release socket [ 3076.093891][T14114] vhci_hcd: disconnect device [ 3076.103191][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3076.135637][T14114] vhci_hcd: stop threads [ 3076.148690][T14114] vhci_hcd: release socket [ 3076.197537][T14114] vhci_hcd: disconnect device [ 3076.208722][T14114] vhci_hcd: stop threads [ 3076.216413][T14114] vhci_hcd: release socket [ 3076.225260][T14114] vhci_hcd: disconnect device [ 3076.240401][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3076.390835][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3076.845002][ T5196] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3076.890308][ T5851] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 3077.012216][ T5196] usb 4-1: Using ep0 maxpacket: 16 [ 3077.021199][ T5196] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3077.047470][ T5196] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3077.056859][ T5196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3077.068013][ T5196] usb 4-1: Product: syz [ 3077.108961][T12365] kvm: pic: single mode not supported [ 3077.108977][T12365] kvm: pic: level sensitive irq not supported [ 3077.114676][ T5196] usb 4-1: Manufacturer: syz [ 3077.162041][T12365] kvm: pic: level sensitive irq not supported [ 3077.162246][T12365] kvm: pic: single mode not supported [ 3077.168375][T12365] kvm: pic: level sensitive irq not supported [ 3077.174873][ T5851] usb 9-1: no configurations [ 3077.190286][ T5196] usb 4-1: SerialNumber: syz [ 3077.195024][ T5851] usb 9-1: can't read configurations, error -22 [ 3077.207740][ T5196] usb 4-1: config 0 descriptor?? [ 3077.250755][T12365] kvm: pic: single mode not supported [ 3077.250809][T12365] kvm: pic: level sensitive irq not supported [ 3077.256503][T12365] kvm: pic: single mode not supported [ 3077.262877][T12365] kvm: pic: level sensitive irq not supported [ 3077.271454][ T5196] hub 4-1:0.0: bad descriptor, ignoring hub [ 3077.283863][T12365] kvm: pic: single mode not supported [ 3077.283922][T12365] kvm: pic: single mode not supported [ 3077.289399][T12365] kvm: pic: level sensitive irq not supported [ 3077.296015][ T5196] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3077.309696][T12365] kvm: pic: single mode not supported [ 3077.309709][T12365] kvm: pic: level sensitive irq not supported [ 3077.315758][T12365] kvm: pic: single mode not supported [ 3077.322052][T12365] kvm: pic: level sensitive irq not supported [ 3077.350527][ T5851] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 3077.399196][T12365] kvm: pic: single mode not supported [ 3077.399232][T12365] kvm: pic: level sensitive irq not supported [ 3077.424657][T12365] kvm: pic: single mode not supported [ 3077.431298][T12365] kvm: pic: level sensitive irq not supported [ 3077.536732][T12365] kvm: pic: non byte write [ 3077.589107][ T5851] usb 9-1: no configurations [ 3077.595425][ T5851] usb 9-1: can't read configurations, error -22 [ 3077.606484][ T5851] usb usb9-port1: attempt power cycle [ 3078.413105][ T5851] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 3078.502211][ T5851] usb 9-1: no configurations [ 3078.540475][ T5851] usb 9-1: can't read configurations, error -22 [ 3078.771627][ T5851] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 3078.800738][ T5851] usb 9-1: no configurations [ 3078.806910][ T5851] usb 9-1: can't read configurations, error -22 [ 3078.817294][ T5851] usb usb9-port1: unable to enumerate USB device [ 3079.026222][T12380] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 3079.640513][ T5851] usb 4-1: USB disconnect, device number 58 [ 3080.070562][T14114] net_ratelimit: 26 callbacks suppressed [ 3080.070583][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3080.241346][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3080.397974][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3080.537260][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3080.739610][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3080.820672][T18284] vhci_hcd: vhci_device speed not set [ 3080.862495][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3081.009568][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3081.177788][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3081.423175][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3081.550711][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3081.945287][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.951865][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.389007][ T5202] usb usb48-port1: attempt power cycle [ 3082.989164][T12425] netlink: 'syz.3.8389': attribute type 10 has an invalid length. [ 3082.997913][ T5202] usb usb48-port1: unable to enumerate USB device [ 3083.550598][ T5707] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 3083.706148][ T5707] usb 4-1: no configurations [ 3083.714929][ T5707] usb 4-1: can't read configurations, error -22 [ 3084.070418][ T5707] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 3084.257757][ T5707] usb 4-1: no configurations [ 3084.262629][ T5707] usb 4-1: can't read configurations, error -22 [ 3084.338026][ T5707] usb usb4-port1: attempt power cycle [ 3084.800296][ T5707] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 3085.066239][ T5707] usb 4-1: no configurations [ 3085.071155][ T5707] usb 4-1: can't read configurations, error -22 [ 3085.120046][ T4647] net_ratelimit: 25 callbacks suppressed [ 3085.120063][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3085.221287][ T5707] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 3085.282893][ T5707] usb 4-1: no configurations [ 3085.287837][ T5707] usb 4-1: can't read configurations, error -22 [ 3085.294519][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3085.302127][T18279] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 3085.562596][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3085.596106][T18279] usb 10-1: Using ep0 maxpacket: 16 [ 3085.602311][ T5707] usb usb4-port1: unable to enumerate USB device [ 3085.622149][T18279] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3085.669351][T18279] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3085.687799][T18279] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3085.700937][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3085.726989][T18279] usb 10-1: Product: syz [ 3085.747281][T18279] usb 10-1: Manufacturer: syz [ 3085.758649][T18279] usb 10-1: SerialNumber: syz [ 3085.790522][T18279] usb 10-1: config 0 descriptor?? [ 3085.822459][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3085.832929][T18279] hub 10-1:0.0: bad descriptor, ignoring hub [ 3085.839001][T18279] hub 10-1:0.0: probe with driver hub failed with error -5 [ 3085.951242][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3086.130913][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3086.290607][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3086.401819][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3086.604580][T12468] binder: BINDER_SET_CONTEXT_MGR already set [ 3086.623243][T12468] binder: 12467:12468 ioctl 4018620d 200000000040 returned -16 [ 3086.631791][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3087.043368][T12480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3087.980985][T18279] usb 10-1: USB disconnect, device number 58 [ 3088.113725][T12492] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3090.117045][T12510] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8410'. [ 3090.212611][ T4647] net_ratelimit: 29 callbacks suppressed [ 3090.212625][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3090.360990][T18279] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 3090.372470][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3090.492214][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3090.535079][T18279] usb 9-1: no configurations [ 3090.540497][T18279] usb 9-1: can't read configurations, error -22 [ 3090.601690][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3090.705811][T18279] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 3090.714298][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3090.881683][T18279] usb 9-1: no configurations [ 3090.886355][T18279] usb 9-1: can't read configurations, error -22 [ 3090.900049][T18279] usb usb9-port1: attempt power cycle [ 3090.910739][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3091.060409][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3091.190360][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3091.260853][T18279] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 3091.301693][T18279] usb 9-1: no configurations [ 3091.306324][T18279] usb 9-1: can't read configurations, error -22 [ 3091.321442][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3091.446489][T18279] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 3091.454257][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3091.492110][T18279] usb 9-1: no configurations [ 3091.499762][T18279] usb 9-1: can't read configurations, error -22 [ 3091.521184][T18279] usb usb9-port1: unable to enumerate USB device [ 3092.420898][T18279] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 3092.643487][T18279] usb 5-1: Using ep0 maxpacket: 16 [ 3092.693407][T18279] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3092.770062][T18279] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3092.788786][T18279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.840640][T18279] usb 5-1: Product: syz [ 3092.888421][T18279] usb 5-1: Manufacturer: syz [ 3092.920705][T18279] usb 5-1: SerialNumber: syz [ 3092.946887][T18279] usb 5-1: config 0 descriptor?? [ 3093.097725][T18279] hub 5-1:0.0: bad descriptor, ignoring hub [ 3093.149190][T18279] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3093.201351][T12542] tipc: Enabled bearer , priority 0 [ 3093.209207][T12542] syzkaller0: entered promiscuous mode [ 3093.215230][T12542] syzkaller0: entered allmulticast mode [ 3093.408242][T12546] tipc: Resetting bearer [ 3093.424642][T12541] tipc: Resetting bearer [ 3093.595459][T12541] tipc: Disabling bearer [ 3095.225851][ T1104] net_ratelimit: 26 callbacks suppressed [ 3095.225872][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3095.409271][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3095.491103][ T5202] usb 5-1: USB disconnect, device number 109 [ 3095.607426][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3095.790577][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3095.862124][T12580] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3096.041776][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3096.203055][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3096.240870][ T5202] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3096.334813][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3096.474616][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3096.494529][ T5202] usb 5-1: config 0 has no interfaces? [ 3096.514714][ T5202] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3096.628676][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3096.832634][ T5202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3096.940497][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8429'. [ 3096.979937][ T5202] usb 5-1: Product: syz [ 3097.000928][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3097.034464][ T5202] usb 5-1: Manufacturer: syz [ 3097.039110][ T5202] usb 5-1: SerialNumber: syz [ 3097.152914][ T5202] usb 5-1: config 0 descriptor?? [ 3097.274210][T12594] netlink: 'syz.3.8431': attribute type 1 has an invalid length. [ 3097.431207][T12594] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 3097.470384][T12578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8426'. [ 3097.598648][T12594] veth13: entered promiscuous mode [ 3097.608542][T12594] bond2: (slave veth13): Enslaving as a backup interface with a down link [ 3098.205588][T12612] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.8433'. [ 3099.398532][T12625] CIFS: VFS: Malformed UNC in devname [ 3099.423522][ T5202] usb 5-1: USB disconnect, device number 110 [ 3099.837460][ T5851] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 3100.038254][ T5851] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3100.050271][ T5851] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3100.127056][ T5851] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3100.229562][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3100.265711][ T63] net_ratelimit: 20 callbacks suppressed [ 3100.265725][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3100.300845][ T5851] usb 9-1: SerialNumber: syz [ 3100.400996][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3100.512040][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3100.645916][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3100.781447][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3100.875498][ T5851] usb 9-1: 0:2 : does not exist [ 3100.900776][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3101.010401][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3101.110819][ T5851] usb 9-1: USB disconnect, device number 62 [ 3101.126576][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3101.265653][T24457] udevd[24457]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3101.370471][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3101.523360][T12650] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3101.547461][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3102.630256][ T5851] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3102.858743][ T30] audit: type=1326 audit(1751655426.948:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.3.8447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f4878e929 code=0x0 [ 3102.894214][ T5851] usb 5-1: config 0 has no interfaces? [ 3102.935497][ T5851] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3102.946085][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3102.964821][ T5851] usb 5-1: Product: