last executing test programs: 9m29.234879055s ago: executing program 32 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='0x', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='500', 0x3) 9m27.744942142s ago: executing program 33 (id=197): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2004054, &(0x7f00000011c0)={[{@mode={'mode', 0x3d, 0x7}}, {@longad}, {@mode={'mode', 0x3d, 0xcc}}, {@anchor={'anchor', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {}, {@uid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@uid_ignore}, {@unhide}, {@unhide}, {@utf8}, {@fileset={'fileset', 0x3d, 0x2000000000e42}}, {@undelete}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x1}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'longad'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}]}, 0x1, 0xc43, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) execve(0x0, &(0x7f00000009c0)={[&(0x7f0000000940)='\x00']}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') 9m23.500634528s ago: executing program 34 (id=212): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2004054, &(0x7f00000011c0)={[{@mode={'mode', 0x3d, 0x7}}, {@longad}, {@mode={'mode', 0x3d, 0xcc}}, {@anchor={'anchor', 0x3d, 0x1}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {}, {@uid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@uid_ignore}, {@unhide}, {@unhide}, {@utf8}, {@fileset={'fileset', 0x3d, 0x2000000000e42}}, {@undelete}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x1}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x00\x00.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'longad'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}]}, 0x1, 0xc43, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) symlink(0x0, &(0x7f00000002c0)='.\x02\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) execve(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000009c0)={[&(0x7f0000000940)='\x00']}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') 9m21.763384765s ago: executing program 35 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r7, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x7, 0x0, 0x0, {0x4}}, 0x18) 8m53.290724531s ago: executing program 8 (id=220): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='0x0104', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='500', 0x3) 8m53.035851262s ago: executing program 8 (id=292): syz_mount_image$udf(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x280004, &(0x7f0000000a40)=ANY=[], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x4b, 0x0, 0x0, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0xf7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000e18c000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) capset(0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 8m51.959864807s ago: executing program 8 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x3041070, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x4) 8m51.475701353s ago: executing program 8 (id=295): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 8m44.441655846s ago: executing program 8 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='0x0104', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='500', 0x3) 8m43.635767346s ago: executing program 36 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='0x0104', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='500', 0x3) 4m54.224938682s ago: executing program 6 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 4m53.154257333s ago: executing program 6 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) 4m50.409842934s ago: executing program 6 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 4m47.434209742s ago: executing program 6 (id=824): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) io_uring_setup(0x37fb, &(0x7f00000010c0)={0x0, 0x3351, 0x0, 0x8041002, 0x333}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$bt_hci(r4, 0x84, 0x7c, &(0x7f0000000000)=""/4103, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 4m45.192887355s ago: executing program 6 (id=831): sched_setscheduler(0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) 4m43.224976463s ago: executing program 6 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 4m28.605336218s ago: executing program 9 (id=862): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) io_uring_setup(0x37fb, &(0x7f00000010c0)={0x0, 0x3351, 0x0, 0x8041002, 0x333}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$bt_hci(r5, 0x84, 0x7c, &(0x7f0000000000)=""/4103, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = accept(r4, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="120004000000a4000000146b0000000000000000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$can_bcm(r5, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/77, 0x4d}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/56, 0x38}, {&(0x7f00000029c0)=""/238, 0xee}, {&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/235, 0xeb}, {&(0x7f0000002c80)=""/194, 0xc2}], 0x8, &(0x7f0000002e00)=""/109, 0x6d}, 0x10000) 4m27.373080012s ago: executing program 37 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 4m26.563287521s ago: executing program 9 (id=865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4m21.652892911s ago: executing program 9 (id=876): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) io_uring_setup(0x37fb, &(0x7f00000010c0)={0x0, 0x3351, 0x0, 0x8041002, 0x333}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$bt_hci(r5, 0x84, 0x7c, &(0x7f0000000000)=""/4103, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r4, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="120004000000a4000000146b0000000000000000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$can_bcm(r5, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/77, 0x4d}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/56, 0x38}, {&(0x7f00000029c0)=""/238, 0xee}, {&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/235, 0xeb}, {&(0x7f0000002c80)=""/194, 0xc2}], 0x8, &(0x7f0000002e00)=""/109, 0x6d}, 0x10000) 4m20.601163378s ago: executing program 9 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00081c"], 0x1c) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b) r4 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x202840) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x20000200, 0x2, "0000000000e0ff00", "00ad4a00", "10b9c9e2", "c29b3600", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef00", "3bf1000000c48400"]}) 4m18.612903181s ago: executing program 9 (id=882): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$bt_hci(r5, 0x84, 0x7c, &(0x7f0000000000)=""/4103, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r4, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="120004000000a4000000146b0000000000000000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvmsg$can_bcm(r5, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001880)=""/97, 0x61}, {&(0x7f0000001900)=""/77, 0x4d}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/56, 0x38}, {&(0x7f00000029c0)=""/238, 0xee}, {&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/235, 0xeb}, {&(0x7f0000002c80)=""/194, 0xc2}], 0x8, &(0x7f0000002e00)=""/109, 0x6d}, 0x10000) 4m15.708636335s ago: executing program 9 (id=887): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 4m0.441294048s ago: executing program 38 (id=887): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@updpolicy={0x1e0, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e21, 0xff, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x5e}, {@in=@multicast2, 0x4d3, 0x6c}, @in6=@mcast1, {0x9, 0xcb18, 0x1200, 0x17d, 0x0, 0x0, 0x7fffffffffffffff, 0x8}, {0x200000000, 0xff, 0x7, 0x1}, {0xfa, 0x1, 0x6f}, 0x70bd29, 0x3504, 0x2, 0x3, 0xff, 0x40}}]}, 0x1e0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 2m3.713305902s ago: executing program 2 (id=1112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") 2m3.315665301s ago: executing program 2 (id=1113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x34, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008002}, 0x4000800) r5 = semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000000c0)={{0x7, 0x6, 0x0, 0xb5, 'syz1\x00', 0x5}, 0x2, 0xc407fba03689b08a, 0x6, r7, 0x6, 0xf, 'syz0\x00', &(0x7f0000000080)=['@-(+\xed#][{^\\*%$-\x00', ')%-.\'\x00', '\x00', '\x1f[]\x00', '.', '^[)/%:*#,-*,{^:&\x00'], 0x2d}) semctl$SEM_INFO(r5, 0x4, 0x13, &(0x7f0000000200)=""/4096) 2m2.842530152s ago: executing program 2 (id=1115): r0 = socket(0x11, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000200060000871a806d8be201", 0x10) 2m2.763918493s ago: executing program 2 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x3041070, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$eJzs3AuYjtXaOPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEhY/0u7ve2929/X9/33/v991zf377rWNeue573v937mnmve53mvmfmu56h6LerXbkZE4l8Cf/6QIoSIEUIME0JcJ4QIhBCV4ivFXz5eQEHKv/Yk7N/r4fSr3QG7mnj+eRvPP2/j+edtPP+8jeeft/H88zaef97G82csL9s+p9j1vPLu4vf/8zJ+/f9fJLf85K82lr+x138jheeft/H88zaef97G88/beP55G8//f79a/8kxnn/exvNnLC/bDlqI/wHvQ/O6Outqf/8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMsbzvkrtBDiL/ur3RdjjDHGGGOMMcb+fXz+q90BY4wxxhhjjDHG/t8DIYUSWgQin8gvYkQBESuuEXHiWlFQXCci4noRL24QhcSNorAoIoqKYiJBFBclhBEorCARipKilIiKm0RpcbNIFGVEWVFOOFFeJIlbRAVxq6gobhOVxO2isrhDVBFVRTVRXdwpaoi7RE1RS9QWd4s6oq6oJ+qLe0QDca9oKO4TjcT9orF4QDQRD4qm4iHRTDwsmotHRAvxqGgpHhOtRGvRRrQV7f6v8l8SfcXLop/oL1LEADFQvCIGicFiiBgqholXxXDxmhghXhepYqQYJd4Qo8WbYox4S4wV48R48baYICaKSWKymCKmijTxjpgm3hXTxXtihpgpZonZIl3MEXPF+2KemC8WiA/EQvGhWCQWiyViqcgQH4lMsUxkiY/FcvGJyBYrxEqxSqwWa8RasU6sFxvERrFJbBZbxFaxTWwXn4odYqfYJXaLPWKv2Cc+E/vF5+KA+ELkiC//m/ln/yG/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8o/yUPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhX+9htj/VVpdbNKVGVUWVVOOVVeJalbVAV1q6qoblOV1O2qsrpDVVFVVTVVXd2paqi7VE1VS9VWd6s6qq6qp+qre1QDda9qqO5TjdT9qrF6QDVRD6qm6iHVTD2smqtHVAv1qGqpHlOtVGvVRrVV7dTjqr16QnVQHVUn9aTqrJ5SXdTTKlk9o7qqZ1U39Zzqrp5XPdQLqqd6UfVSvVUfdVFdUl71U/1VihqgBqpX1CA1WA1RQ9Uw9aoarl5TI9TrKlWNVKPUG2q0elONUW+psWqcGq/eVhPURDVJTVZT1FSVpt5R09S7arp6T81QM9UsNVulqzlqyG+VFvwX8t/9J/kjfn32bWq7+lTtUDvVLrVb7VF71T61T+1X+9UBdUDlqBx1UB1Uh9QhdVgdVrkqVx1RR9RRdVQdU8fUcXVcnVAn1c/qR3Va/aTOqLPqrPpZnVfn1YXfvgZCg5Zaaa0DnU/n1zG6gI7V1+g4fa0uqK/TEX29jtc36EL6Rl1YF9FFdTGdoIvrEtpo1FaTDnVJXUpH9U26tL5ZJ+oyuqwup50ur5P0Lf9y/h/110630+11e91Bd9CddCfdWXfWXXQXnayTdVfdVXfT3XR33V330D10T91T99K9dB/dR/fVfXU/3U+n6BQ9UL+iB+nBeogeqofpV/VwPVyP0CN0qk7Vo/QoPVqP1mP0GD1Wj9Xj9Xg9QU/Qk/QkPUVP0Wk6TU/T0/R0PV3P0DP0LD1Lp+t0PVfP1fP0PL1AL9AL9UK9SC/SS/QSnaEzdKbO1Fk6Sy/Xy3W2XqFX6FV6lV6j1+h1ep3eoDfoTXqT3qK36Gy9XW/XO/QOvUvv0nv0Hr1P79P79X59QB/QOTpHH9QH9SF9SB/Wh3WuztVH9BF9VB/Vx/QxfVwf1yf0CX1Kn9Kn9Wl9Rp/R5/Q5fV6f1xf0BX1JX7p82RfIQAY60EG+IF8QE8QEsUFsEBfEBQWDgkEkiATxQXxQKLgxKBwUCYoGxYKEoHhQIjABBjagIAxKBqWCaHBTUDq4OUgMygRlg3KBC8oHScEtQYXg1qBicFtQKbg9qBzcEVQpIIJqQfXgzqBGcFdQM6gV1A7uDuoEdYN6Qf3gnqBBcG/QMLgvaBTcHzQOHgiaBA8GTYOHgmbBw0Hz4JGgRfBo0DJ4LGgVtA7aBG2Ddv9YP6j6L9T3/kyRJ1w/09+kmAFmoHnFDDKDzRAz1Awzr5rh5jUzwrxuUs1IM8q8YUabN80Y85YZa8aZ8eZtM8FMNJPMZDPFTDVp5h0zzbxrppv3zAwz08wys026mWPmmvfNPDPfLDAfmIXmQ7PILDZLzFKTYT4ymWaZyTIfm+XmE5NtVpiVZpVZbdaYtWadWW82mI1mk9lstpitZpvZbj41O8xOs8vsNnvMXrPPfGb2m8/NAfOFyTFfmoPmT+aQ+cocNl+bXPONOWK+NUfNd+aY+d4cNz+YE+akOWV+NKfNT+aMOWvOmZ/NefOLuWAumkvGX764v/zyjho15sN8GIMxGIuxGIdxWBALYgQjGI/xWAgLYWEsjEWxKCZgApbAEngZIWFJLIlRjGJpLI2JmIhlsSw6dJiESVgBK2BFrIiVsBJWxspYBatgNayGd+KdeBfehbWwFt6Nd2NdrIv1sT42wAbYEBtiI2yEjbExNsEm2BSbYjNshs2xObbAFtgSW2IrbIVtsA22w3bYHttjB+yAnbATdsbO2AW7YDImY1fsit2wG3bH7tgDe2BP7Im9sBf2wT7YF/tiP+yHKZiCA3EgDsJBOASH4DAchsNxOI7AEZiKqTgKR+FoHI1jcAyOxXE4Ht/GCTgRJ+FknIJTMQ3TcBpOw+k4HWfgDJyFszAd03EuzsV5OA8X4AJciAtxES7CJbgEMzADMzETszALl+NyzMZsXIkrcTWuxrW4FtfjetyIG3EzbsatuBW343bcgTtwF+7CPbgH9+E+3I/78QAewBzMwYN4EA/hITyMhzEXc/EIHsGjeBSP4TE8jsfxBJ7AU3gKT+NpPINn8Byew/P4C17Ai3gJPcZYKWLtNTbOXmsL2utsjC1g/zYuaovZBFvclrDGFrZF/i5Ga22iLWPL2nLW2fI2yd7yu7iKrWqr2er2TlvD3mVr/i5uYO+1De19tpG939a39/xd3Ng+YJvYR21T+5htZlvb5ratbWEftS3tY7aVbW3b2La2s33KdrFP22T7jO1qn/1dnGmX2fV2g91oN9n99nN7zv5sj9rv7Hn7i+1n+9th9lU73L5mR9jXbaod+bt4vH3bTrAT7SQ72U6xU38Xz7KzbbqdY+fa9+08O/93cYb9yC60WXaRXWyX2KW/xpd7yrIf2+X2E5ttV9iVdpVdbdfYtXbdX3tdZbfYrXab3Wc/szvsTrvL7rZ77N5f48vnccB+YXPsl/aI/dYesl/Zw/aYzbXf/BpfPr9j9nt73P5gT9iT9pT90Z62P9kz9uyv53/53H+0F+0l660gIEmKNAWUj/JTDBWgWLqG4uhaKkjXUYSup3i6gQrRjVSYilBRKkYJVJxKkCEkS0QhlaRSFKWbqDTdTIlUhspSOXJUnpLoFqpAt1JFuo0q0e1Ume6gKlSVqlF1upNq0F1Uk2pRbbqb6lBdqkf16R5qQPdSQ7qPGtH91JgeoCb0IDWlh6gZPUzN6RFqQY9SS3qMWlFrakNtqR09Tu3pCepAHakTPUmd6SnqQk9TMj1DXelZ6kbPUXd6nnrQC9STXqRe1Jv60EvUl16mftSfUmgADaRXaBANpiE0lIbRqzScXqMR9Dql0kgaRW/QaHqTxtBbNJbG0Xh6mybQRJpEk2kKTaU0eoem0bs0nd6jGTSTZtFsSqc5NJfep3k0nxbQB7SQPqRFtJiW0FLKoI8ok5ZRFn1My+kTyqYVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp09pB+2kXbSb9tBe2kef0X76nA7QF5RDX9JB+hMdoq/oMH1NufQNHaFv6Sh9R8foezpOP9AJOkmn6Ec6TT/RGTpL5+hnOk+/0AW6SJfIkwghlKEKdRiE+cL8YUxYIIwNrwnjwmvDguF1YSS8PowPbwgLhTeGhcMiYdGwWJgQFg9LhCbE0IYUhmHJsFQYDW8KS4c3h4lhmbBsWC50YfkwKbwlrBDeGlYMbwsrhbeHlcM7wiph1fDR+6uHd4Y1wrvCmmGtsHZ4d1gnrBvWC+uH94QNwnvDhuF9YaPw/rBi+EDYJHwwbBo+FDYLHw6bh4+ELcJHw5bhY2GrsHXYJmwbtgsfD9uHT4Qdwo5hp/DJsHP4VNglfDpMDp8Ju4bP/uHxlHBAODB8JXwl9P4+tSS6NJoR/SiaGV0WzYp+HF0e/SSaHV0RXRldFV0dXRNdG10XXR/dEN0Y3RTdHN0S3RrdFvW+fn7hwEmnnHaBy+fyuxhXwMW6a1ycu9YVdNe5iLvexbsbXCF3oyvsiriirphLcMVdCWccOuvIha6kK+Wi7iZX2t3sEl0ZV9aVc86Vd0murWvn2rn27gnXwXV0ndyT7kn3lHvKPe2eds+4ru5Z180957q7510P94J7wb3oernero97yfV1L7t+rr9LcSluoBvoBrlBbogb4oa5YW64G+5GuBEu1aW6UW6UG+1GuzFujBvrxrrxbryb4Ca4SW6Sm+KmuDSX5qa5aW66m+5muBlulpvl0l26m+vmunlunlvgFriFiQvdIrfILXFLXIbLcJku02W5LLfcLXfZLtutdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73C63y+1xe9w+t8/td/vdAXfA5bgcd9AddIfcIXfYfe1y3TfuiPvWHXXfuWPue3fc/eBOuJPulPvRnXY/uTPurDvnfnbn3S/ugrvoLjnv0iLvRKZF3o1Mj7wXmRGZGZkVmR1Jj8yJzI28H5kXmR9ZEPkgsjDyYWRRZHFkSWRpJCPyUSQzsiySFfk4sjzySSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/yZf2N/tEX8aX9eW88+V9kr/FV/C3+or+Nl/J3+4r+zt8FV/VV/OP+Va+tW/j2/p2/nHf3j/hO/iOvpN/0nf2T/ku/mmf7J/xXf2zvpt/znf3z/se/gXf07/oe/nevo9/yff1L/t+vr9P8QP8QP+KH+QH+yF+qB/mX/XD/Wt+hH/dp/qRfpR/w4/2b/ox/i0/1o/z4/3bfoKf6Cf5yX6Kn+rT/Dt+mn/XT/fv+Rl+pp/lZ/t0P8fP9e/7eX6+X+A/8Av9h36RX+yX+KU+w3/kM/0yn+U/9sv9Jz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/qd/idfpff7ff4vX6f/8zv95/7A/4Ln+O/9Af9n/wh/5U/7L/2uf4bf8R/64/67/wx/70/7n/wJ/xJf8r/6E/7n/wZf9af8z/78/4Xf8Ff9Jf4b9YYY4wxxv5L1B8cH/BPPid/W5cNFEJcu7NY7j/W3Fz4z/vBMqFzRAjxTP+eD/9l1amTkpLy22OzlQhKLRZCRK7k5xNX4hWik3hKJIuOosI/7W+w7H2e/qB+9HYhYv/auRAx4i/x39a/9T+o//iT4zMrh+fi/5P6i4VILHUlp4C4El+pX/E/qF+k/R/0X+CrNCE6/E1OnLgSX6mfJJ4Qz4rkv3skY4wxxhhjjDH2Z4Nlte5/dP98+f48QV/JyS+uxH90f84YY4wxxhhjjLGr7/nefZ5+PDm5Y3fe8IY3vPnr5mr/ZGKMMcYYY4z9u1256L/anTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/49/J3a1z5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi72v5PAAAA//+nkUE+") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x4, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x4) 2m1.226062073s ago: executing program 2 (id=1121): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x80001) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) close(r6) mmap(&(0x7f00003d9000/0x4000)=nil, 0x4000, 0xc, 0x204031, 0xffffffffffffffff, 0xc13df000) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r11}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r8, 0xfeff, 0x2, 0x101, 0x8cd, 0x2}, 0x14) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000480)=0x55) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0xfffffffffffffd83}], 0x1}}, {{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @private}}, 0x0, &(0x7f0000006100)=[{&(0x7f00000016c0)=""/4096}, {&(0x7f00000026c0)=""/4096}, {&(0x7f0000004000)=""/4096}, {&(0x7f0000005000)=""/4096}, {&(0x7f0000006000)=""/103}, {&(0x7f0000006080)=""/82}], 0x0, &(0x7f0000006180)=""/110}, 0x8000}, {{&(0x7f0000006200)=@qipcrtr, 0x0, &(0x7f0000006400)=[{&(0x7f0000006280)=""/171}, {&(0x7f0000006340)=""/134}], 0x0, &(0x7f0000006440)=""/4096}}], 0x2, 0x0, 0x0) 2m0.70617968s ago: executing program 2 (id=1127): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x85) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1c10c1, 0x9c37611dc13d0c3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) creat(&(0x7f0000000040)='.\x02\x00', 0x0) 2m0.371856981s ago: executing program 39 (id=1127): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x85) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1c10c1, 0x9c37611dc13d0c3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) creat(&(0x7f0000000040)='.