last executing test programs: 3m8.402958791s ago: executing program 0 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300004400238006000300ea00000005000600"], 0x6c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) 3m7.874546099s ago: executing program 0 (id=1390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x3, 0xff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) eventfd2(0x5, 0x800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) getpeername$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x200040c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000840), 0x129301, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m7.624779839s ago: executing program 0 (id=1391): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0xfc, &(0x7f0000000680)={&(0x7f0000000340)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f8ff00fa08"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m7.17912032s ago: executing program 0 (id=1393): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) eventfd2(0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xf, 0x400000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xf8, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0xf}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xc}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x230}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x1c, r11, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$unix(0x1, 0x1, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000b40)={{0x1, 0x0, 0x80, {0xf000, 0x8000000}}, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m6.051553689s ago: executing program 0 (id=1398): prctl$PR_SET_SECCOMP(0xffffff90, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r0) 3m5.723434594s ago: executing program 0 (id=1401): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x3, 0xff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) eventfd2(0x5, 0x800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) getpeername$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x200040c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000840), 0x129301, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m5.035853456s ago: executing program 32 (id=1401): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x3, 0xff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) eventfd2(0x5, 0x800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) getpeername$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x200040c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000840), 0x129301, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m31.41941497s ago: executing program 1 (id=1493): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m28.31878523s ago: executing program 1 (id=1503): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) capget(0x0, &(0x7f0000000300)={0xffffffff, 0x7, 0x9, 0x9, 0x7f, 0x80000204}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 2m27.79164506s ago: executing program 1 (id=1505): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab42) ioctl$VIDIOC_S_CROP(r0, 0xc0205647, &(0x7f0000000040)={0x9, {0x100009, 0xd, 0xfffff5b6, 0xfffffffd}}) 2m27.456361814s ago: executing program 1 (id=1507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03122a2e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 2m27.229644462s ago: executing program 1 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x8, 0x2, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x7fff, 0x0]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) 2m26.181963485s ago: executing program 1 (id=1513): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m22.526919867s ago: executing program 3 (id=1522): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x51a2a4db83cc7ebe, r3) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8001100) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000000280)={0x8, r8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800303a00fc010000000000000000000000fe80000000000000000f0000000000aa0200907800000000605b52ab00002b00fe8000000056200000000000000000aafc00"/102], 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800006b02"]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010014000008000100ac14"], 0x4c}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r15, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fd00080006000000000008001000060000007d0daecf16f51acec4e002aa9356281e76ee03049f5a2e34e564fb8ceb94d367da4ad0c1d125887bbbab64666ba4108d6b42409d7ec63b5fb62f667e76235430ecb79106c9de3b115d8caaeea8046155bdcfb2aa3d863c499529fff862c76426320c23806334fbe0cafe5abdc59f2aaccc34914133a3d8468ef48f2bfbe0afcb09be9854901264be561c696b"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x8, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0xfff3, 0x7}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0x2c}}, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r13, {0xc, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xbaef1ec971c18be6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 2m21.741739174s ago: executing program 3 (id=1523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x800, 0xa08) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x6, 0x44495658, 0x9, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x0, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0xf9f6, 0x4}) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback}, 0xfffffffffffffeb6) listen(r0, 0x9) 2m18.176459558s ago: executing program 3 (id=1529): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 2m17.759185031s ago: executing program 3 (id=1530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1288000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2020}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x111080, 0x1cc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000180)={0x2, @vbi={0x2, 0x7, 0x32314258, 0x0, [], [0x2]}}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a0b0400000000ecffffff020000000900020073797a3200000000140000101100010000000000000000000000000a"], 0x48}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='7', 0x1, 0x4}]) socket(0x10, 0x2, 0x0) 2m15.299407502s ago: executing program 3 (id=1536): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m11.767763428s ago: executing program 3 (id=1546): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x92) pread64(r3, &(0x7f0000000380)=""/248, 0xf8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m10.682227265s ago: executing program 33 (id=1513): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1m56.580178342s ago: executing program 34 (id=1546): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x92) pread64(r3, &(0x7f0000000380)=""/248, 0xf8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 17.768662566s ago: executing program 7 (id=1789): r0 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/106, 0x6a, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, &(0x7f0000000380)=0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515027, 0x408) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000280)=""/158, 0x9e) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x40) 16.643506279s ago: executing program 4 (id=1790): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 14.054781299s ago: executing program 7 (id=1797): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000209030000000048ba6b8d1cbb85e45c9d00000000d79f69b86aa8b8d578d8b98a9512000a75cfffa8917b1628797a3000000000080006400000000008000340000000450900010073797a310000000008000640000000"], 0x44}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20008041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206010200000000000000000600000005000100070000000900020073797a300000000005000500020000000c00078008001240fffffff5050004000000000011000300686173683a6e65742c6e65740000000084bf0c6405802b370232dfc24363fe95f5b795765310bf3af7305f83c94a7117a3c3d9523a706613d6dfcc7459f0e5356831ad"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0xbc3c238dc18ff416, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x9, 0x3}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_usbip_server_init(0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x129400, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r7, @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="7c7f1afc27c992eec2a78cae71d426a64a42bdd6c21103e6fb8570e61b8c342fa9f271e70fa8794a9e831f6aa225cf3959d8033382c58ebcceab775fadbb9d57c78b567d8cc138536a095fef671c2a2f43df228a4994f698840f306065504eb5aed484e3ed"]) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 13.014824975s ago: executing program 2 (id=1800): socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xc0, 0x0, @in={0x2, 0x4e23, @broadcast}}]}, 0x28}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r6, 0xb7181000) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x81204101, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0xff, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@remote, 0x1}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 12.5813844s ago: executing program 4 (id=1803): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 11.913646656s ago: executing program 7 (id=1804): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 11.038684615s ago: executing program 2 (id=1805): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 10.395396433s ago: executing program 2 (id=1807): r0 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/106, 0x6a, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, &(0x7f0000000380)=0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515027, 0x408) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000280)=""/158, 0x9e) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) 8.681419524s ago: executing program 6 (id=1808): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.919039695s ago: executing program 4 (id=1809): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000004c0)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 7.622684703s ago: executing program 6 (id=1810): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bde6, 0x25dfdbf9, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x230}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2020}, {r0, 0x30fa}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x720, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x60, 0x6c, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xfffa, 0x2, 0x6, 0x1000, 0x1, 0xc817]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0x9, 0x7e2, 0x9, 0x4, 0x2, 0xfff]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0xb, 0x18, 0x12, 0x60, 0x12, 0x36, 0x74, 0xb, 0x0, 0x1b, 0x6c, 0x6, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x5, 0x24, 0xb, 0x6c, 0x48, 0x2a, 0x18]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x1c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x36, 0x3, 0x6, 0x60, 0x3, 0x1, 0x29, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2}, {0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0xa}, {0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x8}, {0x3, 0x8}, {0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0x8}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x1}, {0x6}, {0x1, 0x7}, {0x7, 0x1}, {0x2}, {0x5}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x18, 0x3, 0x0, 0x9, 0xb, 0x12, 0x18, 0x60, 0x4, 0x0, 0x6c, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x9, 0x8, 0x200, 0xda5, 0x44, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2a79, 0x708, 0x3, 0x6, 0x2, 0xfffa, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x12, 0x7969edf74696f123, 0x48, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x36, 0x1, 0x30, 0x12, 0x16, 0x12, 0x24, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x3, 0x80, 0x7d, 0x1, 0x3, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x1}, {0x2, 0x5}, {0x5, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x5}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0x8}, {}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x1}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x7, 0x8, 0x200, 0x8, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc0, 0x7fff, 0x7, 0x7, 0xa61, 0xba9b, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x6}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x1}, {0x4, 0x4}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x4000, 0x84a0, 0x9, 0x8, 0x23a5, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x8, 0x5, 0x1000, 0x43, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x73bd, 0x3, 0x2, 0x3, 0xed2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x2, 0x2, 0x7f, 0x2, 0x5, 0x600]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xbe, 0xb, 0x81, 0x81, 0x2, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x5, 0x3, 0x12, 0x6, 0xc, 0x9, 0xc, 0x1, 0x1b, 0x12, 0x30, 0x4, 0x2, 0x3, 0x1b, 0x18, 0x6c, 0x1, 0x12, 0x60, 0x12, 0xb]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x0, 0x101, 0x300, 0x8, 0xa9ca, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x3}, {0x2, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x4}, {0x6, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x1}, {0x1, 0xa}, {0x4, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x1b, 0x6, 0x12, 0x3, 0x60, 0x1b, 0x2, 0x60, 0xb, 0xb, 0x36, 0x48, 0x18, 0x16, 0x1b, 0x1, 0x36, 0x16, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5b}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0xb, 0x27, 0x4, 0x36, 0x16, 0x4, 0x0, 0x1, 0x1, 0x6a, 0x5, 0x60, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x80, 0x6, 0xffff, 0x10, 0x1, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x1ff, 0x401, 0x9, 0x2, 0xca9, 0x2]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x3, 0x95, 0x7, 0x800, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x200, 0xffff, 0x1, 0x23, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x7}, {0x4}, {0x3, 0x9}, {0x0, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x9, 0x30e, 0x1, 0x5, 0x6, 0x5]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff2, 0x0, 0x9, 0x3, 0xf, 0x7f, 0x6, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xffff, 0x0, 0x3, 0xff81, 0xfbff, 0x8]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4706, 0x9, 0x4, 0x1, 0x1000, 0xe5d6, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x9, 0x3, 0x6c, 0x1b, 0x24, 0x36, 0x12, 0x30, 0x36, 0x1, 0x36, 0x48, 0x18, 0x3, 0x77500b7be034331f]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x12, 0x12, 0x2]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x4}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0xa}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {}, {0x7, 0x2}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0xc}, {0x0, 0x3}, {}, {0x0, 0x8}, {0x2, 0x1c}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x3, 0x2, 0x24, 0x9, 0x6, 0x16, 0x2, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x3, 0x7f, 0xeac8, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x3}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x6}, {0x1, 0x6}, {0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1a, 0x9, 0xd4c3817330005d13, 0x6c, 0x1b, 0x48, 0x30, 0x15, 0x6c, 0x6c, 0x6c, 0x60, 0x3, 0x48, 0xc, 0x24, 0x3, 0x1, 0x24, 0x1, 0x60, 0x16, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x2, 0x7f, 0x10, 0x6, 0x6, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x8, 0x6, 0x4, 0xe, 0x40, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x58, 0xff08, 0x5, 0x401, 0x6, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x4}, {0x1, 0xa}, {}, {0x7, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0xa}, {0x0, 0x2}, {0x7}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x3, 0x14}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x7}, {0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xd, 0x6, 0x95e1, 0x5, 0xa2, 0x9e4, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8, 0x5, 0x9, 0xfbff, 0xf, 0x9, 0x110]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xbcc7, 0x1, 0xa, 0xff9c, 0xf, 0xf1]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x3, 0x5}, {0x2, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x5, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x1}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x720}}, 0x40000) 7.621549282s ago: executing program 4 (id=1811): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 7.571434584s ago: executing program 7 (id=1812): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000005fc0), &(0x7f0000006000)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x21}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010007000009058dff865b", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r6}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRESOCT=r0, @ANYBLOB="010329bd7000fcdbdf25240800000400018016c775b82a18ced63100a7745623cd6c9e148ad2a1167ed0a40a35b195f17f708dcef12e02cd7c05b629b2035c7f0fc991af941a5007b0b4297ec5267e82d6faa9659f3be649e3a4b1b8d66cb1179995297dc608f31ca2d0395e1fcea128667ec91bfdf39cdb7c26c92cf7d93601d1455c1c5d92c3d77e934a7139cafa97ecabef2f1f79b6c4e1ca9293d9a0"], 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x80) 6.872491607s ago: executing program 5 (id=1813): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000280), 0x4) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 6.603537749s ago: executing program 6 (id=1814): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000780)="3f031c000302120006001e00890000004a1b7880610cc945000088a800008100000088a800008afd", 0x28, 0x1, &(0x7f0000000300)={0xc9, 0x88a8, r1, 0x1, 0x7}, 0x14) 6.484207338s ago: executing program 2 (id=1815): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xf, {"6852ad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d077202b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d020000001c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841040014f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c24ffffffffffffff7fb70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bed0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f643577590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4ed134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e2bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889bce3076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b7da2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d558ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427bf6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769777c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd133d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d902952b72c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dc2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec0300068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8075ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b67804cfa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000f700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000209030000000048ba6b8d1cbb85e45c9d00000000d79f69b86aa8b8d578d8b98a9512000a75cfffa8917b1628797a3000000000080006400000000008000340000000450900010073797a31000000000800064000000001"], 