syz [ 3102.969227][ T5851] usb 5-1: Manufacturer: syz [ 3102.974354][ T5851] usb 5-1: SerialNumber: syz [ 3103.034931][ T5851] usb 5-1: config 0 descriptor?? [ 3103.185650][T12673] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8446'. [ 3103.198455][T12673] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3103.206979][T12673] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 3103.220525][T12673] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 3103.254354][T12673] kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 3103.299206][T12673] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 3103.406340][T12673] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 3103.465119][T12673] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 3103.999586][ T30] audit: type=1326 audit(1751655428.088:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12684 comm="syz.7.8449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd18e929 code=0x0 [ 3104.022806][ T5851] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 3104.213103][ T5851] usb 10-1: config 0 has no interfaces? [ 3104.222271][ T5851] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3104.233412][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.243104][ T5851] usb 10-1: Product: syz [ 3104.270463][ T5851] usb 10-1: Manufacturer: syz [ 3104.279247][ T5851] usb 10-1: SerialNumber: syz [ 3104.305967][ T5851] usb 10-1: config 0 descriptor?? [ 3104.567758][T12683] binder: BINDER_SET_CONTEXT_MGR already set [ 3104.573950][T12683] binder: 12680:12683 ioctl 4018620d 2000000001c0 returned -16 [ 3105.367928][T18279] usb 5-1: USB disconnect, device number 111 [ 3105.374094][T14114] net_ratelimit: 28 callbacks suppressed [ 3105.374113][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3105.481420][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3105.592740][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3105.725516][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3105.869275][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3106.024515][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3106.090689][T18279] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 3106.142184][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3106.275713][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3106.294795][T18279] usb 5-1: Using ep0 maxpacket: 16 [ 3106.336656][T18279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3106.365156][T18279] usb 5-1: config 0 has no interfaces? [ 3106.389172][T18279] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 3106.432813][T18279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.442042][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3106.522186][T18279] usb 5-1: Product: syz [ 3106.551195][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3106.567119][T18279] usb 5-1: Manufacturer: syz [ 3106.575313][T18279] usb 5-1: SerialNumber: syz [ 3106.607427][T18279] usb 5-1: config 0 descriptor?? [ 3107.150039][T18279] usb 10-1: USB disconnect, device number 59 [ 3107.920473][ T5707] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 3108.086934][ T5707] usb 9-1: no configurations [ 3108.093034][ T5707] usb 9-1: can't read configurations, error -22 [ 3108.183360][ T30] audit: type=1326 audit(1751655432.278:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.7.8462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd18e929 code=0x0 [ 3108.297374][ T5707] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 3108.457541][ T5707] usb 9-1: no configurations [ 3108.462625][ T5707] usb 9-1: can't read configurations, error -22 [ 3108.470584][ T5707] usb usb9-port1: attempt power cycle [ 3108.888115][ T5707] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 3108.921832][ T5707] usb 9-1: no configurations [ 3108.926474][ T5707] usb 9-1: can't read configurations, error -22 [ 3109.062174][T18279] usb 5-1: USB disconnect, device number 112 [ 3109.122484][T12743] netlink: 212364 bytes leftover after parsing attributes in process `syz.9.8464'. [ 3109.149262][ T5851] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3109.270947][ T5707] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 3109.291673][ T5707] usb 9-1: no configurations [ 3109.296449][ T5707] usb 9-1: can't read configurations, error -22 [ 3109.311600][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 3109.338624][ T5707] usb usb9-port1: unable to enumerate USB device [ 3109.379965][ T5851] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 3109.396038][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3109.426939][ T5851] usb 4-1: Product: syz [ 3109.533590][ T5851] usb 4-1: Manufacturer: syz [ 3109.550334][ T5851] usb 4-1: SerialNumber: syz [ 3109.568483][ T5851] usb 4-1: config 0 descriptor?? [ 3109.790337][T18279] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 3109.818157][ T5851] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 3109.827670][ T5851] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 3109.961207][T18279] usb 5-1: Using ep0 maxpacket: 16 [ 3110.029695][ T5851] usb 4-1: USB disconnect, device number 63 [ 3110.392457][ T4647] net_ratelimit: 30 callbacks suppressed [ 3110.392483][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3110.667003][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3110.781003][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3110.916894][ T5851] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 3110.928322][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.055966][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.070342][T18284] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 3111.198896][ T5851] usb 10-1: no configurations [ 3111.203936][ T5851] usb 10-1: can't read configurations, error -22 [ 3111.211674][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.262566][T18284] usb 9-1: config 0 has an invalid interface number: 187 but max is 0 [ 3111.271182][T18284] usb 9-1: config 0 has no interface number 0 [ 3111.340420][T12763] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3111.358497][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.366024][ T5851] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 3111.433399][T18284] usb 9-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 3111.447913][T18284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3111.474770][T18284] usb 9-1: Product: syz [ 3111.481328][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.500731][T18284] usb 9-1: Manufacturer: syz [ 3111.607549][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.653131][ T5851] usb 10-1: no configurations [ 3111.657874][ T5851] usb 10-1: can't read configurations, error -22 [ 3111.668403][ T5851] usb usb10-port1: attempt power cycle [ 3111.730616][T18284] usb 9-1: SerialNumber: syz [ 3111.730744][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3111.738581][T18284] usb 9-1: config 0 descriptor?? [ 3112.030441][ T5851] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 3112.054661][T18284] peak_usb 9-1:0.187 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 3112.063428][T18284] peak_usb 9-1:0.187: unable to read PCAN-USB serial number (err -22) [ 3112.283410][T18284] peak_usb 9-1:0.187: probe with driver peak_usb failed with error -22 [ 3112.304605][ T5851] usb 10-1: no configurations [ 3112.380260][ T5851] usb 10-1: can't read configurations, error -22 [ 3112.580522][ T5851] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 3112.646759][ T5851] usb 10-1: no configurations [ 3112.661502][ T5851] usb 10-1: can't read configurations, error -22 [ 3112.742768][ T5851] usb usb10-port1: unable to enumerate USB device [ 3112.742942][T18279] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3112.906386][T18279] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3112.914114][T18279] usb 5-1: can't read configurations, error -71 [ 3113.400387][ T5851] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3113.623447][T12783] netlink: 'syz.9.8474': attribute type 13 has an invalid length. [ 3113.866405][ T5851] usb 4-1: config 0 has no interfaces? [ 3113.882806][ T5851] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3113.893610][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3113.903517][ T5851] usb 4-1: Product: syz [ 3113.935848][ T5851] usb 4-1: Manufacturer: syz [ 3113.943679][ T5851] usb 4-1: SerialNumber: syz [ 3113.955093][ T5851] usb 4-1: config 0 descriptor?? [ 3114.368486][T18279] usb 9-1: USB disconnect, device number 67 [ 3114.589218][T12771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8471'. [ 3115.411707][T12805] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 3115.480967][ T63] net_ratelimit: 23 callbacks suppressed [ 3115.480988][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3115.710437][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3115.882788][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3116.021846][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3116.217773][ T5851] usb 4-1: USB disconnect, device number 64 [ 3116.619912][T12820] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3116.693220][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3116.857790][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3117.019754][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3117.141064][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3117.263627][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3117.381004][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3118.080466][T18279] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3118.151864][T12832] kvm: kvm [12831]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7a81 [ 3118.161843][T12832] kvm: kvm [12831]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x7a81 [ 3118.244802][T18279] usb 4-1: config 0 has no interfaces? [ 3118.255440][T18279] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3118.260547][ T5851] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 3118.265353][T18279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.397261][T18279] usb 4-1: Product: syz [ 3118.451260][T18279] usb 4-1: Manufacturer: syz [ 3118.471103][ T5851] usb 5-1: no configurations [ 3118.475851][ T5851] usb 5-1: can't read configurations, error -22 [ 3118.492793][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8487'. [ 3118.519429][T18279] usb 4-1: SerialNumber: syz [ 3118.523396][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8487'. [ 3118.564292][T18279] usb 4-1: config 0 descriptor?? [ 3118.622786][ T5851] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 3118.802814][ T5851] usb 5-1: no configurations [ 3118.807705][ T5851] usb 5-1: can't read configurations, error -22 [ 3118.814933][ T5851] usb usb5-port1: attempt power cycle [ 3119.180572][ T5851] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 3119.202198][ T5851] usb 5-1: no configurations [ 3119.207014][ T5851] usb 5-1: can't read configurations, error -22 [ 3119.351689][ T5851] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 3119.445050][ T5851] usb 5-1: no configurations [ 3119.450722][ T5851] usb 5-1: can't read configurations, error -22 [ 3119.477709][ T5851] usb usb5-port1: unable to enumerate USB device [ 3120.584651][ T63] net_ratelimit: 24 callbacks suppressed [ 3120.584665][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3120.640929][T18279] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 3120.801554][T18279] usb 10-1: Using ep0 maxpacket: 16 [ 3121.116369][T18279] usb 10-1: config 0 has an invalid interface number: 68 but max is 0 [ 3121.152933][T18279] usb 10-1: config 0 has no interface number 0 [ 3121.195865][T18279] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 3121.207731][ T5851] usb 4-1: USB disconnect, device number 65 [ 3121.315180][T18279] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.346926][T18279] usb 10-1: Product: syz [ 3121.357054][T18279] usb 10-1: Manufacturer: syz [ 3121.362858][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3121.372033][T18279] usb 10-1: SerialNumber: syz [ 3121.382563][T18279] usb 10-1: config 0 descriptor?? [ 3121.424178][T18279] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3121.481506][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3121.616108][ T49] usb 10-1: Failed to submit usb control message: -71 [ 3121.616464][ T5851] usb 10-1: USB disconnect, device number 64 [ 3121.642034][ T49] usb 10-1: unable to send the bmi data to the device: -71 [ 3121.649363][ T49] usb 10-1: unable to get target info from device [ 3121.657605][ T49] usb 10-1: could not get target info (-71) [ 3121.670458][ T49] usb 10-1: could not probe fw (-71) [ 3121.690660][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3121.822847][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3121.981447][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3122.185265][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3122.543857][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3122.670723][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3122.820831][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3123.574753][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8499'. [ 3125.228183][ T5851] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3125.591949][ T5851] usb 5-1: no configurations [ 3125.596588][ T5851] usb 5-1: can't read configurations, error -22 [ 3125.641101][ T63] net_ratelimit: 21 callbacks suppressed [ 3125.641115][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3125.761034][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3125.850618][ T5851] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3125.870823][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3125.981416][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3126.102372][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3126.210743][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3126.279070][ T5851] usb 5-1: no configurations [ 3126.285858][ T5851] usb 