\x02\x00', 0x0) 1m56.298190169s ago: executing program 7 (id=1144): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x412, 0x8, {0x77359400}, {0x77359400}, {0x1, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "faa41db9149f5809"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x648a1) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 1m56.003037813s ago: executing program 7 (id=1145): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) 1m55.909815887s ago: executing program 7 (id=1147): clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x1dc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x1bc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x258}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x10) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace\x00', &(0x7f00000001c0)={0x40042, 0x20, 0x2a}, 0x18) mkdirat(r1, &(0x7f0000000200)='./trace\x00', 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) 1m55.768700288s ago: executing program 7 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$eJzs3V1v08gawPHHpT1EOVLP0eEIoarAUM6RilSCk0BQxJXXmaSGxI5sB7VXqKIpqkhhRVlp2xu2N+yutPsh2Mv9EPuN0H4EVh47bWnzsmxft/r/onYce+J5nFrzdNp4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCy3ZttFS5qe31lSw7m1MGjtPc1efWiF3PmsGNGuiJV8SS4n19JV1/67t/lq8m1OZtNns5JLipxs//Pqvx9dmZzov35EwF/kl7+4p82t7ZcrvV73zXEFcg5dvzx8W0P7XhR4LaehlRcFqlqp2PcW65Gqe00dLUexbik31E4chGrevaOK1WpZ6cJy0PEbNaep+ysf3i3ZdkU9LrS1E0aBf+9xIXIXvWbT8xumTrI5qfMwORGfeLGKtdNSam291y2PO4CkUvHPVCqNq1SyS6VisVQqVh5UHzy07clDK+wD5FCN4ztp8fd0jL03cDQTWf6XpnjiS0eWRA18uFKTUAJpDdme6ef//9/TI9vdn//7Wf7a3uYZMfn/RvrsxrD8PySW03tsypZsy0tZkZ70pCtvzjyi0300RIsvnkQSiCctccwala1RUpWKVMSWZ7Io9ankh1gXT5qiJZJliSQWbc4oV0LR4kgsgYSiZF5cuSNKilKVqpRFiZaCLEsgHfGlITVxzF7WZN2872VR1uHokrNGyW6l4tDDyPfPu66URhwt+R9Hd5zdN3Akn/r5HwAAAAAAXFiW+ev7lPm6bp7Xvaa2zzosAAAAAABwjMx//meTwnw667pYjP8BAAAAALhoLHONnSUiebmZLq2JZS6X4o8AAAAAAABcEOb//zeSwsyBclOs3elSGP8DAAAAAHBB/DB2jv2ofdn67XcJwylrp730P2vDzM3rbFxKX3fp4B7j+ow1ne3EFJW0mJx09ayVSyvtToL5MSvWxsVh7QXg7Lb13ZcEcGVSfpJbaZ1bq2m5mm35V9pKvu41dcENmo+K4jjTE7Feir95tf6tmMP/0W9NWzlZ73ULz1/3Vk0sO8ledjayCRQPzaM4Ipa3Zr4Fc83FwCOeMhdiZO3mLVlb73Xt9tLlbM/OxkS6MPF5i++mR7T5XubSWnPZjLf5/pa0zVzSZrEw7OizKIpHPPL3cjutc3v+dloMiKI0LorS/igGvxdHj6I8LoryEaMAgLOyNiYLWXIg7w7LOyN7uQPZPen2Rmf3L//1wvTo82md+RnTsU7ODOjR7XE9un3E7PbroXsgDcuxSbs/H8iqH5IXfBjabtQsWclbeOntxtdydXNr++76xsqL7ovuq1KpXLHv2/aDkkyZw8gKcg8AYID999ixBub/UXfh+fQpyd33s1H1zsFRdZbx/rP7kYKCPJfX0pNVWTBXG5hPHAz8vSO/72MIC2NGrXmTJtM7vCyMGNX9w1zl0N9vaWTdz2Mon8aPAgCAUzM3Jg+Pzv/p2H1hzLg7L2tP++0tjBkd5/fdrQ0AAJwMHX608vH3Vhh67WfFarXoxItahYH7RIVeraGV58c6dBcdv6FVOwziwA2aycJTr6YjFXXa7SCMVT0IVTuIvCUzfaDKbv0e6Zbjx54btZvaibRyAz923FjVvMhV7c5XTS9a1KF5cdTWrlf3XCf2Al9FQSd0dUGpSOt9Fb2a9mOv7iWLvmqHXssJc+pp0Oy0tKrpyA29dhykO+y35fn1IGyZ3RbO+s0GAOCc2NzafrnS63XfnODCwIZzp36oAAAgMyZLAwAAAAAAAAAAAAAAAAAAAACAc+A0rv9j4YIv9KeCPi/xsHAMC2O7jncn3jkBOFF/BAAA//9mb05r") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2}, 0x20) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x9800, &(0x7f0000001dc0)={0xe, 0x1, 0x80000}, 0x20) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x2, 0x0) writev(r6, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="8e06bbb1a6a7", 0x6}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2dc22}, @IFLA_TXQLEN={0x8, 0xd, 0x80000005}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) 1m54.820005429s ago: executing program 7 (id=1149): rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1m53.092267137s ago: executing program 7 (id=1156): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x104, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc4, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_LIMIT={0x8, 0x5, 0x80000001}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0xfffffffe, 0x2, 0x4, 0x10001, 0x80000001, 0x80, 0x4, 0x1, 0x2, 0x9, 0x1f, 0x1d, 0xff, 0xe, 0x80000000}}, @TCA_GRED_PARMS={0x38, 0x1, {0x34e, 0x10001, 0x5, 0x9, 0x10, 0xb59, 0x3, 0x9f, 0x3, 0x4, 0x1, 0x9, 0xb, 0x8, 0x0, 0x8}}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x8, 0x94, 0xe, 0x5423cc1f, 0x7, 0x979, 0x8, 0x4, 0x10001, 0x12, 0x10, 0x9, 0x52, 0x8, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10000}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) r6 = syz_ublk_setup_io_uring(0x47bd, &(0x7f00000003c0)={0x0, 0xb5ae, 0x8000, 0x2, 0x3a5}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) io_uring_setup(0x5727, &(0x7f0000000580)={0x0, 0x495c, 0x8000, 0x8001, 0x8d, 0x0, r6}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x18, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x4, 0x8, 0x3, 0x0, 0x1, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4000003}) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000004000001) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="40dfffff0f00210428bd7006faff00000000003f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a000100aaaaaaaaaa020000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000800) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0x8004f50c, &(0x7f0000000080)={@desc={0x4100, 0x0, @auto="97d853586ffab461"}}) bind$packet(r10, &(0x7f00000000c0)={0x11, 0x19, r3, 0x1, 0x10, 0x6, @local}, 0x14) 1m52.838670625s ago: executing program 40 (id=1156): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x104, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc4, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_LIMIT={0x8, 0x5, 0x80000001}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0xfffffffe, 0x2, 0x4, 0x10001, 0x80000001, 0x80, 0x4, 0x1, 0x2, 0x9, 0x1f, 0x1d, 0xff, 0xe, 0x80000000}}, @TCA_GRED_PARMS={0x38, 0x1, {0x34e, 0x10001, 0x5, 0x9, 0x10, 0xb59, 0x3, 0x9f, 0x3, 0x4, 0x1, 0x9, 0xb, 0x8, 0x0, 0x8}}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x8, 0x94, 0xe, 0x5423cc1f, 0x7, 0x979, 0x8, 0x4, 0x10001, 0x12, 0x10, 0x9, 0x52, 0x8, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10000}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) r6 = syz_ublk_setup_io_uring(0x47bd, &(0x7f00000003c0)={0x0, 0xb5ae, 0x8000, 0x2, 0x3a5}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) io_uring_setup(0x5727, &(0x7f0000000580)={0x0, 0x495c, 0x8000, 0x8001, 0x8d, 0x0, r6}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x18, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x4, 0x8, 0x3, 0x0, 0x1, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4000003}) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000004000001) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="40dfffff0f00210428bd7006faff00000000003f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a000100aaaaaaaaaa020000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000800) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0x8004f50c, &(0x7f0000000080)={@desc={0x4100, 0x0, @auto="97d853586ffab461"}}) bind$packet(r10, &(0x7f00000000c0)={0x11, 0x19, r3, 0x1, 0x10, 0x6, @local}, 0x14) 9.062845526s ago: executing program 3 (id=2062): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7eff, 0xf, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0xa, 0x70}}}}}]}}]}}, 0x0) 7.522074047s ago: executing program 0 (id=2073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.43056389s ago: executing program 3 (id=2074): syz_usb_connect$midi(0x5, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x10, 0x1235, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x1, 0x6, 0x20, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, [@ms_header={0x7, 0x24, 0x1, 0xe98, 0x7}], [{{0x9, 0x5, 0xf, 0x3, 0x3ff, 0xae, 0x5e, 0x1, {0x4}}}, {{0x9, 0x5, 0xd, 0x12, 0x400, 0x9, 0x0, 0x0, {0x4}}}]}}}}}]}}, 0x0) 7.283681432s ago: executing program 0 (id=2076): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x80000) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0x140, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xb, 0x26, 0x2}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x6, [0x0, 0x1, 0x1, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x706, 0xa8, 0x5, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x30, 0xa, 0x2}}}}}}}}]}}, 0x0) 7.064715995s ago: executing program 4 (id=2078): syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902"], 0x0) close(0x4) 6.137130684s ago: executing program 5 (id=2081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) 5.821954641s ago: executing program 5 (id=2082): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000001300)=[{&(0x7f0000000140)={&(0x7f0000000080)={0x0, &(0x7f0000000040)="8c", 0x1, 0x1}, 0x0, 0x1}, 0x0}], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e21000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c", @ANYRES32=r5, @ANYRES16=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000300000a28000000000a03000000000008000000030000030800024000000004093640cbebc5b9a8874200010073797ac6a7321b0028000000000a110400000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x200040d0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x321}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet_tcp_int(r8, 0x6, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c87e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003d40)=""/178, 0xb2}, {&(0x7f0000003e00)=""/29, 0x1d}], 0x3}, 0x9}], 0x4, 0x40012100, 0x0) 5.616742771s ago: executing program 3 (id=2086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.236160998s ago: executing program 4 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5.22153096s ago: executing program 3 (id=2090): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.148616111s ago: executing program 0 (id=2091): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xa}, 0x0, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x6}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 4.957876179s ago: executing program 4 (id=2093): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB="0100000000000000000014", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.004641542s ago: executing program 5 (id=2095): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8169523010902240001000064000904340102d469e70009058a", @ANYBLOB="fb4518b42128"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.969733737s ago: executing program 4 (id=2096): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x20000002, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x6, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x4000002, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0xfffffffe, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x9, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x7, 0xd, 0x800003, 0x200, 0x400180, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0x6000, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.862190463s ago: executing program 4 (id=2097): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.918230053s ago: executing program 5 (id=2104): syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.800835061s ago: executing program 1 (id=2106): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB="0100000000000000000014", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.713403074s ago: executing program 1 (id=2107): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000001300)=[{&(0x7f0000000140)={&(0x7f0000000080)={0x0, &(0x7f0000000040)="8c", 0x1, 0x1}, 0x0, 0x1}, 0x0}], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e21000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000300000a28000000000a03000000000008000000030000030800024000000004093640cbebc5b9a8874200010073797ac6a7321b0028000000000a110400000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x200040d0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x321}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) setsockopt$inet_tcp_int(r8, 0x6, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c87e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003d40)=""/178, 0xb2}, {&(0x7f0000003e00)=""/29, 0x1d}], 0x3}, 0x9}], 0x4, 0x40012100, 0x0) 1.217103678s ago: executing program 0 (id=2108): unshare(0x24000480) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 1.174019734s ago: executing program 1 (id=2109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.081921338s ago: executing program 0 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYBLOB="0100000000000000000014", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 968.444495ms ago: executing program 1 (id=2111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 894.672796ms ago: executing program 1 (id=2112): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5683}, {r0, 0x421}, {0xffffffffffffffff, 0x12dd}], 0x3, 0x0, 0x0, 0x0) close(0x3) 609.692389ms ago: executing program 3 (id=2113): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000b40)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x2000001a}) epoll_pwait2(r2, &(0x7f00000004c0)=[{}], 0x1, 0x0, 0x0, 0x0) 454.014272ms ago: executing program 3 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 439.256504ms ago: executing program 5 (id=2115): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000005280)='htcp\x00', 0x5) 334.00222ms ago: executing program 5 (id=2116): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) pipe2$9p(0x0, 0x8000) fanotify_mark(r2, 0x21, 0x8001020, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffd, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b75072501020207000905", @ANYBLOB='\"$F'], 0x0) 219.639047ms ago: executing program 4 (id=2117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB="0100000000000000000014", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 118.462362ms ago: executing program 0 (id=2118): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 1 (id=2119): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000001300)=[{&(0x7f0000000140)={&(0x7f0000000080)={0x0, &(0x7f0000000040)="8c", 0x1, 0x1}, 0x0, 0x1}, 0x0}], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e21000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000300000a28000000000a03000000000008000000030000030800024000000004093640cbebc5b9a8874200010073797ac6a7321b0028000000000a110400000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x200040d0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x321}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) setsockopt$inet_tcp_int(r8, 0x6, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c87e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000003d40)=""/178, 0xb2}, {&(0x7f0000003e00)=""/29, 0x1d}], 0x3}, 0x9}], 0x4, 0x40012100, 0x0) kernel console output (not intermixed with test programs): 643.153851][T10288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.186292][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 643.187075][T10288] Cannot create hsr debugfs directory [ 643.545531][T10408] netlink: 'syz.0.1359': attribute type 29 has an invalid length. [ 643.594943][T10408] netlink: 'syz.0.1359': attribute type 29 has an invalid length. [ 643.705896][T10412] netlink: 'syz.0.1359': attribute type 29 has an invalid length. [ 643.718042][ T4596] Bluetooth: hci4: command 0x0409 tx timeout [ 643.754792][T10408] netlink: 'syz.0.1359': attribute type 29 has an invalid length. [ 644.006524][T10288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.127178][T10288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.598538][T10288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.653711][T10498] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.854402][T10288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.043743][ T4596] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 645.068412][T10527] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 645.136027][T10288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 645.173905][T10288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 645.216582][T10288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 645.252243][T10288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 645.259306][ T4596] usb 6-1: device descriptor read/64, error -71 [ 645.274998][T10530] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 645.309757][T10530] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 645.482010][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.538287][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.552682][ T4596] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 645.582615][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.591256][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.631326][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.651282][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.666542][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.673707][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.704844][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.732609][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.761793][ T4596] usb 6-1: device descriptor read/64, error -71 [ 645.767679][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.775406][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.793348][ T4859] Bluetooth: hci4: command 0x041b tx timeout [ 645.830752][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.858067][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.878896][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.891521][ T4596] usb usb6-port1: attempt power cycle [ 645.921006][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.943608][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.978236][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.018530][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.057323][T10288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.086263][T10578] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 646.099449][T10288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.111046][T10578] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 646.167391][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.195599][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.243255][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.264162][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.273911][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.284075][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.310726][ T4596] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 646.430069][ T4596] usb 6-1: device descriptor read/8, error -71 [ 646.636989][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.665242][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.699981][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.709319][ T4596] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 646.829180][ T4596] usb 6-1: device descriptor read/8, error -71 [ 646.937441][T10631] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 646.948882][ T4596] usb usb6-port1: unable to enumerate USB device [ 646.972008][T10631] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 647.235697][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 647.263533][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 647.311477][T10473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 647.329672][T10473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.360491][T10473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 647.398192][T10473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 647.419697][T10288] device veth0_vlan entered promiscuous mode [ 647.459813][T10288] device