0x44}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20008041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0xbc3c238dc18ff416, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x9, 0x3}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_usbip_server_init(0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x129400, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r7, @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="7c7f1afc27c992eec2a78cae71d426a64a42bdd6c21103e6fb8570e61b8c342fa9f271e70fa8794a9e831f6aa225cf3959d8033382c58ebcceab775fadbb9d57c78b567d8cc138536a095fef671c2a2f43df228a4994f698840f306065504eb5aed484e3ed"]) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 6.191352731s ago: executing program 6 (id=1816): socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xc0, 0x0, @in={0x2, 0x4e23, @broadcast}}]}, 0x28}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r6, 0xb7181000) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0x81204101, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @rand_addr=0x64010101, @remote, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0xff, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@remote, 0x1}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 5.687377693s ago: executing program 5 (id=1817): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 5.385581736s ago: executing program 5 (id=1818): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x3, 0x1000, {{0x1f, 0x4, 0x1, 0x2, 0x7c, 0x64, 0x0, 0x10, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0x84, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0xc1e}, {@multicast2, 0x22}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9927f95c}, {@broadcast, 0x9}, {@remote, 0x6}]}, @ssrr={0x89, 0x2b, 0x40, [@multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x12}]}, @generic={0x9, 0x8, "41cc79ac053a"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x13baf0a9, 0xfffffffc, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @local, {[@cipso={0x86, 0xe, 0x3, [{0x1, 0x8, 'Ra2nl;'}]}, @rr={0x7, 0x1b, 0xf5, [@local, @broadcast, @remote, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r3, 0x200, 0x9, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44}, 0x14) socket$igmp6(0xa, 0x3, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x509}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x41, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r11, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000800)="03ceb007cbd22e781217bde1a4227a1f8e50e5dfd1c4ebe549bcfe9a95df914627fbbba73784bdd2802b01c04453fc35614a65baf73c9ce1fbd73d70798e9a978032cee9648bf723d2b67033eb8ab498aace3ddc09791e20701bafeaf2fe6c3c4e2d3985fd4c349b1da5b654a28a1f55f428514464dfe3ef12e06624f78fafc381cc5301784af09508c37b27545121a6ba08a2983c89641c4764b0667a9427175f8ff6c0912946b24facd92c379e1a9e7fcac87316d12b6dca98df178e0c48b8b3ac3d", 0xc3}, {&(0x7f0000000900)="d10561b94efcb254b877493bc370c7c21a7c79ee95f3fc0d1fe5a18a2066309aaed53a8ba5fc4d7dfdd23c0150959dddf13dae460d22be27b7dd7490dafa679f8f77992a5b132e9da379beb10cfef80517f6959510b70a844f77f55b516867afeedf2cf6dc738f3e35868f4fa5bf0898a5cc7435b630077a380f33238705856d4bcad1f027911a7a5b0d7955262736ccc2a5b0815a1bfdd957bc96c4039ca3023809476f85a41ae042d341ace8e5444c87270da3b9982c8ecd7d03a120a6c0", 0xbf}, {&(0x7f00000009c0)="c9e7e64485dcdc340d17704f93cb2cccef95b87cf7b33dfb5a263e7c443fdd07a563c86ccdcab373a129498c30d6851323083a24914ad922fccabfd01983bcb973bd20028b1a81c7f98fb7247e9f525aaf6bc5c1d6f5f647a10a01d2dc89d11ec716c33898fb9f62036a44cab556cda768b2d03710e605ca1cf981e2e2f0c1ae7fe3b1300de707e6ac09917f9cfdcd7c655b91d2be6cc70790c1841c8151a674b65d3f92cf1f11775e08faba4ed472d9c3450118f389643141ddf2771197b8a421051aa6c9c2", 0xc6}, {&(0x7f0000000ac0)="5aa200f06eaf0a26ca52289c783d5fdb295cf2f96445d4bd6e63ff3d77f9e60c7ba4d5618ee882c545091a83ab276acffc541f6a021f08520e64feeb29c42ec7685c18e35c69c79d075760d31f735c67db00d5da8befff8360c8a306ab4be8c9980347f6635f4d23554dbb6a390602a0dbaf46d96471a3b8d95cdcaeb19fce4a4d0e23affc73ce99d9e118913bde03934c912f6f6f355b1d2a931912f89cb04f43a23d5c41a51983787c3dccbf13fef1f92bd6f3fc091d5442de07d52b858494e46c97b30e5e8c465efb3f3d559fbb92ead3783e6e022f36b457442776e3104354314b", 0xe3}, {&(0x7f0000000bc0)="20634b513ba0ef04b3027e6f2b54fda9ac6468424e95f15ca0339172905403d567eb2f27d8cd80a010d5be540aa07fe5483481de80c63ff1fc11e82855f7105bda6acd266d838defef425de40b84506e1478a2b99859b932b7b974bc5cb80fce933d093f6b782338f8524e6ee2852e273bb8c59872da2e2cedb18d0237a19d30a080dd7bc67d5e67e2accc34a6492f6ca7bda8f9689cad0d47af88c0f393608b7e467271896b7c2ea26f6af4ceab7cc33db5801e67f46e70ec1a049c24fa9c3b24f0d5a78acd4ff3f7d78dc0e7", 0xcd}, {&(0x7f0000000cc0)="4b7c4ce44a078032b4273a865bac780f2c268e667052af4d814e54b4861b6fc7d1496761875abf1c994a490e511891c9b19afb752e3a1dbd841a44270ed5b0ba95372683e9373f5108", 0x49}, {&(0x7f0000000d40)="248122a4125f34a053359bbb789ab473548016b2544a9c5f34c0d5674c1a673df1086dfc4ba3c6549cec8e4782bd9605a9a69e851137a95ff58d94054df83d1832e0f629315a7abb", 0x48}, {&(0x7f0000000dc0)="eb7394acebcef470b4ef9857af082e15681c52f54f5e5035384d060aee34ea178e08170e80fb9be772ed0ee3dcb93d7645735e50a1963432b132edc6c27c13c317dc4403a82bf5b269de8daa705db230abf60bcb83d82b154361440de0f18668cbd8c71bd977afea9bbe85b979ae351837bc8fdad5b74add876ca0ca074f830e83d390d78160bf1e1cc805826a1522f17d98cf5d7764828e3e61ab2b7ff3c239c2b0e5dc787ec04dede6dc2e158827d7ce0dc8bd8283507ac93e0eb363", 0xbd}, {&(0x7f0000000e80)="3d4302481d3c208a40f8553e3c757eba1f505d074b2762dfa3f8b345dc9d8a5f90fa36eee07b5f0b9d3200fb0a7b13cf9f8bd6efe2e44573bee85c89e5ffe4924707cc67686d308aa28d9a", 0x4b}], 0x9, &(0x7f0000000f80)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x1010, 0x117, 0x2, 0x1000, "d2c9d79f1fc0307d89ce263edaa6ffefde367d6ccfe48ab574dc13a0f13f63770cf6c1dcba34515f472d6687d1425c25e6a2462ad5a65f1c36467ad1510160603ac446a6e8cc16e981eb28fd4579ae08065251fb27dc80bb20b3567d65ca527b14e08a1c9b0180f60c9cfbe489c4801fe6b68444149932a3fc9156335b50ca14c04b9d623a770cd5925194ec03c42c23e046ccf4e2c99273613325ddb58200731afc72ddbc83b8e3d71acea59b89a4ffbd99c5468af3fe6bd1db00657d88a3cab530b66687bcaf8f24cc3b6ea4128d66972ab0ec5f14cc365ca7f8db444540f80c28bd382e762a4599d054bacffefdb7940009f50ee0721c3e369a654f158be98fd49d02c23af0feec5af6f8d3785abe56841d223b7ff4f052f01b40a51797085dda82213323807743bc5ed136f6e90a169208f9851a2adff44c7b5ec4e9753c1c0fd3a0a4905381da21b90e7d3ccf54d0eeb4dffe98d445fee9077af294d7fe3d3fa0570615116bd2afbc6d8be6c6ee6286ce990077bbbe6d511059342a5ab45197e9710bd7164667136d9a37037cc0c72a2a2a0dabd5bf063d479fb8869c573924a71002c3bb19dc2c0bedf88ff9b05eb6baf8973631eefb0fd75d7f7040efdc450666109242817955ae903cfee863e8d1f9bce9f1d2d180a2640bcb1c7710f5d68b5c18de078f6f1f58deb7bdc40146fa0f996644fe511c68de1d7751814e325e3f17a972301b687c799cae6d51ac73d0cdf240feb06eb80caa54ff1ea0bd9df97cd168181c7e50e3eb522f8593f614fa0d821c3d9f9447e34735c019da2f7ed57a65826b190f713b5447c52c56a5c6be9d6e3d6ee2f2ff383fbe14bb7da11ea88dd39f2f155d132428e220f284b535bbac6f3b91cb8647e64fadadef5ed3e5246389cd52d702ebd4d9e29b9050415798c1be186af44c8ce1e4be9c9764b6840dd012f7249456aa2e3a8c18678fa2aa8b20ceed827edbcc32a971b74b0a0e91e8d355f9182c3e8bf6f36021ff9027a561891b0043353e12cf880ae10713a9af85343334f5c76422158f67cff7405756c1ca6d26aa5269c395fc0d61b831dffdb8d7cb1c1f27d66bea0d79a71c513fe7f7a4c90aa8dd02f768e2f725523707dd2a3654afef8dd53af47b4f678d8538e74ee6dce5354e792649bf2f986f7ea01fd1323cf8478339659c9d1633bed06f3087ca8945f58858460ca1a35c5116e67a64c05fa82d6dce4cf63113376f79d3253ccbc952931f684e2f65cdf9b8fae290b7dcdf93bc080f42a6b786a396f97465ed1de8a3f831cb4e66329dcb11cd6c512b38664e6cebce6e46f062fb6bec35a539eccfaacb699340b2a92d21f065cde14ae226e4feee508a889f35577e396d946081d3cdb4d69a8f9b4f288b7cb4e1bf8ed295f317899c52806abf0e5dc7dad3d9b042de09b4cda26ab548ed6b4f7a7cfdd2cd30e1c42e96cf82f59c5a698f95b7b16f024e0d23e542478deae80b2d84ee5eb55b4c295757a5f81ef50db520d9d6e6204681c10e779f00476cde9d7b0e72aaffbbedc4be997e2876ec5c70c49a2e6b9981f6989fa143b91468b50c02cd6f9e74fb7511f0d5bfa94f10aefd89b64856015e599c26dbf74a3131d82c17cda20d33e16f12704b398194538daf0fdc9e3af81d325050f289db779f7dc67749e052a053bd07a307a2aef8ca22b7942bee9976d5305eeb07ae05041d780d0bdd320c8cfec0297db76894ca1fa6a69a888eba1eb7af853637da364d24b5511f91f7e94f25a4b7c16e697debb9dbbe0c79814deb00e764167e373e065672134ce8a4eba766735f5ffcddf7ceaf7c0ef9059ccbbf4fafbd906140413a41a669fb78680daa872e8c981ad9a3698d7a0fb18e0e095ef9918b3c26dfafd92609b765a60d0a1b150ee6e3240606cf3fac36f33cd9e0d0aa0e578854958b892f1d3b6d7d72fa87b8a9cd0489afbd6131baf4f4fa7239a91cd9770858b7b6cea148b5dbb4ed9d05f0ec2ed71a5647b1beb7101465b47ef36830e839b90a691904d12dcee00fdb323fa06cb5ec8fa00f3570edf6fe14699795dc164dafa8460a49e00831f8ec4e42a442ffabe138c13d74974c3347a9fc5f201e2878ac1d368e821a883652646d4ddac0bfc7dcee61d9e31d2ab60dafe08d4857700528a10749fd86480f38b2e79b57ebb5d25d6e99397243a7b886d5739673d0069f11a50a19be1449f044e7c2afbe3eff4819017599b87b14fd5bfa3cda5f5ec91c346a022ee5415cce4061a3fc75832edebd909ebe37eee48a3e564fe824cadb884dd94ef43a8e26b2f00ea611b26e3ded57d68b27e398add1252ee2fcd6c6cdb247d13ca8493ce779e2592894f54630ceae51d6acdc57688eb19b0de387b1fba5761a9db3905b321f8710b33ae12def81b7e18156767596c8fc4ba95c29d83f0df9a6a409c44273bb669d88650da6cceb0d58f856b9476abf794eedac9b4068dba32b6af315a1ae19d554dcdece328e74b22eb2891b312965d58c5d8a802b10b151b8660057aa9573965f4f344a4ffa77a8d699d26bb41a73fed129bcccb6d6bc806273b7b27f4e85eb936172569d4ebe07a66f29bf64afd27efe057a5f43743722504e9a4f099aa6f54449617f16203885b256bb0aa34ed6508d4da3e4d999ad15fc97f5304a3acc2f29feb65c832ad86545a7fe7149882b4fbccef6c16fff9e2d9810ccce4c94253932d9692b625ee78cea3ac92259ed7687ecb72126818357ae5e2bfcb593bc0e9cbbb623f16d951fac7deadc5fc74f6ff868e05d4838b64317426ab074b1e3133af6d36106f6dcc9bcb607d5c3b9366e2d9f46a53e85af24a3c4279a9f6e221fad1654de99c9188331eadd28aa26b513ce5448450eb76c487e1b48b65b49000975b0be9d2bece1fd41f2c79c7144a0938700f7e510619daa1feee1e3b274e5125f4c14cdfecc61b8f5419fe84ffeb2952ee8f281907e16fadb3d34f143479b0136eb4be03a1e0b5025832932b879c0a755d6d191b8ef1c48d98cfb534252b386883729a48f9aacf71bae360938d703c1a1a2c0728762233c7d6f5e6612bb39cc13126c8c34c0b7199fa231c847e34aef1f750d38c7f47e92518f19200b7f282dd82ae82da4555f40e84c1c62ea991efb65eca4daeecdf6e3f9fb72256b857a407d9e7a93cc85250d19a26a4e49218208411cf2a927d3a9239af85e5112ab3218c756343bec6f545d767a7004f107fdd4babbfadc90946f8f9dcf9d6e84dd453d23818e2973fd38232a0072be2cf111fc551e0de8756bf9dba3e6fc8cdee40006301065058bdd4dab0318459a2b1d335f614df9b00e67a704e35f34b489fd1888ea0bc6c1b41ff2c8298dc750236cad718d9476cb0c4bd05d098c8481dc4dec5707a40b1ce1b367c41f735e66075cc6b158b2f4f55b66572c598e66e889875def5402151610d5202ae2ec991dcbc28db7cb198dcbcfa8f8da69ed3c80d2e289403469d78c4fe72c0444a74a23c3595578bb25cecc073e02743d7f424cad25664e2464a3005e18a55c28a0f9e36ef3b1c9fc4b943b02cb2353a62a6f399bde47bc3a1b861d0c86ba360ed5c181aa0022b9047e775abd6fc602bba1762698ae16998f70deeb4a25b31c0d88acfc35d44c3da504dfd6622940506695b1e6700f044cf3297f13df5234b691abbbc04515522da677b6a48b3b02f06f2ab2e4094e3de176b62b927a27ead9eec188dfdb3f11e6dd3350d578206871e47143229a237622214c32a2b8ee48124fd028f5c67ce07458ff8a1c7e7f5d86b3015711dbec6f26fe6d7ff3c2bc1e4c6df976b5e63c1d8bd84683a59426d0fb6817dedc6566c3c4a317f9c7eadaf91d5e921ff5fa938ade1706fb907c6b30059040fa8c7576e0deb0e4ca5e66b3351d2373897b24b1e707f1e5d72a63815422cb86060c9fa7c0c4dc68d8c9fbbae4c3f5d8f2b71ce6cd663248534e128a190cc527f5cc00d32efbe4edac1bb01cb0ae4fd70361c0b6a97b86334bcdb94008ac177fad1782af14cadc1f98ab5c87375af3d0e3fb07f2174669e6d2a7e68876cfaef0fcce6b782d1984dab2a213e098786be02ea3ec0622f79c7092bc27e9b688a88c300dbc207c35686b5cc3d2b143927256307013ab20cc402e34a80db1c9ecf84c5d07dac6831185bd0515f9cb2b609ef99b822f0e4cd173f81d8e5a6ac102aca2ae00b3fec408969e0837c587eff9893068024912d751591ae30613ba3702aae214fb42e6eb91832323dc43e3305079efa702e93b283890a4da25c5bedf8eac895b120281a03b0a06fbe70083ac370f65a4d1ce2d5f8cdd6934a771f4944db13259c599a52701d009d5a3363e8e5db4104ab826564be921b3bab35ab291ed2e9124b0872605cee02934a9e55e9c314d11631b0b34791116715a9a7680dade8462097fd94faf5261ef04df2da1bf85a47072a7ce8e313298fb347012d9e35419e206c65202a0b1687b5cdde1da05c310558865e1085e213a4842beed1301a927233da07f18f813f5c04114fa41685b97b40ca21c2df429883b619050fbbc9a8b50dea5d06cf0c2879f8b97b54443b0c435818940c4e5a13be77380582df9d46bcd520226c034f99d8bbc9bf45bcc87d3d3d8da78235b43900d3fa15ca16ae451d00182ef586227a510979ce2e40a4d88233f414e200c78828dac900ed07f144eee41093892f103a3d7301e826a11f2e0d027535823843e08cb9a510e66441f9eaf9cc02f0634fbcdeb1121678fd0b460b70c48616e2ef6b3b753972b398168b7541d03c2ccf8557aee3a56545b43d0b6771a2666a7b6e19ab53d166946ad85ac993d737bfc8916204517e48cc388322b1c43c77dfb7e26e5b348151dea871d43bd6d0b15f6d23b41d2f39f46246df47a0b1e4493965f61fac768289d7110164c9482781a4a4778043bde7570e973277bb9f4caacf3648c321a5bb2806cccec3cf4423da9bcfa4d0d98ab46319bc06b2b9b3d66ad468c7527d233c94cbe47c4d330dab2a1fc34e0009623396c870109deed5230913b29d520c39ff206a4e6b7f03624f2401328a3178ac57118feca0844b6f18b1b10e34a1d86de44d8ba6dbcd5f4cc6a3a43b508622ba8dd353fb6be0f45b186fc583fc5a0a811d7df471e7d3ebcc90fc902a938fcae9f541ad77190cd5b26ec302258d6beae95ac4ae9a8f403103cb3cb8da886eb6f587355f8a46195f75264c9c7e5aac9daf871971db1b6c450cdcbed82ca5f50195d2d73ba1bd52ea7d879408e07e8ac9b6d6a1f2102f157848bf89442e8c150fea695c95cf6b487be3c50064c7ddf7438acf04f533d8c09828047cd4ca5cd078ff73d8d8630dc41c55a244607de3495505798593345e88f683bbc7fa55a813569e62d0bb419df78e0d2f7e09526bd1c6226743529228c5abc92239d81feb175ab5a54364a54abec71bf64b725b5648a8b0a1d9f11d236d697b8174b500981d6da21d2a0a541408fadcf458d96874615a1cc047f9f23078e10c7a0df5e80e5d53844f4bbea94a6a07dfe182fd67b2bc6a83fae249aecbf7f0f655f7e2125fcaeefcc18175cdb88c52b6495d74fccb15185c167da9a18421132b7816bfec2b396dbfc600167d2126dd1982f391c797d16a4b08867f522d3294caa9b4538e482d7e7f1c1c662f2b96872aaf19f4a2483778e1410dc76e1a34dc531b74c90639d258b1d38b4d78669a94d49fe434c738b814fa4152715a4739aaed1701b19431f0789ef9ebdc628bff4aeadce52de0754499e91839f1bcb6573fb58ed41270d2a"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x1040, 0x841}, 0x20004000) r12 = openat$vimc0(0xffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r12, 0x80345621, &(0x7f0000002040)) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x54, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d4}, 0x40c0) shutdown(r8, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x24040000) pipe2$9p(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r13, &(0x7f0000002300)={0x87, 0x29, 0x2, {0x1, [{{0x10, 0x1, 0x3}, 0x8000000000000001, 0x2, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x401, 0x1, 0x7, './file0'}, {{0x8, 0x0, 0x8}, 0x1, 0xfe, 0x7, './file0'}, {{0x40, 0x0, 0x7}, 0x2, 0x20, 0x7, './file0'}]}}, 0x87) umount2(&(0x7f00000023c0)='./file0\x00', 0x3) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r14, 0x84, 0x17, &(0x7f0000002400)={0x0, 0x0, 0x1000, "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"}, 0x1008) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x24044000) 4.919007667s ago: executing program 5 (id=1819): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.880039556s ago: executing program 2 (id=1820): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 4.470971322s ago: executing program 4 (id=1821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.966290199s ago: executing program 6 (id=1822): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.965555598s ago: executing program 7 (id=1823): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000004c0)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 3.863056887s ago: executing program 7 (id=1824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x800, 0xa08) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x6, 0x44495658, 0x9, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x0, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0xf9f6, 0x4}) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback}, 0xfffffffffffffeb6) listen(r0, 0x9) 3.488069882s ago: executing program 4 (id=1825): r0 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/106, 0x6a, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, &(0x7f0000000380)=0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515027, 0x408) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000280)=""/158, 0x9e) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) 567.695854ms ago: executing program 5 (id=1826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8000000) 335.475771ms ago: executing program 5 (id=1827): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000280), 0x4) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 81.784271ms ago: executing program 2 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000ff0c01020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 0s ago: executing program 6 (id=1829): r0 = userfaultfd(0x80001) r1 = socket$kcm(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0xb0, 0x0, 0xfffffffffffffffb, [{{0x5, 0x2, 0x3, 0x1, 0x5, 0x10001, {0x1, 0x8000000000000000, 0x5f0, 0x4, 0x401, 0x7fffffff, 0x9, 0x8, 0x12fabddb, 0xc000, 0x9dd7, r4, 0x0, 0x8b, 0x6}}, {0x3, 0x5, 0x8, 0x4a, '..