5-1: can't read configurations, error -22 [ 3126.305672][ T5851] usb usb5-port1: attempt power cycle [ 3126.532384][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3126.781353][ T5851] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 3126.879861][ T5851] usb 5-1: no configurations [ 3126.982219][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3126.994790][T12935] netlink: 'syz.8.8506': attribute type 4 has an invalid length. [ 3127.131864][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3127.150253][ T5851] usb 5-1: can't read configurations, error -22 [ 3127.188741][T12935] syzkaller1: entered promiscuous mode [ 3127.204570][T12935] syzkaller1: entered allmulticast mode [ 3127.320314][ T5851] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 3127.352930][ T5851] usb 5-1: no configurations [ 3127.357564][ T5851] usb 5-1: can't read configurations, error -22 [ 3127.391001][ T5851] usb usb5-port1: unable to enumerate USB device [ 3127.391560][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3127.950411][T18284] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 3128.236348][T18284] usb 10-1: config 0 has no interfaces? [ 3128.409762][T18284] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3128.436465][T18284] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.447619][T18284] usb 10-1: Product: syz [ 3128.453275][T18284] usb 10-1: Manufacturer: syz [ 3128.478564][T18284] usb 10-1: SerialNumber: syz [ 3128.916630][T18284] usb 10-1: config 0 descriptor?? [ 3128.939638][T12961] input: syz1 as /devices/virtual/input/input197 [ 3128.946383][T12961] input: failed to attach handler leds to device input197, error: -6 [ 3130.263648][T12985] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8516'. [ 3130.768664][ T4647] net_ratelimit: 16 callbacks suppressed [ 3130.768678][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3131.014485][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3131.169931][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3131.286422][T18284] usb 10-1: USB disconnect, device number 65 [ 3131.314168][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3131.460346][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3131.581165][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3132.047429][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3132.234160][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3132.362072][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3132.420647][ T5851] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 3133.711467][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3133.774248][ T5851] usb 10-1: Using ep0 maxpacket: 16 [ 3133.790626][ T5202] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 3134.037555][ T5202] usb 5-1: Using ep0 maxpacket: 16 [ 3134.075641][ T5202] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3134.174519][ T5202] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3134.195783][ T5202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3134.218244][ T5202] usb 5-1: Product: syz [ 3134.227043][ T5202] usb 5-1: Manufacturer: syz [ 3134.236496][ T5202] usb 5-1: SerialNumber: syz [ 3134.269230][ T5202] usb 5-1: config 0 descriptor?? [ 3134.283845][ T5202] hub 5-1:0.0: bad descriptor, ignoring hub [ 3134.298709][ T5202] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3134.931570][T13018] netlink: 212364 bytes leftover after parsing attributes in process `syz.8.8523'. [ 3135.327343][ T5851] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3135.362088][ T5851] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3135.480580][ T5851] usb 10-1: can't read configurations, error -71 [ 3135.730803][ T5202] usb 5-1: USB disconnect, device number 123 [ 3135.880594][ T5851] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 3136.364086][ T49] net_ratelimit: 16 callbacks suppressed [ 3136.364103][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3136.520633][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3136.850641][ T5851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3136.867762][ T5851] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3136.884790][ T5851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3136.896074][ T5851] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 3136.901290][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3136.974253][ T5851] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 3137.071022][T13041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3137.272962][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3137.301061][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.401910][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3137.562994][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3137.586697][ T5851] usb 10-1: Product: syz [ 3137.604718][ T5851] usb 10-1: Manufacturer: syz [ 3137.609423][ T5851] usb 10-1: SerialNumber: syz [ 3137.662881][ T5851] usb 10-1: config 0 descriptor?? [ 3137.680409][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3137.694382][ T5851] kvaser_usb 10-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 3137.722478][ T5851] kvaser_usb 10-1:0.0: error -EMSGSIZE: Failed to initialize card [ 3137.763796][ T5851] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -90 [ 3137.823633][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3137.960710][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3137.970680][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3137.994169][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3138.122354][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3138.850447][T18284] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3139.010625][T18284] usb 5-1: Using ep0 maxpacket: 8 [ 3139.025101][T18284] usb 5-1: config 0 has no interfaces? [ 3139.057189][T18284] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3139.066546][T18284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.082011][T18284] usb 5-1: Product: syz [ 3139.086461][T18284] usb 5-1: Manufacturer: syz [ 3139.094655][T18284] usb 5-1: SerialNumber: syz [ 3139.109207][T18284] usb 5-1: config 0 descriptor?? [ 3139.156761][ T5851] usb 10-1: USB disconnect, device number 67 [ 3139.814222][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8530'. [ 3139.829568][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8530'. [ 3139.842835][ T5851] usb 5-1: USB disconnect, device number 124 [ 3140.504363][T13079] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8534'. [ 3140.562124][T13079] netlink: 'syz.8.8534': attribute type 11 has an invalid length. [ 3141.329215][ T5707] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 3141.403354][ T3516] net_ratelimit: 19 callbacks suppressed [ 3141.403370][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3141.658454][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3141.779745][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3142.187705][ T5707] usb 10-1: no configurations [ 3142.194263][ T5707] usb 10-1: can't read configurations, error -22 [ 3142.270508][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3142.330722][ T5707] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 3142.381274][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3142.520491][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3142.564343][ T5707] usb 10-1: no configurations [ 3142.569107][ T5707] usb 10-1: can't read configurations, error -22 [ 3142.576861][ T5707] usb usb10-port1: attempt power cycle [ 3142.631027][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3142.741975][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3143.030605][ T5707] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 3143.054007][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3143.062665][T18284] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 3143.076692][ T5707] usb 10-1: no configurations [ 3143.088948][ T5707] usb 10-1: can't read configurations, error -22 [ 3143.211050][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3143.240642][T18284] usb 9-1: Using ep0 maxpacket: 8 [ 3143.249126][T18284] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 3143.256791][ T5707] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 3143.265007][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3143.276909][T18284] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3143.315382][ T5707] usb 10-1: no configurations [ 3143.323298][ T5707] usb 10-1: can't read configurations, error -22 [ 3143.361065][ T5707] usb usb10-port1: unable to enumerate USB device [ 3143.451008][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.457389][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.476228][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3143.617868][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3143.642900][T13122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3143.754682][T18284] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 3143.763304][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3143.784882][T18284] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3143.822412][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3143.834934][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3143.850756][T18284] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 3143.863605][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3143.895837][T18284] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3144.315471][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3144.393423][T18284] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3144.577989][T18284] usb 9-1: string descriptor 0 read error: -22 [ 3144.610680][T18284] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3144.658753][T18284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3144.763439][T18284] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3144.993318][T18284] usb 9-1: USB disconnect, device number 68 [ 3146.473250][ T4647] net_ratelimit: 22 callbacks suppressed [ 3146.473266][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3146.637044][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3146.862388][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3147.304042][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3147.446336][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3147.610844][T13167] bridge9: entered promiscuous mode [ 3147.634006][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3147.824883][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3148.082321][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3148.260693][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3148.552502][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3151.517640][ T4647] net_ratelimit: 18 callbacks suppressed [ 3151.517663][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3151.590281][ T5707] usb 10-1: new full-speed USB device number 72 using dummy_hcd [ 3151.683469][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3151.751950][ T5707] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3151.762453][ T5707] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3151.782442][ T5707] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3151.800452][ T5851] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3151.808609][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3151.843943][ T5707] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3151.854164][ T5707] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.873041][ T5707] usb 10-1: Product: syz [ 3151.884507][ T5707] usb 10-1: Manufacturer: syz [ 3151.893174][ T5707] usb 10-1: SerialNumber: syz [ 3151.918061][ T5707] cdc_ncm 10-1:1.0: skipping garbage [ 3151.923803][ T5707] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 3151.940412][ T5707] cdc_ncm 10-1:1.0: bind() failure [ 3151.943320][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3151.970459][ T5851] usb 5-1: Using ep0 maxpacket: 8 [ 3152.007104][ T5851] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3152.052111][ T30] audit: type=1326 audit(1751655476.108:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3152.076479][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3152.105396][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.258356][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3152.285886][ T5851] usb 5-1: Product: syz [ 3152.300631][ T5851] usb 5-1: Manufacturer: syz [ 3152.305463][ T30] audit: type=1326 audit(1751655476.108:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3152.349498][T18284] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3152.349570][ T5851] usb 5-1: SerialNumber: syz [ 3152.381424][ T5851] usb 5-1: config 0 descriptor?? [ 3152.399074][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3152.401825][ T30] audit: type=1326 audit(1751655476.108:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3152.431699][ T5202] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 3152.594735][ T30] audit: type=1326 audit(1751655476.108:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3152.631295][T18284] usb 4-1: config 0 has no interfaces? [ 3152.658347][ T5202] usb 9-1: Using ep0 maxpacket: 16 [ 3152.663893][ T5851] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3152.821131][T18284] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3152.833660][ T30] audit: type=1326 audit(1751655476.108:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3152.879133][T18284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.892755][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3153.041480][T18284] usb 4-1: Product: syz [ 3153.050480][T18284] usb 4-1: Manufacturer: syz [ 3153.123898][T18284] usb 4-1: SerialNumber: syz [ 3153.142364][ T30] audit: type=1326 audit(1751655476.108:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3153.166978][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3153.219402][T18284] usb 4-1: config 0 descriptor?? [ 3153.296307][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3153.313184][ T30] audit: type=1326 audit(1751655476.108:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3153.342855][T18284] usb 10-1: USB disconnect, device number 72 [ 3153.410440][ T30] audit: type=1326 audit(1751655476.108:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3153.478333][ T30] audit: type=1326 audit(1751655476.108:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3153.710823][ T30] audit: type=1326 audit(1751655476.118:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.8.