veth1_vlan entered promiscuous mode [ 647.534241][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 647.552598][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 647.576074][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 647.650383][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 647.685394][T10288] device veth0_macvtap entered promiscuous mode [ 647.720954][T10288] device veth1_macvtap entered promiscuous mode [ 647.809084][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.835436][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.865124][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.867482][ T5303] Bluetooth: hci4: command 0x040f tx timeout [ 647.876255][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.891813][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.902890][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.914349][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.927319][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.937650][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.949050][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.996980][T10288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.114894][T10681] device syzkaller0 entered promiscuous mode [ 648.151026][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 648.165985][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 648.183895][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 648.197505][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 648.218655][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.231373][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.245508][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.258658][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.269197][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.283082][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.305331][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.324510][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.348479][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.359509][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.373328][T10288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.384991][T10702] __nla_validate_parse: 2 callbacks suppressed [ 648.392286][T10702] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1439'. [ 648.402280][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 648.414526][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 648.423864][T10702] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1439'. [ 648.494610][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 648.515143][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 648.544162][T10288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.563659][T10288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.574760][T10288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.591790][T10288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.777548][T10473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.800047][T10473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.824000][T10733] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1452'. [ 648.875118][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.905953][T10468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.929450][T10468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.954606][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 649.091396][T10746] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 649.131861][T10744] device syzkaller0 entered promiscuous mode [ 649.142969][T10748] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 649.190361][T10748] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 649.213496][T10757] netlink: 4044 bytes leftover after parsing attributes in process `syz.4.1462'. [ 649.513746][T10778] netlink: 'syz.0.1472': attribute type 28 has an invalid length. [ 649.668001][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1477'. [ 649.716051][T10788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1477'. [ 649.820922][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 649.941841][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 650.399883][T10838] device dummy0 entered promiscuous mode [ 650.484552][T10809] Set syz1 is full, maxelem 6117 reached [ 650.928478][T10880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1517'. [ 652.661627][T10982] syzkaller0: create flow: hash 984827430 index 1 [ 652.712082][ T4262] syzkaller0: tun_net_xmit 76 [ 652.717015][ T4262] syzkaller0: tun_net_xmit 48 [ 652.737030][ T4596] syzkaller0: tun_net_xmit 76 [ 652.866464][ T4262] syzkaller0: tun_net_xmit 76 [ 652.912513][T10972] syzkaller0: delete flow: hash 984827430 index 1 [ 653.717088][T11038] __nla_validate_parse: 8 callbacks suppressed [ 653.717107][T11038] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1567'. [ 654.271174][T11077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1582'. [ 654.404336][T11089] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 654.482621][T11094] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1588'. [ 654.536287][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1588'. [ 654.595459][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1588'. [ 654.825729][T11123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1601'. [ 654.892463][T11130] syz.0.1604 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 655.063711][T11140] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 655.174749][T11153] ip_tables: iptables: counters copy to user failed while replacing table [ 655.372526][ T5303] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 655.735254][ T5303] usb 5-1: config 2 has an invalid interface number: 43 but max is 0 [ 655.755178][ T5303] usb 5-1: config 2 has no interface number 0 [ 655.781722][ T5303] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 655.821141][ T5303] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 655.831642][ T4596] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 655.851907][ T5303] usb 5-1: config 2 interface 43 has no altsetting 0 [ 655.919792][T11162] block device autoloading is deprecated and will be removed. [ 656.011771][ T5303] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 656.031167][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.031857][ T4596] usb 1-1: device descriptor read/64, error -71 [ 656.040029][ T5303] usb 5-1: Product: syz [ 656.052538][ T26] audit: type=1326 audit(1791507696.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7ca2d159 code=0x7ffc0000 [ 656.070925][ T5303] usb 5-1: Manufacturer: syz [ 656.091267][ T5303] usb 5-1: SerialNumber: syz [ 656.126522][ T26] audit: type=1326 audit(1791507696.727:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7eff7ca2d159 code=0x7ffc0000 [ 656.151279][T11146] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 656.158388][T11146] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 656.225902][ T26] audit: type=1326 audit(1791507696.727:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7ca2d159 code=0x7ffc0000 [ 656.271394][ T26] audit: type=1326 audit(1791507696.727:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7eff7ca2d159 code=0x7ffc0000 [ 656.325736][ T26] audit: type=1326 audit(1791507696.757:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7ca2d159 code=0x7ffc0000 [ 656.378372][ T4596] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 656.390987][ T26] audit: type=1326 audit(1791507696.807:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7ca2d159 code=0x7ffc0000 [ 656.521511][ T5303] ums-usbat 5-1:2.43: USB Mass Storage device detected [ 656.573311][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 656.627350][ T5303] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 656.640862][ T4596] usb 1-1: device descriptor read/64, error -71 [ 656.766379][ T5303] ums-usbat: probe of 5-1:2.43 failed with error 3 [ 656.786669][ T5303] usb 5-1: USB disconnect, device number 2 [ 656.788838][ T4596] usb usb1-port1: attempt power cycle [ 656.871114][ T4262] usb 2-1: Using ep0 maxpacket: 8 [ 657.010183][ T4262] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.032180][ T4262] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.056904][ T4262] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.077435][ T4262] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.104853][ T4262] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.124693][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.239736][ T4596] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 657.339748][ T4596] usb 1-1: device descriptor read/8, error -71 [ 657.409649][ T4262] usb 2-1: GET_CAPABILITIES returned 0 [ 657.409690][ T4262] usbtmc 2-1:16.0: can't read capabilities [ 657.449971][T11221] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 657.618612][ T4596] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 657.679223][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 657.713169][ T4262] usb 2-1: USB disconnect, device number 3 [ 657.739248][ T4596] usb 1-1: device descriptor read/8, error -71 [ 657.860486][ T4596] usb usb1-port1: unable to enumerate USB device [ 657.933782][T11254] loop4: detected capacity change from 0 to 7 [ 657.963980][T11254] Dev loop4: unable to read RDB block 7 [ 657.979232][T11254] loop4: unable to read partition table [ 657.999061][T11254] loop4: partition table beyond EOD, truncated [ 658.039133][T11254] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.085131][ T3558] Dev loop4: unable to read RDB block 7 [ 658.108391][ T3558] loop4: unable to read partition table [ 658.136164][ T3558] loop4: partition table beyond EOD, truncated [ 658.642324][ T4230] hid-generic 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 658.877221][T11296] fido_id[11296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.927637][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 659.163912][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 659.342259][ T4262] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 659.360724][ T4262] usb 4-1: config 2 has no interface number 0 [ 659.366897][ T4262] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 659.405377][ T4262] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 659.436546][ T4262] usb 4-1: config 2 interface 43 has no altsetting 0 [ 659.456988][ T4232] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 659.667023][ T4262] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 659.676275][ T4232] usb 6-1: device descriptor read/64, error -71 [ 659.691397][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.720192][ T4262] usb 4-1: Product: syz [ 659.743115][ T4262] usb 4-1: Manufacturer: syz [ 659.750615][ T4262] usb 4-1: SerialNumber: syz [ 659.768816][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.776392][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.807007][T11294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 659.826551][T11294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 659.880459][T11346] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1664'. [ 659.933886][T11346] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1664'. [ 659.956523][ T4232] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 660.044819][T11294] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1651'. [ 660.085087][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1651'. [ 660.176896][ T4232] usb 6-1: device descriptor read/64, error -71 [ 660.216424][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1669'. [ 660.247345][ T4262] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 660.278060][ T4262] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 660.296587][ T4232] usb usb6-port1: attempt power cycle [ 660.371950][ T4262] ums-usbat: probe of 4-1:2.43 failed with error 3 [ 660.414641][ T4262] usb 4-1: USB disconnect, device number 2 [ 660.555449][T11373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 660.571260][T11373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 660.715790][ T4596] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 660.723562][ T4232] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 660.845805][ T4232] usb 6-1: device descriptor read/8, error -71 [ 660.981271][T11367] loop1: detected capacity change from 0 to 32768 [ 661.074813][T11367] JBD2: Ignoring recovery information on journal [ 661.120924][ T4232] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 661.155575][ T4596] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 661.174268][ T4596] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 661.217896][ T4596] usb 1-1: config 220 has no interface number 2 [ 661.224245][ T4596] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 661.241706][T11367] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 661.274546][ T4596] usb 1-1: config 220 interface 0 has no altsetting 0 [ 661.285183][ T4232] usb 6-1: device descriptor read/8, error -71 [ 661.292897][ T4596] usb 1-1: config 220 interface 76 has no altsetting 0 [ 661.310517][ T4596] usb 1-1: config 220 interface 1 has no altsetting 0 [ 661.424021][ T4232] usb usb6-port1: unable to enumerate USB device [ 661.515091][ T4596] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 661.533269][ T4596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.560909][ T4596] usb 1-1: Product: syz [ 661.570177][ T4596] usb 1-1: Manufacturer: syz [ 661.579629][ T4596] usb 1-1: SerialNumber: syz [ 661.646306][ T9434] ocfs2: Unmounting device (7,1) on (node local) [ 661.899245][T11420] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 661.964932][ T4596] usb 1-1: selecting invalid altsetting 0 [ 661.985373][ T4596] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 662.008589][ T4596] usb 1-1: No valid video chain found. [ 662.088578][T11438] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1696'. [ 662.115980][ T4596] usb 1-1: selecting invalid altsetting 0 [ 662.157894][T11441] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1696'. [ 662.188434][T11440] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1685'. [ 663.062906][ T4596] usbtest: probe of 1-1:220.1 failed with error -22 [ 663.072474][ T4596] usb 1-1: USB disconnect, device number 10 [ 663.602963][ T4596] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 663.683478][ T4232] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 664.030311][ T4596] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 664.039695][ T4596] usb 2-1: config 2 has no interface number 0 [ 664.054038][ T4596] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 664.088487][ T4596] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 664.104607][ T4596] usb 2-1: config 2 interface 43 has no altsetting 0 [ 664.132800][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 664.234680][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.266471][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 664.276023][ T4596] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 664.289339][ T4232] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.306295][ T4596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.322419][ T4596] usb 2-1: Product: syz [ 664.333078][ T4596] usb 2-1: Manufacturer: syz [ 664.337742][ T4596] usb 2-1: SerialNumber: syz [ 664.362013][T11521] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1700'. [ 664.392532][T11464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 664.399634][T11464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 664.429471][ T4262] syzkaller0: tun_net_xmit 76 [ 664.434372][ T4262] syzkaller0: tun_net_xmit 48 [ 664.440789][T11523] syzkaller0: create flow: hash 984827430 index 1 [ 664.452314][ T1325] syzkaller0: tun_net_xmit 76 [ 664.472551][ T4232] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 664.481662][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 664.507585][ T4232] usb 1-1: Product: syz [ 664.511815][ T4232] usb 1-1: Manufacturer: syz [ 664.539508][T11518] syzkaller0: delete flow: hash 984827430 index 1 [ 664.572518][T11528] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1702'. [ 664.594586][ T4232] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 664.601149][ T4232] usb 1-1: No streaming interface found for terminal 2. [ 664.625905][T11464] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1691'. [ 664.689697][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1691'. [ 664.711090][T11528] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1702'. [ 664.800900][ T4193] usb 1-1: USB disconnect, device number 11 [ 664.932808][ T4596] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 664.963032][ T4596] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 665.070467][ T4596] ums-usbat: probe of 2-1:2.43 failed with error 3 [ 665.090207][ T4596] usb 2-1: USB disconnect, device number 4 [ 665.261443][T11580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1718'. [ 665.273330][T11580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.635146][T11598] program syz.0.1722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.671336][ T4243] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 665.731270][ T5303] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 665.911206][ T4243] usb 4-1: Using ep0 maxpacket: 32 [ 666.031396][ T4243] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 666.043001][ T4243] usb 4-1: config 0 has no interface number 0 [ 666.060995][ T4243] usb 4-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 666.091094][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 666.105706][ T4243] usb 4-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 666.123234][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 666.143107][ T4243] usb 4-1: config 0 interface 131 has no altsetting 0 [ 666.150485][ T5303] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 