last executing test programs: 9.910811795s ago: executing program 1 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x222203, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8) 9.854996829s ago: executing program 2 (id=1287): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66", 0x53}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.529099382s ago: executing program 2 (id=1288): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 9.117562108s ago: executing program 2 (id=1291): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {0x0}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f077", 0x7a}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.653434746s ago: executing program 1 (id=1295): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) writev(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 7.604200587s ago: executing program 2 (id=1296): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe98097", 0x16}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f077", 0x7a}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.374943793s ago: executing program 2 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x222203, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8) 7.337939513s ago: executing program 1 (id=1301): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 6.196092115s ago: executing program 1 (id=1310): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe98097", 0x16}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b", 0x7c}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.092889398s ago: executing program 2 (id=1311): socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x3d, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = mq_open(&(0x7f0000000100)='\x00', 0x800, 0x5f, &(0x7f0000000280)={0x2433, 0x90, 0x3, 0x6}) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) mq_notify(r3, &(0x7f0000000380)={0x0, 0x12, 0x0, @tid=r4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d617371000000001400028008663f400000001708000140000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = userfaultfd(0x80001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0x30000000}) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 5.746781542s ago: executing program 1 (id=1314): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.139642398s ago: executing program 1 (id=1320): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r2, 0x0, &(0x7f0000141000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r3 = signalfd(r0, &(0x7f0000000040)={[0x53e]}, 0x8) r4 = syz_clone3(&(0x7f0000000180)={0x3800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) io_submit(0x0, 0x0, 0x0) ptrace$peekuser(0x3, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) socket$igmp(0x2, 0x3, 0x2) close(0x5) mprotect(&(0x7f000042b000/0x4000)=nil, 0x4000, 0x200000a) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 3.863028618s ago: executing program 4 (id=1324): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe98097", 0x16}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b", 0x7c}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.693982965s ago: executing program 3 (id=1325): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418", 0x4b}, {&(0x7f0000000340)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.640157813s ago: executing program 4 (id=1326): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66", 0x53}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.435043934s ago: executing program 0 (id=1327): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) writev(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.434108302s ago: executing program 4 (id=1328): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.353951247s ago: executing program 3 (id=1329): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000027) preadv2(r0, 0x0, 0x0, 0x0, 0xc, 0xa) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x218cc2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x2004d001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r6, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240020006800010002000000fcffff7f00000000000400"/36], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.232896184s ago: executing program 0 (id=1330): syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60000000003c3a002001000000000000000000000000000100dfecde722c7e2fd8cf0000000060540978e0"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.197901073s ago: executing program 4 (id=1331): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x72c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.069270839s ago: executing program 3 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546", 0xf) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) 1.968202866s ago: executing program 0 (id=1333): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a783022052", 0x39}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 784.839859ms ago: executing program 3 (id=1334): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b", 0x7c}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 683.28163ms ago: executing program 4 (id=1335): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b", 0x7c}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 642.94578ms ago: executing program 0 (id=1336): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe98097", 0x16}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b", 0x7c}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 541.741542ms ago: executing program 3 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005240)={'vcan0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000140)="815e97e2d8ad83372053cc2c9726b2", 0xf}, {0x0}, {0x0}], 0x3}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba", 0x10002, 0x4011, 0x0, 0x0) 366.053017ms ago: executing program 4 (id=1338): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) unshare(0x2c020400) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e9301020301090212"], 0x0) 316.298869ms ago: executing program 0 (id=1339): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff", 0x21}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66", 0x53}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 70.693417ms ago: executing program 3 (id=1340): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r2, 0x0, &(0x7f0000141000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r3 = signalfd(r0, &(0x7f0000000040)={[0x53e]}, 0x8) r4 = syz_clone3(&(0x7f0000000180)={0x3800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) io_submit(0x0, 0x0, 0x0) ptrace$peekuser(0x3, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=1341): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be56383", 0x41}, {&(0x7f0000000100)}], 0x2, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 84.483236][ T5581] cgroup: Unknown subsys name 'net' [ 84.744740][ T5581] cgroup: Unknown subsys name 'cpuset' [ 