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6a338e929 code=0x7ffc0000 [ 3154.759228][ T5851] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 3155.001974][ T5851] usb 5-1: USB disconnect, device number 125 [ 3155.257141][ T5707] usb 4-1: USB disconnect, device number 66 [ 3155.860933][ T5202] usb 9-1: unable to get BOS descriptor or descriptor too short [ 3155.884501][ T5202] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 3155.895254][ T5202] usb 9-1: can't read configurations, error -71 [ 3156.314163][T13242] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3156.582051][T14114] net_ratelimit: 23 callbacks suppressed [ 3156.582067][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3156.704308][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3157.151398][ T5202] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 3157.466688][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3157.974101][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3158.115122][T13263] vti0: entered promiscuous mode [ 3158.132072][T13263] vti0: entered allmulticast mode [ 3158.198539][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3158.272964][ T5202] usb 9-1: Using ep0 maxpacket: 16 [ 3158.427945][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3158.550429][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3158.620600][ T5202] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3158.642649][ T5202] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3158.651837][ T5202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3158.678922][ T5202] usb 9-1: Product: syz [ 3158.681479][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3158.710623][ T5202] usb 9-1: Manufacturer: syz [ 3158.746224][ T5202] usb 9-1: SerialNumber: syz [ 3158.800768][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3158.820867][ T5202] usb 9-1: config 0 descriptor?? [ 3158.852047][ T5202] hub 9-1:0.0: bad descriptor, ignoring hub [ 3158.858992][ T5202] hub 9-1:0.0: probe with driver hub failed with error -5 [ 3158.911368][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3159.840655][ T5202] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3160.079425][ T5202] usb 4-1: Using ep0 maxpacket: 16 [ 3160.200492][ T5851] usb 9-1: USB disconnect, device number 70 [ 3160.221481][ T5202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 3160.276368][ T5202] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 3160.678819][ T5202] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3160.696436][ T5202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.708592][ T5202] usb 4-1: Product: syz [ 3160.720244][ T5202] usb 4-1: Manufacturer: syz [ 3160.725442][ T5202] usb 4-1: SerialNumber: syz [ 3160.891861][ T5202] usb 4-1: config 0 descriptor?? [ 3160.914355][T13282] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3161.229112][ T5202] hub 4-1:0.0: bad descriptor, ignoring hub [ 3161.235493][ T5202] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3161.276396][ T5202] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input199 [ 3161.587485][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8571'. [ 3161.640965][ T36] net_ratelimit: 17 callbacks suppressed [ 3161.640979][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3161.780804][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3161.900294][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3162.100909][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3162.111248][T13309] delete_channel: no stack [ 3162.244383][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3162.315097][ T5202] hid-generic 00A0:0008:0003.0072: unknown main item tag 0x7 [ 3162.326270][ T5202] hid-generic 00A0:0008:0003.0072: item fetching failed at offset 14/15 [ 3162.336517][ T5202] hid-generic 00A0:0008:0003.0072: probe with driver hid-generic failed with error -22 [ 3162.386220][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3162.630579][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3162.794397][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3162.926874][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3163.066711][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3163.094726][T13322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3163.131443][ T5202] usb 4-1: USB disconnect, device number 67 [ 3163.271300][ T5707] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 3163.452505][ T5707] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3163.461806][ T5707] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3163.475526][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3163.505105][ T5707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3163.529819][ T5707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3163.558243][ T5707] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3163.568373][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3163.576810][ T5707] usb 5-1: Product: syz [ 3163.601521][ T5707] usb 5-1: Manufacturer: syz [ 3164.062150][ T5707] cdc_wdm 5-1:1.0: skipping garbage [ 3164.070557][ T5707] cdc_wdm 5-1:1.0: skipping garbage [ 3164.081008][ T5707] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3164.093948][ T5707] cdc_wdm 5-1:1.0: Unknown control protocol [ 3164.787341][ C0] wdm_int_callback: 1834 callbacks suppressed [ 3164.787366][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 3164.790704][ T5202] usb 5-1: USB disconnect, device number 126 [ 3164.793460][ C0] wdm_int_callback: 1834 callbacks suppressed [ 3164.793478][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 3164.793497][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3165.410301][T18284] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 3165.691317][T18284] usb 10-1: Using ep0 maxpacket: 16 [ 3165.700287][T18284] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3165.768230][T18284] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3165.784945][T18284] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.811686][T18284] usb 10-1: Product: syz [ 3165.817283][T18284] usb 10-1: Manufacturer: syz [ 3165.825440][T18284] usb 10-1: SerialNumber: syz [ 3165.868862][T18284] usb 10-1: config 0 descriptor?? [ 3165.893537][T18284] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3165.905719][T18284] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 3166.073733][T13363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3166.091013][ T5707] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 3166.250450][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 3166.262212][ T5707] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3166.278154][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3166.289817][ T5707] usb 5-1: Product: syz [ 3166.294707][ T5707] usb 5-1: Manufacturer: syz [ 3166.310248][ T5707] usb 5-1: SerialNumber: syz [ 3166.331401][ T5707] usb 5-1: config 0 descriptor?? [ 3166.545457][T18284] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 3166.703746][ T1104] net_ratelimit: 22 callbacks suppressed [ 3166.703761][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3166.743514][ T5707] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3166.991504][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3167.129444][T18284] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 3167.143603][T18284] em28xx 10-1:0.0: board has no eeprom [ 3167.283398][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3167.407011][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3167.514175][T18279] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 3167.531091][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3167.654345][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3167.690301][T18279] usb 9-1: Using ep0 maxpacket: 16 [ 3167.818055][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3167.826254][T18279] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3167.948100][T18279] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3167.997132][T18279] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3168.015234][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3168.057401][T18279] usb 9-1: Product: syz [ 3168.124769][T18279] usb 9-1: Manufacturer: syz [ 3168.129453][T18279] usb 9-1: SerialNumber: syz [ 3168.142008][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3168.249176][T18279] usb 9-1: config 0 descriptor?? [ 3168.250638][T13345] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 3168.265735][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3168.314753][T18284] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 3168.341969][T18279] hub 9-1:0.0: bad descriptor, ignoring hub [ 3168.420728][T18284] em28xx 10-1:0.0: dvb set to bulk mode. [ 3168.426510][ T398] em28xx 10-1:0.0: Binding DVB extension [ 3168.432868][T18279] hub 9-1:0.0: probe with driver hub failed with error -5 [ 3168.458993][T18284] usb 10-1: USB disconnect, device number 73 [ 3168.471944][T18284] em28xx 10-1:0.0: Disconnecting em28xx [ 3168.812810][ T5202] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3169.041317][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8589'. [ 3169.131055][ T398] em28xx 10-1:0.0: Registering input extension [ 3169.152037][T18284] em28xx 10-1:0.0: Closing input extension [ 3169.162246][ T5202] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3169.170041][ T5202] usb 4-1: can't read configurations, error -61 [ 3169.236598][ T5707] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3169.274530][ T5707] usb 5-1: USB disconnect, device number 127 [ 3169.357996][T18284] em28xx 10-1:0.0: Freeing device [ 3169.405460][ T5202] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3169.618192][ T5202] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3169.639847][ T5202] usb 4-1: can't read configurations, error -61 [ 3169.678869][ T5202] usb usb4-port1: attempt power cycle [ 3170.068485][T18284] usb 9-1: USB disconnect, device number 71 [ 3170.140293][ T5202] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3170.217676][ T5202] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3170.230796][T13400] netlink: 100 bytes leftover after parsing attributes in process `syz.8.8592'. [ 3170.279245][ T5202] usb 4-1: can't read configurations, error -61 [ 3170.310309][ T5851] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 3170.420294][ T5202] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3170.455969][ T5202] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3170.464015][ T5202] usb 4-1: can't read configurations, error -61 [ 3170.471005][ T5202] usb usb4-port1: unable to enumerate USB device [ 3170.658602][ T5851] usb 10-1: config 0 has no interfaces? [ 3170.707217][ T5851] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3170.716528][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.726163][ T5851] usb 10-1: Product: syz [ 3170.806225][ T5851] usb 10-1: Manufacturer: syz [ 3170.835924][ T5851] usb 10-1: SerialNumber: syz [ 3170.856095][ T5851] usb 10-1: config 0 descriptor?? [ 3171.294611][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8590'. [ 3171.971177][ T4647] net_ratelimit: 18 callbacks suppressed [ 3171.971191][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3172.123931][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3172.243950][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8594'. [ 3172.441979][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3172.580479][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3172.700773][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3172.881229][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3173.012759][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3173.035552][T18284] usb 10-1: USB disconnect, device number 74 [ 3173.142567][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3173.311158][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3173.598259][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3176.597763][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 3176.597775][ T30] audit: type=1326 audit(1751655500.688:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3176.637622][ T30] audit: type=1326 audit(1751655500.728:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3176.950739][ T5202] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 3176.989214][ T30] audit: type=1326 audit(1751655500.728:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3177.460517][ T63] net_ratelimit: 22 callbacks suppressed [ 3177.460538][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3177.473776][ T5202] usb 9-1: Using ep0 maxpacket: 16 [ 3177.488691][ T5202] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3177.523474][ T30] audit: type=1326 audit(1751655500.728:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3177.630520][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3177.640290][ T5202] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3177.650752][ T5202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.676727][ T5202] usb 9-1: Product: syz [ 3178.024299][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3178.049254][ T5202] usb 9-1: Manufacturer: syz [ 3178.053058][ T30] audit: type=1326 audit(1751655500.728:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3178.110558][ T5202] usb 9-1: SerialNumber: syz [ 3178.126015][ T30] audit: type=1326 audit(1751655500.728:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3178.148406][ C0] vkms_vblank_simulate: vblank