666.165109][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.193169][ T5303] usb 2-1: config 0 descriptor?? [ 666.221204][T11591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 666.321833][ T4243] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 666.334752][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.349630][ T4243] usb 4-1: Product: syz [ 666.359575][ T4243] usb 4-1: Manufacturer: syz [ 666.368852][ T4243] usb 4-1: SerialNumber: syz [ 666.384747][ T4243] usb 4-1: config 0 descriptor?? [ 666.559310][T11634] tipc: Started in network mode [ 666.570125][T11634] tipc: Node identity 4, cluster identity 4711 [ 666.592610][T11634] tipc: Node number set to 4 [ 666.704645][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 666.727183][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 666.745622][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 666.765239][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.000460][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.007586][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.030339][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.037455][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.048830][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.057659][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.065086][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.072492][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.088666][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.109959][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.117464][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.133571][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.145340][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.157594][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.169513][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.184749][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.194342][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.207506][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.218197][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.239524][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.249263][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.268566][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.277364][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.297414][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.301243][T11652] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 667.313533][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.331519][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.338921][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.348189][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.363989][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.381541][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.388759][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.396380][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.403857][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.411490][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.418588][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.426233][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.430525][ T4596] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 667.450033][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.467990][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.494246][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.515713][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.534809][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 667.544164][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.560535][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.567843][T11664] device bridge_slave_1 left promiscuous mode [ 667.582142][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.589685][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.606216][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.615171][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.629257][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.637873][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.652225][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.666473][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.676286][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.689995][ T4596] usb 6-1: Using ep0 maxpacket: 16 [ 667.695911][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.708581][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.718139][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.739884][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.750129][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.767558][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.786246][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.802514][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.820281][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.827372][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.834524][ T4596] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 667.844758][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.857936][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.883163][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.910874][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.918094][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.926544][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.933976][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.951739][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.962969][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.985233][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 667.992867][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.000448][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.007711][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.015173][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.022689][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.030237][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.041782][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.049034][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.056606][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.060283][ T4596] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 668.065337][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.088081][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.092828][ T4596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.103383][ T4596] usb 6-1: Product: syz [ 668.107654][ T4596] usb 6-1: Manufacturer: syz [ 668.112418][ T4596] usb 6-1: SerialNumber: syz [ 668.123137][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.132604][ T4596] usb 6-1: config 0 descriptor?? [ 668.138293][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.149422][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.159910][T11656] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 668.177400][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.192699][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.204252][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.215101][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.226922][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.238524][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.254719][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.277481][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.295125][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.306651][ T4243] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 668.308079][T11578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.320744][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.330662][ T4243] gspca_topro: reg_w err -71 [ 668.348699][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.364042][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.379793][ T4243] gspca_topro: Sensor soi763a [ 668.393698][ T4243] usb 4-1: USB disconnect, device number 3 [ 668.400087][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.407160][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.446601][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.466991][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.479378][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.504070][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.521357][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.529866][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 668.538912][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.558809][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.566627][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.574206][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.587691][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.604008][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.611871][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.619036][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.626693][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.634138][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.641860][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.649010][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.656764][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.664669][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.672241][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.679622][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.688066][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.696417][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.711470][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.725216][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.735166][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.748404][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.758123][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.772593][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.784640][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.797476][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.812799][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.824490][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.835668][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.847725][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.858681][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.873678][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.884793][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.898285][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.912481][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.924430][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.935676][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.947480][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.958085][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.972474][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.984602][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 668.998366][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.013459][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.022712][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.030110][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.037410][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.045354][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.059192][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.073104][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.087172][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.098814][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.109246][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.116408][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.124187][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.131645][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.139265][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.146528][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.153983][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.164469][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.171688][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.183511][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.197305][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.214057][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.229132][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.244160][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.260688][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.267982][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.275288][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.283630][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.293252][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.309847][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.324910][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.342418][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.364157][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.374294][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.388869][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.412053][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.422767][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.438056][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.454553][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.469598][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.481291][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.499116][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.512542][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.527845][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.535486][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.542964][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.550504][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.557692][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.579028][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.595110][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.612171][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.632445][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.650343][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.666759][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.678793][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.692864][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.708794][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.731245][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.747887][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.768667][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.783171][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.793017][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.806362][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.818006][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.832155][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.845861][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.856911][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.871945][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.883425][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.894427][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.908284][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.932215][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.940014][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.947177][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.955072][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.963427][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.976441][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 669.990571][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.005616][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.021856][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.037007][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.053185][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.062227][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.069755][ T5303] cypress 0003:04B4:BCA1.0002: unknown main item tag 0x0 [ 670.104681][ T5303] cypress 0003:04B4:BCA1.0002: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 670.148008][ T5303] usb 2-1: USB disconnect, device number 5 [ 670.286396][T11664] device bridge_slave_0 left promiscuous mode [ 670.313682][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.346785][T11731] fido_id[11731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 670.476908][ T4596] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 670.499056][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 670.505243][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 670.521264][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 670.550662][ T4596] usb 6-1: USB disconnect, device number 14 [ 670.581086][ T4596] mcba_usb 6-1:0.0 can0: device disconnected [ 671.437910][ T4596] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 671.608057][ T4232] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 671.745919][ T26] audit: type=1326 audit(1791507712.391:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.5.1768" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc705109159 code=0x0 [ 671.858395][ T4596] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 671.877107][ T4596] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 671.894298][ T4596] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 671.907454][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 671.914883][T11793] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 671.934479][T11793] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 671.943312][ T4596] usb 4-1: config 220 has no interface number 