84.819057][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.646149][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.865894][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.899762][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.902705][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.924061][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.955125][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.973153][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.992639][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.993578][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.993982][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.995440][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.995606][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.997259][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.003131][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.005879][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.010279][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.010714][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.011625][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.026183][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.035414][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.044938][ T4909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.045899][ T4909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.049811][ T4909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.054283][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.061872][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.073157][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.971286][ T10] cfg80211: failed to load regulatory.db [ 93.199667][ T5613] Bluetooth: hci0: command tx timeout [ 93.199674][ T5602] Bluetooth: hci1: command tx timeout [ 93.199796][ T5613] Bluetooth: hci2: command tx timeout [ 93.280556][ T5613] Bluetooth: hci4: command tx timeout [ 93.280685][ T5613] Bluetooth: hci3: command tx timeout [ 93.691257][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.692508][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.692679][ T5595] bridge_slave_0: entered allmulticast mode [ 93.695847][ T5595] bridge_slave_0: entered promiscuous mode [ 93.711827][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.712160][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.712589][ T5596] bridge_slave_0: entered allmulticast mode [ 93.720770][ T5596] bridge_slave_0: entered promiscuous mode [ 93.784920][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.785009][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.785122][ T5595] bridge_slave_1: entered allmulticast mode [ 93.788558][ T5595] bridge_slave_1: entered promiscuous mode [ 93.807976][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.808327][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.812106][ T5596] bridge_slave_1: entered allmulticast mode [ 93.819546][ T5596] bridge_slave_1: entered promiscuous mode [ 93.967988][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.968112][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.968274][ T5597] bridge_slave_0: entered allmulticast mode [ 93.976739][ T5597] bridge_slave_0: entered promiscuous mode [ 94.026232][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.036796][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.037514][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.037788][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.038145][ T5597] bridge_slave_1: entered allmulticast mode [ 94.058864][ T5597] bridge_slave_1: entered promiscuous mode [ 94.142168][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.142291][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.142472][ T5593] bridge_slave_0: entered allmulticast mode [ 94.144618][ T5593] bridge_slave_0: entered promiscuous mode [ 94.152948][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.172112][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.204194][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.204265][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.204366][ T5594] bridge_slave_0: entered allmulticast mode [ 94.206281][ T5594] bridge_slave_0: entered promiscuous mode [ 94.207832][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.207956][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.208098][ T5593] bridge_slave_1: entered allmulticast mode [ 94.216247][ T5593] bridge_slave_1: entered promiscuous mode [ 94.296143][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.296297][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.296819][ T5594] bridge_slave_1: entered allmulticast mode [ 94.303517][ T5594] bridge_slave_1: entered promiscuous mode [ 94.368378][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.410984][ T5595] team0: Port device team_slave_0 added [ 94.413279][ T5596] team0: Port device team_slave_0 added [ 94.416109][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.452157][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.454477][ T5595] team0: Port device team_slave_1 added [ 94.456742][ T5596] team0: Port device team_slave_1 added [ 94.497917][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.513167][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.564531][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.613857][ T5597] team0: Port device team_slave_0 added [ 94.650634][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.650646][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.650666][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.654604][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.654627][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.654644][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.656943][ T5597] team0: Port device team_slave_1 added [ 94.724873][ T5593] team0: Port device team_slave_0 added [ 94.737378][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.737409][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.737477][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.747183][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.747231][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.747336][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.817863][ T5594] team0: Port device team_slave_0 added [ 94.831379][ T5593] team0: Port device team_slave_1 added [ 94.889296][ T5594] team0: Port device team_slave_1 added [ 94.910669][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.910685][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.910713][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.977667][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.977678][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.977696][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.027728][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.027744][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.027769][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.099209][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.099222][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.099241][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.100689][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.100704][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.100732][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.202836][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.202848][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.202865][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.278587][ T5612] Bluetooth: hci1: command tx timeout [ 95.278619][ T5612] Bluetooth: hci0: command tx timeout [ 95.278640][ T5612] Bluetooth: hci2: command tx timeout [ 95.358633][ T5613] Bluetooth: hci3: command tx timeout [ 95.358667][ T5613] Bluetooth: hci4: command tx timeout [ 95.689323][ T5595] hsr_slave_0: entered promiscuous mode [ 95.690443][ T5595] hsr_slave_1: entered promiscuous mode [ 95.707734][ T5596] hsr_slave_0: entered promiscuous mode [ 95.711952][ T5596] hsr_slave_1: entered promiscuous mode [ 95.714815][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 95.715079][ T5596] Cannot create hsr debugfs