timer overrun [ 3178.155536][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3178.207909][ T5202] usb 9-1: config 0 descriptor?? [ 3178.225877][ T5202] hub 9-1:0.0: bad descriptor, ignoring hub [ 3178.235817][ T5202] hub 9-1:0.0: probe with driver hub failed with error -5 [ 3178.311409][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3178.526768][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3178.583807][ T30] audit: type=1326 audit(1751655500.728:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3178.614383][ T30] audit: type=1326 audit(1751655500.728:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3178.636793][ C0] vkms_vblank_simulate: vblank timer overrun [ 3178.654910][ T30] audit: type=1326 audit(1751655500.728:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3178.850789][T13483] netlink: 212364 bytes leftover after parsing attributes in process `syz.9.8605'. [ 3178.873197][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3179.002629][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3179.050650][ T30] audit: type=1326 audit(1751655500.728:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.3.8604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3179.180587][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3179.330753][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3179.730903][ T5202] usb 9-1: USB disconnect, device number 72 [ 3182.104737][T13512] binder: 13494:13512 ioctl c0306201 2000000003c0 returned -14 [ 3182.567757][ T63] net_ratelimit: 17 callbacks suppressed [ 3182.567773][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3182.783708][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3183.059044][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3183.211164][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3183.333473][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3183.474105][T18284] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3183.514546][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3183.661444][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3183.662848][T18284] usb 5-1: config 0 has no interfaces? [ 3183.682099][T18284] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3183.691507][T18284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3183.767377][T18284] usb 5-1: Product: syz [ 3183.771634][T18284] usb 5-1: Manufacturer: syz [ 3183.776520][T18284] usb 5-1: SerialNumber: syz [ 3183.783214][T18284] usb 5-1: config 0 descriptor?? [ 3183.796234][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3184.054056][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3184.260600][T18284] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 3184.335753][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3184.483529][T18284] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3184.512362][T18284] usb 10-1: config 0 has no interfaces? [ 3184.632167][T18284] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3185.060584][T18284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3185.105566][T18284] usb 10-1: config 0 descriptor?? [ 3185.833095][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8617'. [ 3186.162852][T13558] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 3186.178217][T13558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8618'. [ 3186.191028][T13558] fuse: Bad value for 'fd' [ 3187.017240][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8619'. [ 3187.139263][ T5851] usb 5-1: USB disconnect, device number 2 [ 3187.572847][ T63] net_ratelimit: 24 callbacks suppressed [ 3187.572880][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3188.065979][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3188.067135][T18284] usb 10-1: string descriptor 0 read error: -71 [ 3188.120075][T18284] usb 10-1: USB disconnect, device number 75 [ 3188.281029][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3188.350116][T13529] delete_channel: no stack [ 3188.382468][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3188.520431][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3188.770283][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 3188.845330][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3189.043415][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3189.123696][ T5851] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3189.133406][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.142855][ T5851] usb 5-1: Product: syz [ 3189.147393][ T5851] usb 5-1: Manufacturer: syz [ 3189.154422][ T5851] usb 5-1: SerialNumber: syz [ 3189.162450][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3189.309329][T13579] vlan0: entered promiscuous mode [ 3189.341382][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3189.407610][ T5851] usb 5-1: config 0 descriptor?? [ 3189.556563][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3189.672363][ T5851] hub 5-1:0.0: bad descriptor, ignoring hub [ 3189.698657][ T5851] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3189.769265][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3189.916379][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3190.920980][ T5707] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 3191.262125][ T5707] usb 9-1: config 0 has no interfaces? [ 3191.269891][ T5707] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3191.510469][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3191.518518][ T5707] usb 9-1: Product: syz [ 3191.573091][ T5707] usb 9-1: Manufacturer: syz [ 3191.598532][ T5707] usb 9-1: SerialNumber: syz [ 3191.632905][ T5707] usb 9-1: config 0 descriptor?? [ 3191.974602][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8625'. [ 3192.001343][ T5851] usb 5-1: USB disconnect, device number 3 [ 3192.665987][ T36] net_ratelimit: 16 callbacks suppressed [ 3192.666008][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3192.800570][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3192.930913][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.042852][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.051849][T13617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 3193.058441][T13617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3193.082963][T13617] vhci_hcd vhci_hcd.0: Device attached [ 3193.110669][ T5851] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 3193.174997][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.242026][ T5707] usb 9-1: USB disconnect, device number 73 [ 3193.267686][T13617] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 3193.274312][T13617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3193.303374][T13628] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3193.320588][ T5202] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 3193.331820][ T5851] usb 10-1: Using ep0 maxpacket: 32 [ 3193.335719][T13627] netlink: 'syz.8.8630': attribute type 12 has an invalid length. [ 3193.338702][T13623] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 3193.351462][T13623] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3193.366897][T13617] vhci_hcd vhci_hcd.0: Device attached [ 3193.372607][ T5851] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3193.392568][ T5851] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3193.414672][T13628] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 3193.421275][T13628] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3193.430369][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3193.452248][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.479662][ T5851] usb 10-1: Product: syz [ 3193.486039][ T5851] usb 10-1: Manufacturer: syz [ 3193.493902][T13628] vhci_hcd vhci_hcd.0: Device attached [ 3193.503426][ T5851] usb 10-1: SerialNumber: syz [ 3193.518687][ T5851] usb 10-1: config 0 descriptor?? [ 3193.529943][T13615] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 3193.548160][T13623] vhci_hcd vhci_hcd.0: Device attached [ 3193.560576][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.594734][T13632] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 3193.601381][T13632] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3193.638793][T13617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3193.651246][T13632] vhci_hcd vhci_hcd.0: Device attached [ 3193.671144][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.683344][T13617] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(26) [ 3193.689983][T13617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3193.698461][T13617] vhci_hcd vhci_hcd.0: Device attached [ 3193.709630][T13617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3193.761461][T13617] vhci_hcd vhci_hcd.0: port 0 already used [ 3193.800559][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.851225][T13637] vhci_hcd: connection closed [ 3193.851503][T13630] vhci_hcd: connection closed [ 3193.853046][T13621] vhci_hcd: connection closed [ 3193.856317][T13634] vhci_hcd: connection closed [ 3193.856953][T13624] vhci_hcd: connection closed [ 3193.861321][T13618] vhci_hcd: connection reset by peer [ 3193.880906][ T3516] vhci_hcd: stop threads [ 3193.887063][ T3516] vhci_hcd: release socket [ 3193.893574][ T3516] vhci_hcd: disconnect device [ 3193.903445][ T3516] vhci_hcd: stop threads [ 3193.923335][ T3516] vhci_hcd: release socket [ 3193.945432][ T3516] vhci_hcd: disconnect device [ 3193.950854][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3193.988699][ T3516] vhci_hcd: stop threads [ 3193.994387][ T3516] vhci_hcd: release socket [ 3194.011895][ T3516] vhci_hcd: disconnect device [ 3194.039531][ T3516] vhci_hcd: stop threads [ 3194.058730][ T3516] vhci_hcd: release socket [ 3194.065654][ T3516] vhci_hcd: disconnect device [ 3194.081183][ T3516] vhci_hcd: stop threads [ 3194.085463][ T3516] vhci_hcd: release socket [ 3194.164000][ T3516] vhci_hcd: disconnect device [ 3194.172558][ T3516] vhci_hcd: stop threads [ 3194.178511][ T3516] vhci_hcd: release socket [ 3194.199273][ T3516] vhci_hcd: disconnect device [ 3194.460057][T18284] usb 10-1: USB disconnect, device number 76 [ 3194.831769][T13657] netlink: 'syz.3.8633': attribute type 4 has an invalid length. [ 3195.700462][T13665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3196.870633][ T5851] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 3197.142388][ T5851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3197.153746][ T5851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3197.171187][ T5851] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3197.381346][T13690] input: syz0 as /devices/virtual/input/input201 [ 3197.894765][ T1104] net_ratelimit: 24 callbacks suppressed [ 3197.894778][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3197.978758][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3197.978770][ T30] audit: type=1326 audit(1751655522.068:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3198.091798][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3198.097592][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3198.178097][ T5851] usb 10-1: config 0 descriptor?? [ 3198.238793][ T30] audit: type=1326 audit(1751655522.068:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3198.350581][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3198.379385][ T30] audit: type=1326 audit(1751655522.068:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f4878d290 code=0x7ffc0000 [ 3198.451262][ T30] audit: type=1326 audit(1751655522.068:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3198.474389][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3198.482077][ T5202] vhci_hcd: vhci_device speed not set [ 3198.517977][ T30] audit: type=1326 audit(1751655522.068:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3198.640591][ T30] audit: type=1326 audit(1751655522.068:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3198.644559][ T5851] cp2112 0003:10C4:EA90.0073: unknown main item tag 0x0 [ 3198.700894][ T5851] cp2112 0003:10C4:EA90.0073: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 3198.713303][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3198.843156][ T5851] cp2112 0003:10C4:EA90.0073: Part Number: 0x82 Device Version: 0xFE [ 3198.901047][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3198.972339][ T30] audit: type=1326 audit(1751655522.068:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3199.023909][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3199.031672][ T30] audit: type=1326 audit(1751655522.068:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3199.031718][ T30] audit: type=1326 audit(1751655522.068:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3199.031758][ T30] audit: type=1326 audit(1751655522.068:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.3.8638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4878e929 code=0x7ffc0000 [ 3199.054118][ C1] vkms_vblank_simulate: vblank timer overrun [ 3199.334733][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3199.470352][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3199.481531][T13710] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8643' sets config #0 [ 3199.494253][T13710] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8643' sets config #1 [ 3199.558341][ T5196] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3199.680877][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3199.901835][ T5707] usb usb42-port1: attempt power cycle [ 3199.910295][ T5851] usb 10-1: reset high-speed USB device number 77 using dummy_hcd [ 3199.942016][ T5196] usb 4-1: config 0 has no interfaces? [ 3199.953670][ T5196] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3199.963313][ T5196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3199.971926][ T5196] usb 4-1: Product: syz [ 3199.976661][ T5196] usb 4-1: Manufacturer: syz [ 3199.983101][ T5196] usb 4-1: SerialNumber: syz [ 3200.019327][ T5196] usb 4-1: config 0 descriptor?? [ 3200.107010][T13671] cp2112 0003:10C4:EA90.0073: Error starting transaction: -38 [ 3200.463462][ T5707] usb usb42-port1: unable to enumerate USB device [ 3201.371438][ T5938] usb 10-1: USB disconnect, device number 77 [ 3201.623620][T13737] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3202.179698][ T5707] usb 4-1: USB disconnect, device number 72 [ 3202.875391][T13751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3203.016184][ T1104] net_ratelimit: 24 callbacks suppressed [ 3203.016198][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3203.151350][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3203.308667][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3203.461510][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3203.580488][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3203.733685][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3203.741356][ T5707] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 3204.006552][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3204.698981][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3204.815225][T13765] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8653'. [ 3204.869664][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.877292][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.226638][ T5707] usb 9-1: config 0 has no interfaces? [ 3205.253340][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3205.454685][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3205.538880][ T398] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3205.575250][ T5707] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3205.597926][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.607989][ T5707] usb 9-1: Product: syz [ 3205.614182][ T5707] usb 9-1: Manufacturer: syz [ 3205.618991][ T5707] usb 9-1: SerialNumber: syz [ 3205.635358][ T5707] usb 9-1: config 0 descriptor?? [ 3205.726344][ T398] usb 5-1: config 0 has no interfaces? [ 3205.742590][ T398] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3205.751832][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.759823][ T398] usb 5-1: Product: syz [ 3205.779912][ T398] usb 5-1: Manufacturer: syz [ 3205.853810][T13760] program syz.8.8651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3205.866365][ T398] usb 5-1: SerialNumber: syz [ 3205.875714][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3205.903513][ T398] usb 5-1: config 0 descriptor?? [ 3205.984777][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3206.044734][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3206.057466][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3207.647616][ T5938] usb 9-1: USB disconnect, device number 74 [ 3207.940832][T13811] netlink: 548 bytes leftover after parsing attributes in process `syz.8.8658'. [ 3208.100529][ T1104] net_ratelimit: 19 callbacks suppressed [ 3208.100550][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3208.247597][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3208.276937][ T398] usb 5-1: USB disconnect, device number 4 [ 3208.381073][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3208.500499][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3209.312154][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3209.440379][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3209.550552][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3209.702711][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3209.821829][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3209.837441][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 3209.837458][ T30] audit: type=1326 audit(1751655533.928:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.7.8662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cbd18e929 code=0x0 [ 3209.930583][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3210.254681][T13841] netlink: 'syz.8.8664': attribute type 12 has an invalid length. [ 3210.382239][T13842] netlink: 'syz.9.8663': attribute type 13 has an invalid length. [ 3210.439959][T13844] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 3211.071096][ T5938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3211.243323][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 3211.299978][ T5938] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 3211.314747][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.329498][ T5938] usb 5-1: Product: syz [ 3211.329939][T13842] 8021q: adding VLAN 0 to HW filter on device team0 [ 3211.352652][ T5938] usb 5-1: Manufacturer: syz [ 3211.357266][ T5938] usb 5-1: SerialNumber: syz [ 3211.371375][ T5938] usb 5-1: config 0 descriptor?? [ 3212.063833][ T5938] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 3212.967367][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3213.060547][ T5938] gspca_sunplus: reg_w_riv err -110 [ 3213.111776][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3213.147460][ T36] net_ratelimit: 10 callbacks suppressed [ 3213.147476][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3213.257655][T13869] tipc: Enabling of bearer rejected, already enabled [ 3213.344327][ T5938] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 3213.390927][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8666'. [ 3213.420308][ T5851] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 3213.670367][ T5851] usb 9-1: device descriptor read/64, error -71 [ 3213.866785][T13869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3214.053830][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3214.100312][ T5851] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 3214.184254][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3214.221984][ T5938] usb 5-1: USB disconnect, device number 5 [ 3214.240321][ T5851] usb 9-1: device descriptor read/64, error -71 [ 3214.290809][ T5707] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 3214.310432][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3214.359126][ T5851] usb usb9-port1: attempt power cycle [ 3214.421946][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3214.585479][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3214.722553][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3214.751178][ T5851] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 3214.863578][ T5851] usb 9-1: device descriptor read/8, error -71 [ 3215.077271][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3215.130467][ T5851] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 3215.168236][ T5851] usb 9-1: device descriptor read/8, error -71 [ 3215.224441][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3215.311320][ T5851] usb usb9-port1: unable to enumerate USB device [ 3215.361337][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3216.192516][T18284] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3216.214025][T13901] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8674'. [ 3216.247313][T13901] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8674'. [ 3216.308130][T13901] netlink: 492 bytes leftover after parsing attributes in process `syz.8.8674'. [ 3216.510683][T18284] usb 4-1: Using ep0 maxpacket: 8 [ 3216.601955][T18284] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3216.612156][T18284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43512, setting to 1024 [ 3216.620752][ T5851] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 3216.689718][T18284] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 3216.800909][ T5851] usb 9-1: Using ep0 maxpacket: 32 [ 3216.808988][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3216.856398][ T5851] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3216.875255][T18284] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3216.931311][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3216.946728][T18284] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3216.956188][T18284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3216.970927][T18284] usb 4-1: Product: syz [ 3216.979046][T18284] usb 4-1: Manufacturer: syz [ 3216.995517][T18284] usb 4-1: SerialNumber: syz [ 3217.016144][ T5851] usb 9-1: config 0 descriptor?? [ 3217.041609][T13891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3217.049398][T13891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3217.098990][ T5851] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 3217.389530][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8675'. [ 3217.840822][ T5707] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3218.128321][ T5707] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3218.251852][T11686] net_ratelimit: 21 callbacks suppressed [ 3218.251873][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3218.482658][ T5707] usb 10-1: can't read configurations, error -71 [ 3218.515996][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3218.634681][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3218.773127][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3218.892992][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3219.040645][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3219.137465][ T5851] usb 9-1: USB disconnect, device number 79 [ 3219.210840][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3219.382340][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3219.450438][T18284] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 3219.511728][T18284] usbtest 4-1:1.0: Linux user mode ISO test driver [ 3219.518287][T18284] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 3219.559611][T18284] usb 4-1: USB disconnect, device number 73 [ 3219.567211][T14114] bond3: (slave bridge0): failed to get link speed/duplex [ 3219.780581][ T5851] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 3219.792185][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3219.959853][ T5851] usb 9-1: config 0 has no interfaces? [ 3220.005692][ T5851] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3220.120259][ T5851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3220.128471][ T5851] usb 9-1: Product: syz [ 3220.160801][ T5851] usb 9-1: Manufacturer: syz [ 3220.165521][ T5851] usb 9-1: SerialNumber: syz [ 3220.201232][ T5851] usb 9-1: config 0 descriptor?? [ 3220.589438][T13950] netlink: 212364 bytes leftover after parsing attributes in process `syz.7.8682'. [ 3221.170308][ T5202] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3221.370472][ T5202] usb 5-1: Using ep0 maxpacket: 16 [ 3221.390552][ T5202] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3221.413334][ T5202] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3221.435849][ T5202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3221.478176][ T5202] usb 5-1: Product: syz [ 3221.487114][ T5202] usb 5-1: Manufacturer: syz [ 3221.498958][ T5202] usb 5-1: SerialNumber: syz [ 3221.531737][ T5202] usb 5-1: config 0 descriptor?? [ 3221.544314][ T5202] hub 5-1:0.0: bad descriptor, ignoring hub [ 3221.553551][ T5202] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3222.866940][ T5202] usb 9-1: USB disconnect, device number 80 [ 3223.075921][T13968] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8687'. [ 3223.090513][T13968] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8687'. [ 3223.214187][T13968] netlink: 492 bytes leftover after parsing attributes in process `syz.8.8687'. [ 3223.490682][T11686] net_ratelimit: 23 callbacks suppressed [ 3223.490703][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3223.633131][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3223.650349][ T5202] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 3223.756187][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3223.800308][ T5202] usb 9-1: Using ep0 maxpacket: 32 [ 3223.807973][ T5202] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3223.819122][ T5202] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3223.829514][ T5202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3223.870592][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3223.894625][ T5202] usb 9-1: config 0 descriptor?? [ 3223.933116][ T5202] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 3224.001519][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3224.123910][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3224.289498][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3224.319125][T13983] : left promiscuous mode [ 3224.330655][ T5202] usb 5-1: USB disconnect, device number 6 [ 3224.571234][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3224.661510][T13991] xt_nat: multiple ranges no longer supported [ 3224.673581][T13991] ip6t_srh: unknown srh match flags 5040 [ 3224.713028][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3224.921442][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3225.987071][ T5851] usb 9-1: USB disconnect, device number 81 [ 3226.210535][ T5202] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 3226.374605][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8694'. [ 3226.388527][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8694'. [ 3227.400528][ T5851] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 3227.664048][ T5851] usb 9-1: Using ep0 maxpacket: 16 [ 3227.696680][ T5851] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3227.796269][ T5851] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3227.816968][ T5851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3227.838065][ T5851] usb 9-1: Product: syz [ 3227.864479][ T5851] usb 9-1: Manufacturer: syz [ 3227.893104][ T5851] usb 9-1: SerialNumber: syz [ 3228.023972][T14022] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3228.061662][ T5851] usb 9-1: config 0 descriptor?? [ 3228.173307][ T5851] hub 9-1:0.0: bad descriptor, ignoring hub [ 3228.218627][ T5851] hub 9-1:0.0: probe with driver hub failed with error -5 [ 3228.532640][ T3516] net_ratelimit: 24 callbacks suppressed [ 3228.532659][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3228.808148][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3229.043809][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3229.231598][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3229.448401][T18284] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 