^!!Y\'('}}]}, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0xc0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x2, 0x0, 0xfffffffffffffc62}, 0x4000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2005, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x14}, 0x65) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_register(r7, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '/', 0x3a, '/dev/snd/controlC#\x00', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x50, 0x43, 0x9c24675ec5e6670b, 0x46, 0x46, 0x4f]}, 0x43) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1007, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): 1339][T11125] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 778.511818][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.598759][T11125] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.636037][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.643218][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.713309][T11125] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 778.769635][T11125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.786149][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.793361][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.852465][T11125] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 778.906777][T11125] usb 3-1: invalid MIDI out EP 0 [ 779.220574][T12218] delete_channel: no stack [ 779.469776][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.554864][T11125] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 779.566774][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.652363][T11125] usb 3-1: USB disconnect, device number 122 [ 779.760798][ T919] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 779.904674][T12219] fido_id[12219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 780.055667][ T919] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 780.064864][ T919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.241117][ T919] usb 7-1: config 0 descriptor?? [ 780.307429][T12116] veth0_vlan: entered promiscuous mode [ 780.753430][T12116] veth1_vlan: entered promiscuous mode [ 780.832692][T12116] veth0_macvtap: entered promiscuous mode [ 780.859921][T12116] veth1_macvtap: entered promiscuous mode [ 780.882649][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.890494][T12231] vivid-000: ================= START STATUS ================= [ 781.034224][T12231] vivid-000: Test Pattern: 75% Colorbar [ 781.047243][T12231] vivid-000: Fill Percentage of Frame: 100 [ 781.053149][T12231] vivid-000: Horizontal Movement: No Movement [ 781.059843][T12231] vivid-000: Vertical Movement: No Movement [ 781.072133][T12231] vivid-000: OSD Text Mode: All [ 781.107868][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.184087][T12231] vivid-000: Show Border: false [ 781.214334][T12231] vivid-000: Show Square: false [ 781.244947][T12231] vivid-000: Sensor Flipped Horizontally: false [ 781.260332][T12231] vivid-000: Sensor Flipped Vertically: false [ 781.273901][T12231] vivid-000: Insert SAV Code in Image: false [ 781.288874][T12231] vivid-000: Insert EAV Code in Image: false [ 781.299311][T12231] vivid-000: Insert Video Guard Band: false [ 781.308765][T12231] vivid-000: Reduced Framerate: false [ 781.319036][T12231] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 781.334590][T12231] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 781.352600][T12231] vivid-000: Enable Capture Cropping: true [ 781.363746][T12231] vivid-000: Enable Capture Composing: true [ 781.373681][T12231] vivid-000: Enable Capture Scaler: true [ 781.384745][T12231] vivid-000: Timestamp Source: End of Frame [ 781.398491][T12231] vivid-000: Colorspace: sRGB [ 781.422168][T10042] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.432046][T12231] vivid-000: Transfer Function: Default [ 781.448784][T12231] vivid-000: Y'CbCr Encoding: Default [ 781.467258][T10042] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.487798][T12231] vivid-000: HSV Encoding: Hue 0-179 [ 781.498025][T12231] vivid-000: Quantization: Default [ 781.508016][T12231] vivid-000: Apply Alpha To Red Only: false [ 781.520706][T12231] vivid-000: Standard Aspect Ratio: 4x3 [ 781.524860][ T10] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 781.544644][T12231] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 781.569914][T10042] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.579762][T12231] vivid-000: DV Timings: 640x480p59 inactive [ 781.601673][T12231] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 781.615720][T12231] vivid-000: Maximum EDID Blocks: [ 781.617150][ T919] ath6kl: Failed to submit usb control message: -110 [ 781.629248][T12231] 2 [ 781.639314][T12231] vivid-000: Limited RGB Range (16-235): false [ 781.684307][T10042] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.693941][ T919] ath6kl: unable to send the bmi data to the device: -110 [ 781.724114][ T919] ath6kl: Unable to send get target info: -110 [ 781.727734][T12239] binder: BINDER_SET_CONTEXT_MGR already set [ 781.737881][T12231] vivid-000: Rx RGB Quantization Range: Automatic [ 781.782476][ T919] ath6kl: Failed to init ath6kl core: -110 [ 781.820045][T12237] binder: 12236:12237 ioctl c0306201 800004c0 returned -22 [ 781.822219][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 781.845305][ T919] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 781.884295][T12231] vivid-000: Power Present: 0x00000001 [ 781.918233][T12231] tpg source WxH: 320x240 (Y'CbCr) [ 781.928519][T12231] tpg field: 1 [ 781.948611][T12231] tpg crop: (0,0)/320x240 [ 781.953290][T12231] tpg compose: (0,0)/320x240 [ 781.954616][T12239] binder: 12236:12239 ioctl 4018620d 80000040 returned -16 [ 781.967438][T12231] tpg colorspace: 8 [ 781.971981][T12231] tpg transfer function: 0/0 [ 781.977685][T12231] tpg Y'CbCr encoding: 0/0 [ 781.985514][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 781.996981][T12231] tpg quantization: 0/0 [ 782.004342][T12231] tpg RGB range: 0/2 [ 782.009375][T12231] vivid-000: ================== END STATUS ================== [ 782.060931][ T10] usb 5-1: can't read configurations, error -71 [ 782.206190][T10042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.244231][ T5950] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 782.275871][T10042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.477477][ T5950] usb 6-1: no configurations [ 782.487378][ T5950] usb 6-1: can't read configurations, error -22 [ 782.549944][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.627784][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.665007][ T5950] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 782.696022][ T5949] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 782.865431][ T5950] usb 6-1: no configurations [ 782.871404][ T5950] usb 6-1: can't read configurations, error -22 [ 782.890013][ T5949] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 782.925290][ T5949] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 782.947061][ T5950] usb usb6-port1: attempt power cycle [ 782.974291][ T5949] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.042489][ T5949] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.109393][ T10] usb 7-1: USB disconnect, device number 6 [ 783.187969][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.294725][ T5950] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 783.336241][ T5949] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.393882][ T5950] usb 6-1: no configurations [ 783.441970][ T5949] usb 3-1: invalid MIDI out EP 0 [ 783.454131][ T5950] usb 6-1: can't read configurations, error -22 [ 783.507611][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1612'. [ 783.558203][T12257] openvswitch: netlink: Missing key (keys=40, expected=100) [ 783.604935][ T5950] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 783.699739][ T5950] usb 6-1: no configurations [ 783.738050][ T5950] usb 6-1: can't read configurations, error -22 [ 783.798888][ T5950] usb usb6-port1: unable to enumerate USB device [ 783.821510][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.863877][ T5949] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 784.414893][ T5929] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 784.671959][ T5929] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 784.890791][ T5929] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 784.933162][ T5929] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.961982][ T5929] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.134181][ T5949] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 785.232287][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.241502][ T919] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 785.297966][ T5949] usb 6-1: config 0 has no interfaces? [ 785.391770][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 785.408934][ T5929] usb 7-1: invalid MIDI out EP 0 [ 785.435644][ T5949] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 785.458841][ T919] usb 5-1: Using ep0 maxpacket: 16 [ 785.480064][ T919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.520825][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.532910][ T5949] usb 6-1: Product: syz [ 785.542976][ T5949] usb 6-1: Manufacturer: syz [ 785.551323][ T5949] usb 6-1: SerialNumber: syz [ 785.561418][ T919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 785.598907][ T5949] usb 6-1: config 0 descriptor?? [ 785.669158][ T919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.701275][T12261] delete_channel: no stack [ 785.755253][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.801897][ T5949] usb 3-1: USB disconnect, device number 123 [ 785.839541][T12243] delete_channel: no stack [ 785.930153][ T919] usb 5-1: Product: syz [ 786.021096][ T919] usb 5-1: Manufacturer: syz [ 786.077635][ T919] usb 5-1: SerialNumber: syz [ 786.125779][ T5929] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 786.145589][ T5929] usb 7-1: USB disconnect, device number 7 [ 786.745124][ T5921] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 786.932330][ T5921] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 786.942929][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.991148][ T5921] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.127266][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 787.196780][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.656867][T12279] delete_channel: no stack [ 788.024288][ T919] usb 5-1: 0:2 : does not exist [ 788.576294][ T919] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 788.745943][ T919] usb 5-1: USB disconnect, device number 112 [ 788.765714][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.824503][ T5921] usb 3-1: invalid MIDI out EP 0 [ 788.899471][T12296] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1624'. [ 789.134284][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1625'. [ 789.215390][ T5921] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 789.270295][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 789.321917][ T5921] usb 3-1: USB disconnect, device number 124 [ 789.382514][T12298] xfrm1: entered promiscuous mode [ 789.391528][ T8365] udevd[8365]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.446711][T12299] netlink: 212312 bytes leftover after parsing attributes in process `syz.4.1625'. [ 789.487798][T12298] xfrm1: entered allmulticast mode [ 789.577078][ T5949] usb 6-1: USB disconnect, device number 21 [ 791.348941][T12321] FAULT_INJECTION: forcing a failure. [ 791.348941][T12321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.380021][T12321] CPU: 1 UID: 0 PID: 12321 Comm: syz.6.1627 Not tainted syzkaller #0 PREEMPT(full) [ 791.380050][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.380064][T12321] Call Trace: [ 791.380073][T12321] [ 791.380083][T12321] dump_stack_lvl+0x189/0x250 [ 791.380115][T12321] ? __pfx____ratelimit+0x10/0x10 [ 791.380146][T12321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.380172][T12321] ? __pfx__printk+0x10/0x10 [ 791.380202][T12321] ? __might_fault+0xb0/0x130 [ 791.380244][T12321] should_fail_ex+0x414/0x560 [ 791.380278][T12321] _copy_from_user+0x2d/0xb0 [ 791.380305][T12321] get_compat_msghdr+0xad/0x4a0 [ 791.380334][T12321] ? __pfx_get_compat_msghdr+0x10/0x10 [ 791.380370][T12321] ___sys_sendmsg+0x193/0x2a0 [ 791.380396][T12321] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.380459][T12321] ? __fget_files+0x2a/0x420 [ 791.380491][T12321] ? __fget_files+0x3a0/0x420 [ 791.380534][T12321] __sys_sendmsg+0x164/0x220 [ 791.380559][T12321] ? __pfx___sys_sendmsg+0x10/0x10 [ 791.380600][T12321] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.380634][T12321] __do_fast_syscall_32+0xb6/0x2b0 [ 791.380668][T12321] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.380702][T12321] do_fast_syscall_32+0x34/0x80 [ 791.380735][T12321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.380761][T12321] RIP: 0023:0xf707e539 [ 791.380779][T12321] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 791.380798][T12321] RSP: 002b:00000000f542c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 791.380820][T12321] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 791.380835][T12321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 791.380847][T12321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.380860][T12321] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 791.380872][T12321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.380903][T12321] [ 791.893046][T12322] wg1: entered promiscuous mode [ 791.898099][T12322] wg1: entered allmulticast mode [ 793.234448][ T5950] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 795.155544][ T5950] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 795.166188][ T5950] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 795.251946][ T5950] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.345077][ T5950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 795.422674][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.674185][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 795.720226][T12313] delete_channel: no stack [ 795.764468][ T919] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 795.830606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e77d400: rx timeout, send abort [ 795.841280][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e77fc00: rx timeout, send abort [ 795.850376][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e77d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 795.866332][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e77fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 795.974251][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 795.999037][ T919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.046510][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1638'. [ 796.124282][ T10] usb 6-1: config 0 has no interfaces? [ 796.134195][ T919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.148103][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 796.177478][ T919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.194374][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.233669][ T919] usb 3-1: Product: syz [ 796.275464][ T919] usb 3-1: Manufacturer: syz [ 796.280119][ T919] usb 3-1: SerialNumber: syz [ 796.294653][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.302748][ T10] usb 6-1: Product: syz [ 796.402009][ T10] usb 6-1: Manufacturer: syz [ 796.412146][ T10] usb 6-1: SerialNumber: syz [ 796.535838][ T10] usb 6-1: config 0 descriptor?? [ 796.544131][ T5950] usb 5-1: can't set config #27, error -71 [ 796.561660][ T919] usb 3-1: 0:2 : does not exist [ 796.571890][T12325] delete_channel: no stack [ 796.586166][ T5950] usb 5-1: USB disconnect, device number 113 [ 796.655891][ T919] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 796.769757][ T919] usb 3-1: USB disconnect, device number 125 [ 796.980166][ T8365] udevd[8365]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 797.048552][ T8365] udevd[8365]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 797.793790][T12365] FAULT_INJECTION: forcing a failure. [ 797.793790][T12365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.857015][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.2.1643 Not tainted syzkaller #0 PREEMPT(full) [ 797.857042][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 797.857053][T12365] Call Trace: [ 797.857060][T12365] [ 797.857068][T12365] dump_stack_lvl+0x189/0x250 [ 797.857090][T12365] ? __pfx____ratelimit+0x10/0x10 [ 797.857113][T12365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.857131][T12365] ? __pfx__printk+0x10/0x10 [ 797.857162][T12365] should_fail_ex+0x414/0x560 [ 797.857186][T12365] _copy_from_user+0x2d/0xb0 [ 797.857204][T12365] copy_from_sockptr+0x5e/0xa0 [ 797.857226][T12365] packet_setsockopt+0xac1/0x12c0 [ 797.857246][T12365] ? __pfx_packet_setsockopt+0x10/0x10 [ 797.857264][T12365] ? vfs_write+0x956/0xb30 [ 797.857293][T12365] ? aa_sk_perm+0x81e/0x950 [ 797.857323][T12365] ? aa_sock_opt_perm+0xff/0x1b0 [ 797.857339][T12365] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 797.857355][T12365] ? __pfx_packet_setsockopt+0x10/0x10 [ 797.857374][T12365] do_sock_setsockopt+0x17c/0x1b0 [ 797.857395][T12365] __ia32_sys_setsockopt+0x13f/0x1b0 [ 797.857414][T12365] __do_fast_syscall_32+0xb6/0x2b0 [ 797.857438][T12365] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.857462][T12365] do_fast_syscall_32+0x34/0x80 [ 797.857485][T12365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 797.857503][T12365] RIP: 0023:0xf7f08539 [ 797.857517][T12365] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 797.857530][T12365] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 797.857546][T12365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 797.857556][T12365] RDX: 0000000000000012 RSI: 0000000080000100 RDI: 0000000000000004 [ 797.857566][T12365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 797.857574][T12365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 797.857583][T12365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 797.857610][T12365] [ 798.073722][ T5929] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 798.404129][ T5921] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 798.432339][ T5929] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 798.488101][ T5929] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 798.542684][ T5929] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.575986][ T5929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 798.590079][ T5921] usb 7-1: config 0 interface 0 has no altsetting 0 [ 798.599926][ T5921] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 798.613953][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.628241][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.693166][ T5921] usb 7-1: config 0 descriptor?? [ 798.730740][ T5929] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 798.840636][ T5929] usb 5-1: invalid MIDI out EP 0 [ 798.961631][T12363] delete_channel: no stack [ 799.124655][ T919] usb 6-1: USB disconnect, device number 22 [ 799.199082][ T5921] sony 0003:1345:3008.0010: hiddev0,hidraw0: USB HID v90.00 Device [HID 1345:3008] on usb-dummy_hcd.6-1/input0 [ 799.261967][ T5921] sony 0003:1345:3008.0010: failed to claim input [ 799.274182][ T5999] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 