directory [ 95.821306][ T5597] hsr_slave_0: entered promiscuous mode [ 95.822178][ T5597] hsr_slave_1: entered promiscuous mode [ 95.822781][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 95.822803][ T5597] Cannot create hsr debugfs directory [ 95.906344][ T5593] hsr_slave_0: entered promiscuous mode [ 95.907213][ T5593] hsr_slave_1: entered promiscuous mode [ 95.907866][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 95.907882][ T5593] Cannot create hsr debugfs directory [ 95.963134][ T5594] hsr_slave_0: entered promiscuous mode [ 95.964121][ T5594] hsr_slave_1: entered promiscuous mode [ 95.964784][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 95.964799][ T5594] Cannot create hsr debugfs directory [ 96.823399][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.870063][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.875571][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.913275][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.932315][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.974326][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.011923][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.032880][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.157360][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.192074][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.194781][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.222077][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.224281][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.274263][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.301234][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.342223][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.358732][ T5613] Bluetooth: hci2: command tx timeout [ 97.358819][ T5613] Bluetooth: hci0: command tx timeout [ 97.358876][ T5613] Bluetooth: hci1: command tx timeout [ 97.438529][ T5612] Bluetooth: hci4: command tx timeout [ 97.438554][ T5612] Bluetooth: hci3: command tx timeout [ 97.516318][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.553127][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.566707][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.604474][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.616153][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.652183][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.677344][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.712341][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.854797][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.892628][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.914880][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.952637][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.972029][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.011928][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.038126][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.071586][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.135167][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.228293][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.273167][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.289446][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.335637][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.348073][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.392045][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.407826][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.408225][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.433444][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.486284][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.486575][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.535696][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.556746][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.556841][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.662708][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.701470][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.702632][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.737685][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.775138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.775254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.856097][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.913143][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.940082][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.940263][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.010140][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.010332][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.119486][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.165207][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.165384][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.199783][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.272850][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.272973][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.404543][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.438570][ T5613] Bluetooth: hci1: command tx timeout [ 99.438597][ T5613] Bluetooth: hci0: command tx timeout [ 99.438618][ T5613] Bluetooth: hci2: command tx timeout [ 99.519532][ T5612] Bluetooth: hci3: command tx timeout [ 99.519560][ T5612] Bluetooth: hci4: command tx timeout [ 99.541944][ T1861] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.542134][ T1861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.597859][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.598140][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.007483][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.502752][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.543003][ T5595] veth0_vlan: entered promiscuous mode [ 100.616947][ T5595] veth1_vlan: entered promiscuous mode [ 100.765355][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.884758][ T5595] veth0_macvtap: entered promiscuous mode [ 100.982818][ T5595] veth1_macvtap: entered promiscuous mode [ 101.127438][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.218817][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.303148][ T5593] veth0_vlan: entered promiscuous mode [ 101.316874][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.341351][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.427495][ T5593] veth1_vlan: entered promiscuous mode [ 101.744846][ T5597] veth0_vlan: entered promiscuous mode [ 101.791535][ T5593] veth0_macvtap: entered promiscuous mode [ 101.825598][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.825622][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.881304][ T5596] veth0_vlan: entered promiscuous mode [ 101.913777][ T5593] veth1_macvtap: entered promiscuous mode [ 101.944201][ T5597] veth1_vlan: entered promiscuous mode [ 101.982100][ T5594] veth0_vlan: entered promiscuous mode [ 102.020363][ T5596] veth1_vlan: entered promiscuous mode [ 102.059910][ T3312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.059929][ T3312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.061534][ T5594] veth1_vlan: entered promiscuous mode [ 102.110207][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.216886][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.288160][ T5597] veth0_macvtap: entered promiscuous mode [ 102.357569][ T5597] veth1_macvtap: entered promiscuous mode [ 102.372496][ T5596] veth0_macvtap: entered promiscuous mode [ 102.517638][ T5594] veth0_macvtap: entered promiscuous mode [ 102.534176][ T5596] veth1_macvtap: entered promiscuous mode [ 102.624505][ T5594] veth1_macvtap: entered promiscuous mode [ 102.744376][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.802417][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.850152][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.888040][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.130590][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.130610][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.137628][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.190466][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.340736][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.340752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.933248][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.933269][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.666441][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.666462][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.798325][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.798342][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.954910][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.954931][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.454615][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 109.125411][ T1861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.125431][ T1861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.230482][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.230500][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.348159][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.357056][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.638973][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639064][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639098][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639142][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639173][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639200][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639228][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639255][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639283][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639334][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639364][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639393][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639421][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639449][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639478][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639507][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639536][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639564][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.691113][ T5818] process 'syz.3.9' launched './file2' with NULL argv: empty string added [ 112.147401][ T5820] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.889384][ T5848] fuse: Unknown parameter 'use00000000000000000000' [ 117.540764][ T5859] futex_wake_op: syz.0.16 tries to shift op by 144; fix this program [ 120.870203][ T5869] vxfs: unable to read disk superblock at 1 [ 120.876568][ T5869] vxfs: unable to read disk superblock at 8 [ 120.876608][ T5869] vxfs: can't find superblock. [ 121.057970][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 121.333162][ T5851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.456808][ T5851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.582687][ T5851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.691023][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.813357][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.814101][ T5851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.920889][ T5879] futex_wake_op: syz.0.22 tries to shift op by 144; fix this program [ 123.917032][ T5851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.149211][ T5889] futex_wake_op: syz.2.23 tries to shift op by 144; fix this program [ 125.124721][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.219252][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.405735][ T5851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.405818][ T5851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.869833][ T1030] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.335700][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.342594][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.523197][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.776066][ T5851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.200088][ T5851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.200174][ T5851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.283119][ T5920] futex_wake_op: syz.0.30 tries to shift op by 144; fix this program [ 128.325112][ T5851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.380860][ T5851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.380943][ T5851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.667765][ T5851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.163898][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.369943][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.649086][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.267455][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.416566][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.678536][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.740103][ T36] usb 5-1: device not accepting address 2, error -71 [ 132.352223][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.558515][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.067539][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067632][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.725385][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.725421][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.427007][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 140.600086][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 148.000934][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 150.588579][ T1253] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.786022][ T1253] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 150.786055][ T1253] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 150.815493][ T1253] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 150.815521][ T1253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.815540][ T1253] usb 5-1: Product: syz [ 150.815553][ T1253] usb 5-1: Manufacturer: syz [ 150.815567][ T1253] usb 5-1: SerialNumber: syz [ 151.114953][ T1253] usb 5-1: config 0 descriptor?? [ 152.225990][ T1253] mos7840 5-1:0.0: required endpoints missing [ 153.274221][ T1253] usb 5-1: USB disconnect, device number 4 [ 155.300358][ T6071] futex_wake_op: syz.3.66 tries to shift op by 144; fix this program [ 156.572073][ T6074] fuse: Unknown parameter 'fd0x0000000000000003' [ 158.096689][ T6078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.096979][ T6078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.097245][ T6078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.097514][ T6078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.108023][ T6078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.289721][ T6093] futex_wake_op: syz.2.72 tries to shift op by 144; fix this program [ 160.211833][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.211894][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.211910][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.211924][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.211937][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.261216][ T6115] NILFS (nullb0): couldn't find nilfs on the device [ 162.248530][ T5601] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.462592][ T6124] NILFS (nullb0): couldn't find nilfs on the device [ 163.307096][ T5601] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 163.307122][ T5601] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 163.311519][ T5601] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 163.311591][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.311666][ T5601] usb 3-1: Product: syz [ 163.311704][ T5601] usb 3-1: Manufacturer: syz [ 163.311740][ T5601] usb 3-1: SerialNumber: syz [ 163.528626][ T5733] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 163.579150][ T5601] usb 3-1: config 0 descriptor?? [ 164.031375][ T5733] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 164.031652][ T5733] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 164.754667][ T5733] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 164.754696][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.754727][ T5733] usb 2-1: Product: syz [ 164.754740][ T5733] usb 2-1: Manufacturer: syz [ 164.754753][ T5733] usb 2-1: SerialNumber: syz [ 164.993134][ T5733] usb 2-1: config 0 descriptor?? [ 165.074422][ T5733] usb 2-1: can't set config #0, error -71 [ 165.093260][ T5733] usb 2-1: USB disconnect, device number 2 [ 165.184733][ T5601] usb 3-1: USB disconnect, device number 2 [ 165.531847][ T6141] futex_wake_op: syz.3.85 tries to shift op by 144; fix this program [ 167.927938][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 168.276067][ T6158] vxfs: unable to read disk superblock at 1 [ 168.280425][ T6158] vxfs: unable to read disk superblock at 8 [ 168.280466][ T6158] vxfs: can't find superblock. [ 172.160862][ T6186] NILFS (nullb0): couldn't find nilfs on the device [ 173.088564][ T36] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 173.241507][ T36] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 173.241537][ T36] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 173.245234][ T36] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 173.245261][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.245281][ T36] usb 3-1: Product: syz [ 173.245293][ T36] usb 3-1: Manufacturer: syz [ 173.245308][ T36] usb 3-1: SerialNumber: syz [ 174.431060][ T36] usb 3-1: config 0 descriptor?? [ 175.981530][ T9] usb 3-1: USB disconnect, device number 3 [ 177.950261][ T6228] futex_wake_op: syz.3.109 tries to shift op by 144; fix this program [ 179.443373][ T6229] lo speed is unknown, defaulting to 1000 [ 179.445878][ T6229] lo speed is unknown, defaulting to 1000 [ 179.894547][ T6229] lo speed is unknown, defaulting to 1000 [ 179.954354][ T6229] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 179.954382][ T6229] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 179.954408][ T6229] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 180.110230][ T6229] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.430267][ T6229] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 183.933406][ T6229] lo speed is unknown, defaulting to 1000 [ 183.937890][ T6229] lo speed is unknown, defaulting to 1000 [ 183.998095][ T6229] lo speed is unknown, defaulting to 1000 [ 184.019015][ T6229] lo speed is unknown, defaulting to 1000 [ 184.023580][ T6229] lo speed is unknown, defaulting to 1000 [ 184.027589][ T6261] siw: device registration error -23 [ 185.647812][ T6264] smbdirect: ib_dev[syz2] removed [ 188.700430][ T6317] fuse: Unknown parameter 'user_id00000000000000000000' [ 189.515685][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 195.103000][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.103073][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.094111][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 197.869169][ T6375] lo speed is unknown, defaulting to 1000 [ 197.869238][ T6375] lo speed is unknown, defaulting to 1000 [ 197.871359][ T6375] lo speed is unknown, defaulting to 1000 [ 197.874352][ T6375] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 197.874385][ T6375] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 197.874440][ T6375] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 198.624742][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 200.437888][ T6375] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.508390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 201.821618][ T6375] lo speed is unknown, defaulting to 1000 [ 201.828094][ T6375] lo speed is unknown, defaulting to 1000 [ 202.254598][ T6375] lo speed is unknown, defaulting to 1000 [ 202.268109][ T6375] lo speed is unknown, defaulting to 1000 [ 202.290614][ T6375] lo speed is unknown, defaulting to 1000 [ 205.962250][ T6421] Zero length message leads to an empty skb [ 209.698406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.708382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.718382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.728386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.738386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.748376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.758387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.768386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.778377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.262574][ T6436] syz.2.166 (6436) used greatest stack depth: 19200 bytes left [ 222.420675][ T6520] ======================================================= [ 222.420675][ T6520] WARNING: The mand mount option has been deprecated and [ 222.420675][ T6520] and is ignored by this kernel. Remove the mand [ 222.420675][ T6520] option from the mount to silence this warning. [ 222.420675][ T6520] ======================================================= [ 222.558011][ T6518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.558213][ T6518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.563639][ T6518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.586054][ T6518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.586272][ T6518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.638834][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.643244][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.647572][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.777995][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.790703][ T5602] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.460708][ T6564] netlink: 124 bytes leftover after parsing attributes in process `syz.4.203'. [ 240.477882][ T6656] futex_wake_op: syz.2.227 tries to shift op by 144; fix this program [ 247.321954][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 249.663142][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 253.090593][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.249'. [ 256.493036][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.493104][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.097820][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 262.906498][ T6809] futex_wake_op: syz.3.266 tries to shift op by 144; fix this program [ 267.262500][ T6826] siw: device registration error -23 [ 269.109722][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 273.624999][ T6900] futex_wake_op: syz.4.298 tries to shift op by 144; fix this program [ 275.122333][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 276.518463][ T5601] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 276.805840][ T5601] usb 2-1: device descriptor