3229.633432][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3229.759051][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3229.808394][ T5202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3229.817236][T18284] usb 4-1: config 0 has no interfaces? [ 3229.852997][ T5202] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3229.855022][T18284] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3229.870048][T18284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3229.890313][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3229.900498][T18284] usb 4-1: Product: syz [ 3229.904657][T18284] usb 4-1: Manufacturer: syz [ 3229.909240][T18284] usb 4-1: SerialNumber: syz [ 3229.973370][T18284] usb 4-1: config 0 descriptor?? [ 3230.001032][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3230.043072][ T5202] usb 5-1: can't read configurations, error -71 [ 3230.122217][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3230.278232][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3230.474130][ T30] audit: type=1326 audit(1751655554.528:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3230.517338][ T30] audit: type=1326 audit(1751655554.528:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3230.744245][ T30] audit: type=1326 audit(1751655554.528:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3230.782379][T18284] usb 9-1: USB disconnect, device number 82 [ 3230.818641][ T30] audit: type=1326 audit(1751655554.528:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3230.868894][ T30] audit: type=1326 audit(1751655554.538:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3231.000479][ T30] audit: type=1326 audit(1751655554.538:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3231.498942][ T30] audit: type=1326 audit(1751655554.538:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3231.630508][ T5202] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 3231.657128][ T30] audit: type=1326 audit(1751655554.538:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3231.945287][ T30] audit: type=1326 audit(1751655554.538:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3232.028038][ T5202] usb 10-1: config 0 has no interfaces? [ 3232.037574][ T5202] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3232.046943][ T5202] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.149052][ T5202] usb 10-1: Product: syz [ 3232.149127][ T30] audit: type=1326 audit(1751655554.538:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.4.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec11b8e929 code=0x7ffc0000 [ 3232.189509][ T5202] usb 10-1: Manufacturer: syz [ 3232.237534][ T5202] usb 10-1: SerialNumber: syz [ 3232.310298][ T5202] usb 10-1: config 0 descriptor?? [ 3232.379670][T18284] usb 4-1: USB disconnect, device number 74 [ 3234.831661][T18284] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3234.841093][ T36] net_ratelimit: 18 callbacks suppressed [ 3234.841105][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3235.103596][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3235.173159][T18284] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3235.230987][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3235.294839][T18284] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3235.352280][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3235.359598][T18284] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3235.407219][T18284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.551134][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3235.685373][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3235.789549][T14089] delete_channel: no stack [ 3235.806765][T18284] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3235.996654][ T5202] usb 10-1: USB disconnect, device number 80 [ 3236.394116][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3236.601514][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3236.611287][T18284] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3236.709722][T18284] usb 5-1: USB disconnect, device number 9 [ 3236.721859][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3236.881220][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3237.518577][T14113] ptrace attach of "./syz-executor exec"[15986] was attempted by "./syz-executor exec"[14113] [ 3238.412652][T18284] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3238.650628][T18284] usb 5-1: Using ep0 maxpacket: 16 [ 3238.704952][T18284] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3238.721835][T18284] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3238.734668][T18284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3238.744324][T18284] usb 5-1: Product: syz [ 3238.748721][T18284] usb 5-1: Manufacturer: syz [ 3238.756638][T18284] usb 5-1: SerialNumber: syz [ 3238.776984][T18284] usb 5-1: config 0 descriptor?? [ 3238.815172][T18284] hub 5-1:0.0: bad descriptor, ignoring hub [ 3238.822447][T18284] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3239.402681][T14132] netlink: 'syz.9.8716': attribute type 1 has an invalid length. [ 3239.582608][T14132] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3239.760848][T14137] gretap3: entered promiscuous mode [ 3239.810228][T14137] bond8: (slave gretap3): making interface the new active one [ 3239.842783][T14137] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 3239.946391][T14132] bond8: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3240.020754][ T1104] net_ratelimit: 17 callbacks suppressed [ 3240.020775][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.050470][ T5202] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 3240.261627][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.283553][ T5202] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3240.294401][ T5202] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3240.307123][ T5202] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3240.358523][ T5938] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 3240.377483][ T5202] usb 10-1: config 0 descriptor?? [ 3240.383352][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.397098][ T5202] pwc: Askey VC010 type 2 USB webcam detected. [ 3240.502437][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.526381][ T5938] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3240.538959][ T5938] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3240.579724][ T5938] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3240.625914][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.653366][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3240.700712][ T398] usb 5-1: USB disconnect, device number 10 [ 3240.761983][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.890990][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3240.931393][ T5202] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3240.940752][ T5202] pwc: recv_control_msg error -32 req 02 val 2700 [ 3241.010421][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3241.141631][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3241.159100][ T5202] pwc: recv_control_msg error -32 req 04 val 1000 [ 3241.240548][ T5202] pwc: recv_control_msg error -71 req 04 val 1300 [ 3241.260969][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3241.284278][ T5202] pwc: recv_control_msg error -71 req 04 val 1400 [ 3241.339603][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3241.595365][ T5202] pwc: recv_control_msg error -71 req 02 val 2000 [ 3241.614233][ T5202] pwc: recv_control_msg error -71 req 02 val 2100 [ 3241.704881][ T5202] pwc: recv_control_msg error -71 req 04 val 1500 [ 3241.720253][ T5202] pwc: recv_control_msg error -71 req 02 val 2500 [ 3241.727244][ T5202] pwc: recv_control_msg error -71 req 02 val 2400 [ 3241.737648][ T5202] pwc: recv_control_msg error -71 req 02 val 2600 [ 3241.750685][ T5202] pwc: recv_control_msg error -71 req 02 val 2900 [ 3241.788787][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 3241.847310][ T5938] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3241.856620][ T5938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3241.876491][ T5202] pwc: recv_control_msg error -71 req 02 val 2800 [ 3241.908252][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3242.097022][ T5202] pwc: recv_control_msg error -71 req 04 val 1100 [ 3242.145121][ T5202] pwc: recv_control_msg error -71 req 04 val 1200 [ 3242.223654][ T5202] pwc: Registered as video103. [ 3242.300532][ T5938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3242.310470][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.325146][ T5202] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input202 [ 3242.340205][ T5938] usb 5-1: Product: syz [ 3242.348731][ T5938] usb 5-1: Manufacturer: syz [ 3242.376304][ T5938] usb 5-1: SerialNumber: syz [ 3242.388987][ T5202] usb 10-1: USB disconnect, device number 81 [ 3242.825580][T14171] fuse: Bad value for 'group_id' [ 3242.832257][T14171] fuse: Bad value for 'group_id' [ 3243.543722][ T5202] usb 9-1: USB disconnect, device number 83 [ 3245.155256][ T5938] usb 5-1: 0:2 : does not exist [ 3245.160459][ T5851] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 3245.184070][ T5938] usb 5-1: USB disconnect, device number 11 [ 3245.195729][ T1104] net_ratelimit: 22 callbacks suppressed [ 3245.195742][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3245.349989][ T5851] usb 10-1: config 0 has no interfaces? [ 3245.376428][ T5851] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3245.387882][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.403545][T24457] udevd[24457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3245.433862][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3245.514084][ T5851] usb 10-1: Product: syz [ 3245.550987][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3245.617551][ T5851] usb 10-1: Manufacturer: syz [ 3245.641923][ T5851] usb 10-1: SerialNumber: syz [ 3245.683367][ T5851] usb 10-1: config 0 descriptor?? [ 3245.689259][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3246.291431][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3246.452771][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3246.591405][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3246.824540][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3246.980945][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3247.139081][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3247.376818][T14209] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8729'. [ 3247.395265][T14209] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8729'. [ 3247.414176][T14209] netlink: 492 bytes leftover after parsing attributes in process `syz.7.8729'. [ 3247.946864][ T5851] usb 10-1: USB disconnect, device number 82 [ 3248.020618][ T398] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 3248.526588][ T398] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 3248.534999][ T398] usb 4-1: config 0 has no interface number 0 [ 3248.586934][ T398] usb 4-1: config 0 interface 29 has no altsetting 0 [ 3248.781577][ T5851] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 3248.918353][ T398] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 3248.928086][ T398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3248.936424][ T398] usb 4-1: Product: syz [ 3248.940992][ T398] usb 4-1: Manufacturer: syz [ 3248.945603][ T398] usb 4-1: SerialNumber: syz [ 3248.980587][ T5851] usb 10-1: Using ep0 maxpacket: 16 [ 3248.994652][ T5851] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3249.121858][ T5851] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3249.131701][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.139243][ T398] usb 4-1: config 0 descriptor?? [ 3249.139779][ T5851] usb 10-1: Product: syz [ 3249.155201][ T5851] usb 10-1: Manufacturer: syz [ 3249.166491][ T5851] usb 10-1: SerialNumber: syz [ 3249.188588][ T5851] usb 10-1: config 0 descriptor?? [ 3249.204232][ T5851] hub 10-1:0.0: bad descriptor, ignoring hub [ 3249.211131][ T5851] hub 10-1:0.0: probe with driver hub failed with error -5 [ 3249.286739][T18284] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3249.448763][ T398] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 3249.480117][ T398] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 3249.551784][ T398] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -32 [ 3249.585441][T18284] usb 5-1: config 0 has no interfaces? [ 3249.598477][T18284] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3249.608734][T18284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.622487][T18284] usb 5-1: Product: syz [ 3249.646665][T18284] usb 5-1: Manufacturer: syz [ 3249.834903][T18284] usb 5-1: SerialNumber: syz [ 3249.894163][T18284] usb 5-1: config 0 descriptor?? [ 3250.222854][ T3516] net_ratelimit: 21 callbacks suppressed [ 3250.222868][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3250.490499][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3250.519376][T18284] IPVS: starting estimator thread 0... [ 3250.601842][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3250.610389][T14236] IPVS: using max 52 ests per chain, 124800 per kthread [ 3250.752100][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3250.875220][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3251.001588][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3251.013049][T18284] usb 4-1: USB disconnect, device number 75 [ 3251.160588][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3251.184364][ T5851] usb 10-1: USB disconnect, device number 83 [ 3251.270324][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3251.380634][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3251.500616][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3251.822819][T14249] ALSA: mixer_oss: invalid index 40000 [ 3251.882749][ T5851] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 3252.452004][ T5851] usb 10-1: Using ep0 maxpacket: 16 [ 3252.466661][T18284] usb 5-1: USB disconnect, device number 12 [ 3252.540366][ T5851] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3252.617462][ T5851] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3252.639443][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3252.648176][ T5851] usb 10-1: Product: syz [ 3252.660327][ T5851] usb 10-1: Manufacturer: syz [ 3252.665145][ T5851] usb 10-1: SerialNumber: syz [ 3252.775985][ T5851] usb 10-1: config 0 descriptor?? [ 3252.818165][ T5851] hub 10-1:0.0: bad descriptor, ignoring hub [ 3252.824639][ T5851] hub 10-1:0.0: probe with driver hub failed with error -5 [ 3255.061514][T14268] netlink: 'syz.7.8740': attribute type 20 has an invalid length. [ 3255.324734][ T4647] net_ratelimit: 17 callbacks suppressed [ 3255.324755][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3255.441983][ T49] bond3: (slave bridge0): failed to get link speed/duplex [ 3255.520556][ T5851] usb 10-1: USB disconnect, device number 84 [ 3255.550641][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3255.634405][T14275] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3255.700649][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3255.881992][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3255.995458][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8741'. [ 3256.022281][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3256.166825][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3256.413292][T14287] vivid-000: disconnect [ 3256.437868][ T3516] bond3: (slave bridge0): failed to get link speed/duplex [ 3256.727713][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3256.767192][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8744'. [ 3256.894574][T14271] vivid-000: reconnect [ 3256.916205][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8744'. [ 3256.966315][T14293] netlink: 492 bytes leftover after parsing attributes in process `syz.7.8744'. [ 3258.073799][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8746'. [ 3259.158216][T14321] usb usb8: usbfs: process 14321 (syz.8.8748) did not claim interface 0 before use [ 3260.378693][T11686] net_ratelimit: 24 callbacks suppressed [ 3260.378709][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3260.417979][T14342] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8751'. [ 3260.962690][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3261.081244][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3261.230695][ T1104] bond3: (slave bridge0): failed to get link speed/duplex [ 3261.340527][ T4647] bond3: (slave bridge0): failed to get link speed/duplex [ 3261.519801][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3261.687967][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3261.898309][T11686] bond3: (slave bridge0): failed to get link speed/duplex [ 3262.052371][ T36] bond3: (slave bridge0): failed to get link speed/duplex [ 3262.278255][ T63] bond3: (slave bridge0): failed to get link speed/duplex [ 3263.140425][ T5851] usb 9-1: new full-speed USB device number 84 using dummy_hcd [ 3263.352348][ T5851] usb 9-1: config 0 has no interfaces? [ 3263.371427][ T5851] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3263.404941][ T5851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3263.421974][ T5851] usb 9-1: Product: syz [ 3263.447508][ T5851] usb 9-1: Manufacturer: syz [ 3263.472657][ T5851] usb 9-1: SerialNumber: syz [ 3263.579814][ T5851] usb 9-1: config 0 descriptor?? [ 3264.115273][T14364] program syz.8.8756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3264.145174][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3264.210789][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3264.484264][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8758'. [ 3264.492248][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8758'. [ 3264.625451][T14364] ------------[ cut here ]------------ [ 3264.625559][T14364] WARNING: CPU: 0 PID: 14364 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 3264.625605][T14364] Modules linked in: [ 3264.625700][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.8.8756 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3264.625725][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3264.625745][T14364] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 3264.625771][T14364] Code: 42 80 3c 28 00 74 08 48 89 df e8 94 25 34 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 65 82 05 cc e8 ba a1 d0 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 3264.625789][T14364] RSP: 0018:ffffc900050c7448 EFLAGS: 00010287 [ 3264.625809][T14364] RAX: ffffffff85efbce6 RBX: ffffc900050c75c0 RCX: 0000000000080000 [ 3264.625826][T14364] RDX: ffffc9000d609000 RSI: 000000000000b2ea RDI: 000000000000b2eb [ 3264.625841][T14364] RBP: 1ffff92000a18eb8 R08: ffffffff8fa1ddf7 R09: 1ffffffff1f43bbe [ 3264.625858][T14364] R10: dffffc0000000000 R11: ffffffff85efbbb0 R12: 000002f818f6d3cb [ 3264.625874][T14364] R13: dffffc0000000000 R14: ffff8881413cc028 R15: 000002f818f6d3cb [ 3264.625888][T14364] FS: 00007fe6a41136c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 3264.625903][T14364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3264.625916][T14364] CR2: 0000200000116030 CR3: 000000004449c000 CR4: 00000000003526f0 [ 3264.625934][T14364] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3264.625948][T14364] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3264.625962][T14364] Call Trace: [ 3264.625971][T14364] [ 3264.625982][T14364] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3264.626009][T14364] drm_crtc_next_vblank_start+0x223/0x470 [ 3264.626036][T14364] ? ktime_get+0x3e/0x1f0 [ 3264.626064][T14364] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 3264.626091][T14364] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 3264.626117][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 3264.626244][T14364] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 3264.626279][T14364] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 3264.626307][T14364] ? do_raw_spin_unlock+0x122/0x240 [ 3264.626336][T14364] ? read_tsc+0x9/0x20 [ 3264.626352][T14364] ? ktime_get+0x1cb/0x1f0 [ 3264.626380][T14364] commit_tail+0x79/0x3a0 [ 3264.626415][T14364] drm_atomic_helper_commit+0xa6b/0xb10 [ 3264.626447][T14364] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3264.626473][T14364] drm_atomic_commit+0x262/0x2c0 [ 3264.626501][T14364] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3264.626523][T14364] ? __pfx___drm_printfn_info+0x10/0x10 [ 3264.626557][T14364] ? drm_client_rotation+0x47c/0x5b0 [ 3264.626584][T14364] drm_client_modeset_commit_atomic+0x620/0x760 [ 3264.626621][T14364] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3264.626667][T14364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3264.626709][T14364] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 3264.626739][T14364] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 3264.626783][T14364] fb_pan_display+0x39b/0x680 [ 3264.626807][T14364] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 3264.626839][T14364] bit_update_start+0x4d/0x1e0 [ 3264.626867][T14364] fbcon_modechanged+0xc38/0x13a0 [ 3264.626904][T14364] do_fb_ioctl+0x6fd/0x750 [ 3264.626936][T14364] ? __pfx_do_fb_ioctl+0x10/0x10 [ 3264.627002][T14364] ? __fget_files+0x2a/0x420 [ 3264.627032][T14364] ? __fget_files+0x3a0/0x420 [ 3264.627055][T14364] ? __fget_files+0x2a/0x420 [ 3264.627084][T14364] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3264.627105][T14364] ? __pfx_fb_ioctl+0x10/0x10 [ 3264.627131][T14364] __se_sys_ioctl+0xf9/0x170 [ 3264.627155][T14364] do_syscall_64+0xfa/0x3b0 [ 3264.627175][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 3264.627203][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.627223][T14364] ? clear_bhb_loop+0x60/0xb0 [ 3264.627247][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.627266][T14364] RIP: 0033:0x7fe6a338e929 [ 3264.627292][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3264.627311][T14364] RSP: 002b:00007fe6a4113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3264.627333][T14364] RAX: ffffffffffffffda RBX: 00007fe6a35b6080 RCX: 00007fe6a338e929 [ 3264.627349][T14364] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 000000000000000d [ 3264.627364][T14364] RBP: 00007fe6a3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 3264.627377][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3264.627391][T14364] R13: 0000000000000000 R14: 00007fe6a35b6080 R15: 00007fe6a36dfa28 [ 3264.627423][T14364] [ 3264.627443][T14364] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3264.627457][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.8.8756 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 3264.627480][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3264.627492][T14364] Call Trace: [ 3264.627501][T14364] [ 3264.627510][T14364] dump_stack_lvl+0x99/0x250 [ 3264.627535][T14364] ? __asan_memcpy+0x40/0x70 [ 3264.627555][T14364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3264.627577][T14364] ? __pfx__printk+0x10/0x10 [ 3264.627616][T14364] panic+0x2db/0x790 [ 3264.627642][T14364] ? __pfx_panic+0x10/0x10 [ 3264.627660][T14364] ? show_trace_log_lvl+0x4fb/0x550 [ 3264.627710][T14364] __warn+0x31b/0x4b0 [ 3264.627729][T14364] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3264.627755][T14364] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3264.627776][T14364] report_bug+0x2be/0x4f0 [ 3264.627865][T14364] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3264.627887][T14364] ? vkms_get_vblank_timestamp+0x137/0x160 [ 3264.627909][T14364] ? vkms_get_vblank_timestamp+0x139/0x160 [ 3264.627931][T14364] handle_bug+0x84/0x160 [ 3264.627952][T14364] exc_invalid_op+0x1a/0x50 [ 3264.627973][T14364] asm_exc_invalid_op+0x1a/0x20 [ 3264.627991][T14364] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 3264.628012][T14364] Code: 42 80 3c 28 00 74 08 48 89 df e8 94 25 34 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 65 82 05 cc e8 ba a1 d0 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 3264.628028][T14364] RSP: 0018:ffffc900050c7448 EFLAGS: 00010287 [ 3264.628045][T14364] RAX: ffffffff85efbce6 RBX: ffffc900050c75c0 RCX: 0000000000080000 [ 3264.628059][T14364] RDX: ffffc9000d609000 RSI: 000000000000b2ea RDI: 000000000000b2eb [ 3264.628073][T14364] RBP: 1ffff92000a18eb8 R08: ffffffff8fa1ddf7 R09: 1ffffffff1f43bbe [ 3264.628088][T14364] R10: dffffc0000000000 R11: ffffffff85efbbb0 R12: 000002f818f6d3cb [ 3264.628102][T14364] R13: dffffc0000000000 R14: ffff8881413cc028 R15: 000002f818f6d3cb [ 3264.628123][T14364] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3264.628146][T14364] ? vkms_get_vblank_timestamp+0x136/0x160 [ 3264.628177][T14364] ? vkms_get_vblank_timestamp+0x136/0x160 [ 3264.628195][T14364] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 3264.628220][T14364] drm_crtc_next_vblank_start+0x223/0x470 [ 3264.628246][T14364] ? ktime_get+0x3e/0x1f0 [ 3264.628275][T14364] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 3264.628299][T14364] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 3264.628324][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 3264.628356][T14364] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 3264.628391][T14364] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 3264.628415][T14364] ? do_raw_spin_unlock+0x122/0x240 [ 3264.628442][T14364] ? read_tsc+0x9/0x20 [ 3264.628456][T14364] ? ktime_get+0x1cb/0x1f0 [ 3264.628481][T14364] commit_tail+0x79/0x3a0 [ 3264.628515][T14364] drm_atomic_helper_commit+0xa6b/0xb10 [ 3264.628547][T14364] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 3264.628572][T14364] drm_atomic_commit+0x262/0x2c0 [ 3264.628599][T14364] ? __pfx_drm_atomic_commit+0x10/0x10 [ 3264.628620][T14364] ? __pfx___drm_printfn_info+0x10/0x10 [ 3264.628652][T14364] ? drm_client_rotation+0x47c/0x5b0 [ 3264.628678][T14364] drm_client_modeset_commit_atomic+0x620/0x760 [ 3264.628722][T14364] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 3264.628766][T14364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3264.628798][T14364] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 3264.628824][T14364] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 3264.628866][T14364] fb_pan_display+0x39b/0x680 [ 3264.628888][T14364] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 3264.628918][T14364] bit_update_start+0x4d/0x1e0 [ 3264.628945][T14364] fbcon_modechanged+0xc38/0x13a0 [ 3264.628978][T14364] do_fb_ioctl+0x6fd/0x750 [ 3264.629008][T14364] ? __pfx_do_fb_ioctl+0x10/0x10 [ 3264.629076][T14364] ? __fget_files+0x2a/0x420 [ 3264.629106][T14364] ? __fget_files+0x3a0/0x420 [ 3264.629129][T14364] ? __fget_files+0x2a/0x420 [ 3264.629158][T14364] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3264.629178][T14364] ? __pfx_fb_ioctl+0x10/0x10 [ 3264.629204][T14364] __se_sys_ioctl+0xf9/0x170 [ 3264.629228][T14364] do_syscall_64+0xfa/0x3b0 [ 3264.629245][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 3264.629272][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.629290][T14364] ? clear_bhb_loop+0x60/0xb0 [ 3264.629314][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.629331][T14364] RIP: 0033:0x7fe6a338e929 [ 3264.629348][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3264.629364][T14364] RSP: 002b:00007fe6a4113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3264.629383][T14364] RAX: ffffffffffffffda RBX: 00007fe6a35b6080 RCX: 00007fe6a338e929 [ 3264.629399][T14364] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 000000000000000d [ 3264.629413][T14364] RBP: 00007fe6a3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 3264.629426][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3264.629438][T14364] R13: 0000000000000000 R14: 00007fe6a35b6080 R15: 00007fe6a36dfa28 [ 3264.629469][T14364] [ 3264.629713][T14364] Kernel Offset: disabled