799.382664][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.415349][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.435127][ T5999] usb 3-1: Using ep0 maxpacket: 8 [ 799.497307][ T5999] usb 3-1: unable to get BOS descriptor or descriptor too short [ 799.533608][ T5929] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 799.574681][ T5999] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 799.592940][ T10] usb 7-1: USB disconnect, device number 8 [ 799.604425][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.643451][ T5999] usb 3-1: config 4 has no interface number 0 [ 799.668457][ T5929] usb 5-1: USB disconnect, device number 114 [ 799.696517][ T5999] usb 3-1: config 4 interface 30 has no altsetting 0 [ 799.756787][ T5999] usb 3-1: string descriptor 0 read error: -22 [ 799.778453][ T5999] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 799.883753][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.995763][ T5999] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 800.095777][ T5999] dw2102: su3000_power_ctrl: 1, initialized 0 [ 800.154543][ T5999] dvb-usb: bulk message failed: -22 (2/0) [ 800.305372][ T5999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 800.337346][T12389] bond_slave_0: entered promiscuous mode [ 800.343395][T12389] bond_slave_1: entered promiscuous mode [ 800.364565][ T5999] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 800.397149][ T5999] usb 3-1: media controller created [ 800.425214][T12383] fido_id[12383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 800.478878][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 800.501286][ T5999] dw2102: i2c transfer failed. [ 800.514817][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 800.550083][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 800.589732][T12389] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 800.624445][ T5999] dw2102: i2c transfer failed. [ 800.654147][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 800.742509][ T5999] dw2102: i2c transfer failed. [ 800.742547][ T10] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 800.767438][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 800.803817][ T5999] dw2102: i2c transfer failed. [ 800.813958][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 800.840385][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 800.860658][ T5999] dw2102: i2c transfer failed. [ 800.921665][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 800.960766][ T10] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.998989][ T5999] dw2102: i2c transfer failed. [ 801.003809][ T5999] dvb-usb: MAC address: 02:02:02:02:02:02 [ 801.114178][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 801.115360][T12393] FAULT_INJECTION: forcing a failure. [ 801.115360][T12393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.123319][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.179715][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.194640][T12393] CPU: 1 UID: 0 PID: 12393 Comm: syz.6.1653 Not tainted syzkaller #0 PREEMPT(full) [ 801.194669][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.194684][T12393] Call Trace: [ 801.194695][T12393] [ 801.194706][T12393] dump_stack_lvl+0x189/0x250 [ 801.194743][T12393] ? __pfx____ratelimit+0x10/0x10 [ 801.194774][T12393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.194799][T12393] ? __pfx__printk+0x10/0x10 [ 801.194828][T12393] ? __might_fault+0xb0/0x130 [ 801.194869][T12393] should_fail_ex+0x414/0x560 [ 801.194908][T12393] _copy_from_user+0x2d/0xb0 [ 801.194935][T12393] get_compat_msghdr+0xad/0x4a0 [ 801.194964][T12393] ? __pfx_get_compat_msghdr+0x10/0x10 [ 801.195000][T12393] ___sys_sendmsg+0x193/0x2a0 [ 801.195026][T12393] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.195098][T12393] ? __fget_files+0x2a/0x420 [ 801.195143][T12393] ? __fget_files+0x3a0/0x420 [ 801.195183][T12393] __sys_sendmsg+0x164/0x220 [ 801.195207][T12393] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.195245][T12393] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.195288][T12393] __do_fast_syscall_32+0xb6/0x2b0 [ 801.195321][T12393] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.195363][T12393] do_fast_syscall_32+0x34/0x80 [ 801.195395][T12393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.195421][T12393] RIP: 0023:0xf707e539 [ 801.195440][T12393] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 801.195459][T12393] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 801.195486][T12393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 801.195502][T12393] RDX: 0000000000004054 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.195520][T12393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 801.195533][T12393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 801.195546][T12393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.195578][T12393] [ 801.472602][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 801.645685][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 801.651481][ T5999] dw2102: command 0x0e transfer failed. [ 801.663292][ T10] usb 6-1: invalid MIDI out EP 0 [ 801.693556][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 801.714081][ T5999] dw2102: command 0x0e transfer failed. [ 801.741073][T12385] delete_channel: no stack [ 801.839387][T12396] macvlan2: entered allmulticast mode [ 801.885703][T12396] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 802.014685][T12396] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 802.027418][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 802.057693][ T5999] dw2102: command 0x0e transfer failed. [ 802.063900][T12396] macvlan2: entered promiscuous mode [ 802.089399][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 802.100741][T12396] team0: Port device macvlan2 added [ 802.121660][ T5999] dw2102: command 0x0e transfer failed. [ 802.153378][ T5999] dvb-usb: bulk message failed: -22 (1/0) [ 802.178648][ T5999] dw2102: command 0x51 transfer failed. [ 802.178686][ T5999] dvb-usb: bulk message failed: -22 (5/0) [ 802.178710][ T5999] dw2102: i2c probe for address 0x68 failed. [ 802.178725][ T5999] dvb-usb: bulk message failed: -22 (5/0) [ 802.178741][ T5999] dw2102: i2c probe for address 0x69 failed. [ 802.178755][ T5999] dvb-usb: bulk message failed: -22 (5/0) [ 802.178772][ T5999] dw2102: i2c probe for address 0x6a failed. [ 802.178784][ T5999] dw2102: probing for demodulator failed. Is the external power switched on? [ 802.178800][ T5999] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 802.182094][T12401] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1655' sets config #-3 [ 802.282535][ T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 802.294044][T12397] bond_slave_0: entered promiscuous mode [ 802.294131][T12397] bond_slave_1: entered promiscuous mode [ 802.314803][ T10] usb 6-1: USB disconnect, device number 23 [ 802.316298][T12397] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 802.328727][ T7024] udevd[7024]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.657789][ T5999] rc_core: IR keymap rc-tt-1500 not found [ 802.657827][ T5999] Registered IR keymap rc-empty [ 802.695347][ T5999] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 802.697821][ T5999] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input29 [ 802.705697][ T5999] dvb-usb: schedule remote query interval to 250 msecs. [ 802.705722][ T5999] dw2102: su3000_power_ctrl: 0, initialized 1 [ 802.705738][ T5999] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 802.718784][ T5999] usb 3-1: USB disconnect, device number 126 [ 802.925814][T12410] FAULT_INJECTION: forcing a failure. [ 802.925814][T12410] name failslab, interval 1, probability 0, space 0, times 0 [ 802.950919][T12410] CPU: 1 UID: 0 PID: 12410 Comm: syz.6.1658 Not tainted syzkaller #0 PREEMPT(full) [ 802.950949][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.950963][T12410] Call Trace: [ 802.950972][T12410] [ 802.950982][T12410] dump_stack_lvl+0x189/0x250 [ 802.951012][T12410] ? __pfx____ratelimit+0x10/0x10 [ 802.951041][T12410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.951066][T12410] ? __pfx__printk+0x10/0x10 [ 802.951096][T12410] ? __pfx___might_resched+0x10/0x10 [ 802.951116][T12410] ? fs_reclaim_acquire+0x7d/0x100 [ 802.951162][T12410] should_fail_ex+0x414/0x560 [ 802.951197][T12410] should_failslab+0xa8/0x100 [ 802.951229][T12410] kmem_cache_alloc_noprof+0x73/0x3c0 [ 802.951255][T12410] ? getname_flags+0xb8/0x540 [ 802.951279][T12410] getname_flags+0xb8/0x540 [ 802.951304][T12410] __ia32_sys_unlinkat+0xac/0xf0 [ 802.951336][T12410] __do_fast_syscall_32+0xb6/0x2b0 [ 802.951369][T12410] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.951403][T12410] do_fast_syscall_32+0x34/0x80 [ 802.951434][T12410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.951460][T12410] RIP: 0023:0xf707e539 [ 802.951478][T12410] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 802.951497][T12410] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 000000000000012d [ 802.951519][T12410] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 802.951535][T12410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 802.951547][T12410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 802.951559][T12410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 802.951572][T12410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.951602][T12410] [ 803.270867][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 803.277316][ T5921] dw2102: i2c transfer failed. [ 803.348274][T12382] delete_channel: no stack [ 803.364543][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 803.555396][ T5999] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 803.676114][ T10] usb 6-1: config 0 has no interfaces? [ 803.712311][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 803.754299][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.811088][ T10] usb 6-1: Product: syz [ 803.840153][ T10] usb 6-1: Manufacturer: syz [ 803.904115][ T10] usb 6-1: SerialNumber: syz [ 803.952337][ T10] usb 6-1: config 0 descriptor?? [ 804.090678][T12429] cgroup: fork rejected by pids controller in /syz7 [ 805.534275][ T5921] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 805.698426][ T5921] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 805.752254][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 805.797609][ T5921] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.843017][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.892580][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.969421][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.026618][ T5921] usb 3-1: invalid MIDI out EP 0 [ 806.302825][ T5930] usb 6-1: USB disconnect, device number 24 [ 806.336294][T12534] delete_channel: no stack [ 806.387565][T10046] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.406126][ T5921] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 806.501535][ T5921] usb 3-1: USB disconnect, device number 127 [ 806.834939][T10046] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.325980][T10046] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.776451][T10046] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.324654][ T5921] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 808.589819][ T5921] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 808.747642][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.753347][ T5921] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 808.754219][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.868426][ T5921] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.024833][ T6814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 809.055296][ T6814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 809.064414][ T6814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 809.078993][ T5921] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 809.104166][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.112516][ T6814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 809.138577][ T5921] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.152825][ T6814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 809.165356][ T5921] usb 7-1: invalid MIDI out EP 0 [ 809.440931][T10046] bridge_slave_1: left allmulticast mode [ 809.464753][T10046] bridge_slave_1: left promiscuous mode [ 809.494267][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.656807][T12571] netlink: 'syz.5.1677': attribute type 9 has an invalid length. [ 809.672524][T12571] netlink: 200108 bytes leftover after parsing attributes in process `syz.5.1677'. [ 809.714734][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.764473][T12571] openvswitch: netlink: Message has 5 unknown bytes. [ 809.803490][T10046] bridge_slave_0: left allmulticast mode [ 809.828754][ T5921] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 809.953936][T10046] bridge_slave_0: left promiscuous mode [ 810.094527][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.616111][T12553] syz.2.1670 (12553) used greatest stack depth: 18680 bytes left [ 811.135144][T11125] usb 7-1: USB disconnect, device number 9 [ 811.196934][T12554] delete_channel: no stack [ 811.224574][ T5183] Bluetooth: hci6: command tx timeout [ 811.457328][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1682'. [ 811.474315][ T5921] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 811.521351][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1682'. [ 811.530479][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1682'. [ 811.566012][ T5929] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 811.635563][ T5921] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 811.647130][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.694276][ T5921] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.722590][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 811.741463][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.756867][ T5929] usb 6-1: config 0 has no interfaces? [ 811.772297][ T5929] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 811.782783][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.818255][ T5929] usb 6-1: Product: syz [ 811.831740][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 811.840186][ T5929] usb 6-1: Manufacturer: syz [ 811.853444][ T5929] usb 6-1: SerialNumber: syz [ 811.862534][ T5921] usb 3-1: invalid MIDI out EP 0 [ 811.881596][ T5929] usb 6-1: config 0 descriptor?? [ 811.986050][ T5921] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 812.038562][ T5921] usb 3-1: USB disconnect, device number 2 [ 812.072579][T12583] delete_channel: no stack [ 812.134621][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.543854][T10046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.627023][T10046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.638686][T10046] bond0 (unregistering): Released all slaves [ 812.731170][T12589] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 813.314183][ T5183] Bluetooth: hci6: command tx timeout [ 813.411228][T12600] FAULT_INJECTION: forcing a failure. [ 813.411228][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.478307][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.6.1683 Not tainted syzkaller #0 PREEMPT(full) [ 813.478336][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.478349][T12600] Call Trace: [ 813.478358][T12600] [ 813.478367][T12600] dump_stack_lvl+0x189/0x250 [ 813.478398][T12600] ? __pfx____ratelimit+0x10/0x10 [ 813.478428][T12600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.478453][T12600] ? __pfx__printk+0x10/0x10 [ 813.478483][T12600] ? __might_fault+0xb0/0x130 [ 813.478523][T12600] should_fail_ex+0x414/0x560 [ 813.478556][T12600] _copy_from_user+0x2d/0xb0 [ 813.478580][T12600] __sys_connect+0x123/0x440 [ 813.478613][T12600] ? __fget_files+0x3a0/0x420 [ 813.478645][T12600] ? __pfx___sys_connect+0x10/0x10 [ 813.478699][T12600] __ia32_sys_connect+0x7a/0x90 [ 813.478733][T12600] __do_fast_syscall_32+0xb6/0x2b0 [ 813.478766][T12600] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.478798][T12600] do_fast_syscall_32+0x34/0x80 [ 813.478829][T12600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.478855][T12600] RIP: 0023:0xf707e539 [ 813.478872][T12600] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 813.478890][T12600] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 813.478913][T12600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 813.478927][T12600] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 813.478940][T12600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.478952][T12600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 813.478964][T12600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.479006][T12600] [ 813.666497][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.766731][T12603] FAULT_INJECTION: forcing a failure. [ 813.766731][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 813.901136][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.2.1686 Not tainted syzkaller #0 PREEMPT(full) [ 813.901157][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.901167][T12603] Call Trace: [ 813.901174][T12603] [ 813.901180][T12603] dump_stack_lvl+0x189/0x250 [ 813.901203][T12603] ? __pfx____ratelimit+0x10/0x10 [ 813.901225][T12603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.901243][T12603] ? __pfx__printk+0x10/0x10 [ 813.901268][T12603] ? __pfx___might_resched+0x10/0x10 [ 813.901286][T12603] should_fail_ex+0x414/0x560 [ 813.901311][T12603] should_failslab+0xa8/0x100 [ 813.901335][T12603] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 813.901355][T12603] ? ipv4_default_advmss+0x20/0x290 [ 813.901373][T12603] ? __alloc_skb+0x112/0x2d0 [ 813.901389][T12603] __alloc_skb+0x112/0x2d0 [ 813.901406][T12603] tcp_stream_alloc_skb+0x3d/0x340 [ 813.901429][T12603] tcp_connect+0x146f/0x4ef0 [ 813.901456][T12603] ? __lock_acquire+0xab9/0xd20 [ 813.901485][T12603] ? get_random_u16+0x154/0x940 [ 813.901505][T12603] ? __pfx_tcp_connect+0x10/0x10 [ 813.901521][T12603] ? get_random_u16+0x48e/0x940 [ 813.901536][T12603] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.901557][T12603] ? get_random_u16+0x154/0x940 [ 813.901571][T12603] ? get_random_u16+0x4df/0x940 [ 813.901592][T12603] ? __asan_memset+0x22/0x50 [ 813.901613][T12603] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 813.901641][T12603] ? sk_setup_caps+0x850/0xac0 [ 813.901659][T12603] ? dst_release+0x72/0x1b0 [ 813.901680][T12603] tcp_v4_connect+0x1110/0x1a00 [ 