2 [ 671.971030][ T4596] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 672.002805][ T4596] usb 4-1: config 220 interface 0 has no altsetting 0 [ 672.026886][ T4596] usb 4-1: config 220 interface 76 has no altsetting 0 [ 672.044841][ T4596] usb 4-1: config 220 interface 1 has no altsetting 0 [ 672.055068][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.093646][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.114224][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 672.144543][ T4232] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 672.174608][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.201728][ T4232] usb 1-1: config 0 descriptor?? [ 672.250229][ T4596] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 672.270140][ T4596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.298157][ T4596] usb 4-1: Product: syz [ 672.302566][ T4596] usb 4-1: Manufacturer: syz [ 672.316829][ T4596] usb 4-1: SerialNumber: syz [ 672.727415][ T4596] usb 4-1: selecting invalid altsetting 0 [ 672.734422][ T4596] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 672.767147][ T4596] usb 4-1: No valid video chain found. [ 672.878576][ T4596] usb 4-1: selecting invalid altsetting 0 [ 672.890573][ T4596] usbtest: probe of 4-1:220.1 failed with error -22 [ 672.930898][ T4596] usb 4-1: USB disconnect, device number 4 [ 673.496819][ T4596] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 673.676951][ T5303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 673.926710][ T4596] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.944678][ T4596] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 674.046604][ T5303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.057360][ T4230] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 674.070524][ T5303] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 674.156786][ T4596] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 674.174461][ T4596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.192915][ T4596] usb 4-1: Product: syz [ 674.201656][ T4596] usb 4-1: Manufacturer: syz [ 674.211641][ T4596] usb 4-1: SerialNumber: syz [ 674.266489][ T5303] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 674.275886][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.284282][ T5303] usb 2-1: Product: syz [ 674.289140][ T5303] usb 2-1: Manufacturer: syz [ 674.289576][ T4596] sisusb 4-1:1.0: Invalid USB2VGA device [ 674.293996][ T5303] usb 2-1: SerialNumber: syz [ 674.334829][ T4596] sisusb: probe of 4-1:1.0 failed with error -22 [ 674.348130][ T5303] usb-storage 2-1:1.0: USB Mass Storage device detected [ 674.380736][ T5303] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 674.426323][ T4230] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 674.438086][ T5303] scsi host1: usb-storage 2-1:1.0 [ 674.447960][ T4230] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 674.486349][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.566026][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 674.566611][ T4230] usb 5-1: config 0 has no interface number 0 [ 674.586659][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 674.598725][ T4230] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 674.618352][ T4232] usb 1-1: USB disconnect, device number 12 [ 674.646324][ T4230] usb 5-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 674.671063][ T4230] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 674.693655][ T4230] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 674.704200][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.725389][ T4230] usb 5-1: config 0 descriptor?? [ 674.737924][ T5303] usb 2-1: USB disconnect, device number 6 [ 674.779500][ T4230] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 674.970728][ T4230] usb 5-1: USB disconnect, device number 3 [ 674.986537][ T4327] usb 5-1: Failed to submit usb control message: -71 [ 674.998865][ T4327] usb 5-1: unable to send the bmi data to the device: -71 [ 675.014204][ T4327] usb 5-1: unable to get target info from device [ 675.033948][ T4327] usb 5-1: could not get target info (-71) [ 675.044133][ T4327] usb 5-1: could not probe fw (-71) [ 675.046545][ T21] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 675.440033][ T21] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 675.464897][ T21] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 675.506501][ T21] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 675.522450][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.657994][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 676.222284][ T4232] usb 4-1: USB disconnect, device number 5 [ 676.476970][ T1325] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 676.915316][ T1107] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 676.925521][ T21] pegasus 6-1:1.0: can't reset MAC [ 676.930802][ T21] pegasus: probe of 6-1:1.0 failed with error -5 [ 676.948995][ T21] usb 6-1: USB disconnect, device number 15 [ 676.962608][T11447] udevd[11447]: setting owner of /dev/bus/usb/006/015 to uid=0, gid=0 failed: No such file or directory [ 677.075501][ T1325] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 677.091602][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.101610][ T1325] usb 5-1: Product: syz [ 677.106376][ T1325] usb 5-1: Manufacturer: syz [ 677.111023][ T1325] usb 5-1: SerialNumber: syz [ 677.118661][ T1325] usb 5-1: config 0 descriptor?? [ 677.276443][ T1107] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 677.296518][ T1107] usb 1-1: config 2 has no interface number 0 [ 677.302677][ T1107] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 677.320754][ T1107] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 677.333882][ T1107] usb 1-1: config 2 interface 43 has no altsetting 0 [ 677.429575][ T1325] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 677.472753][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 677.505281][ T1107] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 677.525343][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.544070][ T1107] usb 1-1: Product: syz [ 677.558894][ T1107] usb 1-1: Manufacturer: syz [ 677.563565][ T1107] usb 1-1: SerialNumber: syz [ 677.627654][T12073] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 677.647792][T12073] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 677.873551][T12073] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1820'. [ 677.892485][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1820'. [ 677.986122][ T1107] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 678.006030][ T1107] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 678.064994][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 678.093596][ T1107] ums-usbat: probe of 1-1:2.43 failed with error 3 [ 678.113693][ T1107] usb 1-1: USB disconnect, device number 13 [ 678.305717][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 678.424867][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.443258][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.502694][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 678.513557][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.554308][ T21] usb 4-1: config 0 descriptor?? [ 678.581682][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1831'. [ 678.599351][ T21] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 678.652001][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1832'. [ 678.728471][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1833'. [ 678.810920][ T4232] usb 4-1: USB disconnect, device number 6 [ 679.544580][ T1325] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 679.569074][ T1325] usb 5-1: USB disconnect, device number 4 [ 679.604495][ T21] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 679.807799][T12235] FAULT_INJECTION: forcing a failure. [ 679.807799][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 679.820552][T12235] CPU: 1 PID: 12235 Comm: syz.3.1844 Not tainted syzkaller #0 [ 679.828050][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 679.838143][T12235] Call Trace: [ 679.841454][T12235] [ 679.844413][T12235] dump_stack_lvl+0x188/0x250 [ 679.849128][T12235] ? show_regs_print_info+0x20/0x20 [ 679.854370][T12235] ? load_image+0x410/0x410 [ 679.858917][T12235] ? __might_sleep+0xf0/0xf0 [ 679.863551][T12235] ? __lock_acquire+0x7b50/0x7b50 [ 679.868615][T12235] should_fail+0x383/0x4b0 [ 679.873078][T12235] should_failslab+0x5/0x20 [ 679.877629][T12235] slab_pre_alloc_hook+0x51/0xc0 [ 679.882597][T12235] ? dup_fd+0x54/0xc70 [ 679.886787][T12235] kmem_cache_alloc+0x3d/0x280 [ 679.891624][T12235] dup_fd+0x54/0xc70 [ 679.895556][T12235] ? do_raw_spin_unlock+0x11d/0x230 [ 679.900795][T12235] ? _raw_spin_unlock+0x24/0x40 [ 679.905686][T12235] ? copy_fs_struct+0x1bf/0x270 [ 679.910570][T12235] ksys_unshare+0x458/0x8e0 [ 679.915122][T12235] ? __lock_acquire+0x7b50/0x7b50 [ 679.920186][T12235] ? sighand_ctor+0x40/0x40 [ 679.924723][T12235] ? lock_chain_count+0x20/0x20 [ 679.929612][T12235] ? syscall_enter_from_user_mode+0x21/0x70 [ 679.935545][T12235] __x64_sys_unshare+0x34/0x40 [ 679.940339][T12235] do_syscall_64+0x4c/0xa0 [ 679.944794][T12235] ? clear_bhb_loop+0x30/0x80 [ 679.949506][T12235] ? clear_bhb_loop+0x30/0x80 [ 679.954220][T12235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 679.960235][T12235] RIP: 0033:0x7f061ec6b159 [ 679.964697][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.984343][T12235] RSP: 002b:00007f061cec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 679.992799][T12235] RAX: ffffffffffffffda RBX: 00007f061eef2fa0 RCX: 00007f061ec6b159 [ 680.000808][T12235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 680.008811][T12235] RBP: 00007f061ed0206b R08: 0000000000000000 R09: 0000000000000000 [ 680.016845][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.024847][T12235] R13: 00007f061eef3038 R14: 00007f061eef2fa0 R15: 00007ffef7fd0e48 [ 680.032889][T12235] [ 680.189569][ T21] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 680.208069][ T21] usb 6-1: config 2 has no interface number 0 [ 680.218725][ T21] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 680.240801][ T21] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 680.260842][ T21] usb 6-1: config 2 interface 43 has no altsetting 0 [ 680.424452][ T21] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 680.441807][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.450949][ T21] usb 6-1: Product: syz [ 680.463595][ T21] usb 6-1: Manufacturer: syz [ 680.470046][ T21] usb 6-1: SerialNumber: syz [ 680.504514][T12207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 680.514466][T12207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 680.732275][T12207] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1840'. [ 680.747416][T12207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1840'. [ 682.078397][T12200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.190262][ T21] ums-usbat 6-1:2.43: USB Mass Storage device detected [ 682.227503][ T21] ums-usbat 6-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 682.309749][ T21] ums-usbat: probe of 6-1:2.43 failed with error 3 [ 682.329840][ T21] usb 6-1: USB disconnect, device number 16 [ 682.347552][T12340] raw_sendmsg: syz.4.1854 forgot to set AF_INET. Fix it! [ 682.407606][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 682.986661][ T6783] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 683.193927][ T21] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 683.353646][ T6783] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 683.362576][ T6783] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 683.371217][ T6783] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.381882][ T6783] usb 6-1: config 0 has no interface number 0 [ 683.391403][ T6783] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 683.401870][ T6783] usb 6-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 683.413224][ T6783] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 683.433141][ T6783] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 683.443334][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 683.454025][T12373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 683.465644][ T6783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.489975][ T6783] usb 6-1: config 0 descriptor?? [ 683.495272][T12373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 683.509088][T12381] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 683.524280][T12381] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 683.563547][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 683.574799][ T6783] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 683.623700][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 683.658379][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 683.705931][ T4232] syzkaller0: tun_net_xmit 76 [ 683.710798][ T4232] syzkaller0: tun_net_xmit 48 [ 683.737310][ T1325] syzkaller0: tun_net_xmit 76 [ 683.757199][ T1325] usb 6-1: USB disconnect, device number 17 [ 683.777442][ T4258] usb 6-1: Failed to submit usb control message: -71 [ 683.777652][T12394] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 683.800274][T12394] syzkaller0: Linktype set failed because interface is up [ 683.804674][ T4258] usb 6-1: unable to send the bmi data to the device: -71 [ 683.842394][ T4258] usb 6-1: unable to get target info from device [ 683.889590][ T4258] usb 6-1: could not get target info (-71) [ 683.906040][ T4258] usb 6-1: could not probe fw (-71) [ 683.992466][ T21] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 684.008201][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.023223][ T21] usb 1-1: Product: syz [ 684.027443][ T21] usb 1-1: Manufacturer: syz [ 684.032056][ T21] usb 1-1: SerialNumber: syz [ 684.064422][ T21] usb 1-1: config 0 descriptor?? [ 684.865561][ T21] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 684.870833][T12411] FAULT_INJECTION: forcing a failure. [ 684.870833][T12411] name failslab, interval 1, probability 0, space 0, times 0 [ 684.888276][ T21] imon 1-1:0.0: unable to initialize intf0, err -19 [ 684.895550][ T21] imon:imon_probe: failed to initialize context! [ 684.908969][ T21] imon 1-1:0.0: unable to register, err -19 [ 684.918345][ T21] usb 1-1: USB disconnect, device number 14 [ 684.924595][T12411] CPU: 1 PID: 12411 Comm: syz.1.1866 Not tainted syzkaller #0 [ 684.932092][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 684.942174][T12411] Call Trace: [ 684.945485][T12411] [ 684.948531][T12411] dump_stack_lvl+0x188/0x250 [ 684.953256][T12411] ? show_regs_print_info+0x20/0x20 [ 684.958492][T12411] ? load_image+0x410/0x410 [ 684.963039][T12411] ? __might_sleep+0xf0/0xf0 [ 684.967664][T12411] ? __lock_acquire+0x7b50/0x7b50 [ 684.972738][T12411] ? tomoyo_check_open_permission+0x336/0x410 [ 684.978848][T12411] should_fail+0x383/0x4b0 [ 684.983321][T12411] should_failslab+0x5/0x20 [ 684.987866][T12411] slab_pre_alloc_hook+0x51/0xc0 [ 684.992835][T12411] kmem_cache_alloc_trace+0x47/0x290 [ 684.998147][T12411] ? raw_open+0x89/0x510 [ 685.002429][T12411] raw_open+0x89/0x510 [ 685.006535][T12411] ? raw_ioctl+0x3750/0x3750 [ 685.011166][T12411] misc_open+0x31f/0x390 [ 685.015451][T12411] chrdev_open+0x585/0x5f0 [ 685.019916][T12411] ? cd_forget+0x160/0x160 [ 685.024367][T12411] ? fsnotify_perm+0x3a7/0x560 [ 685.029177][T12411] ? cd_forget+0x160/0x160 [ 685.033625][T12411] do_dentry_open+0x7f7/0xf90 [ 685.038352][T12411] ? vfs_open+0x2b/0x80 [ 685.042541][T12411] path_openat+0x2718/0x2fb0 [ 685.047201][T12411] ? __kasan_slab_alloc+0xa9/0xc0 [ 685.052272][T12411] ? do_filp_open+0x400/0x400 [ 685.057011][T12411] do_filp_open+0x1df/0x400 [ 685.061565][T12411] ? vfs_tmpfile+0x300/0x300 [ 685.066223][T12411] ? _raw_spin_unlock+0x24/0x40 [ 685.071108][T12411] ? alloc_fd+0x59e/0x650 [ 685.075498][T12411] do_sys_openat2+0x14b/0x500 [ 685.080209][T12411] ? __lock_acquire+0x7b50/0x7b50 [ 685.085277][T12411] ? do_sys_open+0xe0/0xe0 [ 685.089726][T12411] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 685.095765][T12411] ? lock_chain_count+0x20/0x20 [ 685.100658][T12411] __x64_sys_openat+0x135/0x160 [ 685.105546][T12411] do_syscall_64+0x4c/0xa0 [ 685.109986][T12411] ? clear_bhb_loop+0x30/0x80 [ 685.114709][T12411] ? clear_bhb_loop+0x30/0x80 [ 685.119424][T12411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 685.125349][T12411] RIP: 0033:0x7eff7c9ed98e [ 685.129802][T12411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 685.149444][T12411] RSP: 002b:00007eff7ac82ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 685.157897][T12411] RAX: ffffffffffffffda RBX: 00007eff7ac856c0 RCX: 00007eff7c9ed98e [ 685.165904][T12411] RDX: 0000000000000002 RSI: 00007eff7cac340a RDI: ffffffffffffff9c [ 685.173906][T12411] RBP: 00007eff7cac406b R08: 0000000000000000 R09: 0000000000000000 [ 685.181910][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 685.189911][T12411] R13: 00002000000001c0 R14: 0000000000000002 R15: 00007ffe8542dd18 [ 685.197936][T12411] [ 685.207073][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.213575][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.768191][T12456] loop8: detected capacity change from 0 to 16384 [ 685.775097][ T1325] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 686.000713][T12463] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 686.223051][ T1325] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 686.231291][ T1325] usb 4-1: config 2 has no interface number 0 [ 686.250878][ T1325] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 686.267816][ T1325] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 686.290444][ T1325] usb 4-1: config 2 interface 43 has no altsetting 0 [ 686.382777][ T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 686.487895][ T1325] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 686.516508][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.552752][ T1325] usb 4-1: Product: syz [ 686.556981][ T1325] usb 4-1: Manufacturer: syz [ 686.561606][ T1325] usb 4-1: SerialNumber: syz [ 686.623051][T12417] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 686.630267][T12417] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 686.866607][T12417] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1868'. [ 686.897376][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1868'. [ 686.922885][ T21] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 686.943336][ T21] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 686.951684][ T21] usb 1-1: Product: syz [ 686.965165][ T21] usb 1-1: Manufacturer: syz [ 686.970048][ T21] usb 1-1: SerialNumber: syz [ 687.003474][ T1325] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 687.010434][ T21] usb 1-1: config 0 descriptor?? [ 687.044085][ T21] ch341 1-1:0.0: ch341-uart converter detected [ 687.070744][ T1325] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 687.165544][ T1325] ums-usbat: probe of 4-1:2.43 failed with error 3 [ 687.199306][ T1325] usb 4-1: USB disconnect, device number 7 [ 687.302928][ T6783] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 687.542993][ T6783] usb 6-1: Using ep0 maxpacket: 8 [ 687.665912][ T6783] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 687.824718][T12541] file system registered [ 687.842872][ T6783] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 687.864100][ T6783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.872153][ T6783] usb 6-1: Product: syz [ 687.880406][T12541] unloading [ 687.894119][ T6783] usb 6-1: Manufacturer: syz [ 687.898940][ T6783] usb 6-1: SerialNumber: syz [ 687.920519][T12541] ffs_data_put(): freeing [ 687.926942][ T21] usb 1-1: failed to send control message: -71 [ 687.933748][ T1107] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 687.943372][ T6783] usb 6-1: config 0 descriptor?? [ 687.948477][ T21] ch341-uart: probe of ttyUSB0 failed with error -71 [ 687.979556][ T21] usb 1-1: USB disconnect, device number 15 [ 687.994940][ T6783] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 688.013029][ T21] ch341 1-1:0.0: device disconnected [ 688.082922][T12551] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1899'. [ 688.100317][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'. [ 688.258664][ T1107] usb 4-1: not running at top speed; connect to a high speed hub [ 688.352557][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.363187][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 688.373485][ T1107] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 688.390985][ T1107] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 688.414199][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.484228][ T1107] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 688.504497][ T1107] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 688.522205][ T1107] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 688.530455][ T1107] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 688.548314][ T1107] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 688.592334][ T4193] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 688.876866][T12592] fuse: Invalid rootmode [ 688.976935][T12592] FAULT_INJECTION: forcing a failure. [ 688.976935][T12592] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 688.992028][T12592] CPU: 1 PID: 12592 Comm: syz.0.1906 Not tainted syzkaller #0 [ 688.999532][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.009625][T12592] Call Trace: [ 689.012931][T12592] [ 689.015886][T12592] dump_stack_lvl+0x188/0x250 [ 689.020598][T12592] ? show_regs_print_info+0x20/0x20 [ 689.025839][T12592] ? load_image+0x410/0x410 [ 689.030401][T12592] should_fail+0x383/0x4b0 [ 689.034861][T12592] prepare_alloc_pages+0x1e3/0x5b0 [ 689.040018][T12592] __alloc_pages+0x11b/0x480 [ 689.044643][T12592] ? zone_statistics+0x170/0x170 [ 689.049614][T12592] ? rcu_lock_acquire+0x30/0x30 [ 689.054503][T12592] ? alloc_pages+0x452/0x560 [ 689.059136][T12592] __get_free_pages+0x8/0x30 [ 689.063763][T12592] __tlb_remove_page_size+0x1f2/0x3f0 [ 689.069204][T12592] unmap_page_range+0xfcf/0x2410 [ 689.074204][T12592] unmap_vmas+0x131/0x250 [ 689.078564][T12592] ? unmap_page_range+0x2410/0x2410 [ 689.083833][T12592] ? __mutex_lock_common+0x435/0x2400 [ 689.089238][T12592] ? exit_mm_release+0x16/0x30 [ 689.094046][T12592] exit_mmap+0x3b9/0x640 [ 689.098326][T12592] ? vm_brk+0x20/0x20 [ 689.102356][T12592] ? uprobe_clear_state+0x2f6/0x460 [ 689.107588][T12592] __mmput+0x115/0x390 [ 689.111715][T12592] exit_mm+0x632/0x7b0 [ 689.115820][T12592] ? perf_pmu_migrate_context+0xb70/0xb70 [ 689.121583][T12592] ? do_exit+0x2110/0x2110 [ 689.126026][T12592] ? __ia32_sys_timer_delete+0x40/0x40 [ 689.131515][T12592] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 689.137106][T12592] ? tty_audit_exit+0x149/0x1f0 [ 689.141994][T12592] do_exit+0x5b8/0x2110 [ 689.146189][T12592] ? put_task_struct+0x80/0x80 [ 689.150975][T12592] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.156988][T12592] ? _raw_spin_lock_irq+0xb7/0xf0 [ 689.162058][T12592] do_group_exit+0x12c/0x2f0 [ 689.166680][T12592] ? lockdep_hardirqs_on+0x94/0x140 [ 689.171934][T12592] get_signal+0x7eb/0x12e0 [ 689.176402][T12592] arch_do_signal_or_restart+0xe6/0x12a0 [ 689.182082][T12592] ? futex_exit_release+0x1c0/0x1c0 [ 689.187315][T12592] ? get_sigframe_size+0x10/0x10 [ 689.192278][T12592] ? __context_tracking_exit+0x4c/0x80 [ 689.197769][T12592] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.203787][T12592] ? exit_to_user_mode_loop+0x3b/0x130 [ 689.209263][T12592] exit_to_user_mode_loop+0x9e/0x130 [ 689.214650][T12592] exit_to_user_mode_prepare+0xee/0x180 [ 689.220205][T12592] syscall_exit_to_user_mode+0x16/0x40 [ 689.225679][T12592] do_syscall_64+0x58/0xa0 [ 689.230112][T12592] ? clear_bhb_loop+0x30/0x80 [ 689.234838][T12592] ? clear_bhb_loop+0x30/0x80 [ 689.239529][T12592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 689.245567][T12592] RIP: 0033:0x7f42ec71d159 [ 689.250078][T12592] Code: Unable to access opcode bytes at RIP 0x7f42ec71d12f. [ 689.257449][T12592] RSP: 002b:00007f42ea9750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 689.265903][T12592] RAX: fffffffffffffe00 RBX: 00007f42ec9a4fa8 RCX: 00007f42ec71d159 [ 689.273893][T12592] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42ec9a4fa8 [ 689.281881][T12592] RBP: 00007f42ec9a4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 689.289862][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.297864][T12592] R13: 00007f42ec9a5038 R14: 00007ffef8832f60 R15: 00007ffef8833048 [ 689.305880][T12592] [ 689.405600][ T4193] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 689.419509][ T4193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.433439][ T4193] usb 5-1: Product: syz [ 689.442422][ T4193] usb 5-1: Manufacturer: syz [ 689.447163][ T4193] usb 5-1: SerialNumber: syz [ 689.468937][ T4193] usb 5-1: config 0 descriptor?? [ 689.742368][ T4193] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 690.807575][ T1107] usb 4-1: USB disconnect, device number 8 [ 690.832735][ T1107] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 690.871386][ T1107] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 690.890723][ T1107] keyspan 4-1:1.0: device disconnected [ 690.985599][ T6783] gspca_zc3xx: i2c_r status error ed [ 690.993910][ T26] audit: type=1800 audit(1791507731.646:13): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1916" name=08 dev="sda1" ino=2070 res=0 errno=0 [ 691.162007][ T21] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 691.173520][T12711] Bluetooth: hci0: load_link_keys: too big key_count value 7681 [ 691.412027][ T6783] gspca_zc3xx: reg_r err -71 [ 691.416897][ T6783] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 691.424232][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 691.435982][T12727] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 691.454761][ T6783] usb 6-1: USB disconnect, device number 18 [ 691.470651][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 691.482090][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 691.509736][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 691.542032][ T21] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.555578][ T21] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.566752][ T21] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 691.580386][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 691.588378][ T21] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 691.601184][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.632551][ T21] usb 1-1: config 0 descriptor?? [ 691.666620][ T4193] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 691.685524][ T4193] usb 5-1: USB disconnect, device number 5 [ 691.877274][T12747] jffs2: notice: (12747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 692.099593][ T4232] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 692.113357][ T4232] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 692.140462][ T4232] usb 4-1: Product: syz [ 692.154935][ T4232] usb 4-1: Manufacturer: syz [ 692.160070][ T4232] usb 4-1: SerialNumber: syz [ 692.175809][ T4232] usb 4-1: config 0 descriptor?? [ 692.233254][ T4232] ch341 4-1:0.0: ch341-uart converter detected [ 692.445916][ T21] usb 1-1: USB disconnect, device number 16 [ 692.675340][T12786] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1933'. [ 692.684814][T12786] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1933'. [ 692.696323][T12786] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1933'. [ 692.707469][T12786] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1933'. [ 692.773074][T12789] loop5: detected capacity change from 0 to 512 [ 692.841378][T12789] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 692.854542][T12789] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.874006][ T6783] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 693.276503][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 693.285637][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1934'. [ 693.294700][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1934'. [ 693.319310][ T6783] usb 5-1: device descriptor read/64, error -71 [ 693.897688][ T4232] ch341-uart ttyUSB0: failed to read break control: -71 [ 693.913441][ T4232] ch341-uart: probe of ttyUSB0 failed with error -71 [ 693.925971][ T6783] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 693.946180][ T4232] usb 4-1: USB disconnect, device number 9 [ 693.971098][ T4232] ch341 4-1:0.0: device disconnected [ 694.121579][ T6783] usb 5-1: device descriptor read/64, error -71 [ 694.261790][ T6783] usb usb5-port1: attempt power cycle [ 694.451495][ T13] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 694.671555][ T6783] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 694.732395][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 694.771689][ T6783] usb 5-1: device descriptor read/8, error -71 [ 694.881703][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.894595][ T13] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 694.903805][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.915729][ T13] usb 6-1: config 0 descriptor?? [ 694.971875][ T13] usb 6-1: bad CDC descriptors [ 694.979202][ T13] usb 6-1: bad CDC descriptors [ 694.993622][ T13] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 695.009966][ T13] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 695.016796][ T13] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 695.041535][ T6783] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 695.147783][ T6783] usb 5-1: device descriptor read/8, error -71 [ 695.166521][ T4232] usb 6-1: USB disconnect, device number 19 [ 695.271591][ T6783] usb usb5-port1: unable to enumerate USB device [ 695.301386][ T1107] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 695.430568][T12858] loop4: detected capacity change from 0 to 512 [ 695.535467][T12858] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 695.554294][T12858] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.881747][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1949'. [ 695.890905][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1949'. [ 695.899997][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1949'. [ 696.033176][ T1107] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 696.068030][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.089314][T12804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.196296][ T1107] usb 4-1: Product: syz [ 696.223123][ T1107] usb 4-1: Manufacturer: syz [ 696.717521][ T1107] usb 4-1: SerialNumber: syz [ 696.781301][ T13] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 697.014649][T12885] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 697.043762][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 697.201824][ T13] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 697.210992][ T4232] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 697.391280][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 697.391912][ T1107] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 697.400391][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.400416][ T13] usb 6-1: Product: syz [ 697.400432][ T13] usb 6-1: Manufacturer: syz [ 697.400450][ T13] usb 6-1: SerialNumber: syz [ 697.441316][ T4193] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 697.452909][ T13] usb 6-1: config 0 descriptor?? [ 697.503598][ T13] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 697.591486][ T4232] usb 5-1: not running at top speed; connect to a high speed hub [ 697.688684][ T4193] usb 1-1: Using ep0 maxpacket: 32 [ 697.709011][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.722820][ T4232] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.739845][ T4232] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 697.753401][ T4232] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 697.764972][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.807019][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 697.817477][ T4193] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 697.834251][ T4193] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 697.845044][ T4232] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 697.857931][ T4232] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 697.868450][ T4193] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 697.879614][ T4232] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 697.887628][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.898655][ T4232] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 697.906746][ T4193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 697.924805][ T4232] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 697.933261][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.964126][ T4193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 697.991195][ T4193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 698.017686][ T4193] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 698.032877][ T4193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.058151][ T4193] usb 1-1: config 0 descriptor?? [ 698.077068][ T4232] usb 4-1: USB disconnect, device number 10 [ 698.346112][ T4193] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 698.392281][ T4193] usb 1-1: USB disconnect, device number 17 [ 698.404630][ T4193] usblp0: removed [ 698.471126][ T1107] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 698.482319][ T1107] ath9k_htc: Failed to initialize the device [ 698.528112][ T4232] usb 4-1: ath9k_htc: USB layer deinitialized [ 698.961256][ T4193] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 699.211020][ T4193] usb 1-1: Using ep0 maxpacket: 32 [ 699.341273][ T4193] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 699.352098][ T4193] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 699.360830][ T4193] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 699.378464][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 699.388603][ T4193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 699.408693][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 699.419038][ T4193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 699.436736][ T4193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 699.458010][ T4193] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 699.467473][ T4193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.488488][ T4193] usb 1-1: config 0 descriptor?? [ 699.773944][ T4193] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 699.984366][ T1107] usb 1-1: USB disconnect, device number 18 [ 700.012323][ T1107] usblp0: removed [ 700.132819][ T4193] usb 5-1: USB disconnect, device number 10 [ 700.187007][ T4193] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 700.228901][ T4193] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 700.254340][ T4193] keyspan 5-1:1.0: device disconnected [ 700.311131][ T13] gspca_zc3xx: i2c_r status error ed [ 700.507310][T13058] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1970'. [ 700.519299][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1970'. [ 700.529807][ T13] gspca_zc3xx: reg_r err -71 [ 700.650918][ T4193] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 700.680648][T13059] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 700.912152][T13067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 700.919456][T13067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 700.937728][T13068] vhci_hcd: xmit failed -107 [ 700.942966][ T4193] usb 5-1: Using ep0 maxpacket: 16 [ 700.959338][T13067] vhci_hcd vhci_hcd.0: Device attached [ 700.981636][ T5451] vhci_hcd: stop threads [ 700.985942][ T5451] vhci_hcd: release socket [ 701.011165][ T5451] vhci_hcd: disconnect device [ 701.041198][T13072] tipc: Started in network mode [ 