read/64, error -71 [ 277.114355][ T5601] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 277.948546][ T5601] usb 2-1: device descriptor read/64, error -71 [ 278.059739][ T5601] usb usb2-port1: attempt power cycle [ 278.478599][ T5601] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 278.499184][ T5601] usb 2-1: device descriptor read/8, error -71 [ 278.778034][ T5601] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.810100][ T5601] usb 2-1: device descriptor read/8, error -71 [ 278.920749][ T5601] usb usb2-port1: unable to enumerate USB device [ 283.204485][ T7025] futex_wake_op: syz.0.339 tries to shift op by 144; fix this program [ 290.245583][ T7083] futex_wake_op: syz.2.353 tries to shift op by 144; fix this program [ 291.938735][ T7104] futex_wake_op: syz.2.362 tries to shift op by 144; fix this program [ 306.685406][ T7233] futex_wake_op: syz.0.406 tries to shift op by 144; fix this program [ 307.338855][ T7239] netlink: 104 bytes leftover after parsing attributes in process `syz.2.409'. [ 310.478490][ T7275] futex_wake_op: syz.3.418 tries to shift op by 144; fix this program [ 312.310642][ T7285] futex_wake_op: syz.3.421 tries to shift op by 144; fix this program [ 317.064198][ T36] lo speed is unknown, defaulting to 1000 [ 317.202207][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202271][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.439221][ T7334] futex_wake_op: syz.0.435 tries to shift op by 144; fix this program [ 328.569663][ T7426] futex_wake_op: syz.4.466 tries to shift op by 144; fix this program [ 331.289356][ T7444] siw: device registration error -23 [ 334.386712][ T7463] futex_wake_op: syz.0.477 tries to shift op by 144; fix this program [ 339.432613][ T7506] futex_wake_op: syz.3.491 tries to shift op by 144; fix this program [ 341.110680][ T7531] siw: device registration error -23 [ 345.244361][ T7559] siw: device registration error -23 [ 346.051964][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 346.210654][ T5821] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 346.210682][ T5821] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 346.213821][ T5821] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 346.213849][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.213871][ T5821] usb 3-1: Product: syz [ 346.213885][ T5821] usb 3-1: Manufacturer: syz [ 346.213901][ T5821] usb 3-1: SerialNumber: syz [ 346.435632][ T5821] usb 3-1: config 0 descriptor?? [ 348.212997][ T6772] usb 3-1: USB disconnect, device number 4 [ 352.511326][ T7619] siw: device registration error -23 [ 353.828565][ T6772] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 355.654156][ T6772] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 355.654316][ T6772] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 355.755975][ T6772] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 355.756006][ T6772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.756027][ T6772] usb 3-1: Product: syz [ 355.756043][ T6772] usb 3-1: Manufacturer: syz [ 355.756059][ T6772] usb 3-1: SerialNumber: syz [ 356.937422][ T6772] usb 3-1: config 0 descriptor?? [ 356.944587][ T6772] usb 3-1: can't set config #0, error -71 [ 357.012401][ T6772] usb 3-1: USB disconnect, device number 5 [ 361.078897][ T7690] futex_wake_op: syz.3.545 tries to shift op by 144; fix this program [ 363.556222][ T6772] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 364.147612][ T6772] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 364.147642][ T6772] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 364.150611][ T6772] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 364.150640][ T6772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.150662][ T6772] usb 3-1: Product: syz [ 364.150678][ T6772] usb 3-1: Manufacturer: syz [ 364.150698][ T6772] usb 3-1: SerialNumber: syz [ 364.423610][ T6772] usb 3-1: config 0 descriptor?? [ 364.462843][ T6772] usb 3-1: can't set config #0, error -71 [ 364.477561][ T6772] usb 3-1: USB disconnect, device number 6 [ 364.938751][ T7717] syz.0.556 (7717) used greatest stack depth: 17736 bytes left [ 367.759249][ T6772] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 367.911852][ T6772] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 367.911882][ T6772] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 367.914251][ T6772] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 367.914276][ T6772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.914295][ T6772] usb 2-1: Product: syz [ 367.914308][ T6772] usb 2-1: Manufacturer: syz [ 367.914322][ T6772] usb 2-1: SerialNumber: syz [ 368.021526][ T6772] usb 2-1: config 0 descriptor?? [ 368.776888][ T36] usb 2-1: USB disconnect, device number 7 [ 372.478073][ T5608] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 373.763120][ T5608] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 373.763151][ T5608] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 373.767787][ T5608] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 373.767833][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.767854][ T5608] usb 5-1: Product: syz [ 373.767869][ T5608] usb 5-1: Manufacturer: syz [ 373.767883][ T5608] usb 5-1: SerialNumber: syz [ 373.855298][ T5608] usb 5-1: config 0 descriptor?? [ 374.808811][ T199] usb 5-1: USB disconnect, device number 5 [ 375.168497][ T7845] netlink: 'syz.4.603': attribute type 33 has an invalid length. [ 375.168522][ T7845] netlink: 152 bytes leftover after parsing attributes in process `syz.4.603'. [ 375.168608][ T7845] `: renamed from team0 (while UP) [ 377.415392][ T7870] Bluetooth: MGMT ver 1.23 [ 378.643951][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.644017][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.769401][ T7874] siw: device registration error -23 [ 379.535498][ T5713] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 379.681068][ T5713] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 379.681097][ T5713] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 379.709267][ T5713] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 379.709297][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.709319][ T5713] usb 3-1: Product: syz [ 379.709334][ T5713] usb 3-1: Manufacturer: syz [ 379.709349][ T5713] usb 3-1: SerialNumber: syz [ 379.754928][ T5713] usb 3-1: config 0 descriptor?? [ 380.017506][ T7899] netlink: 830 bytes leftover after parsing attributes in process `syz.0.622'. [ 380.917365][ T10] usb 3-1: USB disconnect, device number 7 [ 381.118386][ T199] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 381.269215][ T199] usb 2-1: Using ep0 maxpacket: 16 [ 381.304429][ T199] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 381.304454][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.306163][ T199] usb 2-1: Product: syz [ 381.306183][ T199] usb 2-1: Manufacturer: syz [ 381.306197][ T199] usb 2-1: SerialNumber: syz [ 381.380992][ T199] usb 2-1: config 0 descriptor?? [ 381.955359][ T199] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 382.021867][ T199] usb 2-1: USB disconnect, device number 8 [ 382.219931][ T7950] siw: device registration error -23 [ 384.378497][ T5735] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 384.536234][ T5735] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 384.536280][ T5735] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 384.573404][ T5735] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 384.573431][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.573449][ T5735] usb 5-1: Product: syz [ 384.573463][ T5735] usb 5-1: Manufacturer: syz [ 384.573476][ T5735] usb 5-1: SerialNumber: syz [ 384.625827][ T5735] usb 5-1: config 0 descriptor?? [ 387.361827][ T5735] usb 5-1: USB disconnect, device number 6 [ 390.280052][ T5713] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 390.430202][ T5713] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 390.430229][ T5713] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 390.462717][ T5713] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 390.462743][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.462761][ T5713] usb 2-1: Product: syz [ 390.462774][ T5713] usb 2-1: Manufacturer: syz [ 390.462787][ T5713] usb 2-1: SerialNumber: syz [ 390.537907][ T5713] usb 2-1: config 0 descriptor?? [ 390.743820][ T5608] usb 2-1: USB disconnect, device number 9 [ 391.752776][ T8065] trusted_key: encrypted_key: insufficient parameters specified [ 400.230895][ T5821] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 400.655722][ T5821] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 400.655752][ T5821] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 400.660642][ T5821] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 400.660669][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.660689][ T5821] usb 2-1: Product: syz [ 400.660703][ T5821] usb 2-1: Manufacturer: syz [ 400.660735][ T5821] usb 2-1: SerialNumber: syz [ 400.857488][ T5821] usb 2-1: config 0 descriptor?? [ 401.231222][ T5735] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 401.300641][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'. [ 401.380539][ T5735] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 401.380566][ T5735] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 401.383398][ T5735] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 401.383424][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.383443][ T5735] usb 3-1: Product: syz [ 401.383456][ T5735] usb 3-1: Manufacturer: syz [ 401.383469][ T5735] usb 3-1: SerialNumber: syz [ 402.900678][ T5735] usb 3-1: config 0 descriptor?? [ 402.951000][ T5821] usb 2-1: USB disconnect, device number 10 [ 404.413822][ T5735] mos7840 3-1:0.0: required endpoints missing [ 404.462841][ T5735] usb 3-1: USB disconnect, device number 8 [ 409.828456][ T5821] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 409.980216][ T5821] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 409.980245][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 409.985558][ T5821] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 409.985584][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.985604][ T5821] usb 2-1: Product: syz [ 409.985636][ T5821] usb 2-1: Manufacturer: syz [ 409.985651][ T5821] usb 2-1: SerialNumber: syz [ 410.294916][ T5821] usb 2-1: config 0 descriptor?? [ 411.732468][ T5821] mos7840 2-1:0.0: required endpoints missing [ 411.838493][ T5821] usb 2-1: USB disconnect, device number 11 [ 423.157695][ T8364] misc userio: Invalid payload size [ 434.117799][ T8483] trusted_key: encrypted_key: insufficient parameters specified [ 438.136245][ T8454] syz.0.818 (8454) used greatest stack depth: 17216 bytes left [ 440.269385][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.269456][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.958663][ T6772] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 449.160708][ T6772] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 449.160757][ T6772] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 449.164719][ T6772] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 449.164750][ T6772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.164765][ T6772] usb 5-1: Product: syz [ 449.164775][ T6772] usb 5-1: Manufacturer: syz [ 449.164785][ T6772] usb 5-1: SerialNumber: syz [ 449.299918][ T6772] usb 5-1: config 0 descriptor?? [ 450.786375][ T8640] trusted_key: encrypted_key: insufficient parameters specified [ 451.647843][ T6772] mos7840 5-1:0.0: required endpoints missing [ 451.794184][ T6772] usb 5-1: USB disconnect, device number 7 [ 455.809377][ T5734] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 455.962048][ T5734] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 455.962077][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 455.974504][ T5734] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 455.974597][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.974643][ T5734] usb 3-1: Product: syz [ 455.974677][ T5734] usb 3-1: Manufacturer: syz [ 455.974700][ T5734] usb 3-1: SerialNumber: syz [ 456.096762][ T5734] usb 3-1: config 0 descriptor?? [ 458.286592][ T5734] mos7840 3-1:0.0: required endpoints missing [ 458.573921][ T5734] usb 3-1: USB disconnect, device number 9 [ 459.223562][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 462.858694][ T8766] trusted_key: encrypted_key: insufficient parameters specified [ 466.728753][ T5713] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 466.890312][ T5713] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 466.890354][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 466.892748][ T5713] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 466.892776][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.892797][ T5713] usb 5-1: Product: syz [ 466.892813][ T5713] usb 5-1: Manufacturer: syz [ 466.892827][ T5713] usb 5-1: SerialNumber: syz [ 466.969038][ T5713] usb 5-1: config 0 descriptor?? [ 469.183814][ T5713] mos7840 5-1:0.0: required endpoints missing [ 469.259026][ T5713] usb 5-1: USB disconnect, device number 8 [ 470.358632][ T8848] netlink: 774 bytes leftover after parsing attributes in process `syz.3.966'. [ 477.658397][ T5821] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 477.686940][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 477.820183][ T5821] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 477.820212][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 477.822556][ T5821] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 477.822757][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.822779][ T5821] usb 3-1: Product: syz [ 477.822792][ T5821] usb 3-1: Manufacturer: syz [ 477.822807][ T5821] usb 3-1: SerialNumber: syz [ 477.895285][ T5821] usb 3-1: config 0 descriptor?? [ 478.906152][ T8955] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1003'. [ 479.419642][ T5821] mos7840 3-1:0.0: required endpoints missing [ 479.489302][ T5821] usb 3-1: USB disconnect, device number 10 [ 486.226239][ T9030] 8021q: adding VLAN 0 to HW filter on device eth0 [ 491.037547][ T9129] siw: device registration error -23 [ 492.728556][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 493.202696][ T9151] siw: device registration error -23 [ 493.905366][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 495.409800][ T9193] siw: device registration error -23 [ 499.051212][ T9225] siw: device registration error -23 [ 501.543468][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.543534][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.067801][ T9247] siw: device registration error -23 [ 516.058675][ T9415] fuse: Bad value for 'fd' [ 517.839284][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 518.824006][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 519.396886][ T9471] siw: device registration error -23 [ 521.268122][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 523.392607][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 523.823134][ T9538] siw: device registration error -23 [ 526.993030][ T9572] siw: device registration error -23 [ 541.607914][ T9772] fuse: Bad value