813.901718][T12603] ? __pfx_tcp_v4_connect+0x10/0x10 [ 813.901745][T12603] __inet_stream_connect+0x2ab/0xe80 [ 813.901773][T12603] ? __local_bh_enable_ip+0x12d/0x1c0 [ 813.901788][T12603] ? __pfx___inet_stream_connect+0x10/0x10 [ 813.901808][T12603] ? __local_bh_enable_ip+0x12d/0x1c0 [ 813.901823][T12603] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 813.901845][T12603] inet_stream_connect+0x66/0xa0 [ 813.901867][T12603] __sys_connect+0x316/0x440 [ 813.901890][T12603] ? __fget_files+0x3a0/0x420 [ 813.901913][T12603] ? __pfx___sys_connect+0x10/0x10 [ 813.901959][T12603] __ia32_sys_connect+0x7a/0x90 [ 813.901983][T12603] __do_fast_syscall_32+0xb6/0x2b0 [ 813.902006][T12603] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.902030][T12603] do_fast_syscall_32+0x34/0x80 [ 813.902056][T12603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.902074][T12603] RIP: 0023:0xf7f08539 [ 813.902087][T12603] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 813.902100][T12603] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 813.902116][T12603] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 813.902127][T12603] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 813.902136][T12603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.902144][T12603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 813.902153][T12603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.902174][T12603] [ 814.206109][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.612263][T12606] batadv0: entered promiscuous mode [ 814.632942][T12606] vlan2: entered promiscuous mode [ 814.996299][T11125] usb 6-1: USB disconnect, device number 25 [ 815.384130][ T5183] Bluetooth: hci6: command tx timeout [ 815.814277][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 816.004264][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 816.075791][ T10] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 816.091762][T10046] hsr_slave_0: left promiscuous mode [ 816.122650][ T10] usb 6-1: config 0 has no interface number 0 [ 816.175292][T12637] netlink: 'syz.4.1694': attribute type 21 has an invalid length. [ 816.213771][T10046] hsr_slave_1: left promiscuous mode [ 816.213774][T11125] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 816.214458][ T10] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 816.277453][ T10] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 816.277490][T12637] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1694'. [ 816.311961][ T10] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 816.321303][T10046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.343432][T10046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.365296][ T10] usb 6-1: Product: syz [ 816.369496][ T10] usb 6-1: SerialNumber: syz [ 816.410124][T10046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.427223][T11125] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 816.438563][ T10] usb 6-1: config 0 descriptor?? [ 816.447985][T10046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.477498][T11125] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 816.514334][T11125] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.568397][T11125] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 816.627641][T11125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.660798][ T10] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 816.700740][ T10] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 816.733046][T10046] veth1_macvtap: left promiscuous mode [ 816.752775][T11125] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.835010][T11125] usb 7-1: invalid MIDI out EP 0 [ 816.844803][ T10] usb 6-1: USB disconnect, device number 26 [ 816.850898][T10046] veth0_macvtap: left promiscuous mode [ 817.040983][T10046] veth1_vlan: left promiscuous mode [ 817.067343][T10046] veth0_vlan: left promiscuous mode [ 817.464334][ T5183] Bluetooth: hci6: command tx timeout [ 817.487399][T11125] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 818.054213][ T5921] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 818.206438][ T5921] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 818.295131][ T5921] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 818.359549][ T5921] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.414111][ T5921] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.437113][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.497700][ T5921] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.519617][ T5921] usb 6-1: invalid MIDI out EP 0 [ 818.622998][ T5929] usb 7-1: USB disconnect, device number 10 [ 818.636628][T12629] delete_channel: no stack [ 818.704900][T12649] delete_channel: no stack [ 818.820517][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.931978][ T5921] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 818.965332][ T5921] usb 6-1: USB disconnect, device number 27 [ 819.571467][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'. [ 819.641747][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'. [ 819.704847][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'. [ 819.733110][T12660] FAULT_INJECTION: forcing a failure. [ 819.733110][T12660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.747647][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'. [ 819.782464][T12660] CPU: 0 UID: 0 PID: 12660 Comm: syz.5.1700 Not tainted syzkaller #0 PREEMPT(full) [ 819.782494][T12660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.782508][T12660] Call Trace: [ 819.782517][T12660] [ 819.782527][T12660] dump_stack_lvl+0x189/0x250 [ 819.782558][T12660] ? __pfx____ratelimit+0x10/0x10 [ 819.782587][T12660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.782612][T12660] ? __pfx__printk+0x10/0x10 [ 819.782641][T12660] ? __might_fault+0xb0/0x130 [ 819.782681][T12660] should_fail_ex+0x414/0x560 [ 819.782715][T12660] _copy_from_user+0x2d/0xb0 [ 819.782738][T12660] __sys_bind+0x199/0x3e0 [ 819.782771][T12660] ? __pfx___sys_bind+0x10/0x10 [ 819.782822][T12660] __ia32_sys_bind+0x7a/0x90 [ 819.782852][T12660] __do_fast_syscall_32+0xb6/0x2b0 [ 819.782883][T12660] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.782914][T12660] do_fast_syscall_32+0x34/0x80 [ 819.782942][T12660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 819.782962][T12660] RIP: 0023:0xf711e539 [ 819.782979][T12660] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 819.782996][T12660] RSP: 002b:00000000f550e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 819.783018][T12660] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 819.783032][T12660] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 819.783044][T12660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 819.783055][T12660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 819.783067][T12660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.783096][T12660] [ 819.953426][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.245551][T10046] team0 (unregistering): Port device team_slave_1 removed [ 820.472774][T10046] team0 (unregistering): Port device team_slave_0 removed [ 820.814226][ T5921] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 820.997989][ T5921] usb 7-1: config 0 has no interfaces? [ 821.025374][ T5921] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 821.034652][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.042640][ T5921] usb 7-1: Product: syz [ 821.056244][ T5921] usb 7-1: Manufacturer: syz [ 821.071741][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 821.089505][ T5921] usb 7-1: SerialNumber: syz [ 821.098713][ T5921] usb 7-1: config 0 descriptor?? [ 821.644240][ T5999] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 821.810880][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 821.822662][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 821.871695][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 821.943511][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 821.980582][ T5999] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 822.019584][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.068312][ T5999] usb 6-1: config 0 descriptor?? [ 822.133611][T12669] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 822.590573][ T5999] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 822.634650][ T5999] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 822.659516][ T5999] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 822.687642][ T5999] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 822.706555][ T5999] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 822.758965][T12637] netlink: 'syz.4.1694': attribute type 4 has an invalid length. [ 822.779994][ T5999] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 822.798437][T12637] netlink: 'syz.4.1694': attribute type 5 has an invalid length. [ 822.840696][T12637] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1694'. [ 822.900324][T12639] 8021q: VLANs not supported on vxcan1 [ 822.998172][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.055240][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.165407][T12670] netlink: 'syz.5.1703': attribute type 1 has an invalid length. [ 824.024103][ T5999] usb 6-1: reset high-speed USB device number 28 using dummy_hcd [ 824.071055][T12683] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 824.155515][T12568] chnl_net:caif_netlink_parms(): no params data found [ 824.269801][ T5921] usb 7-1: USB disconnect, device number 11 [ 824.865379][ T5929] usb 6-1: USB disconnect, device number 28 [ 825.024622][T11125] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 825.272490][T11125] usb 3-1: config 0 has no interfaces? [ 825.308937][T11125] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 825.318197][T11125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.326681][T11125] usb 3-1: Product: syz [ 825.330854][T11125] usb 3-1: Manufacturer: syz [ 825.335521][T11125] usb 3-1: SerialNumber: syz [ 825.352142][T11125] usb 3-1: config 0 descriptor?? [ 825.383311][T12699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1709'. [ 825.943958][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.954367][T11125] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 825.970848][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.998603][T12568] bridge_slave_0: entered allmulticast mode [ 826.073908][T12568] bridge_slave_0: entered promiscuous mode [ 826.120121][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.160089][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.189057][T12568] bridge_slave_1: entered allmulticast mode [ 826.246900][T11125] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 826.295827][T12568] bridge_slave_1: entered promiscuous mode [ 826.388838][T11125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.448783][T11125] usb 6-1: Product: syz [ 826.477963][T11125] usb 6-1: Manufacturer: syz [ 826.634274][T11125] usb 6-1: SerialNumber: syz [ 826.858879][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.961309][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.323687][T12568] team0: Port device team_slave_0 added [ 827.361045][T12568] team0: Port device team_slave_1 added [ 827.534866][ T10] usb 3-1: USB disconnect, device number 3 [ 827.767608][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.768848][T11125] rtl8150 6-1:1.0: couldn't reset the device [ 827.804578][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.830532][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.865658][T11125] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 827.949066][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.005817][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.053685][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.079719][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.080493][T11125] usb 6-1: USB disconnect, device number 29 [ 828.274119][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.702137][T12568] hsr_slave_0: entered promiscuous mode [ 828.776918][T12568] hsr_slave_1: entered promiscuous mode [ 828.814301][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1711'. [ 828.818315][T12568] debugfs: 'hsr0' already exists in 'hsr' [ 828.883068][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1711'. [ 828.909055][T12568] Cannot create hsr debugfs directory [ 829.404115][ T5999] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 829.714152][ T5999] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 829.784172][ T5999] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 829.963151][ T5999] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 830.157627][ T5999] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 830.157661][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.282109][ T5999] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 830.283168][ T5999] usb 3-1: invalid MIDI out EP 0 [ 830.345533][T12745] tipc: Started in network mode [ 830.345565][T12745] tipc: Node identity b271c2cfe42d, cluster identity 4711 [ 830.345743][T12745] tipc: Enabled bearer , priority 0 [ 830.393417][T12748] syzkaller0: entered promiscuous mode [ 830.393446][T12748] syzkaller0: entered allmulticast mode [ 830.495017][T12735] delete_channel: no stack [ 830.573310][ T5999] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 830.592987][ T5999] usb 3-1: USB disconnect, device number 4 [ 830.744238][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1716'. [ 830.768172][T12750] tipc: Resetting bearer [ 830.894677][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.928981][T12758] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 830.929013][T12758] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 830.933089][T12758] vhci_hcd vhci_hcd.0: Device attached [ 831.017477][T12750] tipc: Disabling bearer [ 831.024173][ T5999] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 831.164208][ T5930] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 831.291079][ T5999] usb 5-1: config 0 has no interfaces? [ 831.297907][ T5999] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 831.297940][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.297962][ T5999] usb 5-1: Product: syz [ 831.297977][ T5999] usb 5-1: Manufacturer: syz [ 831.297993][ T5999] usb 5-1: SerialNumber: syz [ 831.304688][T12759] fuse: Unknown parameter ' 0x000000000000000d' [ 831.321752][ T5999] usb 5-1: config 0 descriptor?? [ 832.113385][T12773] vivid-000: ================= START STATUS ================= [ 832.113438][T12773] vivid-000: Test Pattern: 75% Colorbar [ 832.113580][T12773] vivid-000: Fill Percentage of Frame: 100 [ 832.113611][T12773] vivid-000: Horizontal Movement: No Movement [ 832.113639][T12773] vivid-000: Vertical Movement: No Movement [ 832.113664][T12773] vivid-000: OSD Text Mode: All [ 832.113689][T12773] vivid-000: Show Border: false [ 832.113714][T12773] vivid-000: Show Square: false [ 832.113738][T12773] vivid-000: Sensor Flipped Horizontally: false [ 832.113764][T12773] vivid-000: Sensor Flipped Vertically: false [ 832.113788][T12773] vivid-000: Insert SAV Code in Image: false [ 832.113819][T12773] vivid-000: Insert EAV Code in Image: false [ 832.113845][T12773] vivid-000: Insert Video Guard Band: false [ 832.113870][T12773] vivid-000: Reduced Framerate: false [ 832.113895][T12773] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 832.113923][T12773] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 832.113950][T12773] vivid-000: Enable Capture Cropping: true [ 832.114249][T12773] vivid-000: Enable Capture Composing: true [ 832.114274][T12773] vivid-000: Enable Capture Scaler: true [ 832.114310][T12773] vivid-000: Timestamp Source: End of Frame [ 832.114336][T12773] vivid-000: Colorspace: sRGB [ 832.114388][T12773] vivid-000: Transfer Function: Default [ 832.114466][T12773] vivid-000: Y'CbCr Encoding: Default [ 832.114542][T12773] vivid-000: HSV Encoding: Hue 0-179 [ 832.114655][T12773] vivid-000: Quantization: Limited Range [ 832.114766][T12773] vivid-000: Apply Alpha To Red Only: false [ 832.114877][T12773] vivid-000: Standard Aspect Ratio: 4x3 [ 832.114988][T12773] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 832.115176][T12773] vivid-000: DV Timings: 640x480p59 inactive [ 832.115326][T12773] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 832.115354][T12773] vivid-000: Maximum EDID Blocks: 2 [ 832.115381][T12773] vivid-000: Limited RGB Range (16-235): false [ 832.115407][T12773] vivid-000: Rx RGB Quantization Range: Automatic [ 832.115433][T12773] vivid-000: Power Present: 0x00000001 [ 832.115461][T12773] tpg source WxH: 320x240 (Y'CbCr) [ 832.115476][T12773] tpg field: 1 [ 832.115486][T12773] tpg crop: (0,0)/320x240 [ 832.115501][T12773] tpg compose: (0,0)/320x240 [ 832.115518][T12773] tpg colorspace: 8 [ 832.115528][T12773] tpg transfer function: 0/0 [ 832.115540][T12773] tpg Y'CbCr encoding: 0/0 [ 832.115552][T12773] tpg quantization: 2/0 [ 832.115564][T12773] tpg RGB range: 0/2 [ 832.115577][T12773] vivid-000: ================== END STATUS ================== [ 832.123848][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1718'. [ 832.156356][T12763] vhci_hcd: connection reset by peer [ 832.172674][T10046] vhci_hcd: stop threads [ 832.172697][T10046] vhci_hcd: release socket [ 832.172749][T10046] vhci_hcd: disconnect device [ 833.178594][T12781] netlink: 'syz.2.1719': attribute type 4 has an invalid length. [ 833.412107][T12568] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 833.427191][T12568] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 833.546766][T12568] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 833.980181][ T5929] usb 5-1: USB disconnect, device number 115 [ 834.066473][T12568] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 834.206664][ T30] audit: type=1326 audit(1756141169.561:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 834.364103][ T30] audit: type=1326 audit(1756141169.561:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 834.550103][ T30] audit: type=1326 audit(1756141169.671:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 834.638346][ T30] audit: type=1326 audit(1756141169.671:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 834.725471][ T5950] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 834.761482][ T30] audit: type=1326 audit(1756141169.671:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 834.799811][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.939018][ T30] audit: type=1326 audit(1756141169.681:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 