701.055811][T13072] tipc: Node identity 4, cluster identity 4711 [ 701.091102][ T4193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.130973][ T4193] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 701.145747][T13072] tipc: Node number set to 4 [ 701.160805][ T13] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 701.167177][ T13] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 701.191125][ T4193] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 701.231765][ T13] usb 6-1: USB disconnect, device number 20 [ 701.248588][ T4193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.288359][ T4193] usb 5-1: config 0 descriptor?? [ 701.353714][ T4193] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 701.381051][ T4263] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 701.630793][ T4263] usb 1-1: Using ep0 maxpacket: 8 [ 701.693395][ T1107] usb 5-1: USB disconnect, device number 11 [ 701.911676][ T4263] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 701.928648][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.938321][ T4263] usb 1-1: Product: syz [ 701.949526][ T4263] usb 1-1: Manufacturer: syz [ 701.957149][ T4263] usb 1-1: SerialNumber: syz [ 702.136328][T13116] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 702.340988][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 702.343742][ T4263] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 702.391995][ T4263] usb 1-1: unit 5 not found! [ 702.414230][ T4263] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x600, type = 5 [ 702.430002][ T4263] usb 1-1: 6:0: cannot get min/max values for control 2 (id 6) [ 702.460967][ T4263] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 5 [ 702.521531][ T4263] usb 1-1: USB disconnect, device number 19 [ 702.623450][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 702.741005][ T4193] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 702.762787][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 702.816171][T11148] udevd[11148]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.960930][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 702.979552][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.998065][ T13] usb 4-1: Product: syz [ 703.002726][ T13] usb 4-1: Manufacturer: syz [ 703.007353][ T13] usb 4-1: SerialNumber: syz [ 703.021720][ T13] usb 4-1: config 0 descriptor?? [ 703.063095][ T13] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 703.120837][ T4193] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 703.144163][ T4193] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 703.170702][ T4193] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.190697][ T4193] usb 6-1: config 0 has no interface number 0 [ 703.200863][ T4193] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 703.220798][ T4193] usb 6-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 703.236115][ T4193] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 703.249522][ T4193] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 703.258708][ T4193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.295442][ T4193] usb 6-1: config 0 descriptor?? [ 703.319486][T13176] overlayfs: failed to clone upperpath [ 703.390846][ T4193] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 703.480808][ T4232] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 703.564869][ T4193] usb 6-1: USB disconnect, device number 21 [ 703.570997][T10468] usb 6-1: Failed to submit usb control message: -71 [ 703.590377][T10468] usb 6-1: unable to send the bmi data to the device: -71 [ 703.600134][T10468] usb 6-1: unable to get target info from device [ 703.614410][T10468] usb 6-1: could not get target info (-71) [ 703.620415][T10468] usb 6-1: could not probe fw (-71) [ 703.746130][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 703.870898][ T4232] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.879411][ T4232] usb 1-1: config 0 has no interface number 0 [ 703.887125][ T4232] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.898449][ T4232] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.910326][ T4232] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.923922][ T4232] usb 1-1: config 0 interface 1 has no altsetting 0 [ 703.930688][ T4232] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 703.940051][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.957831][ T4232] usb 1-1: config 0 descriptor?? [ 704.006590][ T4232] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 704.450312][ T4232] elan 0003:04F3:074D.0004: failed to start in urb: -90 [ 704.874288][ T4232] elan 0003:04F3:074D.0004: Get report error for parm 6: 0 [ 705.096011][ T4232] elan 0003:04F3:074D.0004: Set report error for parm 7: -71 [ 705.140750][ T4232] elan 0003:04F3:074D.0004: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 705.159709][ T4232] elan 0003:04F3:074D.0004: Input device is not registered [ 705.169794][ T4232] elan: probe of 0003:04F3:074D.0004 failed with error -119 [ 705.212744][ T4232] usb 1-1: USB disconnect, device number 20 [ 705.279686][T13259] fido_id[13259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 705.410766][ T8093] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 705.712628][T13281] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 705.840910][ T8093] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.859513][T13289] FAULT_INJECTION: forcing a failure. [ 705.859513][T13289] name failslab, interval 1, probability 0, space 0, times 0 [ 705.860527][ T8093] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 705.883793][ T8093] usb 6-1: New USB device found, idVendor=0415, idProduct=3010, bcdDevice= 1.00 [ 705.898320][T13289] CPU: 1 PID: 13289 Comm: syz.0.2010 Not tainted syzkaller #0 [ 705.900740][ T8093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.905856][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 705.905872][T13289] Call Trace: [ 705.905880][T13289] [ 705.905889][T13289] dump_stack_lvl+0x188/0x250 [ 705.905920][T13289] ? show_regs_print_info+0x20/0x20 [ 705.905943][T13289] ? load_image+0x410/0x410 [ 705.943045][ T4232] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 705.944742][T13289] ? __might_sleep+0xf0/0xf0 [ 705.955540][ T13] gspca_zc3xx: i2c_r status error ed [ 705.956882][T13289] should_fail+0x383/0x4b0 [ 705.966593][T13289] should_failslab+0x5/0x20 [ 705.971135][T13289] slab_pre_alloc_hook+0x51/0xc0 [ 705.976111][T13289] ? zswap_frontswap_store+0x403/0x1530 [ 705.981692][T13289] kmem_cache_alloc+0x3d/0x280 [ 705.986515][T13289] zswap_frontswap_store+0x403/0x1530 [ 705.991940][T13289] ? page_swapcount+0x224/0x300 [ 705.996823][T13289] ? zswap_frontswap_init+0x100/0x100 [ 706.002233][T13289] ? __rwlock_init+0x140/0x140 [ 706.007036][T13289] ? _raw_spin_unlock+0x24/0x40 [ 706.011920][T13289] ? page_swapcount+0x224/0x300 [ 706.016812][T13289] __frontswap_store+0x331/0x4a0 [ 706.021791][T13289] swap_writepage+0x5f/0xa0 [ 706.026325][T13289] shrink_page_list+0x43a8/0x6de0 [ 706.031431][T13289] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 706.037637][T13289] ? __lock_acquire+0x13dc/0x7b50 [ 706.042702][T13289] ? verify_lock_unused+0x140/0x140 [ 706.047978][T13289] reclaim_pages+0x712/0x990 [ 706.052627][T13289] ? isolate_lru_page+0xbd0/0xbd0 [ 706.057706][T13289] ? do_raw_spin_unlock+0x11d/0x230 [ 706.062939][T13289] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 706.069495][T13289] ? rcu_lock_release+0x20/0x20 [ 706.071056][ T8093] usb 6-1: 0:1 : does not exist [ 706.074398][T13289] ? __lock_acquire+0x7b50/0x7b50 [ 706.074453][T13289] walk_pgd_range+0xb28/0x1370 [ 706.089170][T13289] __walk_page_range+0x136/0x590 [ 706.094144][T13289] ? vmacache_find+0x53c/0x590 [ 706.098937][T13289] ? vmacache_update+0xa0/0x100 [ 706.103842][T13289] ? find_vma+0x1df/0x230 [ 706.108209][T13289] walk_page_range+0x3a3/0x550 [ 706.113003][T13289] ? local_lock_release+0x97/0x170 [ 706.118156][T13289] ? page_mapped_in_vma+0x520/0x520 [ 706.123410][T13289] do_madvise+0x16a6/0x2aa0 [ 706.127960][T13289] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 706.133475][T13289] ? verify_lock_unused+0x140/0x140 [ 706.138731][T13289] ? verify_lock_unused+0x140/0x140 [ 706.144003][T13289] ? __context_tracking_exit+0x4c/0x80 [ 706.149510][T13289] ? __lock_acquire+0x7b50/0x7b50 [ 706.154578][T13289] ? lock_chain_count+0x20/0x20 [ 706.159484][T13289] __x64_sys_madvise+0xa2/0xb0 [ 706.164289][T13289] do_syscall_64+0x4c/0xa0 [ 706.168746][T13289] ? clear_bhb_loop+0x30/0x80 [ 706.173457][T13289] ? clear_bhb_loop+0x30/0x80 [ 706.178196][T13289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 706.184124][T13289] RIP: 0033:0x7f42ec71d159 [ 706.188573][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.191614][ T13] gspca_zc3xx: reg_r err -71 [ 706.208301][T13289] RSP: 002b:00007f42ea975028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 706.208334][T13289] RAX: ffffffffffffffda RBX: 00007f42ec9a4fa0 RCX: 00007f42ec71d159 [ 706.208351][T13289] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 706.208368][T13289] RBP: 00007f42ec7b406b R08: 0000000000000000 R09: 0000000000000000 [ 706.208383][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.208396][T13289] R13: 00007f42ec9a5038 R14: 00007f42ec9a4fa0 R15: 00007ffef8833048 [ 706.208429][T13289] [ 706.292678][ T8093] usb 6-1: USB disconnect, device number 22 [ 706.353331][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 706.660698][ T4232] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 706.681813][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.689874][ T4232] usb 5-1: Product: syz [ 706.695278][ T4232] usb 5-1: Manufacturer: syz [ 706.700386][ T4232] usb 5-1: SerialNumber: syz [ 706.723422][ T4232] usb 5-1: config 0 descriptor?? [ 706.930475][ T13] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 706.940489][ T13] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 706.967950][ T13] usb 4-1: USB disconnect, device number 11 [ 706.990830][ T4232] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 707.040724][ T8093] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 707.303675][ T8093] usb 1-1: Using ep0 maxpacket: 32 [ 707.395070][T13338] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2019'. [ 707.422708][T13338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2019'. [ 707.644331][ T8093] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 707.661622][ T8093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.690639][ T8093] usb 1-1: Product: syz [ 707.694879][ T8093] usb 1-1: Manufacturer: syz [ 707.699498][ T8093] usb 1-1: SerialNumber: syz [ 708.020536][ T4263] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 708.456747][ T8093] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 708.526756][T13349] udc-core: couldn't find an available UDC or it's busy [ 708.538407][T13349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.600714][ T4263] usb 6-1: unable to get BOS descriptor or descriptor too short [ 708.680474][ T4263] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 708.688115][ T4263] usb 6-1: can't read configurations, error -71 [ 708.722511][ T8093] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 708.770590][ T8093] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 708.800869][ T8093] usb 1-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 708.869368][ T8093] usb 1-1: USB disconnect, device number 21 [ 709.070636][ T4232] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 709.091327][ T4232] usb 5-1: USB disconnect, device number 12 [ 709.300351][ T4230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 709.550360][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 709.673808][ T4230] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 709.682620][ T4230] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 709.691842][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 709.701609][ T4230] usb 4-1: config 1 has no interface number 0 [ 709.707879][ T4230] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.730832][ T4230] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 709.744813][ T4230] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 709.753963][ T4232] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 709.754798][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.823924][ T4230] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 709.920411][ T8093] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 710.031556][ T4230] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 710.185832][ T4232] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 710.201310][T13475] overlayfs: failed to clone upperpath [ 710.207060][ T4232] usb 1-1: config 2 has no interface number 0 [ 710.221504][ T4232] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 710.238026][ T4232] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 710.252680][ T4232] usb 1-1: config 2 interface 43 has no altsetting 0 [ 710.330581][ T13] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 710.346284][ T8093] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 710.362014][ T8093] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 710.386968][ T8093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.416673][ T8093] usb 5-1: config 0 has no interface number 0 [ 710.429858][ T8093] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 710.441434][ T4232] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 710.459243][ T8093] usb 5-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 710.480393][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.488571][ T8093] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 710.508387][ T4232] usb 1-1: Product: syz [ 710.513017][ T4232] usb 1-1: Manufacturer: syz [ 710.517643][ T4232] usb 1-1: SerialNumber: syz [ 710.529130][ T8093] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 710.548789][ T8093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.564794][ T8093] usb 5-1: config 0 descriptor?? [ 710.570669][T13431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 710.580536][T13431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 710.623359][ T8093] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 710.640417][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 710.794299][ T13] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 710.817332][T13431] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2032'. [ 710.827504][ T8093] usb 5-1: USB disconnect, device number 13 [ 710.831719][ T5451] usb 5-1: Failed to submit usb control message: -71 [ 710.841442][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2032'. [ 710.852599][ T5451] usb 5-1: unable to send the bmi data to the device: -71 [ 710.866632][ T5451] usb 5-1: unable to get target info from device [ 710.887395][ T5451] usb 5-1: could not get target info (-71) [ 710.898215][ T5451] usb 5-1: could not probe fw (-71) [ 710.971851][ T4232] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 710.988924][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 711.000725][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.009840][ T4232] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 711.017553][ T13] usb 6-1: Product: syz [ 711.022026][ T13] usb 6-1: Manufacturer: syz [ 711.026647][ T13] usb 6-1: SerialNumber: syz [ 711.037163][ T13] usb 6-1: config 0 descriptor?? [ 711.087048][ T4232] ums-usbat: probe of 1-1:2.43 failed with error 3 [ 711.097125][ T13] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 711.107599][ T4232] usb 1-1: USB disconnect, device number 22 [ 711.115663][ T4230] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 711.716944][ T4243] usb 4-1: USB disconnect, device number 12 [ 711.723191][ T4263] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 711.731537][ T4243] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 712.100462][ T4263] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.111951][ T4263] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 712.280363][ T4263] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 712.289691][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.303727][ T4263] usb 1-1: Product: syz [ 712.307918][ T4263] usb 1-1: Manufacturer: syz [ 712.312670][ T4263] usb 1-1: SerialNumber: syz [ 712.350539][T13516] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 712.372449][ T4263] symbolserial 1-1:1.0: symbol converter detected [ 712.390399][ T4263] usb 1-1: symbol converter now attached to ttyUSB0 [ 712.447335][T13535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 712.466940][T13535] Disabled LAPIC found during irq injection [ 712.540490][ T8093] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 712.605209][ T4263] usb 1-1: USB disconnect, device number 23 [ 712.625966][ T4263] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 712.647525][ T4263] symbolserial 1-1:1.0: device disconnected [ 712.930433][ T8093] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 712.950164][ T8093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 713.130601][ T8093] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 713.139887][ T8093] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 713.160167][ T8093] usb 4-1: Product: syz [ 713.164386][ T8093] usb 4-1: Manufacturer: syz [ 713.169032][ T8093] usb 4-1: SerialNumber: syz [ 713.193403][ T8093] usb 4-1: config 0 descriptor?? [ 713.220516][T13533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 713.268208][ T8093] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 713.349010][T13405] udevd[13405]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.388019][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 713.448343][ T8093] usb 4-1: USB disconnect, device number 13 [ 713.480246][ T4263] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 713.607778][T13565] tipc: Started in network mode [ 713.615106][T13565] tipc: Node identity 4, cluster identity 4711 [ 