for 'fd' [ 545.678427][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 545.684267][ T9822] ------------[ cut here ]------------ [ 545.684275][ T9822] kcov->remote [ 545.684286][ T9822] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x17b/0x240, CPU#1: syz.0.1341/9822 [ 545.684453][ T9822] Modules linked in: [ 545.684487][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.0.1341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 545.684535][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.684550][ T9822] RIP: 0010:kcov_task_exit+0x17b/0x240 [ 545.684599][ T9822] Code: 10 00 00 49 8b be 90 00 00 00 e8 e0 d2 57 00 4c 89 f7 5b 41 5e 41 5f e9 c3 92 5d 00 7c 40 5b 41 5e 41 5f e9 97 5b 82 09 cc 90 <0f> 0b 90 eb 10 90 0f 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c [ 545.684613][ T9822] RSP: 0018:ffffc9000633fae0 EFLAGS: 00010246 [ 545.684668][ T9822] RAX: cd4303ec060b8c00 RBX: ffff8880291f8000 RCX: 0000000000000000 [ 545.684680][ T9822] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 545.684691][ T9822] RBP: ffffc9000633fc30 R08: ffffffff8b46cb20 R09: 0000000000000000 [ 545.684702][ T9822] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 545.684712][ T9822] R13: 0000000000000004 R14: ffff888032ba6a00 R15: ffff888032ba6a08 [ 545.684724][ T9822] FS: 00007ffa929966c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 545.684738][ T9822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.684748][ T9822] CR2: 0000200000311030 CR3: 000000005824e000 CR4: 00000000003526f0 [ 545.684762][ T9822] Call Trace: [ 545.684792][ T9822] [ 545.684828][ T9822] do_exit+0x159/0x2360 [ 545.684896][ T9822] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.685038][ T9822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.685080][ T9822] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 545.685098][ T9822] ? __pfx_do_exit+0x10/0x10 [ 545.685136][ T9822] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 545.685150][ T9822] ? rt_spin_lock+0x1e0/0x400 [ 545.685170][ T9822] ? rt_spin_unlock+0x157/0x200 [ 545.685187][ T9822] do_group_exit+0x22d/0x2f0 [ 545.685200][ T9822] ? rt_spin_unlock+0x163/0x200 [ 545.685217][ T9822] get_signal+0x121b/0x12c0 [ 545.685307][ T9822] arch_do_signal_or_restart+0xbb/0x860 [ 545.685388][ T9822] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.685437][ T9822] exit_to_user_mode_loop+0x104/0x730 [ 545.685493][ T9822] ? rcu_is_watching+0x15/0xb0 [ 545.685571][ T9822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.685615][ T9822] do_syscall_64+0x353/0x580 [ 545.685670][ T9822] ? trace_irq_disable+0x3b/0x140 [ 545.685706][ T9822] ? clear_bhb_loop+0x40/0x90 [ 545.685723][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.685737][ T9822] RIP: 0033:0x7ffa9473e019 [ 545.685753][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.685764][ T9822] RSP: 002b:00007ffa929960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 545.685778][ T9822] RAX: fffffffffffffe00 RBX: 00007ffa949c5fa8 RCX: 00007ffa9473e019 [ 545.685788][ T9822] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa949c5fa8 [ 545.685797][ T9822] RBP: 00007ffa949c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 545.685805][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.685813][ T9822] R13: 00007ffa949c6038 R14: 00007ffe5c091eb0 R15: 00007ffe5c091f98 [ 545.685834][ T9822] [ 545.685842][ T9822] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 545.685852][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.0.1341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 545.685867][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.685875][ T9822] Call Trace: [ 545.685880][ T9822] [ 545.685886][ T9822] vpanic+0x56c/0xa60 [ 545.685907][ T9822] ? __pfx__printk+0x10/0x10 [ 545.685942][ T9822] ? __pfx_vpanic+0x10/0x10 [ 545.685955][ T9822] ? is_bpf_text_address+0x292/0x2b0 [ 545.686008][ T9822] ? is_bpf_text_address+0x26/0x2b0 [ 545.686032][ T9822] panic+0xc5/0xd0 [ 545.686045][ T9822] ? __pfx_panic+0x10/0x10 [ 545.686071][ T9822] __warn+0x315/0x4c0 [ 545.686084][ T9822] ? kcov_task_exit+0x17b/0x240 [ 545.686108][ T9822] ? kcov_task_exit+0x17b/0x240 [ 545.686130][ T9822] __report_bug+0x276/0x570 [ 545.686194][ T9822] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 545.686216][ T9822] ? kcov_task_exit+0x17b/0x240 [ 545.686240][ T9822] ? __pfx___report_bug+0x10/0x10 [ 545.686258][ T9822] ? try_to_take_rt_mutex+0x842/0xb00 [ 545.686277][ T9822] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 545.686296][ T9822] ? rt_spin_lock+0x1e0/0x400 [ 545.686311][ T9822] ? rt_spin_lock+0x1e0/0x400 [ 545.686327][ T9822] ? kcov_task_exit+0x17b/0x240 [ 545.686349][ T9822] report_bug+0x16a/0x220 [ 545.686369][ T9822] ? kcov_task_exit+0x17b/0x240 [ 545.686390][ T9822] ? kcov_task_exit+0x17d/0x240 [ 545.686411][ T9822] handle_bug+0x9c/0x200 [ 545.686434][ T9822] exc_invalid_op+0x1a/0x50 [ 545.686456][ T9822] asm_exc_invalid_op+0x1a/0x20 [ 545.686471][ T9822] RIP: 0010:kcov_task_exit+0x17b/0x240 [ 545.686493][ T9822] Code: 10 00 00 49 8b be 90 00 00 00 e8 e0 d2 57 00 4c 89 f7 5b 41 5e 41 5f e9 c3 92 5d 00 7c 40 5b 41 5e 41 5f e9 97 5b 82 09 cc 90 <0f> 0b 90 eb 10 90 0f 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c [ 545.686504][ T9822] RSP: 0018:ffffc9000633fae0 EFLAGS: 00010246 [ 545.686516][ T9822] RAX: cd4303ec060b8c00 RBX: ffff8880291f8000 RCX: 0000000000000000 [ 545.686526][ T9822] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 545.686536][ T9822] RBP: ffffc9000633fc30 R08: ffffffff8b46cb20 R09: 0000000000000000 [ 545.686545][ T9822] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 545.686554][ T9822] R13: 0000000000000004 R14: ffff888032ba6a00 R15: ffff888032ba6a08 [ 545.686569][ T9822] ? rt_spin_lock+0x1e0/0x400 [ 545.686589][ T9822] do_exit+0x159/0x2360 [ 545.686601][ T9822] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.686620][ T9822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.686640][ T9822] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 545.686657][ T9822] ? __pfx_do_exit+0x10/0x10 [ 545.686679][ T9822] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 545.686693][ T9822] ? rt_spin_lock+0x1e0/0x400 [ 545.686712][ T9822] ? rt_spin_unlock+0x157/0x200 [ 545.686728][ T9822] do_group_exit+0x22d/0x2f0 [ 545.686741][ T9822] ? rt_spin_unlock+0x163/0x200 [ 545.686757][ T9822] get_signal+0x121b/0x12c0 [ 545.686809][ T9822] arch_do_signal_or_restart+0xbb/0x860 [ 545.686848][ T9822] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.686883][ T9822] exit_to_user_mode_loop+0x104/0x730 [ 545.686898][ T9822] ? rcu_is_watching+0x15/0xb0 [ 545.686917][ T9822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.686952][ T9822] do_syscall_64+0x353/0x580 [ 545.686978][ T9822] ? trace_irq_disable+0x3b/0x140 [ 545.686999][ T9822] ? clear_bhb_loop+0x40/0x90 [ 545.687018][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.687033][ T9822] RIP: 0033:0x7ffa9473e019 [ 545.687046][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.687058][ T9822] RSP: 002b:00007ffa929960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 545.687074][ T9822] RAX: fffffffffffffe00 RBX: 00007ffa949c5fa8 RCX: 00007ffa9473e019 [ 545.687086][ T9822] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa949c5fa8 [ 545.687095][ T9822] RBP: 00007ffa949c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 545.687105][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.687114][ T9822] R13: 00007ffa949c6038 R14: 00007ffe5c091eb0 R15: 00007ffe5c091f98 [ 545.687148][ T9822] [ 545.687758][ T9822] Kernel Offset: disabled