834.971847][ T5950] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 834.981261][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.028559][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.074129][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 835.095898][ T30] audit: type=1326 audit(1756141169.681:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 835.135471][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 835.156699][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.163874][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.234674][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.238080][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.241935][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.256121][ T30] audit: type=1326 audit(1756141169.681:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.6.1720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 835.284396][ T5999] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 835.326979][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.344092][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 835.378646][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 835.396536][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.466004][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.485622][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 835.538310][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 835.566502][ T5999] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 835.603603][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.617806][ T5999] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.674166][ T5999] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.675866][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.774368][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 835.795367][ T5999] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.836470][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.843703][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 835.882947][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.884313][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.946035][ T5999] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.954131][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 836.003840][ T5999] usb 3-1: invalid MIDI out EP 0 [ 836.056677][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 836.140628][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 836.200040][T12809] delete_channel: no stack [ 836.214527][ T10] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 836.251295][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 836.262876][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 836.264214][ T5930] vhci_hcd: vhci_device speed not set [ 836.301750][T12568] veth0_vlan: entered promiscuous mode [ 836.322635][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.362809][ T10] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.383332][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 836.406364][ T5999] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 836.455658][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 836.475059][T12568] veth1_vlan: entered promiscuous mode [ 836.489061][ T5999] usb 3-1: USB disconnect, device number 5 [ 836.541617][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 836.592392][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 836.649041][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.663427][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 836.772114][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 836.794561][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 836.814960][T12568] veth0_macvtap: entered promiscuous mode [ 836.857144][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 836.868962][ T10] usb 6-1: invalid MIDI out EP 0 [ 836.930090][T12568] veth1_macvtap: entered promiscuous mode [ 836.945784][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 837.032197][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 837.120062][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.140579][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.172352][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 837.207311][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 837.219551][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.299719][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 837.325685][T10045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.347518][ T5929] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 837.398206][T10045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.516551][ T5929] usb 7-1: config 0 has no interfaces? [ 837.535477][ T5929] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 837.567603][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.579742][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.604849][T10045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.615308][ T5950] usb 5-1: string descriptor 0 read error: -71 [ 837.621823][ T5950] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 837.713597][ T5929] usb 7-1: Product: syz [ 837.735591][ T5929] usb 7-1: Manufacturer: syz [ 837.770488][ T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 837.783414][ T5950] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 837.865598][T10045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.890176][ T5929] usb 7-1: SerialNumber: syz [ 837.899805][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 837.958238][ T5929] usb 7-1: config 0 descriptor?? [ 837.981939][ T5950] usb 5-1: config 0 descriptor?? [ 838.270558][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.298286][ T5950] usb 5-1: can't set config #0, error -71 [ 838.329735][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.342018][ T5950] usb 5-1: USB disconnect, device number 116 [ 838.636394][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.678904][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.024715][ T5950] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 839.188807][ T5950] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 839.207510][ T5929] usb 6-1: USB disconnect, device number 30 [ 839.223307][ T5950] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 839.257270][T12817] delete_channel: no stack [ 839.314094][ T5950] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.392666][ T5950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 839.549416][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.636937][ T5950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 839.637567][ T5950] usb 5-1: invalid MIDI out EP 0 [ 839.850349][ T5950] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 839.942494][ T5921] usb 7-1: USB disconnect, device number 12 [ 839.977922][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.994802][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1731'. [ 840.147302][T12851] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 840.154021][T12851] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 840.294791][T12851] vhci_hcd vhci_hcd.0: Device attached [ 840.337684][T12857] fuse: Unknown parameter '0x000000000000000e' [ 840.539108][T12862] vhci_hcd: connection closed [ 840.540418][T10045] vhci_hcd: stop threads [ 840.562498][T10045] vhci_hcd: release socket [ 840.572575][ T5929] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 840.580530][ T5921] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 840.584725][T10045] vhci_hcd: disconnect device [ 840.669084][ T5929] usb 43-1: enqueue for inactive port 0 [ 840.920139][ T5929] vhci_hcd: vhci_device speed not set [ 841.147781][ T5921] usb 7-1: config 0 has no interfaces? [ 841.164804][ T5921] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 841.183634][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.284449][ T5921] usb 7-1: Product: syz [ 841.395210][ T5921] usb 7-1: Manufacturer: syz [ 841.399878][ T5921] usb 7-1: SerialNumber: syz [ 841.473907][ T5921] usb 7-1: config 0 descriptor?? [ 841.996604][ T5999] usb 5-1: USB disconnect, device number 117 [ 842.020788][T12840] delete_channel: no stack [ 842.411011][T12848] delete_channel: no stack [ 843.109038][T12904] vivid-000: ================= START STATUS ================= [ 843.118125][T12904] vivid-000: Test Pattern: 75% Colorbar [ 843.190132][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 843.229704][T12904] vivid-000: Fill Percentage of Frame: 100 [ 843.286799][ T5950] usb 7-1: USB disconnect, device number 13 [ 843.329298][T12904] vivid-000: Horizontal Movement: No Movement [ 843.336686][T12904] vivid-000: Vertical Movement: No Movement [ 843.545109][T12904] vivid-000: OSD Text Mode: All [ 843.550184][T12904] vivid-000: Show Border: false [ 843.609739][T12904] vivid-000: Show Square: false [ 843.693486][T12904] vivid-000: Sensor Flipped Horizontally: false [ 843.723889][T12904] vivid-000: Sensor Flipped Vertically: false [ 843.744615][T12904] vivid-000: Insert SAV Code in Image: false [ 843.764115][ T5950] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 843.814175][T12904] vivid-000: Insert EAV Code in Image: false [ 843.821975][T12904] vivid-000: Insert Video Guard Band: false [ 843.834018][T12904] vivid-000: Reduced Framerate: false [ 843.842705][T12904] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 843.852404][T12904] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 843.860952][T12904] vivid-000: Enable Capture Cropping: true [ 843.906025][T12904] vivid-000: Enable Capture Composing: true [ 843.914832][T12904] vivid-000: Enable Capture Scaler: true [ 843.920642][T12904] vivid-000: Timestamp Source: End of Frame [ 843.933336][T12904] vivid-000: Colorspace: sRGB [ 843.942456][T12904] vivid-000: Transfer Function: Default [ 843.954248][T12904] vivid-000: Y'CbCr Encoding: Default [ 843.968743][T12904] vivid-000: HSV Encoding: Hue 0-179 [ 843.979677][T12904] vivid-000: Quantization: Limited Range [ 843.994289][T12904] vivid-000: Apply Alpha To Red Only: false [ 844.000279][T12904] vivid-000: Standard Aspect Ratio: 4x3 [ 844.011280][T12904] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 844.020105][T12904] vivid-000: DV Timings: 640x480p59 inactive [ 844.029959][T12904] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 844.037939][T12904] vivid-000: Maximum EDID Blocks: 2 [ 844.043934][T12904] vivid-000: Limited RGB Range (16-235): false [ 844.078170][T12904] vivid-000: Rx RGB Quantization Range: Automatic [ 844.088307][T12904] vivid-000: Power Present: 0x00000001 [ 844.094275][T12904] tpg source WxH: 320x240 (Y'CbCr) [ 844.104789][T12904] tpg field: 1 [ 844.114207][T12904] tpg crop: (0,0)/320x240 [ 844.121149][T12904] tpg compose: (0,0)/320x240 [ 844.131297][T12904] tpg colorspace: 8 [ 844.137768][T12904] tpg transfer function: 0/0 [ 844.152822][T12904] tpg Y'CbCr encoding: 0/0 [ 844.173043][T12904] tpg quantization: 2/0 [ 844.184550][T12904] tpg RGB range: 0/2 [ 844.208888][T12904] vivid-000: ================== END STATUS ================== [ 844.247490][ T5950] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 844.295512][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.406648][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 844.533737][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 844.694120][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 844.743593][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 844.753043][ T5949] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 844.907340][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 844.961594][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 845.093197][ T5949] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 845.103717][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 845.148705][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 845.163127][ T5949] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 845.188133][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 845.231316][ T5949] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.272681][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 845.351341][ T5949] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 845.360952][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 845.367985][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.377208][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 845.424329][ T5999] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 845.426578][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 845.545739][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 845.608780][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 845.636052][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 845.657958][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 845.708494][ T5949] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 845.765542][ T5949] usb 7-1: invalid MIDI out EP 0 [ 845.772473][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 845.809320][ T5999] usb 6-1: config 0 has no interfaces? [ 845.823648][ T5999] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 845.829799][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 845.846704][T12909] delete_channel: no stack [ 845.999554][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.021053][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.053671][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 846.102968][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 846.147199][ T5999] usb 6-1: Product: syz [ 846.178920][ T5999] usb 6-1: Manufacturer: syz [ 846.208618][ T5999] usb 6-1: SerialNumber: syz [ 846.236206][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 846.402312][ T5999] usb 6-1: config 0 descriptor?? [ 846.431177][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.727450][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 846.915538][ T5950] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 846.953906][ T5949] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 846.982366][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.086306][ T5950] usb 5-1: unable to read config index 7 descriptor/start: -71 [ 847.314446][ T5950] usb 5-1: can't read configurations, error -71 [ 847.703369][ T5999] usb 7-1: USB disconnect, device number 14 [ 847.747252][T12922] delete_channel: no stack [ 847.921330][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'. [ 848.021192][T12948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 848.027875][T12948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 848.141383][T12948] vhci_hcd vhci_hcd.0: Device attached [ 848.264839][T12948] fuse: Unknown parameter '0x000000000000000c' [ 848.434254][ T5949] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 848.497602][T12949] vhci_hcd: connection reset by peer [ 848.509311][T10048] vhci_hcd: stop threads [ 848.529207][T10048] vhci_hcd: release socket [ 848.547645][T10048] vhci_hcd: disconnect device [ 848.664370][ T5950] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 848.792992][ T10] usb 6-1: USB disconnect, device number 31 [ 848.837256][ T5950] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 848.845713][ T5950] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 848.880906][ T5950] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 848.918043][ T5950] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 848.928392][ T5950] usb 5-1: config 0 has no interface number 0 [ 848.934601][ T5950] usb 5-1: config 0 has no interface number 1 [ 848.940930][ T5950] usb 5-1: config 0 has no interface number 2 [ 848.961202][ T5950] usb 5-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 848.976363][T12964] FAULT_INJECTION: forcing a failure. [ 848.976363][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 849.000071][T12964] CPU: 1 UID: 0 PID: 12964 Comm: syz.5.1751 Not tainted syzkaller #0 PREEMPT(full) [ 849.000092][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 849.000102][T12964] Call Trace: [ 849.000109][T12964] [ 849.000116][T12964] dump_stack_lvl+0x189/0x250 [ 849.000138][T12964] ? __pfx____ratelimit+0x10/0x10 [ 849.000160][T12964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.000178][T12964] ? __pfx__printk+0x10/0x10 [ 849.000200][T12964] ? __pfx___might_resched+0x10/0x10 [ 849.000214][T12964] ? fs_reclaim_acquire+0x7d/0x100 [ 849.000240][T12964] should_fail_ex+0x414/0x560 [ 849.000264][T12964] should_failslab+0xa8/0x100 [ 849.000286][T12964] __kmalloc_cache_noprof+0x70/0x3d0 [ 849.000306][T12964] ? hash_net_create+0x2fe/0xfe0 [ 849.000331][T12964] hash_net_create+0x2fe/0xfe0 [ 849.000357][T12964] ? __nla_parse+0x40/0x60 [ 849.000378][T12964] ? __pfx_hash_net_create+0x10/0x10 [ 849.000400][T12964] ip_set_create+0xa97/0x1940 [ 849.000419][T12964] ? ip_set_create+0x4a2/0x1940 [ 849.000444][T12964] ? __pfx_ip_set_create+0x10/0x10 [ 849.000487][T12964] nfnetlink_rcv_msg+0xb4d/0x1130 [ 849.000508][T12964] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 849.000540][T12964] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 849.000556][T12964] ? kasan_save_free_info+0x46/0x50 [ 849.000606][T12964] netlink_rcv_skb+0x208/0x470 [ 849.000628][T12964] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 849.000648][T12964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 849.000677][T12964] ? bpf_lsm_capable+0x9/0x20 [ 849.000696][T12964] ? security_capable+0x7e/0x2e0 [ 849.000722][T12964] nfnetlink_rcv+0x26a/0x2520 [ 849.000743][T12964] ? __dev_queue_xmit+0x1d79/0x3b50 [ 849.000768][T12964] ? __dev_queue_xmit+0x27b/0x3b50 [ 849.000793][T12964] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 849.000811][T12964] ? __pfx___dev_queue_xmit+0x10/0x10 [ 849.000844][T12964] ? ref_tracker_free+0x63a/0x7d0 [ 849.000865][T12964] ? __asan_memcpy+0x40/0x70 [ 849.000884][T12964] ? __pfx_ref_tracker_free+0x10/0x10 [ 849.000915][T12964] ? skb_clone+0x246/0x3a0 [ 849.000934][T12964] ? __netlink_deliver_tap+0x807/0x850 [ 849.000954][T12964] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.000979][T12964] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.001006][T12964] netlink_unicast+0x82f/0x9e0 [ 849.001031][T12964] ? __pfx_netlink_unicast+0x10/0x10 [ 849.001052][T12964] ? netlink_sendmsg+0x642/0xb30 [ 849.001071][T12964] ? skb_put+0x11b/0x210 [ 849.001088][T12964] netlink_sendmsg+0x805/0xb30 [ 849.001115][T12964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.001138][T12964] ? __import_iovec+0x5d4/0x7f0 [ 849.001153][T12964] ? aa_sock_msg_perm+0xf1/0x1d0 [ 849.001168][T12964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.001183][T12964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.001205][T12964] __sock_sendmsg+0x21c/0x270 [ 849.001226][T12964] ____sys_sendmsg+0x505/0x830 [ 849.001246][T12964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.001273][T12964] ___sys_sendmsg+0x21f/0x2a0 [ 849.001290][T12964] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.001330][T12964] ? __fget_files+0x2a/0x420 [ 849.001351][T12964] ? __fget_files+0x3a0/0x420 [ 849.001379][T12964] __sys_sendmsg+0x164/0x220 [ 849.001395][T12964] ? __pfx___sys_sendmsg+0x10/0x10 [ 849.001441][T12964] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.001465][T12964] __do_fast_syscall_32+0xb6/0x2b0 [ 849.001488][T12964] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.001512][T12964] do_fast_syscall_32+0x34/0x80 [ 849.001535][T12964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 849.001554][T12964] RIP: 0023:0xf711e539 [ 849.001567][T12964] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 849.001579][T12964] RSP: 002b:00000000f550e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 849.001595][T12964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 849.001605][T12964] RDX: 0000000008000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 849.001614][T12964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 849.001623][T12964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 849.001632][T12964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 849.001653][T12964] [ 849.004231][ T5950] usb 5-1: too many endpoints for config 0 interface 55 altsetting 48: 87, using maximum allowed: 30 [ 849.613847][ T5950] usb 5-1: config 0 interface 55 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 87 [ 849.682437][ T5950] usb 5-1: too many endpoints for config 0 interface 6 altsetting 0: 97, using maximum allowed: 30 [ 849.720024][ T5950] usb 5-1: config 0 interface 6 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 849.767812][ T5950] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x8D has invalid maxpacket 40536, setting to 64 [ 849.810280][ T5950] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 849.823526][ T5950] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 849.852056][ T5950] usb 5-1: config 0 interface 6 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 97 [ 849.885242][ T5950] usb 5-1: config 0 interface 55 has no altsetting 0 [ 849.961472][ T5950] usb 5-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=3a.a4 [ 850.035579][T11125] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 850.144721][ T5969] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 850.167358][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.189147][ T5950] usb 5-1: config 0 descriptor?? [ 850.274358][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 850.336969][ T5969] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 850.349187][ T5969] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 850.428773][ T10] usb 6-1: config 0 has no interfaces? [ 850.436073][ T5950] usb 5-1: string descriptor 0 read error: -71 [ 850.470276][T11125] usb 3-1: config 0 has no interfaces? [ 850.480653][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 850.490227][ T5969] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.520278][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.554170][T11125] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 850.594055][T11125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.633841][ T5950] usb 5-1: USB disconnect, device number 119 [ 850.640067][ T10] usb 6-1: Product: syz [ 850.644814][ T5969] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 850.666881][ T10] usb 6-1: Manufacturer: syz [ 850.672182][T11125] usb 3-1: Product: syz [ 850.696577][T11125] usb 3-1: Manufacturer: syz [ 850.702515][ T10] usb 6-1: SerialNumber: syz [ 850.728460][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.777800][T11125] usb 3-1: SerialNumber: syz [ 850.834962][ T10] usb 6-1: config 0 descriptor?? [ 850.841322][T11125] usb 3-1: config 0 descriptor?? [ 850.851311][ T5969] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 850.875728][ T5969] usb 7-1: invalid MIDI out EP 0 [ 851.327546][T12975] delete_channel: no stack [ 851.334139][ T5999] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 851.340555][ T5969] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 851.410708][ T5969] usb 7-1: USB disconnect, device number 15 [ 851.410783][T12959] delete_channel: no stack [ 851.485297][ T5999] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 851.529463][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 851.559799][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 851.744066][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 851.823934][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 851.935009][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 851.973073][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 852.031618][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 852.090878][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.113323][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.125650][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 852.166517][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 852.257260][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.288002][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.300561][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 852.316739][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 852.418132][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.487952][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.515543][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 852.530026][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 852.544094][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.553601][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.563850][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 852.576002][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 852.591422][ T5921] usb 3-1: USB disconnect, device number 6 [ 852.598653][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.616135][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.632195][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 852.701550][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 852.837701][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.858199][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.886568][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 853.019780][ T5999] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 853.114101][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 853.123661][ T5999] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 853.206682][ T5999] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 853.254287][ T5999] usb 5-1: Product: syz [ 853.258522][ T5999] usb 5-1: Manufacturer: syz [ 853.345516][ T5999] usb 5-1: SerialNumber: syz [ 853.401323][ T5999] usb 5-1: config 0 descriptor?? [ 853.441786][ T5999] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 853.679248][ T5999] usb 5-1: USB disconnect, device number 120 [ 853.694179][ T5949] vhci_hcd: vhci_device speed not set [ 853.710188][ T5999] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 853.959473][ T5969] usb 6-1: USB disconnect, device number 32 [ 854.414173][ T5969] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 854.517271][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1763'. [ 854.521986][T13007] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 854.522015][T13007] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 854.522091][T13007] vhci_hcd vhci_hcd.0: Device attached [ 854.537639][T13007] fuse: Unknown parameter ' 0x000000000000000d' [ 854.639418][ T5969] usb 3-1: config 0 has no interfaces? [ 854.644908][ T5969] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 854.644933][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.644948][ T5969] usb 3-1: Product: syz [ 854.644960][ T5969] usb 3-1: Manufacturer: syz [ 854.644972][ T5969] usb 3-1: SerialNumber: syz [ 854.647710][ T5969] usb 3-1: config 0 descriptor?? [ 854.754075][ T5950] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 855.124726][T13008] vhci_hcd: connection reset by peer [ 855.130949][ T1161] vhci_hcd: stop threads [ 855.130972][ T1161] vhci_hcd: release socket [ 855.131929][ T1161] vhci_hcd: disconnect device [ 855.708513][T12987] delete_channel: no stack [ 855.914740][T13019] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 856.154655][ T5999] IPVS: starting estimator thread 0... [ 856.407307][T13023] IPVS: using max 38 ests per chain, 91200 per kthread [ 856.564668][ T5929] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 856.865938][ T5929] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 856.897675][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 856.994735][ T5929] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.059517][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 857.130003][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.223941][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.282536][ T5929] usb 6-1: invalid MIDI out EP 0 [ 857.510335][T13025] delete_channel: no stack [ 857.578481][ T5929] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 857.655676][ T8365] udevd[8365]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.791710][ T5929] usb 6-1: USB disconnect, device number 33 [ 857.894157][ T5999] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 857.937441][ T5930] usb 3-1: USB disconnect, device number 7 [ 858.076608][ T5999] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 858.097676][ T5999] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 858.117582][ T5999] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.149468][ T5999] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 858.171020][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.375364][ T5999] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 858.515220][ T5999] usb 5-1: invalid MIDI out EP 0 [ 858.877329][T13036] delete_channel: no stack [ 859.014517][ T5969] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 859.187810][ T5969] usb 7-1: config 0 has no interfaces? [ 859.310938][ T5969] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 859.386680][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.404930][ T8365] udevd[8365]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.488003][ T5969] usb 7-1: Product: syz [ 859.528319][ T5999] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 859.558623][ T5969] usb 7-1: Manufacturer: syz [ 859.605378][ T5969] usb 7-1: SerialNumber: syz [ 859.613530][ T5999] usb 5-1: USB disconnect, device number 121 [ 859.684881][ T5969] usb 7-1: config 0 descriptor?? [ 859.786185][ T5930] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 859.854365][ T5950] vhci_hcd: vhci_device speed not set [ 859.958342][ T5930] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 859.971492][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 859.990003][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 860.030916][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 860.061558][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 860.132136][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 860.141227][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 860.280217][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 860.517233][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 860.664841][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 860.793134][T13056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.842978][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 860.898713][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 861.104287][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 861.209320][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.356059][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 861.499169][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1779'. [ 861.532120][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 861.532156][T13066] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 861.549916][T13066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 861.574032][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 861.584200][T13066] vhci_hcd vhci_hcd.0: Device attached [ 861.614743][ T5950] usb 7-1: USB disconnect, device number 16 [ 861.699865][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.710784][T13066] fuse: Unknown parameter ' 0x000000000000000d' [ 861.734974][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 861.767098][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 861.794340][ T5969] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 861.831839][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 861.838813][ T5929] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 861.863155][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.887580][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 861.922198][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 861.966774][ T5969] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 861.980284][ T5969] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.991561][ T5969] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.019759][ T5969] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 862.029189][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 862.042350][T13067] vhci_hcd: connection reset by peer [ 862.068117][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.081143][ T1161] vhci_hcd: stop threads [ 862.092023][ T1161] vhci_hcd: release socket [ 862.103746][ T1161] vhci_hcd: disconnect device [ 862.113522][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.160917][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 862.191547][ T5969] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.200019][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 862.237511][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 862.262992][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 862.279640][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 862.291422][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 862.303072][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 862.312687][ T5930] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 862.315095][ T5969] usb 6-1: invalid MIDI out EP 0 [ 862.462423][ T5930] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 862.498116][ T8365] udevd[8365]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.599979][ T5930] usb 3-1: Product: syz [ 862.620639][ T5969] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 862.651948][ T5930] usb 3-1: Manufacturer: syz [ 862.682589][ T5930] usb 3-1: SerialNumber: syz [ 862.764253][ T5921] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 862.780548][ T5930] usb 3-1: config 0 descriptor?? [ 862.842519][ T5930] usb 3-1: can't set config #0, error -71 [ 862.942161][ T5921] usb 7-1: config 0 has no interfaces? [ 862.955529][ T5921] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 862.989509][ T5930] usb 3-1: USB disconnect, device number 8 [ 863.012324][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.171436][ T5921] usb 7-1: Product: syz [ 863.200751][ T5921] usb 7-1: Manufacturer: syz [ 863.262966][T13090] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 863.489383][ T5921] usb 7-1: SerialNumber: syz [ 863.529125][ T5921] usb 7-1: config 0 descriptor?? [ 863.764057][ T5969] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 864.247245][ T5969] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 864.260841][ T5969] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 864.283086][ T5969] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.303891][ T5969] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 864.386505][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.442353][ T5969] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 864.458365][ T5969] usb 3-1: invalid MIDI out EP 0 [ 864.688703][ T5969] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 864.890779][T13091] delete_channel: no stack [ 864.946535][ T5969] usb 3-1: USB disconnect, device number 9 [ 865.674720][ T5949] usb 6-1: USB disconnect, device number 34 [ 865.712109][T13061] delete_channel: no stack [ 866.161869][T13107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.244105][ T5969] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 866.586482][ T5969] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 866.609083][ T5969] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 866.664368][ T5969] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.691838][ T5969] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 866.732136][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.778852][ T5950] usb 7-1: USB disconnect, device number 17 [ 866.806372][ T5969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 866.827285][ T5969] usb 5-1: invalid MIDI out EP 0 [ 866.874550][ T5949] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 866.972829][ T5969] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 866.985244][ T5929] vhci_hcd: vhci_device speed not set [ 867.020964][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.044761][T13106] delete_channel: no stack [ 867.067931][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.107962][ T5969] usb 5-1: USB disconnect, device number 122 [ 867.122997][T13117] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 867.142822][ T5949] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 867.266812][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.322939][ T5949] usb 3-1: config 0 descriptor?? [ 867.436971][ T919] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 867.615913][ T919] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 867.633782][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.669295][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 867.713228][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 867.748512][ T5949] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 867.775561][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 867.805965][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.828209][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 867.843258][ T5949] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input32 [ 867.888692][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 867.952109][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 867.981866][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.012686][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 868.090885][ T5949] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 868.120996][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 868.255579][ T5921] usb 3-1: USB disconnect, device number 10 [ 868.275608][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.278461][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.278518][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 868.278547][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 868.278577][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.279680][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.279736][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 868.279765][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 868.279793][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.282162][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.282215][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 868.282244][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 868.282285][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.317733][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.317792][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 868.317822][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 868.317851][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.321296][ T919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.321356][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 868.321387][ T919] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 17286, setting to 1024 [ 868.321416][ T919] usb 7-1: config 0 interface 0 has no altsetting 0 [ 868.341130][ T919] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 868.341164][ T919] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 868.341186][ T919] usb 7-1: Product: syz [ 868.341203][ T919] usb 7-1: Manufacturer: syz [ 868.341220][ T919] usb 7-1: SerialNumber: syz [ 868.368300][ T919] usb 7-1: config 0 descriptor?? [ 868.415745][ T919] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 868.484618][T13121] fido_id[13121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 868.615180][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1797'. [ 868.676563][ T5921] usb 7-1: USB disconnect, device number 18 [ 868.712715][ T5921] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 868.780367][T13128] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 868.937523][T13128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 869.070186][T13128] vhci_hcd vhci_hcd.0: Device attached [ 869.166108][T13128] fuse: Unknown parameter ' 0x000000000000000d' [ 869.304509][ T5969] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 869.346112][T13131] vhci_hcd: connection reset by peer [ 869.353881][ T13] vhci_hcd: stop threads [ 869.360924][ T13] vhci_hcd: release socket [ 869.365835][ T13] vhci_hcd: disconnect device [ 869.927891][T13148] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 870.140817][ T5929] IPVS: starting estimator thread 0... [ 870.221388][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.224579][ T5949] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 870.234490][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.244630][T13152] IPVS: using max 38 ests per chain, 91200 per kthread [ 870.634933][ T5949] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 870.694096][ T5921] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 870.775516][ T5949] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 870.912886][ T5921] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 870.994747][ T5921] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 871.017119][ T5949] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.018384][ T5921] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.043865][ T5921] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 871.054317][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.130931][ T5921] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.151711][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 871.181329][ T5921] usb 7-1: invalid MIDI out EP 0 [ 871.271718][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.371631][T13149] delete_channel: no stack [ 871.451245][ T7024] udevd[7024]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.509088][ T5921] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 871.564515][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.588237][ T5949] usb 5-1: invalid MIDI out EP 0 [ 871.653734][ T5921] usb 7-1: USB disconnect, device number 19 [ 872.164252][ T5929] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 872.436049][ T5929] usb 6-1: config 0 has no interfaces? [ 872.448224][ T5929] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 872.459101][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.579047][ T5949] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 872.626513][ T5929] usb 6-1: Product: syz [ 872.657391][ T5929] usb 6-1: Manufacturer: syz [ 872.685231][ T5929] usb 6-1: SerialNumber: syz [ 872.724816][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 872.765127][ T5929] usb 6-1: config 0 descriptor?? [ 872.985321][ T10] usb 3-1: config 0 has no interfaces? [ 872.998455][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 873.024066][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.057323][ T10] usb 3-1: Product: syz [ 873.069371][ T10] usb 3-1: Manufacturer: syz [ 873.154242][ T10] usb 3-1: SerialNumber: syz [ 873.176997][ T10] usb 3-1: config 0 descriptor?? [ 874.118971][ T10] usb 5-1: USB disconnect, device number 123 [ 874.153108][T13145] delete_channel: no stack [ 874.414430][ T5969] vhci_hcd: vhci_device speed not set [ 874.479030][T13156] delete_channel: no stack [ 874.772401][T13179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.962127][ T5949] usb 3-1: USB disconnect, device number 11 [ 875.174074][ T5929] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 875.228716][ T5921] usb 6-1: USB disconnect, device number 35 [ 875.343401][ T5929] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 875.356723][ T5929] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 875.373033][ T5929] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.394522][ T5929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 875.426756][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.472449][ T5929] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.510955][ T5929] usb 5-1: invalid MIDI out EP 0 [ 875.753654][T13180] delete_channel: no stack [ 875.821153][ T8365] udevd[8365]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.872239][ T5929] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 875.899584][ T5929] usb 5-1: USB disconnect, device number 124 [ 876.222671][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 876.237777][T13192] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 876.244459][T13192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 876.315525][T13192] vhci_hcd vhci_hcd.0: Device attached [ 876.340085][T13192] fuse: Unknown parameter ' 0x000000000000000d' [ 876.554514][ T5929] usb 37-1: new high-speed USB device number 10 using vhci_hcd [ 876.598538][T13195] vhci_hcd: connection reset by peer [ 876.605787][ T13] vhci_hcd: stop threads [ 876.741943][ T13] vhci_hcd: release socket [ 876.761093][ T13] vhci_hcd: disconnect device [ 877.391200][ T5183] Bluetooth: hci5: command 0x0406 tx timeout [ 877.854120][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 877.861876][ T919] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 878.063196][ T5921] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 878.076122][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 878.092401][ T919] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 878.133166][ T5921] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.265602][ T919] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 878.338372][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 878.365972][ T919] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.400041][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.489675][ T919] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 878.681659][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 878.778646][ T919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.797478][ T5921] usb 3-1: invalid MIDI out EP 0 [ 878.891278][ T5921] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 878.984372][ T5949] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 879.193249][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.214938][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 879.248126][ T5949] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 879.277391][ T5949] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 879.302000][ T5949] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.335196][T13211] delete_channel: no stack [ 879.433722][ T5949] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 879.490485][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.605038][ T919] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.619913][ T919] usb 6-1: invalid MIDI out EP 0 [ 879.823698][ T10] usb 5-1: config 0 has no interfaces? [ 879.857624][T13224] delete_channel: no stack [ 880.058324][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 880.072305][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.081381][ T10] usb 5-1: Product: syz [ 880.116602][ T10] usb 5-1: Manufacturer: syz [ 880.153197][ T10] usb 5-1: SerialNumber: syz [ 880.290136][ T919] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 880.306214][ T5949] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 880.332355][ T5949] usb 7-1: invalid MIDI out EP 0 [ 880.342371][ T10] usb 5-1: config 0 descriptor?? [ 880.851996][ T5949] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 880.943342][ T5949] usb 7-1: USB disconnect, device number 20 [ 881.328509][ T919] usb 6-1: USB disconnect, device number 36 [ 881.700943][ T5929] vhci_hcd: vhci_device speed not set [ 881.713042][ T919] usb 5-1: USB disconnect, device number 125 [ 881.929465][ T5969] usb 3-1: USB disconnect, device number 12 [ 882.007087][T13208] delete_channel: no stack [ 882.344480][ T31] INFO: task syz.1.1513:11866 blocked for more than 143 seconds. [ 882.352696][ T31] Not tainted syzkaller #0 [ 882.378115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 882.482245][ T31] task:syz.1.1513 state:D stack:28328 pid:11866 tgid:11854 ppid:5868 task_flags:0x400040 flags:0x20004004 [ 882.578192][ T31] Call Trace: [ 882.591809][ T31] [ 882.603850][ T31] __schedule+0x1798/0x4cc0 [ 882.627431][ T31] ? __pfx___schedule+0x10/0x10 [ 882.642202][ T31] ? schedule+0x91/0x360 [ 882.652519][ T31] schedule+0x165/0x360 [ 882.658151][ T31] schedule_preempt_disabled+0x13/0x30 [ 882.663795][ T31] __mutex_lock+0x7e6/0x1350 [ 882.669374][ T31] ? __mutex_lock+0x5bb/0x1350 [ 882.683331][ T31] ? blk_trace_remove+0x20/0x40 [ 882.709080][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 882.752895][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 882.775471][ T31] blk_trace_remove+0x20/0x40 [ 882.797315][ T31] sg_ioctl+0x47b/0x2230 [ 882.821277][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 882.853133][ T31] ? __fget_files+0x2a/0x420 [ 882.895960][ T31] ? __fget_files+0x3a0/0x420 [ 882.927493][ T31] ? __fget_files+0x2a/0x420 [ 882.947158][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 882.967520][ T31] __ia32_compat_sys_ioctl+0x540/0x840 [ 882.981101][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 882.991635][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 882.998263][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.003611][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 883.011256][ T31] do_fast_syscall_32+0x34/0x80 [ 883.039239][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.062942][ T31] RIP: 0023:0xf7fd7539 [ 883.074937][ T31] RSP: 002b:00000000f509155c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 883.089005][ T31] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000001276 [ 883.097847][ T31] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.114185][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.128162][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 883.143889][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.168795][ T31] [ 883.173528][ T31] [ 883.173528][ T31] Showing all locks held in the system: [ 883.213163][ T31] 1 lock held by khungtaskd/31: [ 883.226827][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 883.238421][ T31] 3 locks held by kworker/u8:5/995: [ 883.253708][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 883.284338][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 883.302223][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 883.312939][ T31] 2 locks held by getty/5620: [ 883.321959][ T31] #0: ffff88814d5bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 883.351790][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 883.394215][ T31] 2 locks held by syz.1.1513/11864: [ 883.400371][ T31] 1 lock held by syz.1.1513/11866: [ 883.408511][ T31] #0: ffff8880259bba38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 883.418417][ T31] 1 lock held by syz.3.1546/11985: [ 883.424151][ T31] #0: ffff8880259bba38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 883.437316][ T31] 1 lock held by syz.3.1546/11986: [ 883.478054][ T31] #0: ffff8880259bba38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 883.488400][ T31] 1 lock held by syz.7.1830/13243: [ 883.494266][ T31] #0: ffffffff8e13f840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 883.506112][ T31] [ 883.509581][ T31] ============================================= [ 883.509581][ T31] [ 883.522200][ T31] NMI backtrace for cpu 0 [ 883.522223][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 883.522246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.522258][ T31] Call Trace: [ 883.522267][ T31] [ 883.522277][ T31] dump_stack_lvl+0x189/0x250 [ 883.522310][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.522337][ T31] ? __pfx__printk+0x10/0x10 [ 883.522377][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 883.522406][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 883.522428][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.522469][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 883.522505][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 883.522535][ T31] watchdog+0xf93/0xfe0 [ 883.522570][ T31] ? watchdog+0x1de/0xfe0 [ 883.522605][ T31] kthread+0x70e/0x8a0 [ 883.522634][ T31] ? __pfx_watchdog+0x10/0x10 [ 883.522668][ T31] ? __pfx_kthread+0x10/0x10 [ 883.522696][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.522724][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.522751][ T31] ? __pfx_kthread+0x10/0x10 [ 883.522778][ T31] ret_from_fork+0x3f9/0x770 [ 883.522803][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 883.522831][ T31] ? __switch_to_asm+0x39/0x70 [ 883.522857][ T31] ? __switch_to_asm+0x33/0x70 [ 883.522882][ T31] ? __pfx_kthread+0x10/0x10 [ 883.522908][ T31] ret_from_fork_asm+0x1a/0x30 [ 883.522953][ T31] [ 883.522961][ T31] Sending NMI from CPU 0 to CPUs 1: [ 883.671018][ C1] NMI backtrace for cpu 1 [ 883.671038][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 883.671058][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.671069][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 883.671100][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 86 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 883.671116][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 883.671133][ C1] RAX: 04b8f0a282ddcd00 RBX: ffffffff819683c8 RCX: 04b8f0a282ddcd00 [ 883.671147][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b77c5 RDI: ffffffff8be33680 [ 883.671159][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 883.671173][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38930 [ 883.671186][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039ddb40 [ 883.671198][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 883.671212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.671225][ C1] CR2: 00000000579a79bc CR3: 0000000077080000 CR4: 00000000003526f0 [ 883.671240][ C1] Call Trace: [ 883.671249][ C1] [ 883.671256][ C1] default_idle+0x13/0x20 [ 883.671273][ C1] default_idle_call+0x74/0xb0 [ 883.671291][ C1] do_idle+0x1e8/0x510 [ 883.671308][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 883.671327][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.671351][ C1] ? __pfx_do_idle+0x10/0x10 [ 883.671372][ C1] ? do_idle+0x4ef/0x510 [ 883.671389][ C1] cpu_startup_entry+0x44/0x60 [ 883.671405][ C1] start_secondary+0x101/0x110 [ 883.671432][ C1] common_startup_64+0x13e/0x147 [ 883.671464][ C1] [ 883.679609][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 883.679632][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 883.679661][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.679678][ T31] Call Trace: [ 883.679689][ T31] [ 883.679702][ T31] dump_stack_lvl+0x99/0x250 [ 883.679737][ T31] ? __asan_memcpy+0x40/0x70 [ 883.679767][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.679798][ T31] ? __pfx__printk+0x10/0x10 [ 883.679853][ T31] vpanic+0x281/0x750 [ 883.679885][ T31] ? __pfx_vpanic+0x10/0x10 [ 883.679913][ T31] ? preempt_schedule+0xae/0xc0 [ 883.679969][ T31] panic+0xb9/0xc0 [ 883.679998][ T31] ? __pfx_panic+0x10/0x10 [ 883.680037][ T31] ? __pfx_panic+0x10/0x10 [ 883.680067][ T31] watchdog+0xfd2/0xfe0 [ 883.680107][ T31] ? watchdog+0x1de/0xfe0 [ 883.680147][ T31] kthread+0x70e/0x8a0 [ 883.680182][ T31] ? __pfx_watchdog+0x10/0x10 [ 883.680215][ T31] ? __pfx_kthread+0x10/0x10 [ 883.680248][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.680279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.680312][ T31] ? __pfx_kthread+0x10/0x10 [ 883.680342][ T31] ret_from_fork+0x3f9/0x770 [ 883.680373][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 883.680405][ T31] ? __switch_to_asm+0x39/0x70 [ 883.680436][ T31] ? __switch_to_asm+0x33/0x70 [ 883.680466][ T31] ? __pfx_kthread+0x10/0x10 [ 883.680498][ T31] ret_from_fork_asm+0x1a/0x30 [ 883.680547][ T31] [ 883.994476][ T31] Kernel Offset: disabled [ 883.998826][ T31] Rebooting in 86400 seconds..