713.636394][T13565] tipc: Node number set to 4 [ 713.696663][T13563] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 713.850329][ T4263] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 713.858475][ T4263] usb 1-1: config 2 has no interface number 0 [ 713.881040][ T4263] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 713.902844][ T4263] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 713.917455][ T4263] usb 1-1: config 2 interface 43 has no altsetting 0 [ 714.045156][T13588] loop8: detected capacity change from 0 to 16384 [ 714.080569][ T4263] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 714.097663][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.119764][ T4263] usb 1-1: Product: syz [ 714.124080][ T4263] usb 1-1: Manufacturer: syz [ 714.147477][ T4263] usb 1-1: SerialNumber: syz [ 714.168664][ T13] gspca_zc3xx: reg_r err -71 [ 714.181258][T13552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 714.188355][T13552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 714.280149][T13589] loop_set_status: loop8 () has still dirty pages (nrpages=412) [ 714.290219][ T8093] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 714.423969][T13552] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2056'. [ 714.441695][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2056'. [ 714.560340][ T8093] usb 4-1: Using ep0 maxpacket: 16 [ 714.564952][ T4263] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 714.610632][ T4263] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 714.655031][ T4263] ums-usbat: probe of 1-1:2.43 failed with error 3 [ 714.700772][ T8093] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 714.711926][ T4263] usb 1-1: USB disconnect, device number 24 [ 714.740460][ T8093] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 714.762583][ T8093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.794633][ T8093] usb 4-1: config 0 descriptor?? [ 714.810150][ T13] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 714.816963][ T13] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 714.862639][ T13] usb 6-1: USB disconnect, device number 25 [ 715.160472][ T8093] usbhid 4-1:0.0: can't add hid device: -71 [ 715.168178][ T8093] usbhid: probe of 4-1:0.0 failed with error -71 [ 715.205563][ T8093] usb 4-1: USB disconnect, device number 14 [ 715.380237][ T13] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 715.760204][ T13] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 715.790266][ T13] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 715.810590][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.839670][ T13] usb 6-1: config 0 has no interface number 0 [ 715.856417][ T13] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 715.876742][ T13] usb 6-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 715.900259][ T13] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 715.935435][ T13] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 715.950539][ T6783] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 715.951919][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.053541][ T13] usb 6-1: config 0 descriptor?? [ 716.158176][ T13] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 716.200089][ T6783] usb 4-1: Using ep0 maxpacket: 16 [ 716.300082][ T4232] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 716.300426][ T4230] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 716.330330][ T6783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 716.342996][ T13] usb 6-1: USB disconnect, device number 26 [ 716.360414][ T5451] usb 6-1: Failed to submit usb control message: -71 [ 716.368446][ T6783] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 716.380253][ T5451] usb 6-1: unable to send the bmi data to the device: -71 [ 716.387430][ T5451] usb 6-1: unable to get target info from device [ 716.398191][ T5451] usb 6-1: could not get target info (-71) [ 716.407069][ T5451] usb 6-1: could not probe fw (-71) [ 716.550334][ T6783] usb 4-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 716.569678][ T6783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.579803][ T6783] usb 4-1: Product: syz [ 716.580415][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 716.598487][ T6783] usb 4-1: Manufacturer: syz [ 716.603535][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 716.608890][ T6783] usb 4-1: SerialNumber: syz [ 716.640506][T13637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 716.720344][ T4230] usb 5-1: config 0 has no interfaces? [ 716.880441][ T4230] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 716.899833][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.916578][ T4232] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 716.925906][ T4230] usb 5-1: Product: syz [ 716.934473][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.946314][ T4230] usb 5-1: Manufacturer: syz [ 716.957666][ T4230] usb 5-1: SerialNumber: syz [ 716.961899][ T4232] usb 1-1: Product: syz [ 716.984392][ T4230] usb 5-1: config 0 descriptor?? [ 716.987618][ T4232] usb 1-1: Manufacturer: syz [ 717.009896][ T4232] usb 1-1: SerialNumber: syz [ 717.086007][ T6783] usb 4-1: USB disconnect, device number 15 [ 717.247602][ T5303] usb 5-1: USB disconnect, device number 14 [ 717.363514][T11448] udevd[11448]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.440269][ T4232] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 717.470140][ T4230] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 717.480172][ T4232] usb 1-1: unit 5 not found! [ 717.500302][ T4232] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x600, type = 5 [ 717.530995][ T4232] usb 1-1: 6:0: cannot get min/max values for control 2 (id 6) [ 717.590520][ T4232] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 5 [ 717.700237][ T4232] usb 1-1: USB disconnect, device number 25 [ 717.745571][T13405] udevd[13405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.769432][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 717.840165][ T4230] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 717.850614][ T4230] usb 6-1: config 2 has no interface number 0 [ 717.856758][ T4230] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 717.896456][ T4230] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 717.927052][ T4230] usb 6-1: config 2 interface 43 has no altsetting 0 [ 717.975787][T13730] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 718.100276][ T4230] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 718.119229][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.146190][ T4230] usb 6-1: Product: syz [ 718.156659][ T4230] usb 6-1: Manufacturer: syz [ 718.170241][ T4230] usb 6-1: SerialNumber: syz [ 718.200290][T13690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 718.214326][T13690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 718.221727][ T5303] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 718.396612][ T4232] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 718.460028][ T5303] usb 4-1: Using ep0 maxpacket: 8 [ 718.469444][T13690] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2082'. [ 718.490450][T13690] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2082'. [ 718.580890][ T4230] ums-usbat 6-1:2.43: USB Mass Storage device detected [ 718.590309][ T5303] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 718.614054][ T4230] ums-usbat 6-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 718.706280][ T4230] ums-usbat: probe of 6-1:2.43 failed with error 3 [ 718.734204][ T4230] usb 6-1: USB disconnect, device number 27 [ 718.780244][ T5303] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 718.794223][ T5303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.815269][ T5303] usb 4-1: Product: syz [ 718.819521][ T5303] usb 4-1: Manufacturer: syz [ 718.826760][ T5303] usb 4-1: SerialNumber: syz [ 718.856648][ T5303] usb 4-1: config 0 descriptor?? [ 718.902786][ T5303] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 718.992092][ T4232] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.006680][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.025144][ T4232] usb 1-1: Product: syz [ 719.029486][ T4232] usb 1-1: Manufacturer: syz [ 719.056224][ T4232] usb 1-1: SerialNumber: syz [ 719.075931][ T4232] usb 1-1: config 0 descriptor?? [ 719.330177][ T4232] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 719.400142][ T1325] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 719.425405][ T4230] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 719.790136][ T4230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.800188][ T4230] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 719.810046][ T4230] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 719.812582][ T1325] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 719.819246][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.840095][ T1325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.857407][ T1325] usb 6-1: config 0 has no interface number 0 [ 719.863896][ T1325] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6213, setting to 64 [ 719.877780][ T1325] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.891158][ T1325] usb 6-1: config 0 interface 52 has no altsetting 0 [ 719.906994][ T4230] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 720.061305][ T1325] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 720.073185][ T1325] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 720.083811][ T1325] usb 6-1: Product: syz [ 720.103760][ T1325] usb 6-1: Manufacturer: syz [ 720.108767][ T1325] usb 6-1: SerialNumber: syz [ 720.117138][ T1325] usb 6-1: config 0 descriptor?? [ 720.373963][ T1325] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input9 [ 720.577161][ T4243] usb 6-1: USB disconnect, device number 28 [ 720.580505][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 721.315964][T13828] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2107'. [ 721.328995][T13828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2107'. [ 721.350189][ T4232] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 721.370086][ T8093] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 721.390987][ T4232] usb 1-1: USB disconnect, device number 26 [ 721.730268][ T8093] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 721.744842][ T8093] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 721.754882][ T8093] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 721.764761][ T8093] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 721.779423][ T8093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.800291][T13814] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 721.930207][ T5303] gspca_zc3xx: reg_r err -71 [ 722.056429][ T8093] usb 6-1: USB disconnect, device number 29 [ 722.281350][ T9633] usb 5-1: USB disconnect, device number 15 [ 722.302416][ T9633] idmouse 5-1:1.0: disconnected [ 722.569952][ T5303] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 722.577527][ T5303] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 722.614646][ T5303] usb 4-1: USB disconnect, device number 16 [ 723.116141][T13899] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2119'. [ 723.128344][T13899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2119'. [ 723.165401][T13889] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 723.183948][T13889] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 723.240835][T10468] ------------[ cut here ]------------ [ 723.247584][T10468] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 723.258265][T10468] WARNING: CPU: 1 PID: 10468 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 723.268470][T10468] Modules linked in: [ 723.272426][T10468] CPU: 1 PID: 10468 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 723.280111][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 723.290232][T10468] Workqueue: phy31 ieee80211_roc_work [ 723.295677][T10468] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 723.302009][T10468] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 a5 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 74 fd 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 723.321683][T10468] RSP: 0018:ffffc90003dbf5c8 EFLAGS: 00010246 [ 723.327799][T10468] RAX: 1e703cd0fd682200 RBX: 0000000000000008 RCX: ffff888060963b80 [ 723.335854][T10468] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 723.343906][T10468] RBP: 0000000000000054 R08: ffffc90003dbf0e7 R09: 1ffff920007b7e1c [ 723.351974][T10468] R10: dffffc0000000000 R11: fffff520007b7e1d R12: ffff888046dec168 [ 723.360014][T10468] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.368053][T10468] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 723.377073][T10468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 723.383716][T10468] CR2: 000000110c3f9a9c CR3: 000000001fd89000 CR4: 00000000003526e0 [ 723.391770][T10468] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 723.399778][T10468] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 723.407838][T10468] Call Trace: [ 723.411177][T10468] [ 723.414153][T10468] rate_control_send_low+0x194/0x790 [ 723.419489][T10468] rate_control_get_rate+0x207/0x5c0 [ 723.424865][T10468] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 723.430623][T10468] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 723.436666][T10468] ? ieee80211_queue_skb+0xbd/0x20e0 [ 723.442038][T10468] invoke_tx_handlers_late+0xae/0x1720 [ 723.447561][T10468] ? ieee80211_tx_h_select_key+0x9b3/0x1710 [ 723.453547][T10468] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 723.459415][T10468] ieee80211_tx+0x2d4/0x460 [ 723.464000][T10468] ? ieee80211_skb_resize+0x610/0x610 [ 723.469440][T10468] ? ieee80211_xmit+0x309/0x420 [ 723.474370][T10468] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 723.480251][T10468] ieee80211_handle_roc_started+0x270/0x3f0 [ 723.486188][T10468] _ieee80211_start_next_roc+0x744/0xa40 [ 723.491909][T10468] ieee80211_roc_work+0x2b/0x40 [ 723.496807][T10468] process_one_work+0x867/0xff0 [ 723.501817][T10468] ? worker_detach_from_pool+0x240/0x240 [ 723.507484][T10468] ? lockdep_hardirqs_off+0x70/0x100 [ 723.512831][T10468] ? _raw_spin_lock_irq+0xb7/0xf0 [ 723.517901][T10468] ? _raw_spin_lock_irqsave+0x100/0x100 [ 723.523509][T10468] ? wq_worker_running+0x97/0x170 [ 723.528572][T10468] worker_thread+0xad7/0x12a0 [ 723.533342][T10468] kthread+0x42e/0x520 [ 723.537449][T10468] ? rcu_lock_release+0x20/0x20 [ 723.542356][T10468] ? kthread_blkcg+0xd0/0xd0 [ 723.546987][T10468] ret_from_fork+0x1f/0x30 [ 723.551483][T10468] [ 723.554571][T10468] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 723.561874][T10468] CPU: 1 PID: 10468 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 723.569543][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 723.579624][T10468] Workqueue: phy31 ieee80211_roc_work [ 723.585047][T10468] Call Trace: [ 723.588348][T10468] [ 723.591307][T10468] dump_stack_lvl+0x188/0x250 [ 723.596076][T10468] ? show_regs_print_info+0x20/0x20 [ 723.601310][T10468] ? load_image+0x410/0x410 [ 723.605869][T10468] panic+0x2f8/0x850 [ 723.609805][T10468] ? bpf_jit_dump+0xd0/0xd0 [ 723.614354][T10468] ? ret_from_fork+0x1f/0x30 [ 723.618990][T10468] ? __rate_control_send_low+0x62c/0x880 [ 723.624675][T10468] __warn+0x248/0x2b0 [ 723.628694][T10468] ? __rate_control_send_low+0x62c/0x880 [ 723.634368][T10468] report_bug+0x1b9/0x2e0 [ 723.638749][T10468] handle_bug+0x3a/0x70 [ 723.642937][T10468] exc_invalid_op+0x16/0x40 [ 723.647472][T10468] asm_exc_invalid_op+0x16/0x20 [ 723.652356][T10468] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 723.658640][T10468] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 a5 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 74 fd 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 723.678295][T10468] RSP: 0018:ffffc90003dbf5c8 EFLAGS: 00010246 [ 723.684418][T10468] RAX: 1e703cd0fd682200 RBX: 0000000000000008 RCX: ffff888060963b80 [ 723.692418][T10468] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 723.700428][T10468] RBP: 0000000000000054 R08: ffffc90003dbf0e7 R09: 1ffff920007b7e1c [ 723.708436][T10468] R10: dffffc0000000000 R11: fffff520007b7e1d R12: ffff888046dec168 [ 723.716436][T10468] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.724456][T10468] ? __rate_control_send_low+0x62c/0x880 [ 723.730174][T10468] rate_control_send_low+0x194/0x790 [ 723.735505][T10468] rate_control_get_rate+0x207/0x5c0 [ 723.740836][T10468] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 723.746516][T10468] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 723.752537][T10468] ? ieee80211_queue_skb+0xbd/0x20e0 [ 723.757877][T10468] invoke_tx_handlers_late+0xae/0x1720 [ 723.763382][T10468] ? ieee80211_tx_h_select_key+0x9b3/0x1710 [ 723.769319][T10468] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 723.775192][T10468] ieee80211_tx+0x2d4/0x460 [ 723.779728][T10468] ? ieee80211_skb_resize+0x610/0x610 [ 723.785150][T10468] ? ieee80211_xmit+0x309/0x420 [ 723.790045][T10468] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 723.795892][T10468] ieee80211_handle_roc_started+0x270/0x3f0 [ 723.801825][T10468] _ieee80211_start_next_roc+0x744/0xa40 [ 723.807597][T10468] ieee80211_roc_work+0x2b/0x40 [ 723.812483][T10468] process_one_work+0x867/0xff0 [ 723.817390][T10468] ? worker_detach_from_pool+0x240/0x240 [ 723.823052][T10468] ? lockdep_hardirqs_off+0x70/0x100 [ 723.828381][T10468] ? _raw_spin_lock_irq+0xb7/0xf0 [ 723.833436][T10468] ? _raw_spin_lock_irqsave+0x100/0x100 [ 723.839020][T10468] ? wq_worker_running+0x97/0x170 [ 723.844096][T10468] worker_thread+0xad7/0x12a0 [ 723.848955][T10468] kthread+0x42e/0x520 [ 723.853066][T10468] ? rcu_lock_release+0x20/0x20 [ 723.857950][T10468] ? kthread_blkcg+0xd0/0xd0 [ 723.862582][T10468] ret_from_fork+0x1f/0x30 [ 723.867067][T10468] [ 723.870409][T10468] Kernel Offset: disabled [ 723.875356][T10468] Rebooting in 86400 seconds..